Resubmissions

31/10/2026, 07:12

261031-h1hy4sws9p10

29/10/2026, 02:23

261029-cvg7qswt3k10

29/10/2026, 02:16

261029-cqhmpshx4p10

29/10/2026, 02:15

261029-cpk2faws9j10

27/10/2026, 15:58

261027-tey9ravwhs10

26/10/2026, 19:10

261026-xvef3ayvgt10

26/10/2026, 19:08

261026-xtjdmafy9110

26/10/2026, 17:57

261026-wjwqjagv5n10

26/10/2026, 00:39

261026-az5gqaaz9s8

26/10/2026, 00:38

261026-azftcstwew6

Analysis

  • user interaction
    yes
  • max time kernel
    101s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 03:21

General

  • Target
    https://github.com/Da2dalus/The-MALWARE-Repo/raw/refs/heads/master/Ransomware/WannaCry.exe
  • Sample261024-dwct3sssev

Malware Config

Extracted

Path
  • C:\!Please Read Me!.txt

  • wannacry

Ransom Note
  • Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1 Next, please find the decrypt software on your desktop, an executable file named "!WannaDecryptor!.exe". If it does not exsit, download the software from the address below. (You may need to disable your antivirus for a while.) rar password: wcry123 Run and follow the instructions! �
Wallets
  • 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1

Signatures

  • Family: Wannacry

    WannaCry is a ransomware cryptoworm.

  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Downloads MZ/PE file 1 IoCs
  • Creates a file in the Startup directory 1 TTPs 2 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

  • Executes dropped EXE 8 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 3 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 17 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Kills process with taskkill 4 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 57 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Da2dalus/The-MALWARE-Repo/raw/refs/heads/master/Ransomware/WannaCry.exe
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4848
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc765cc728,0x7ffc765cc734,0x7ffc765cc740
      2⤵
        PID:884
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,449312112034997648,5490664058956776329,262144 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1896 /prefetch:2
        2⤵
          PID:5832
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,11051694779246870508,4179843601773903852,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2244 /prefetch:3
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:5928
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,9441900813282049056,15930220741713178754,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2756 /prefetch:8
          2⤵
            PID:6096
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3168,i,15417913813892078621,9870227026214846838,2097152 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3172 /prefetch:1
            2⤵
              PID:4296
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3180,i,14769005247477885732,13472961025861379642,2097152 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3208 /prefetch:1
              2⤵
                PID:2432
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4364,i,5662531115339293476,7154188554054167644,2097152 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4376 /prefetch:2
                2⤵
                  PID:5476
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5536,i,6111616339055700556,7414729800406131141,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5540 /prefetch:8
                  2⤵
                    PID:4464
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5528,i,745511673785141251,10243884876189106416,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5628 /prefetch:8
                    2⤵
                      PID:3820
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5824,i,12773544741142094179,8091840239319702423,2097152 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5700 /prefetch:1
                      2⤵
                        PID:4648
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3876,i,15085540800129947303,4388429286606697561,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4576 /prefetch:8
                        2⤵
                          PID:1428
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,7612111702485613983,2703659833941872943,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5964 /prefetch:8
                          2⤵
                            PID:5672
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5952,i,797080404643769737,18133221908667960787,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6000 /prefetch:8
                            2⤵
                              PID:3528
                            • C:\Users\Admin\Downloads\WannaCry.exe
                              "C:\Users\Admin\Downloads\WannaCry.exe"
                              2⤵
                              • Creates a file in the Startup directory
                              • Executes dropped EXE
                              • Adds Run key to start application
                              • System Location Discovery: System Language Discovery
                              • Suspicious use of WriteProcessMemory
                              PID:2148
                              • C:\Windows\SysWOW64\cmd.exe
                                C:\Windows\system32\cmd.exe /c 52241792812118.bat
                                3⤵
                                • Executes a command shell one-liner
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of WriteProcessMemory
                                PID:4876
                                • C:\Windows\SysWOW64\cscript.exe
                                  cscript //nologo c.vbs
                                  4⤵
                                  • Executes a VBScript file via the Windows Script Host.
                                  • System Location Discovery: System Language Discovery
                                  PID:1980
                              • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                !WannaDecryptor!.exe f
                                3⤵
                                • Executes dropped EXE
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of SetWindowsHookEx
                                PID:4268
                              • C:\Windows\SysWOW64\taskkill.exe
                                taskkill /f /im MSExchange*
                                3⤵
                                • System Location Discovery: System Language Discovery
                                • Kills process with taskkill
                                PID:112
                              • C:\Windows\SysWOW64\taskkill.exe
                                taskkill /f /im Microsoft.Exchange.*
                                3⤵
                                • System Location Discovery: System Language Discovery
                                • Kills process with taskkill
                                PID:3408
                              • C:\Windows\SysWOW64\taskkill.exe
                                taskkill /f /im sqlserver.exe
                                3⤵
                                • System Location Discovery: System Language Discovery
                                • Kills process with taskkill
                                PID:5924
                              • C:\Windows\SysWOW64\taskkill.exe
                                taskkill /f /im sqlwriter.exe
                                3⤵
                                • System Location Discovery: System Language Discovery
                                • Kills process with taskkill
                                PID:4936
                              • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                !WannaDecryptor!.exe c
                                3⤵
                                • Executes dropped EXE
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of SetWindowsHookEx
                                PID:5884
                              • C:\Windows\SysWOW64\cmd.exe
                                cmd.exe /c start /b !WannaDecryptor!.exe v
                                3⤵
                                • Executes a command shell one-liner
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of WriteProcessMemory
                                PID:7248
                                • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                  !WannaDecryptor!.exe v
                                  4⤵
                                  • Executes dropped EXE
                                  • System Location Discovery: System Language Discovery
                                  • Suspicious use of SetWindowsHookEx
                                  • Suspicious use of WriteProcessMemory
                                  PID:7692
                                  • C:\Windows\SysWOW64\cmd.exe
                                    cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
                                    5⤵
                                    • Executes a command shell one-liner
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of WriteProcessMemory
                                    PID:6976
                                    • C:\Windows\SysWOW64\Wbem\WMIC.exe
                                      wmic shadowcopy delete
                                      6⤵
                                      • Reads the TCP/IP host and domain name from the registry
                                      • System Location Discovery: System Language Discovery
                                      PID:7964
                              • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                !WannaDecryptor!.exe
                                3⤵
                                • Executes dropped EXE
                                • Sets desktop wallpaper using registry
                                • System Location Discovery: System Language Discovery
                                • Suspicious use of SetWindowsHookEx
                                PID:7384
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4436,i,17382159812431874752,11060151804629579132,2097152 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4448 /prefetch:1
                              2⤵
                                PID:2196
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3536,i,7999435570143448863,1838569781565842906,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:8
                                2⤵
                                • Modifies registry class
                                PID:7512
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,15448179478787027335,2945568209238096564,524288 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6052 /prefetch:8
                                2⤵
                                  PID:7520
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4344,i,768484350415296442,15257470481785346799,2097152 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5848 /prefetch:1
                                  2⤵
                                    PID:3824
                                  • C:\Users\Admin\Downloads\WannaCry.exe
                                    "C:\Users\Admin\Downloads\WannaCry.exe"
                                    2⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    PID:4512
                                  • C:\Users\Admin\Downloads\WannaCry.exe
                                    "C:\Users\Admin\Downloads\WannaCry.exe"
                                    2⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    PID:6732
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6008,i,12588194386471390891,8260793196587442922,2097152 --field-trial-handle=1900,i,11434730748425065863,7494823009153434536,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6296 /prefetch:1
                                    2⤵
                                      PID:6640
                                  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                    1⤵
                                      PID:2540
                                    • C:\Windows\system32\svchost.exe
                                      C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                      1⤵
                                        PID:6076
                                      • C:\Users\Admin\Downloads\WannaCry.exe
                                        "C:\Users\Admin\Downloads\WannaCry.exe" /r
                                        1⤵
                                        • Executes dropped EXE
                                        • System Location Discovery: System Language Discovery
                                        PID:2376
                                      • C:\Windows\system32\vssvc.exe
                                        C:\Windows\system32\vssvc.exe
                                        1⤵
                                          PID:3196
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                          1⤵
                                          • Checks processor information in registry
                                          • Enumerates system info in registry
                                          • Suspicious behavior: EnumeratesProcesses
                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of SendNotifyMessage
                                          • Suspicious use of WriteProcessMemory
                                          PID:8952
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc765cc728,0x7ffc765cc734,0x7ffc765cc740
                                            2⤵
                                              PID:8976
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1868,i,4450019611023847626,9652331589773511672,524288 --field-trial-handle=2060,i,11858871272529602447,827357401470362479,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2184 /prefetch:3
                                              2⤵
                                              • System Time Discovery
                                              PID:7044
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1676,i,146137747958658529,5297992410923970141,262144 --field-trial-handle=2060,i,11858871272529602447,827357401470362479,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2056 /prefetch:2
                                              2⤵
                                                PID:7052
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2412,i,14905597228700734119,13337538476886504008,524288 --field-trial-handle=2060,i,11858871272529602447,827357401470362479,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2580 /prefetch:8
                                                2⤵
                                                  PID:860
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3248,i,2572428978717905426,15718767881393629578,2097152 --field-trial-handle=2060,i,11858871272529602447,827357401470362479,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3260 /prefetch:1
                                                  2⤵
                                                    PID:7868
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3280,i,11579299552395381034,10727474003321249534,2097152 --field-trial-handle=2060,i,11858871272529602447,827357401470362479,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3304 /prefetch:1
                                                    2⤵
                                                      PID:7916
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4564,i,858887757988017184,6679830683735530850,2097152 --field-trial-handle=2060,i,11858871272529602447,827357401470362479,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4500 /prefetch:1
                                                      2⤵
                                                        PID:8312
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5328,i,2531385770928573432,14059817854220810873,524288 --field-trial-handle=2060,i,11858871272529602447,827357401470362479,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5344 /prefetch:8
                                                        2⤵
                                                          PID:2344
                                                      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                        1⤵
                                                          PID:6988

                                                        Network

                                                              MITRE ATT&CK Enterprise v16

                                                              Replay Monitor

                                                              Loading Replay Monitor...

                                                              Downloads

                                                              !Please Read Me!.txt

                                                              • Path C:\!Please Read Me!.txt
                                                              • Size 797B
                                                              • SHA256 227082c719fd4394c1f2311a0877d8a302c5b092bcc49f853a5cf3d2945f42b0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              !WannaDecryptor!.exe.lnk

                                                              • Path C:\!WannaDecryptor!.exe.lnk
                                                              • Size 590B
                                                              • SHA256 8e7796d05718df0df09ba03117f357df9c341df64ee3a012c5e7ad0088a073c2
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OfficeIntegrator.ps1.WCRY

                                                              • Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WCRY
                                                              • Size 5KB
                                                              • SHA256 0c3faa514d582d88815e8bf28aad578b31dcf31a8bd4bfe5f201f9830f90f82a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              stream.x64.en-us.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\CABF18A9-0AFC-4C70-A389-E3519832306A\en-us.16\stream.x64.en-us.db.WCRY
                                                              • Size 438KB
                                                              • SHA256 bc1291626494c40fb313ca2bb3879852721584cdabe05e5c42adb685d7b32cb5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              stream.x64.x-none.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\CABF18A9-0AFC-4C70-A389-E3519832306A\x-none.16\stream.x64.x-none.db.WCRY
                                                              • Size 1.8MB
                                                              • SHA256 a6a7d4aa6f697dbe60202992b8598f685ce7b248620b1b9816a3e22757b0aaeb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              background.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WCRY
                                                              • Size 126KB
                                                              • SHA256 ba2be2848c6ebc746b1b319ace1888bf3adfe126f913a0a16eb201a85e44782e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              device.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WCRY
                                                              • Size 43KB
                                                              • SHA256 961e468ffdadcd7607da24feb2e627123d8d74e61613dd156cac69f46d9da72a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              overlay.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WCRY
                                                              • Size 28KB
                                                              • SHA256 254fe4979592772b389d873915025481395a49411c2e3ce9c3d86ebe9927333d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              superbar.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WCRY
                                                              • Size 38KB
                                                              • SHA256 5dc6ea39bea2b0dce58056e8a51aedee4111b1381672e1254d0b7b9f0940e3c5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              background.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WCRY
                                                              • Size 126KB
                                                              • SHA256 1f22a59c47ff1c7df3e30cca7e19e9b4dd750f5baf6ef086b26eee08d2b16fd3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              watermark.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WCRY
                                                              • Size 28KB
                                                              • SHA256 2341cac496c16516c04e212598685350f4bcc7a4f358517938c8441010f0d7fb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EventStore.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WCRY
                                                              • Size 56KB
                                                              • SHA256 914e82aa798dc6a038304ed45fa9dcb95a8c745841573a509630fc6edcfeeff3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EventStore.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WCRY
                                                              • Size 32KB
                                                              • SHA256 f2ac2fb4f9197b50213ccce29ecba1028da3a2ef367fe6942115c70091657435
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EventStore.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WCRY
                                                              • Size 20KB
                                                              • SHA256 9c576d52f5c7ffea6ef4c9d2b7c142c46b8912a32263be5ccc9258c3ccf7a45d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              osver.txt.WCRY

                                                              • Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 7912d93d6f69bfde2817a6f689e538bd4257bfa13e90355b45ccab0069bdad22
                                                              • MD5 SHA1 SHA512 TLSH

                                                              qmgr.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WCRY
                                                              • Size 1.3MB
                                                              • SHA256 47c20ce9a6c4c597d9f9b8539f024671679df443085a3e49cce18504c39e3adf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Windows.edb.WCRY

                                                              • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb.WCRY
                                                              • Size 8.0MB
                                                              • SHA256 c9912a30c2636f7f1c7e1f348af78532245d2df63955ab912dd95148100ea08f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SmsInterceptStore.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\SmsRouter\MessageStore\SmsInterceptStore.db.WCRY
                                                              • Size 192KB
                                                              • SHA256 23197d428401b364d07b98b9ccf8d6a9d62fec7af710c086c788f8a8778db38e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RegisterInboxTemplates.ps1.WCRY

                                                              • Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WCRY
                                                              • Size 904B
                                                              • SHA256 0fad887061f48631c79270e89a477f2fe7f6c0eff204b11f2971fe2a2f92ad6d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              guest.bmp.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WCRY
                                                              • Size 588KB
                                                              • SHA256 4eb1c1f2faaed19545af0b4326d58b448c05b937bdf7d5e50a60cc5624760efd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              guest.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WCRY
                                                              • Size 6KB
                                                              • SHA256 298826c8bc7c7737bd279218ad9448bbfc8f06fed3dda8163b7576ba508af081
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              user-192.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 d6ac2b05484ab263754715f0333496e096a0b606e1f9e942101fc81aa53a040a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              user-32.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WCRY
                                                              • Size 728B
                                                              • SHA256 6600f89109ac83725f179baf2a2da607b3ae679ac6cf6289bf1b99dd97f9f40a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              user-40.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WCRY
                                                              • Size 808B
                                                              • SHA256 956b75b9884be532374efbe8018fb9eef643fc428981feb12381776f4e3a1fa0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              user-48.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WCRY
                                                              • Size 904B
                                                              • SHA256 eccc855933fdbf60d0dc48e19dc11b5af033b6cd06eb21e24017debe964a7f6c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              user.bmp.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WCRY
                                                              • Size 588KB
                                                              • SHA256 8de69490f1f8a9b736d608614d75fba8430e2cb06f2104b2f726b1cd5f738aa5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              user.png.WCRY

                                                              • Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WCRY
                                                              • Size 6KB
                                                              • SHA256 4e75af2f1b7a5f1cbbb7335aa2ed009135299c80993157e0924df11093a89dea
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeFax.tif.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\de-DE\WelcomeFax.tif.WCRY
                                                              • Size 99KB
                                                              • SHA256 901224555001b6dbc15f0867571539c7d4b9277f8b046074698f4d22cbc83926
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeFax.tif.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US\WelcomeFax.tif.WCRY
                                                              • Size 87KB
                                                              • SHA256 091b5ce688c4b895f467a72de48f13a7d9378522b69cfa53385610065404795e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeFax.tif.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\es-ES\WelcomeFax.tif.WCRY
                                                              • Size 94KB
                                                              • SHA256 eafb106dfd39b034a6875543a9bad87bcd6d45c2276b92e98daf68fbdc2d0ecb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeFax.tif.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\fr-FR\WelcomeFax.tif.WCRY
                                                              • Size 101KB
                                                              • SHA256 83cda0ffd9cb541bb0366a37d2b4d0ef6e5aae8982e57e63236e24a04b00414b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeFax.tif.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\it-IT\WelcomeFax.tif.WCRY
                                                              • Size 92KB
                                                              • SHA256 840bcc2ba4eed3077e552e926b094c46a53b7e269e306d52fac6b2982e4f33b2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeFax.tif.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\ja-JP\WelcomeFax.tif.WCRY
                                                              • Size 77KB
                                                              • SHA256 8b3675f11129ce757673a131281597fea112205af644f730262f323b74b80ef3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeFax.tif.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\uk-UA\WelcomeFax.tif.WCRY
                                                              • Size 105KB
                                                              • SHA256 2ea7ce8da948cd575c1e93c42aefae6ed9f17b4d90719dd675f034afba6e6527
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WelcomeScan.jpg.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows NT\MSScan\WelcomeScan.jpg.WCRY
                                                              • Size 504KB
                                                              • SHA256 34d428124e5921dc76494f145cece6ead747349bbc264f7c36a911f2bc9dc70d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              cversions.2.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WCRY
                                                              • Size 16KB
                                                              • SHA256 a7e7d792fc2e30bc84e3fece21ccb2ef4fd1dd0930d003ef8946028bf0db9bdf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WCRY
                                                              • Size 289KB
                                                              • SHA256 8828c2a7d499ab4c0bc331c255435a0a4524c56e8f1009f44a1772e228381352
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY
                                                              • Size 289KB
                                                              • SHA256 6fd3fd624c8e5becaad3546bd323a1e90856e0c7b0a98e6fd45e4da7d68c3b2f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              {B1921E07-73B9-4A24-8896-1CCC4D9BB4CB}.2.ver0x0000000000000001.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows\Caches\{B1921E07-73B9-4A24-8896-1CCC4D9BB4CB}.2.ver0x0000000000000001.db.WCRY
                                                              • Size 1KB
                                                              • SHA256 9558c20c7a573f8b3d39fc3caaab2c6b1c6ff1da3d27edaef37fe4cd2f3d8856
                                                              • MD5 SHA1 SHA512 TLSH

                                                              {DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WCRY

                                                              • Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WCRY
                                                              • Size 623KB
                                                              • SHA256 b2f7cbfc73f6a8580ecab9cb36563df3e2b25200b8b90a97509e054a328921f5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ActivitiesCache.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 468c7939c9244e7b56306d8d262e12debfc8fab901659db59bbaed45dd94ddfd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              69c2cbd9-08b3-4a57-b043-6dfd56968795.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\69c2cbd9-08b3-4a57-b043-6dfd56968795.tmp
                                                              • Size 131KB
                                                              • SHA256 d8de60e88db93338e24cdba308edcc9ed325a346422a544bd4fc91f6ad908239
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              75a76f7c-047a-4cf1-9538-7120f82dba03.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\75a76f7c-047a-4cf1-9538-7120f82dba03.tmp
                                                              • Size 132KB
                                                              • SHA256 f91b927f07b07d8f5ec99844c38028d2d644390ebc2b9b79e5e2ef85c3bbb55e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              92a8fc4c-0757-4d17-9617-4c3f019d0414.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\92a8fc4c-0757-4d17-9617-4c3f019d0414.tmp
                                                              • Size 131KB
                                                              • SHA256 69f6b18104ada64f8e32501faeffe38a47c3a42b225ccd22cb6ace6120e9fd4e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CrashpadMetrics-active.pma

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\CrashpadMetrics-active.pma
                                                              • Size 1024KB
                                                              • SHA256 ae1bddb9e2cc97b0c9cd78ef3cd17553be6e5204677bd67e0b8f7fa27007f189
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              settings.dat

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                              • Size 40B
                                                              • SHA256 d8069b59ba1cdc110cde92cdc89d02bd5f23941139d79e9234b63999b8afe6ef
                                                              • MD5 SHA1 SHA512

                                                              20793f2f-b3e2-417d-8378-d3c7529f9654.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\20793f2f-b3e2-417d-8378-d3c7529f9654.tmp
                                                              • Size 13KB
                                                              • SHA256 fa6caa7fa4370bbd5e438aeca96ba74b54287e59b4e1817e05ec79f11f6962d8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              422a1961-eb32-48e1-97cf-ed0b8f7ad8de.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\422a1961-eb32-48e1-97cf-ed0b8f7ad8de.tmp
                                                              • Size 414B
                                                              • SHA256 dcd585c70eae2062b984563fa7f99096faa7845c872f6998916df4708c053561
                                                              • MD5 SHA1 SHA512 TLSH

                                                              7bccb8aa-2522-46d2-a22a-c0e55d1d9827.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7bccb8aa-2522-46d2-a22a-c0e55d1d9827.tmp
                                                              • Size 12KB
                                                              • SHA256 ddcd816871795d825d111cb24018a556ca5d4d1e860138dffb1a4828d00a844d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              8c408d6f-81cf-4299-946d-eec880e39bf8.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\8c408d6f-81cf-4299-946d-eec880e39bf8.tmp
                                                              • Size 13KB
                                                              • SHA256 6154adc97a5dbeb7a5cf9b45fc4db02879856fd6fb1bf417f268fb5789a1c6b0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000006

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006
                                                              • Size 346KB
                                                              • SHA256 0f8a0722302d1b8e1050f1c7882af2c0feb056752c3feddcc0b4316891d60d44
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000008

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000008
                                                              • Size 39KB
                                                              • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00000f

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f
                                                              • Size 437KB
                                                              • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00001b

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
                                                              • Size 23KB
                                                              • SHA256 b73f6e1f9c2b97abb6100e7b09619c209fba23c547b77b80292af072f5092c98
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00001e

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                                              • Size 20KB
                                                              • SHA256 426e91fc7bedbe798287ae6ca40d587e5f846e9b01877d2ab4644fe2ae4a5721
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000025

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000025
                                                              • Size 126KB
                                                              • SHA256 ff2670abc7dc8b6ad4ed2870647cb19242c157ec157c5ce13714d3dfeb5ede3c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000026

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000026
                                                              • Size 72KB
                                                              • SHA256 3f31ff4c03d53ebd3ef4adf65ec59e6be1b2b19c87c587f0c74b774e1920d662
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000027

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000027
                                                              • Size 90KB
                                                              • SHA256 06f1965ffe190bc83cdc5e9f5748a4239a2bdd3ecbb9947bafb876bda7864bb5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000028

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000028
                                                              • Size 433KB
                                                              • SHA256 f8a816503c5a8ac12980d931c4f7c3708d22176ed7b9c00d76a3177dc1b0abbd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000032

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000032
                                                              • Size 77KB
                                                              • SHA256 61a4ab8362db85723f9ce63aa163b6974d32c8634c6aefb649792a42d46be532
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000035

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035
                                                              • Size 132KB
                                                              • SHA256 ed475711855b0d298a6afbffac380b06e18496cebafdef87b7a4dad049b49f7e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                              • Size 2KB
                                                              • SHA256 873427712307b15a592291e359f485f77325eb3cd428483bb846fbe367d40ed3
                                                              • MD5 SHA1 SHA512 TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WCRY
                                                              • Size 5KB
                                                              • SHA256 af11fddc91d6cfb02385c10a94f1e9af0616219fc4ed5e423b59d429eda328b9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              offscreendocument_main.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WCRY
                                                              • Size 130KB
                                                              • SHA256 40048239c4153492c3f43c3b6f4b0e7d22397b21853750d0df2f63074ac464e9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              page_embed_script.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WCRY
                                                              • Size 632B
                                                              • SHA256 607a54312e16cef20ef47ac0f2ab18ebea029cb0605d7d0aa2870eae1bf3416d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              service_worker_bin_prod.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WCRY
                                                              • Size 136KB
                                                              • SHA256 d67f8bb981a1e5c993c9bb720132360580fb84980ec3b2554329391e8be4e7f4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              craw_background.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js.WCRY
                                                              • Size 532KB
                                                              • SHA256 def4f05cc4082a938e43cd60726d5b53e6dbc760f4db69d3e8c9967da4ed7e10
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              craw_window.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_window.js.WCRY
                                                              • Size 255KB
                                                              • SHA256 cd105365053e63a6230161d90834aaca0da09924a55f242478d2a03846b89534
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              flapper.gif.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\flapper.gif.WCRY
                                                              • Size 68KB
                                                              • SHA256 b8eb7dc6ae0296341059fb0c9a4a222fc9a03b39164ce017624edf8f71f5e349
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              icon_128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_128.png.WCRY
                                                              • Size 4KB
                                                              • SHA256 8bff648dba61193b5c5efc93c0751988853183fc6b8e2b3d622d8abad9b2bd32
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              icon_16.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_16.png.WCRY
                                                              • Size 872B
                                                              • SHA256 7aaf269d61ccc24b578d2b7b7043c7810f8654bf82decd1e945cbba90c7a1993
                                                              • MD5 SHA1 SHA512 TLSH

                                                              topbar_floating_button.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button.png.WCRY
                                                              • Size 440B
                                                              • SHA256 6c9a806f8d93dd4a6f703d21aab1598e3136d55fd577fc44db2c01394cd80892
                                                              • MD5 SHA1 SHA512 TLSH

                                                              topbar_floating_button_close.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_close.png.WCRY
                                                              • Size 536B
                                                              • SHA256 ba697806e27199540c57620fe60e9c221248601ce0cf859ea16777d96cb799f3
                                                              • MD5 SHA1 SHA512 TLSH

                                                              topbar_floating_button_hover.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_hover.png.WCRY
                                                              • Size 440B
                                                              • SHA256 53921cb606000f46bf6e17fb7cecd3e9b1aea2b7cb6d743b50d7cecefe59112c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              topbar_floating_button_maximize.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_maximize.png.WCRY
                                                              • Size 456B
                                                              • SHA256 7781c2935bee46495c5cbee702c77f22183873724eab53e51a705dc1b321d059
                                                              • MD5 SHA1 SHA512 TLSH

                                                              topbar_floating_button_pressed.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_pressed.png.WCRY
                                                              • Size 440B
                                                              • SHA256 14c1a6030d56e9c6eff436a46b1b9a52f720403e7946b1a230d7526b1d2fa9b8
                                                              • MD5 SHA1 SHA512 TLSH

                                                              51dc2498-5e80-4aa6-a1ba-a52c608130c4.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\51dc2498-5e80-4aa6-a1ba-a52c608130c4.tmp
                                                              • Size 1KB
                                                              • SHA256 46518b9a67352fad2332a04cd30b875254dd514cf422fe9863dd6db00de70630
                                                              • MD5 SHA1 SHA512 TLSH

                                                              5f236851-1e2b-402b-bd92-fd3dc43e18f1.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\5f236851-1e2b-402b-bd92-fd3dc43e18f1.tmp
                                                              • Size 5KB
                                                              • SHA256 fa31f79972ce8494ce495d1458017294e3c96f63efd1b87ae3826126d035974b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              e6cb710b-1ec0-43f1-8538-dc8cd0217d4c.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\e6cb710b-1ec0-43f1-8538-dc8cd0217d4c.tmp
                                                              • Size 8KB
                                                              • SHA256 bf8f2596f28eea8a151bcd9a0dc432ba03b7124d7a9dec5156661a4c6b3c0b84
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ee5f2ebb-0577-4747-9956-b8e6f617031c.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ee5f2ebb-0577-4747-9956-b8e6f617031c.tmp
                                                              • Size 2B
                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                              • MD5 SHA1 SHA512

                                                              Secure Preferences

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                              • Size 17KB
                                                              • SHA256 70958eca8745eb6622f4fb0d8e1b6ec16c57ba291ec5592612f3b9ee778b6f8e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              000003.log

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\000003.log
                                                              • Size 4KB
                                                              • SHA256 b117d988a95cd9547ed4a5e89fab7fad24647f36b35b69f0f4ae8cbba47a5141
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              LOG

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\LOG
                                                              • Size 336B
                                                              • SHA256 edddacbea4303314865447d05cd0643d506d1fad2387ec4c48b36c5b588afb4f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                              • Size 120B
                                                              • SHA256 2afe2049a85b0f20c2cb789eba1178a7901ad4f0c9e9bc88d52667245848dedd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                              • Size 96B
                                                              • SHA256 b14b0a1a71781c7e8cf9291db73416afdb7eff11fe05436b1910af87cf2aa789
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                              • Size 72B
                                                              • SHA256 a5dae358957bc0d12488d599ce2c525ed9649a5eb12526912b8c34153ef688bc
                                                              • MD5 SHA1 SHA512 TLSH

                                                              LOG

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG
                                                              • Size 321B
                                                              • SHA256 48c57d218a01f62be40443849282d98065143735e33ddd9a5450694370b4afee
                                                              • MD5 SHA1 SHA512 TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\128.png.WCRY
                                                              • Size 8KB
                                                              • SHA256 18ea991d4b77f8bca88159707b955ff2cf1cb0df5a85ba72d611c0334dfaab16
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              192.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\192.png.WCRY
                                                              • Size 5KB
                                                              • SHA256 966af2a9e2a8f9d0178d1ac819e4251b48249c6e9181accbfaf53dcad7244de7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              256.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\256.png.WCRY
                                                              • Size 20KB
                                                              • SHA256 82324573156c2b7690cb24d426940c9e3b5d94c9b3e52cdfe3532082217f9999
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              32.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\32.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 e274d918afd2e4113100dc1ffea1ff00d2c9158ee2f151d05dfcee4cd672b074
                                                              • MD5 SHA1 SHA512 TLSH

                                                              48.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\48.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 0947104ee9e28db340963745920ba7445f4234fc0ceaa0a6690c5a51e0cef108
                                                              • MD5 SHA1 SHA512 TLSH

                                                              64.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\64.png.WCRY
                                                              • Size 4KB
                                                              • SHA256 c469efa6362af901aee9fb159659e2921b3c11a0e977370083c8e6b5fd67c750
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              96.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\96.png.WCRY
                                                              • Size 6KB
                                                              • SHA256 d2c9330219b532d1703535b678a5569ad07de51f015b82d60bbe5f6054d63d92
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\128.png.WCRY
                                                              • Size 10KB
                                                              • SHA256 8abc462634702ded611bcb5c091f44280453fe70836bb94ea313fe8318af815f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              192.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\192.png.WCRY
                                                              • Size 7KB
                                                              • SHA256 d6ab95f0b1a1f6f3233aa2553786d32fca74c965dbffb63802d3858512c85006
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              256.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\256.png.WCRY
                                                              • Size 26KB
                                                              • SHA256 0c014b1f2d1111de5a7af67303fe5ef04b2c1a424ebbf93193deaf8b14d57461
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              32.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\32.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 9b9206d92291799a4be756534da277e3b2a0392f85753be2c90abfded6b32539
                                                              • MD5 SHA1 SHA512 TLSH

                                                              48.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\48.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 6aec94f8f5d38c37cb1ad52b7310d2c78a29eeaa85c6cd541d373d8bdfba0118
                                                              • MD5 SHA1 SHA512 TLSH

                                                              64.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\64.png.WCRY
                                                              • Size 4KB
                                                              • SHA256 5eaabebc650e7f371964b477b560f97da1e4b14ff2ae54b4bc009f3284df3fe7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              96.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\96.png.WCRY
                                                              • Size 7KB
                                                              • SHA256 c4f180eef47600556ae1fe292323ab5985bcf61166c98af20dc4954d6bf47183
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\128.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 3ba71f36999227a7be46c6bdebfc7ec57975c98aaf807c793c1f1d6c65849393
                                                              • MD5 SHA1 SHA512 TLSH

                                                              192.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\192.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 0643ede6629545b358f7d625e0eda075e52a55dda2582162fd56e90e95bdc22d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              256.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\256.png.WCRY
                                                              • Size 5KB
                                                              • SHA256 c036f18bea1297d87804245006d09301c45a312f6dd868daf609ebfe5f372405
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              32.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\32.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 edfe3af2d3f7f7a0c6ae0345f23cf82ded14110902f1f54c78776f51f97fdaeb
                                                              • MD5 SHA1 SHA512 TLSH

                                                              48.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\48.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 023c1b101a6dbeb5d33845410d6611ae807b5bb529f376f9b7d1846d5d1297ce
                                                              • MD5 SHA1 SHA512 TLSH

                                                              64.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\64.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 368ba5aa64d5c291f30984fc455074e067d75fc7df906737ec66fd7b79865769
                                                              • MD5 SHA1 SHA512 TLSH

                                                              96.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\96.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 4fe880deabf873291fc4347157d0202ebf238e51540482becc2664b44a58de14
                                                              • MD5 SHA1 SHA512 TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\128.png.WCRY
                                                              • Size 5KB
                                                              • SHA256 e6b1dd57ce69fb432e143d52a02ed4c947dde54284d33a00aff92be5842534f0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              192.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\192.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 59c8e545e0e6952b269c263840f6acecd81205e96ea66cfc8f23fc5499705d7b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              256.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\256.png.WCRY
                                                              • Size 13KB
                                                              • SHA256 87e4399a57223dd60ec33d0cca706d2822efde3d9a36184e7f3003545ea62ea7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              32.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\32.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 394a4e36e140b0955f83a95cc727d00623723381c8dfe11b2218ca4298ee8e71
                                                              • MD5 SHA1 SHA512 TLSH

                                                              48.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\48.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 262eee4d4ba18e116f30370283fbf4eedd187b57c851ba2fcfd834e3368d2e45
                                                              • MD5 SHA1 SHA512 TLSH

                                                              64.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\64.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 bca1189062c0101a42f8c8dd4fc52b9d3a957886d8f7c32ff1d84e7d09dc6e95
                                                              • MD5 SHA1 SHA512 TLSH

                                                              96.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\96.png.WCRY
                                                              • Size 4KB
                                                              • SHA256 773e9553af82491267cfe1b08d4dadd0657759060b081d1cd8c3c712c7c91ed0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\128.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 d757a607b3b1f0a2ecc72da285c96c67d1dd6d38bae71c7fcb335fd2ec75c4bf
                                                              • MD5 SHA1 SHA512 TLSH

                                                              192.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\192.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 3104d395240eda94dad97248f1d3addb95288122069007e7950f932336ac814f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              256.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\256.png.WCRY
                                                              • Size 4KB
                                                              • SHA256 78a13dee8ea436d1101ba134bbb92928b9280ed267abd96aa454141744bb7df4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              32.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\32.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 ffa5edb27d9e56f06510cf8a972f63d55cdbf0b4f9caff00b777cbb72721a781
                                                              • MD5 SHA1 SHA512 TLSH

                                                              48.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\48.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 e9f50d03bc137507ebaed19ab5b14203faf5aea0298c9b8b301386e51073712d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              64.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\64.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 dc4867b4bcd2833a7b333a25f2dfd8ad5a3a6d8da6e1ffbeb62106a646722a83
                                                              • MD5 SHA1 SHA512 TLSH

                                                              96.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\96.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 f446adae6dec90aff316db5df1ef325d8b05fa34c72f720e5e4cd5ae4968c90a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\128.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 1cff3b1664bf3007372151fec78704c0bd6b71561d017a3a5fc6142c60886327
                                                              • MD5 SHA1 SHA512 TLSH

                                                              192.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\192.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 be15599ca19f7c33cf71cc69b69d994db9009178e98c1ce7446935c4921339b5
                                                              • MD5 SHA1 SHA512 TLSH

                                                              256.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\256.png.WCRY
                                                              • Size 6KB
                                                              • SHA256 1cfbc4c95758c1e794ceedcf7c4a3a2b990e3c8b9f63ec00ff9cf87715aa7932
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              32.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\32.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 24e5725ce05c87b665107a5b76620f7330d72cd367dbac25ca3c6f638dd396e6
                                                              • MD5 SHA1 SHA512 TLSH

                                                              48.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\48.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 0762b63a7cd8b2d3c59ca651809cb7851bef4063cbbe98c9330bc13690935c00
                                                              • MD5 SHA1 SHA512 TLSH

                                                              64.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\64.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 15f43017d38c0d65a3ca7e0754a029115e8e128dc81eb497f3bb0265daf6109e
                                                              • MD5 SHA1 SHA512 TLSH

                                                              96.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\96.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 00c5c0d3b001523088337babd6557d94b450f3947e74244fae06a205960910c6
                                                              • MD5 SHA1 SHA512 TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\128.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 a3f5df28de97d66bc699089dbbf53fc52e1d5ce6f062cee2ae13ffd0128304ea
                                                              • MD5 SHA1 SHA512 TLSH

                                                              192.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\192.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 efdf3fde8907e05e82b76e628c098bb84f1f5725083c585404bc338597ec32bf
                                                              • MD5 SHA1 SHA512 TLSH

                                                              256.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\256.png.WCRY
                                                              • Size 4KB
                                                              • SHA256 5174c931024fbadd043f6d49a7497c57bb7bd859a1989be1dc52d963cb7e797b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              32.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\32.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 3de58259de3700e3b0baa0b7a33981a9c22b474a4d08bc7634541d2bb5a42a36
                                                              • MD5 SHA1 SHA512 TLSH

                                                              48.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\48.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 329c69a9c17b2442131fa29f5a0b90c0097d9e52f1fdb59a48e57ce23664647c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              64.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\64.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 852f97644af1246f0dfd83bb428e6aaf5fc3afc3daf74e42334135f1d5f80bcd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              96.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\96.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 f5ed361d1a5841fa372c58a5334d8083c23b7f868904ad214267e2c685f992ed
                                                              • MD5 SHA1 SHA512 TLSH

                                                              b1dafcf2-2984-465a-9eba-e8600e3b0aa7.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b1dafcf2-2984-465a-9eba-e8600e3b0aa7.tmp
                                                              • Size 13KB
                                                              • SHA256 148148b8e90d15ea5c39f6278fa08470cb2d91b312fa21ae610c836f1d2a3c35
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              c1f39605-3398-4b83-a996-26da92437a9a.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c1f39605-3398-4b83-a996-26da92437a9a.tmp
                                                              • Size 17KB
                                                              • SHA256 2402969cd2ec72ea72b513389c43205a9ee2bceca1c456ef576613e3544e19a0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ef487ce5-d073-4e49-a262-c2f7b6c5cd77.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ef487ce5-d073-4e49-a262-c2f7b6c5cd77.tmp
                                                              • Size 12KB
                                                              • SHA256 da2a6bceba1628b4ca878209329b65685fe2399523cb596ee9154a8d0c6051b0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f577842e-61cd-4dd6-9781-4ee7b3e31c2f.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f577842e-61cd-4dd6-9781-4ee7b3e31c2f.tmp
                                                              • Size 6B
                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                              • MD5 SHA1 SHA512

                                                              heavy_ad_intervention_opt_out.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db.WCRY
                                                              • Size 16KB
                                                              • SHA256 31c79b57b894bec66bb7b5125c78f0cd918f517e3dad2edbda8c7fe3481a9baa
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              data_1

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
                                                              • Size 264KB
                                                              • SHA256 4648bf4688770c6acff90bc3ceb1e5736b1223fdbcb14adc81b1a52e954015a4
                                                              • MD5 SHA1 SHA512 SSDEEP

                                                              Last Version

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version
                                                              • Size 13B
                                                              • SHA256 e5efa9eb104cd0b25149c2e789bec8d9aa4ba95678831b657eef7780a281c391
                                                              • MD5 SHA1 SHA512

                                                              Local State

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                              • Size 157KB
                                                              • SHA256 c99e4b0e6c422ec18149796bd44b7e38c14f76d2a80d0db7306d055b0a8414dc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              data_1

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                                              • Size 264KB
                                                              • SHA256 6f728e51797b7991da452e7006f9971aefd00e884dd1b1bbddf23d7a07e960cd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Variations

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                              • Size 86B
                                                              • SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
                                                              • MD5 SHA1 SHA512 TLSH

                                                              b20b37d1-eeed-4ab9-9cfd-d8b27e0a4649.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b20b37d1-eeed-4ab9-9cfd-d8b27e0a4649.tmp
                                                              • Size 131KB
                                                              • SHA256 8900a01ce51d38333af2bdd5492e4de2f9235b982f051b3356fff504862ba64c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              b66995f7-cc37-43fe-9197-8e17fd666ff7.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b66995f7-cc37-43fe-9197-8e17fd666ff7.tmp
                                                              • Size 131KB
                                                              • SHA256 3c44071879a76ac28c003d2e687386431ff13790105263b0705bba3a90567001
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              metadata.json

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\metadata.json
                                                              • Size 13B
                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                              • MD5 SHA1 SHA512

                                                              d3284ed9-7ebe-4edb-a52c-a5eb3f5c3620.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d3284ed9-7ebe-4edb-a52c-a5eb3f5c3620.tmp
                                                              • Size 130KB
                                                              • SHA256 c6079e910feb432faee90a4f63695ac3d4a9db5cd132827f492baf8ae64fcf1c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              first_party_sets.db

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db
                                                              • Size 48KB
                                                              • SHA256 0c2a7d9a05ecc2cc77765a0a5d71529f2237755fe60ac3d742d6c07805f80d14
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              first_party_sets.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db.WCRY
                                                              • Size 48KB
                                                              • SHA256 cc16fa179a12d9aad5f288de77001004782ba4ae841d3cf0b35181e4b81d99f6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ukm_db

                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\segmentation_platform\ukm_db
                                                              • Size 48KB
                                                              • SHA256 3091c9733d265378602a142007554a0cfb3fa4cc908e0a6e684ad57a48e552d4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              IconCache.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\IconCache.db.WCRY
                                                              • Size 11KB
                                                              • SHA256 d0f078d561593367cfb07a10916fb81053d74f7e8e9a27284c95fae1c50da654
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EdgeEDropSQLite.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WCRY
                                                              • Size 32KB
                                                              • SHA256 53561d761e16e8ba19d9781f29f191ee3dcb1fce80f0938763e970a5b11cffa5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EdgeHubAppUsageSQLite.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WCRY
                                                              • Size 32KB
                                                              • SHA256 7d309ac5649645918ca6230d108fa12c1c347957dcc537a5159a51fab85b56d1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              128.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WCRY
                                                              • Size 5KB
                                                              • SHA256 0af3c2071d5116438cb2e2d2a4a7505f5dfc5cfc3242451224c0761d76634ddb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              offscreendocument_main.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WCRY
                                                              • Size 130KB
                                                              • SHA256 1c08b326112dc1cfffa928863fedf4276b55b98dfda87da89c0d73896fa048f6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              page_embed_script.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WCRY
                                                              • Size 632B
                                                              • SHA256 9ee0083e6bc1c14a81a8ca65659d2f5c04b385b40006e0a9c25a747b8a6903df
                                                              • MD5 SHA1 SHA512 TLSH

                                                              service_worker_bin_prod.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WCRY
                                                              • Size 136KB
                                                              • SHA256 a7a9270957d63eecfedb6ea9701762a6633383981fb597d98184c720e1911d63
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              content.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js.WCRY
                                                              • Size 9KB
                                                              • SHA256 591eee2561511ac35adfb752fa53f1c913af1a507aed4224535532c243061f26
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              content_new.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content_new.js.WCRY
                                                              • Size 10KB
                                                              • SHA256 ebf5d7fac2d8505e5336004650ccc6deea8f4c00db320a7d00d3f88446efb6b8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              index.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WCRY
                                                              • Size 664B
                                                              • SHA256 df2a6b2d3e6f9bf3631718c70d096a9d2623b7820481ca012b49c4d93458d746
                                                              • MD5 SHA1 SHA512 TLSH

                                                              heavy_ad_intervention_opt_out.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WCRY
                                                              • Size 16KB
                                                              • SHA256 6c6d1d12ade4aeea798effabfd7c32d760bd71d208b643971bca9278506c35ea
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              load_statistics.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WCRY
                                                              • Size 84KB
                                                              • SHA256 341e71d357340d7100930390807db3d69350d39f0c38668ae265b6339b717ddb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              data.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.24\data.txt.WCRY
                                                              • Size 152KB
                                                              • SHA256 242c2b392aa405b6229ef4bd74007665f151557906892be1776215999d935a54
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              arbitration_metadata.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Notifications\0.0.0.46\arbitration_metadata.txt.WCRY
                                                              • Size 343KB
                                                              • SHA256 e1fc33e16efa2df5d8500ab3ced941abab70f4b89307a5604ca14a888f62dd07
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              auto_open_controller.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\auto_open_controller.js.WCRY
                                                              • Size 1.2MB
                                                              • SHA256 5ce13c8ed0fbca8639108118bcfe2d86b6d3497c08db1cb3a209d0707690aa11
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              edge_checkout_page_validator.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_checkout_page_validator.js.WCRY
                                                              • Size 1021KB
                                                              • SHA256 216952189b974f6ead1a73ba2bcfb8c7062d5d5fb2e2d2f55a5f430b5c033be9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              edge_confirmation_page_validator.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_confirmation_page_validator.js.WCRY
                                                              • Size 1021KB
                                                              • SHA256 d26fa416483d1897b3be50f66fcaa4083aa9e4c22d59f2b5a9a94966c9442709
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              edge_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_driver.js.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 d6828d14b15163da6034c056e6f90818639b8765d492d1bdeb6ab46761a3b494
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              edge_tracking_page_validator.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\edge_tracking_page_validator.js.WCRY
                                                              • Size 63KB
                                                              • SHA256 964d6324b6df40ad948f644d219bb9d39098c6397db0dd0031bb9fc84032e268
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              product_page.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\product_page.js.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 892b825be4a905ddff6a31bf8d6b56388d2bdf002df3fb73f9f5bb166fc8e9da
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              shopping.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\shopping.js.WCRY
                                                              • Size 280B
                                                              • SHA256 e2290002df4edc7e3ac7a18fced3b0eaa96d1bc428a496a74f8d8fc1e1939d5a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              shopping_iframe_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\shopping_iframe_driver.js.WCRY
                                                              • Size 22KB
                                                              • SHA256 48a9318e516e358031167dea1363fa5b5888b64ea5612c9a8ac4b25a07c013a8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              automation.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\automation.js.WCRY
                                                              • Size 4KB
                                                              • SHA256 496231f1ddb7f309c3b243b90bac1e3546d1e8423c9c831a6ce95e832b8342b1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              classification.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\classification.js.WCRY
                                                              • Size 1KB
                                                              • SHA256 d3b94b8261da3f0b66a764f282d6144ce5fbbd22e35a956d32ba881022ee8486
                                                              • MD5 SHA1 SHA512 TLSH

                                                              extraction.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\extraction.js.WCRY
                                                              • Size 5KB
                                                              • SHA256 14545b142c417747ebcecadcf2e1a622926bca891c8ea6ea3e7a355afced0151
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              travel-facilitated-booking-bing.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\travel-facilitated-booking-bing.js.WCRY
                                                              • Size 2KB
                                                              • SHA256 d1e79900ff675f95e6c6ac0852eed0ad061c9a9d73282500feae645f5b537edb
                                                              • MD5 SHA1 SHA512 TLSH

                                                              travel-facilitated-booking-kayak.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Travel\1.0.0.2\travel-facilitated-booking-kayak.js.WCRY
                                                              • Size 5KB
                                                              • SHA256 aedfa38233cafa65ec8800958a3b72f345db0746046afea3f9f2bfcbf5066d39
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              miniwallet.bundle.js.LICENSE.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt.WCRY
                                                              • Size 840B
                                                              • SHA256 a3a702b3fc58a61815e37910cc1441cac5398fba5c733e55bd5a066449ceb3c2
                                                              • MD5 SHA1 SHA512 TLSH

                                                              miniwallet.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Mini-Wallet\miniwallet.bundle.js.WCRY
                                                              • Size 371KB
                                                              • SHA256 4c4206417780629720cd9bf68a8a5c05703aa988cfe807ada13a8cbbc758f7b4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              notification.bundle.js.LICENSE.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Notification\notification.bundle.js.LICENSE.txt.WCRY
                                                              • Size 1KB
                                                              • SHA256 8f1f00fa79add5abfa85e72b06552303712529f6d7bc3f931878b9f23067ba99
                                                              • MD5 SHA1 SHA512 TLSH

                                                              notification.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Notification\notification.bundle.js.WCRY
                                                              • Size 530KB
                                                              • SHA256 3a66b5d5ed153d6ace453f0f981868e9a170844670639b0da23473a981a530b9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              notification_fast.bundle.js.LICENSE.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Notification\notification_fast.bundle.js.LICENSE.txt.WCRY
                                                              • Size 840B
                                                              • SHA256 730fe1cd84294f2177cbebac4053b85b268280aa979c5fff92cf3f804ae6bcbf
                                                              • MD5 SHA1 SHA512 TLSH

                                                              notification_fast.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Notification\notification_fast.bundle.js.WCRY
                                                              • Size 331KB
                                                              • SHA256 102ab342f0206d741d287af1e8d78ed7666c9384905d398f5f251ca57e5520ed
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              tokenized-card.bundle.js.LICENSE.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt.WCRY
                                                              • Size 1KB
                                                              • SHA256 a0b11f9fd7cf4d9262928cd4f28f58a467385b9df7418097c906d269fe0384d8
                                                              • MD5 SHA1 SHA512 TLSH

                                                              tokenized-card.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Tokenized-Card\tokenized-card.bundle.js.WCRY
                                                              • Size 553KB
                                                              • SHA256 785ee3333b5155a7cba77088421b3b67565d70fcf07c01d829d2bbf618e3e071
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet-buynow.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Wallet-BuyNow\wallet-buynow.bundle.js.WCRY
                                                              • Size 5KB
                                                              • SHA256 c9f776b10a45d184527198be7851b05c41ebbe4eb658b75a1b6a073f311be0a2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              app-setup.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Wallet-Checkout\app-setup.js.WCRY
                                                              • Size 328B
                                                              • SHA256 3ef50f1a9e9b2a06e95674c7f4faab9ba7b8c4bad3b1b00cb2f192f4fad36334
                                                              • MD5 SHA1 SHA512 TLSH

                                                              load-ec-deps.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Wallet-Checkout\load-ec-deps.bundle.js.WCRY
                                                              • Size 16KB
                                                              • SHA256 aafda134c683c5d4b0a95475b17ba369a888c0f32505ad9e5e0f756c967b49b4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              load-ec-i18n.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Wallet-Checkout\load-ec-i18n.bundle.js.WCRY
                                                              • Size 16KB
                                                              • SHA256 2bbaf35fc655b0e28eda90d3ca491b3c83c06a94eccec107284eba3103cc6cf8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet-drawer.bundle.js.LICENSE.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Wallet-Checkout\wallet-drawer.bundle.js.LICENSE.txt.WCRY
                                                              • Size 2KB
                                                              • SHA256 4db67ddedf7bb57b97258b122eb0f9332f19acf825a3f975d64dd39c8d46e036
                                                              • MD5 SHA1 SHA512 TLSH

                                                              wallet-drawer.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\Wallet-Checkout\wallet-drawer.bundle.js.WCRY
                                                              • Size 1.5MB
                                                              • SHA256 3e8294083b89795cd72624106e02f1ecbc37c848b91c19ecfd8b64eb0e9b9feb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              app-setup.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\app-setup.js.WCRY
                                                              • Size 488B
                                                              • SHA256 b94ddd44a5b69bab1b27ec66fcfb027d4056e32497895982b99f434ec69159be
                                                              • MD5 SHA1 SHA512 TLSH

                                                              bnpl.bundle.js.LICENSE.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\bnpl\bnpl.bundle.js.LICENSE.txt.WCRY
                                                              • Size 1KB
                                                              • SHA256 52e4f130def87912268a5e91c82292d62eceb93d14a04041d8e4e8951bf275ae
                                                              • MD5 SHA1 SHA512 TLSH

                                                              bnpl.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\bnpl\bnpl.bundle.js.WCRY
                                                              • Size 691KB
                                                              • SHA256 99cfd0fe581804defabeef0f91894c8c795b971eaa127e1db0ff7f23c3eaeea7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              bnpl_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\bnpl_driver.js.WCRY
                                                              • Size 11KB
                                                              • SHA256 6f20d3a44200ff6b66116e9e1b4bcef26fc0f8a78bef6ea2ca10f8e3678c0aa6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              buynow_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\buynow_driver.js.WCRY
                                                              • Size 3KB
                                                              • SHA256 1253d601835b510095bc3263c3bc70d8f655a33b31b2fa30e1399bb1d483440f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              crypto.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\crypto.bundle.js.WCRY
                                                              • Size 408B
                                                              • SHA256 8a0523f537036e0b89171cc26a1d0cf9f628eeae5ac1c433e1c604b6fcb6ca31
                                                              • MD5 SHA1 SHA512 TLSH

                                                              driver-signature.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\driver-signature.txt.WCRY
                                                              • Size 20KB
                                                              • SHA256 4bd385e115c0579b31fbe0562492e0d33a00cd092e5b0d0f55591efa76bb4b62
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              edge_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\edge_driver.js.WCRY
                                                              • Size 1.8MB
                                                              • SHA256 66e6ef203a41b4959b83a354bc453cae13521d8ab209483fd1c62c3fa8f9e1d8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              hub-signature.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\hub-signature.txt.WCRY
                                                              • Size 1KB
                                                              • SHA256 de8199032bd2b32550bd6422c234773c52dd089fbf7d76816ef5667892146041
                                                              • MD5 SHA1 SHA512 TLSH

                                                              load-hub-i18n.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\load-hub-i18n.bundle.js.WCRY
                                                              • Size 1KB
                                                              • SHA256 404788a08609b6599dcde63becb8ec8af9d1f84433d8e8e2d77ae16918448e92
                                                              • MD5 SHA1 SHA512 TLSH

                                                              runtime.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\runtime.bundle.js.WCRY
                                                              • Size 2KB
                                                              • SHA256 33ef940697574adb427d5e6cc3c6daef0bb1057544e849f89b0000f74e9b3167
                                                              • MD5 SHA1 SHA512 TLSH

                                                              shopping_iframe_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\shopping_iframe_driver.js.WCRY
                                                              • Size 28KB
                                                              • SHA256 d1735408316c646a7ca24bc07c3a8fa21450888da69e769e20e630b6dedbaedd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              vendor.bundle.js.LICENSE.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\vendor.bundle.js.LICENSE.txt.WCRY
                                                              • Size 3KB
                                                              • SHA256 843cbe59b43c50b55201756d997b1d261a24e612daff92c0f0d43328564c220f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              vendor.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\vendor.bundle.js.WCRY
                                                              • Size 1.7MB
                                                              • SHA256 9da541d7bf5f2f1e56354a11996d421415660e0b95650c83ebcde6a6562db47b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet-icon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-icon.svg.WCRY
                                                              • Size 4KB
                                                              • SHA256 94c6484d5505cb4a7e5b05b157243e28de9b271416618eac91a61c9acc015652
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet-webui-101.079f5d74a18127cd9d6a.chunk.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-webui-101.079f5d74a18127cd9d6a.chunk.js.WCRY
                                                              • Size 5KB
                                                              • SHA256 361ace0bbaabdbe1b2406d37587a95ef2f85a624aeec9428e320c26f826f0325
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet-webui-227.bb2c3c84778e2589775f.chunk.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-webui-227.bb2c3c84778e2589775f.chunk.js.WCRY
                                                              • Size 3KB
                                                              • SHA256 f63237d16408d3eceb473d5008fbef64313708114126aba2d15c92cebdc576c5
                                                              • MD5 SHA1 SHA512 TLSH

                                                              wallet-webui-560.da6c8914bf5007e1044c.chunk.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-webui-560.da6c8914bf5007e1044c.chunk.js.WCRY
                                                              • Size 4KB
                                                              • SHA256 5430405d7d7edce37ec2b172778575c1bb3c78ef6cc301ac773ba5b84591c3d0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet-webui-708.de49febeeb0e9c77883f.chunk.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-webui-708.de49febeeb0e9c77883f.chunk.js.WCRY
                                                              • Size 6KB
                                                              • SHA256 5b56d2da30fc04b073d2c4f9eb5b9eb634f6458e63b47d85571dbd37b05a3c38
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet-webui-792.b1180305c186d50631a2.chunk.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-webui-792.b1180305c186d50631a2.chunk.js.WCRY
                                                              • Size 824B
                                                              • SHA256 283865f75845fad7b88ee50b2384a28706bc29d3017430cefc833b3f67d982d3
                                                              • MD5 SHA1 SHA512 TLSH

                                                              wallet-webui-925.baa79171a74ad52b0a67.chunk.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-webui-925.baa79171a74ad52b0a67.chunk.js.WCRY
                                                              • Size 488B
                                                              • SHA256 729bfe5f6f587aa0068b712986346289e7e021fd644e4e500c63cfb44fc106e5
                                                              • MD5 SHA1 SHA512 TLSH

                                                              wallet-webui-992.268aa821c3090dce03cb.chunk.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet-webui-992.268aa821c3090dce03cb.chunk.js.WCRY
                                                              • Size 2KB
                                                              • SHA256 d67a9459f46f281d419e32be7caf80deb7d9b7d2842b45b7f1c86915e510249a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              wallet.bundle.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet.bundle.js.WCRY
                                                              • Size 2.7MB
                                                              • SHA256 0ecb41beb67450f8c05bf262e1eba66866f9121b38b5299f5193ad57d640c009
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet_checkout_autofill_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet_checkout_autofill_driver.js.WCRY
                                                              • Size 13KB
                                                              • SHA256 35fb718afe9d3755f2be79394de24ce2065418bdf3a2c52b148a433660fa598f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wallet_donation_driver.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\wallet_donation_driver.js.WCRY
                                                              • Size 1KB
                                                              • SHA256 2272747b0d74bb7a8602cfab559a173e1fd152a82064d4a52a273f77dc6c78ea
                                                              • MD5 SHA1 SHA512 TLSH

                                                              webui-setup.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\webui-setup.js.WCRY
                                                              • Size 360B
                                                              • SHA256 92b7b06d27f2a2076e69090cd0c96399f6f2f27e2be452cffc615fce5ef9add6
                                                              • MD5 SHA1 SHA512 TLSH

                                                              adblock_snippet.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\adblock_snippet.js.WCRY
                                                              • Size 2KB
                                                              • SHA256 ec75fe3bff9d788e3e746f509d60858bd3e7104a24622fc4a8db4ec1590bef04
                                                              • MD5 SHA1 SHA512 TLSH

                                                              english_wikipedia.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\english_wikipedia.txt.WCRY
                                                              • Size 270KB
                                                              • SHA256 27dc5d1cd1deb5d81cc0b3e2a846607a34ef9e8cffa9f8109cb9bc6904f6796b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              female_names.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\female_names.txt.WCRY
                                                              • Size 26KB
                                                              • SHA256 3bd98b082c028b609e6e15357477dacf31dc01923f4afd383dee1339c5a0607b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              male_names.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\male_names.txt.WCRY
                                                              • Size 6KB
                                                              • SHA256 c577f9918a5cf98055ea4a76bd8eb237c659abf1dca49f4a2924874e4c2f6eff
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              passwords.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\passwords.txt.WCRY
                                                              • Size 233KB
                                                              • SHA256 0b1349eec1df929650439ee5b0c8dc221ec3384a42a56d42e505724c850d6bd2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              surnames.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\surnames.txt.WCRY
                                                              • Size 74KB
                                                              • SHA256 47337623a3fa20bdc00d6b8a5d41b10d12d5e7ecd088d001f525f53fdae621d3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              test.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\test.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 168fc872c476277e4d8b3635ed49eaba7cc3512bc1d3269dd4802901a8ee715a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              us_tv_and_film.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\us_tv_and_film.txt.WCRY
                                                              • Size 159KB
                                                              • SHA256 9c8d564ac0d5957692287fa9d84afeef012765fe7c2719a2fc6e65fecc0a09e5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              first_party_sets.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WCRY
                                                              • Size 68KB
                                                              • SHA256 4da88fe8f98a2046c2224b5a9abdca17b49ac645caf479e671bc4ca80f75c2fc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              mip.policies.sqlite3.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WCRY
                                                              • Size 36KB
                                                              • SHA256 1f8014c1ab0b96a760eb03c1dd42ba72f17f12a2da8ad461f076ea441e07195d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              excel.exe.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WCRY
                                                              • Size 32KB
                                                              • SHA256 e8a98771d5f176c4aabcc363f9f64c9ef71e008a5121e9c887d27c8b1ac9fd10
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              officeclicktorun.exe.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WCRY
                                                              • Size 24KB
                                                              • SHA256 1fdab37ec36ee5e5a82e40241fb0e1a9fac67a0584d51a5c16d4b1566a224a29
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              onenote.exe.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WCRY
                                                              • Size 24KB
                                                              • SHA256 b04999538d857b5df1c4283bd00f09260e40af0217f0eecdac590cc0abc461fd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              outlook.exe.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WCRY
                                                              • Size 4KB
                                                              • SHA256 5ef816e4bbd0702bcdb5f09eeb3d20b0f61611a2ef505e23dfa475e5d9fc953b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              winword.exe.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WCRY
                                                              • Size 24KB
                                                              • SHA256 4b3bc28d24c91de445ea4946f9b5422bc8a7d919afb56ab4f799364e920a69b0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppBlue.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WCRY
                                                              • Size 5KB
                                                              • SHA256 8a0c404639ef35d69ff0035c4ba85ade44ae20d985a70f9b9437bfdcb6e74a5b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppErrorBlue.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WCRY
                                                              • Size 7KB
                                                              • SHA256 f926e8aa58621d68d9712ab4d2baad7247d5193c2ef2b9f75acf22160d26eccd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppErrorWhite.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WCRY
                                                              • Size 8KB
                                                              • SHA256 ac2b1b59045b266f9392caba9c126f2e329aca03e6f5b8801fb127d5c6a1df2b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppWhite.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 8f2de176c25588c12d1e85bf715a33cb74bcce71efed54910683ab879740de67
                                                              • MD5 SHA1 SHA512 TLSH

                                                              AutoPlayOptIn.gif.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WCRY
                                                              • Size 374KB
                                                              • SHA256 5ea0a8362d7c3946995b997f91695eb9c5efb08e10eba01157bc446a2f6e033b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AutoPlayOptIn.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WCRY
                                                              • Size 10KB
                                                              • SHA256 5a777da25edda06bec8a15ec3d13c9e4e52b42b101368104d7af521f9972f381
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CollectSyncLogs.bat.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WCRY
                                                              • Size 6KB
                                                              • SHA256 81175ae4142d5c06fb32c347333b72b9847f7586736a597498f1a9542ffead39
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ElevatedAppBlue.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WCRY
                                                              • Size 7KB
                                                              • SHA256 cff45d30fa87eb5978fb2f1843db56bc8d0b3d8ef4574ff88d3e7cc37fe9a188
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ElevatedAppWhite.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WCRY
                                                              • Size 5KB
                                                              • SHA256 677ca0c1273979f263fd1c15bb3a786681557f963439a37a20a8ff26a2b9437c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Error.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WCRY
                                                              • Size 7KB
                                                              • SHA256 2c3c3977d2fb68fd9f402ad12852f218cc674a4b3c5f85044725d6d617d5e979
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              KFMHeroToast.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WCRY
                                                              • Size 15KB
                                                              • SHA256 bc7037c29f622027cfbb1b4dd0d8724f74ed36e475c79a082b008ec742ea48c3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              KFMLockedFileToast.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WCRY
                                                              • Size 10KB
                                                              • SHA256 a83042f125085aa8ab7d2be30f382700a9470870aca453c966b42194b844c80b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              KFMScanExclusionToast.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WCRY
                                                              • Size 10KB
                                                              • SHA256 89b3f0cfb437eae477ff01573d10e99b69da5d08d38ceac5bece7d9782ade4c2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OneDriveLogo.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WCRY
                                                              • Size 4KB
                                                              • SHA256 ce77b0bb6ff0138a005e3a0e13ba186530b1c83c2a29385ad9b6f7fcaba0a08e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              QuotaCritical.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WCRY
                                                              • Size 8KB
                                                              • SHA256 da25911899416699afcd1ca480e57f3a41b0d9bac21c4dc734bac59c398e18a9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              QuotaError.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WCRY
                                                              • Size 9KB
                                                              • SHA256 a4af71596ad324db4469228c2ab77161b5b3ac4b9de6e85ee331a0b87887731d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              QuotaNearing.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WCRY
                                                              • Size 7KB
                                                              • SHA256 27a14bea79290f1aa7ced1c58857d1a5997b140e4ba28f55bbfa129d230e98a7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ScreenshotOptIn.gif.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WCRY
                                                              • Size 238KB
                                                              • SHA256 ba1e633b54b43215b69aed03fc08ae8ab73dfe43c12acb251c2e925d90aee9dc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ThirdPartyNotices.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WCRY
                                                              • Size 48KB
                                                              • SHA256 5f1ff8d8fd7a65106d6f107a983c7a11d51b75435417023ba2923b00c8ed0a98
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Warning.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 8593fe941a6fb2585277ef8c78e72c57593a0190961240f4110bac5714b55b0b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              alertIcon.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WCRY
                                                              • Size 1000B
                                                              • SHA256 0d5a5141ae062e01aa90fd5e3a7a7ee092acc885df66e85299fcfc068ae318fb
                                                              • MD5 SHA1 SHA512 TLSH

                                                              acmDismissIcon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WCRY
                                                              • Size 2KB
                                                              • SHA256 61b5d148a2f1b62155ad6558754d4d2e4b4959230914d548a2c38f9abe362604
                                                              • MD5 SHA1 SHA512 TLSH

                                                              blurrect.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 c9f55b2ea6bb64a008e14c4f972d062f1f3906f96807aa03a5c46372c085559f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              checkmark_finished.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WCRY
                                                              • Size 504B
                                                              • SHA256 35eed5b5882820ccafafb0a5451687f18d10b9dd1e34609279445a85816459b0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              checkmark_hovered.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WCRY
                                                              • Size 680B
                                                              • SHA256 b813ba575111afd2b8afa4c6bcf28092098cb8315d7f4344627675e62ab5cdf9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              checkmark_in_progress.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WCRY
                                                              • Size 680B
                                                              • SHA256 4517c7afc8ae6b68aed1b22e7c9c077ba506a1bc49179dcc60f13878f32ded48
                                                              • MD5 SHA1 SHA512 TLSH

                                                              checkmark_selected.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WCRY
                                                              • Size 680B
                                                              • SHA256 ff11683e3f8c2f8107562758973c449b12c601a9f73de35cddef68f4fa2904dd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              chevron.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WCRY
                                                              • Size 584B
                                                              • SHA256 56da36aded2e444be9104bd6395e9fb5634b1daaef439a061433152ebfccb42c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              chevronUp.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WCRY
                                                              • Size 552B
                                                              • SHA256 30c64af01a3b3238f90eba27c76775794eb914229fd2aa471b12a03e7750632b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              cloud.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WCRY
                                                              • Size 1KB
                                                              • SHA256 474534500ca110be0acb03962563c4eb9e059a5722b19e7e81235d6e57dea714
                                                              • MD5 SHA1 SHA512 TLSH

                                                              done_graphic.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WCRY
                                                              • Size 15KB
                                                              • SHA256 3ca64390e4b7058dacc5398287b89a7ce3710109feaea1e0a576eb69e32cbdb7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              errorIcon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WCRY
                                                              • Size 1KB
                                                              • SHA256 0a59cc420cb430c2d4e4e808ed63f017d062c76536b45ca7b5ecf8d0a0ed1490
                                                              • MD5 SHA1 SHA512 TLSH

                                                              folderIcon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WCRY
                                                              • Size 1KB
                                                              • SHA256 18c04c73fbc1dfe1e6fe473e1a27d1dca790724a52bc09a5bdde115e07ec1ef4
                                                              • MD5 SHA1 SHA512 TLSH

                                                              folder_image_desktop.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WCRY
                                                              • Size 2KB
                                                              • SHA256 60ae9b9b50dc2dd2719c326004ad0a6c3b9c5277034df35261e7281718a1ed93
                                                              • MD5 SHA1 SHA512 TLSH

                                                              folder_image_documents.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WCRY
                                                              • Size 10KB
                                                              • SHA256 783da028a8ac46fde8d75a25f2e509916118786152bdc99b583371e74306556d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              folder_image_pictures.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WCRY
                                                              • Size 7KB
                                                              • SHA256 738d9b2a0cd22104a581459564048fee5ceff34ddd3851b0b9e87f6a43b81364
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              globeIcon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WCRY
                                                              • Size 2KB
                                                              • SHA256 519fb711745eeea517735f049b94122c118701c876bd1b32810cf29540fc4aa2
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iceBucket.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WCRY
                                                              • Size 6KB
                                                              • SHA256 161a5e0264efb80af8df3b56b47d04d17dd61f88c0ec8e79b90e899dcbbaa97d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              infoIcon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WCRY
                                                              • Size 1KB
                                                              • SHA256 9130ff2a88ff0ffd25014e99b7701ec67713e0969a46d908afd3efece6cfba29
                                                              • MD5 SHA1 SHA512 TLSH

                                                              kfm_folders_image.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WCRY
                                                              • Size 20KB
                                                              • SHA256 fd7ad9abb0cff9689c349c6d13d24c025577740fcfc73fafcf1cb8b2c74120de
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              loading.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WCRY
                                                              • Size 1000B
                                                              • SHA256 38eb14f438db3311103225320c5c5373fa21500b8ba309f4f877388508476d30
                                                              • MD5 SHA1 SHA512 TLSH

                                                              loading_spinner.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WCRY
                                                              • Size 712B
                                                              • SHA256 536a14ffd67aa3ddb1e159e6d2191d93aa2931b0540704174b5b33daa5d52f91
                                                              • MD5 SHA1 SHA512 TLSH

                                                              onDemandFiles.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WCRY
                                                              • Size 7KB
                                                              • SHA256 8b38840e5f44c0e6f435c16f652c3fd4acebde1b43843320a3c300c4ad2bc31d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              onDemandFilesDehydrate.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WCRY
                                                              • Size 9KB
                                                              • SHA256 3fcc423f56f08356fe69b2e5ba45723a06b4d822b6d9c834ad4fd4a1ae4963df
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              onDemandSelectiveSync.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WCRY
                                                              • Size 2KB
                                                              • SHA256 ca87374ade1d7dc33b91dcfc7cd430195ce3784ccd97de6bee1a20ab703f2e69
                                                              • MD5 SHA1 SHA512 TLSH

                                                              overflowIcon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WCRY
                                                              • Size 1KB
                                                              • SHA256 71b9437d49f15634d8b87cd96ad1c8718cfa68f74833b4cfad332f9a9b71748c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              overflowIconLarge.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WCRY
                                                              • Size 1KB
                                                              • SHA256 36fdcd1bc7dce988a0fa5fe1633fa68e7b19f43ce12bbd606f5d9c432a000a17
                                                              • MD5 SHA1 SHA512 TLSH

                                                              partiallyFreezing.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WCRY
                                                              • Size 4KB
                                                              • SHA256 73b8552b9e6b9fe9d266657d5966120cf414d2527af4aaee0669502f51862904
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              paused.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WCRY
                                                              • Size 600B
                                                              • SHA256 4e7a675affc8463e7db19251badee769b5e3126e1e5e49ed5ab34f4a3d270464
                                                              • MD5 SHA1 SHA512 TLSH

                                                              premiumIcon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WCRY
                                                              • Size 664B
                                                              • SHA256 b08a6823bc003b84c41af8d270611ed61a5f8d1b7bbdf9ac860e694365f1f3bb
                                                              • MD5 SHA1 SHA512 TLSH

                                                              recycleBin.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WCRY
                                                              • Size 3KB
                                                              • SHA256 0d1ea1dc7093abd82a68805bb1f26efaab6ffdd1935a72686e6d48d77c46ee7e
                                                              • MD5 SHA1 SHA512 TLSH

                                                              shield_icon.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WCRY
                                                              • Size 1KB
                                                              • SHA256 e4a642686e1d9e3108805a9051ed5fe56a277df0b5d896dc5602801f3bebf517
                                                              • MD5 SHA1 SHA512 TLSH

                                                              signIn.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WCRY
                                                              • Size 10KB
                                                              • SHA256 cf322fee03d29fba2b836a4102fc6b991fabebbc518fb463a676c1a5b6152ed3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              stackedIceCubes.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WCRY
                                                              • Size 4KB
                                                              • SHA256 d756bf32a8a228541dab1cf310088fd7c143cf879e3d1344092ac110c0f7afab
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              warning-symbol_grey.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WCRY
                                                              • Size 536B
                                                              • SHA256 c6a254f0f086969a5771e60694276c9f7525c0d2766a455f4c460ad2a0851abb
                                                              • MD5 SHA1 SHA512 TLSH

                                                              waterGlass.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WCRY
                                                              • Size 2KB
                                                              • SHA256 bb90caed84ecb22a5ec2c0be278246e6793af6934090443a5620056710246559
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-black_scale-100.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WCRY
                                                              • Size 936B
                                                              • SHA256 026fcf28d597b04a6f219d2164439104ac7275c2a4c0c34eb5577fa4799720da
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-black_scale-125.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 a18f4438b3d8b61ee8b02b0875a262892eb6deb88a0ba4235e60b7584f9328fc
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-black_scale-150.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 8ad5cc83975afa18ca9661c2cfb77d31160462bfa5d7f6160634693c6cba4819
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-black_scale-200.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 6304a2cad26388be4e39d0d74d657985e78ef46e9b750f925df3ad181c1e3d2f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-black_scale-400.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 9f5cfdde20c8a76dc93705cd7513201670e4108c4a27e4b05b9fbfd1909e3518
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-white_scale-100.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WCRY
                                                              • Size 952B
                                                              • SHA256 b11b76c986d38ef04caf0de6d5313fa4ca51b8df332ea096d81e9574699df9d5
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-white_scale-125.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 6cac4038a41ff087691bbf504316cf2a2533a5a6d0ebacd713c9a7914b9fbf79
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-white_scale-150.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 2101c68791db49cfa46c01afc51e503ba4f8d6bd3ab1a7a3460f8b32843fdc0d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-white_scale-200.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 8d32368319d3114b3ae5e3dec41b493eb0c420702fe1b403c39a19e9f737111d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.contrast-white_scale-400.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 9118c334d1541b4cf90b96be8c9b1deeeaacd9588f38b3c1ab6bfc996ce42382
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.scale-100.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WCRY
                                                              • Size 936B
                                                              • SHA256 b4a98b966da4d8a311cf62f35e58c80487ff480835fbe5c3cdc2ca8937aa32c0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.scale-125.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 b5832c2ba0f6085657c510d9f25802b0ffa8f1a9f7498938fd90189449d93137
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.scale-150.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 11d6411e838ebe1f021bd2a2f1693df6b034e228ce01102718396f3ab20b85b7
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.scale-200.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 a9096ac2968bbb1d3e788c0880493b58cf2e05eb5a819436f9aaf8cb0cc6037b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveMedTile.scale-400.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WCRY
                                                              • Size 3KB
                                                              • SHA256 957df2c1889c5a956b8f7e1aee652c32a0672756bca8466bf2bf1daa5b24b469
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-black_scale-100.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WCRY
                                                              • Size 696B
                                                              • SHA256 cef041b2e0aff4589357101e7c10170fe276b6625d767e0666c4c43866da15c0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-black_scale-125.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WCRY
                                                              • Size 808B
                                                              • SHA256 54c862c2e96c41ed11f2e7c210d8c8c2389de8fcf8e268eba969d50c6500112b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-black_scale-150.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WCRY
                                                              • Size 872B
                                                              • SHA256 0ff03213ea0d74c97babcd4540fad9fbd9321c88a88b8367d4b40a8214ad61ff
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-black_scale-200.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 f7211f5d8eb5c97f394df32731761c03d37cc1c027135494ea961dd5ea5f05a9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-black_scale-400.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 baaf074338139de50e06bdbccee253c377dd841e717fda8080d55b6d8645cf5f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-white_scale-100.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WCRY
                                                              • Size 696B
                                                              • SHA256 46ad224314b348a1ce1073cf1d18dfb6eaaf1524af1ea9917ca254c8098fc61a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-white_scale-125.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WCRY
                                                              • Size 824B
                                                              • SHA256 5cf15f93da3be9e0e49c020dde79bec70fe1f2e9dd5f4c5f983db730eef2de61
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-white_scale-150.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WCRY
                                                              • Size 888B
                                                              • SHA256 b4c0c4ed735cbc97ef7bab7367990de00d2ef8d52afe24a6d7e6889d825e1522
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-white_scale-200.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 c0897697f4f9e2270cc344d679aab1df94ca8990962c1cd1dc471a1d90fd2768
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.contrast-white_scale-400.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 be130b70baef268488c7855a187ef827f3735633a86cbb2d0230c7810cd7456a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.scale-100.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WCRY
                                                              • Size 696B
                                                              • SHA256 b3dff030696c6191274e3fd06809f977ad94bf1c1d78e800035d91990972a24b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.scale-125.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WCRY
                                                              • Size 808B
                                                              • SHA256 dee4e1ce6f0ecf7068ad31b3aa2933a3f11a5d1c0bef3b3a49274486c614c2eb
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.scale-150.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WCRY
                                                              • Size 872B
                                                              • SHA256 f79d2301c483ba98c1636e37dbe96ed734ff9f124c20b6a89717625848253ea9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.scale-200.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 2e86985b42e266cd32652916b2d4520b596612199081a2e398f33adcb0140416
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OneDriveSmallTile.scale-400.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 a03a3e668690139c0704cf95393bacc6257d84c412e46abc7457904fde028d3c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              cversions.1.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WCRY
                                                              • Size 16KB
                                                              • SHA256 834d0bdbdb4cecde6e40c1cd1b4b273cc7789423dada7b3d8f13d8833d50f0c3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              cversions.3.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WCRY
                                                              • Size 16KB
                                                              • SHA256 5e8f96c0662397ad850ba49c357d4fd421feecb5493352ca8f1df428e3646aff
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              {03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WCRY
                                                              • Size 414KB
                                                              • SHA256 a4d8313a4889502d1217b03a4c0d08f9f70d0fb7ab2d27b626943ffe26bf0bcd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              {3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000020.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000020.db.WCRY
                                                              • Size 93KB
                                                              • SHA256 90a9a9f1911c63a69df1248d4bad8e734b93b09b3ba74d3784363119943e4f25
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WCRY
                                                              • Size 83KB
                                                              • SHA256 daa2520028e4b89cafae8112d36e6b09d1b50884f4bf1e90f0992f957ec1d479
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db.WCRY
                                                              • Size 85KB
                                                              • SHA256 264678102b58a422a6b135236ba11974c2c621b1a9fffd93bca0cff0cfbf84ef
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              iconcache_1280.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WCRY
                                                              • Size 312B
                                                              • SHA256 549dfd8901bb418b2dbcb6c396eeccecf6f8bf71879195a3777b55361c63c7a8
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_16.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 34d969960bd34c66abc74a8a6abb471d69504964a89f1440888b92c662f72251
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              iconcache_1920.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WCRY
                                                              • Size 312B
                                                              • SHA256 f533667b4bfc4c777e3c510bbff16322f749e816e91a3adfb315021539d8baab
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_256.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WCRY
                                                              • Size 3.0MB
                                                              • SHA256 614a5d99aff2de7604a6b6f5bc1705c6571285e3d1f583fd9487ceefe30f6f39
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              iconcache_2560.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WCRY
                                                              • Size 312B
                                                              • SHA256 5ab3a9fe7e226ffe76db40807d016cb18751bd568bf22ca936b64f6c76da3461
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_32.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 306711b707d24386bc5ed0594c8b550e9d3bd76f4ace858a113b338319a076d3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              iconcache_48.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 2365031d3410ff36c74bf0c1698f1bbd13405d4b83153c6d1ddf7ad89cfee54b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              iconcache_768.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WCRY
                                                              • Size 312B
                                                              • SHA256 998ad8c9bce96ec030650e3ab2482096d93c0d1ebcb97d676ddb5af83e92aa94
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_96.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WCRY
                                                              • Size 312B
                                                              • SHA256 6fe2c424d4f520ba3e898984b635e821d171b3f3889cd8e85bc9716d8791e369
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_custom_stream.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WCRY
                                                              • Size 312B
                                                              • SHA256 48bef98b68ac17865a2b1ab49e4895b6c6be3189c23533c49519d800920329ef
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_exif.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WCRY
                                                              • Size 312B
                                                              • SHA256 5f099ee0aed939cf6cf4460378f981491ee2647723a4f107289b6c4f721126b7
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_idx.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WCRY
                                                              • Size 28KB
                                                              • SHA256 02efb4865ae4e617356440e75a7d2923ba45cca17641f416a79ea3d227e20cae
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              iconcache_sr.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WCRY
                                                              • Size 312B
                                                              • SHA256 b8227265d2cea7b0d609d66f2481abbb4bdcbca25c7714396a31421a9ea38600
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_wide.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WCRY
                                                              • Size 312B
                                                              • SHA256 417ce90bec8b50779a8b74cea6eb6b540e7cc0d7cd62ec9dfe2e8f2c1f46042c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              iconcache_wide_alternate.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WCRY
                                                              • Size 312B
                                                              • SHA256 c5c3802e37c2882ba5ece9059d3054800c5bda97141b9caecd4468c43a92adfb
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_1280.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WCRY
                                                              • Size 312B
                                                              • SHA256 e1885c34abb17f8917ff105d98324f7cf32d365171eb48bc341941901c28c41d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_16.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 268919c63b09cd9809ac1eaad7675684fc9c43ef2d3d2b77cfc4ef975e0cced6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              thumbcache_1920.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WCRY
                                                              • Size 312B
                                                              • SHA256 b2cedbfff7206457b4d1d758bb39cca90af2c03072943bc57b8f7dd4b106f0d9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_256.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 c256bfd9076957d0e25167440caff1ecdf76bd28d199e5808b49e77f24c6c8ba
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              thumbcache_2560.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WCRY
                                                              • Size 312B
                                                              • SHA256 6abda11228d403abf9f20b98e65beab0cc7a63e2a065189fda882ad54c4b6596
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_32.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 2752949cb407b8a0a69001b0700b7579f5e6d89527e581ca078eac5f71701aa5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              thumbcache_48.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WCRY
                                                              • Size 312B
                                                              • SHA256 2942638b2da1936d03a22dcea4446b2ec09251276de478011f110336626a70bd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_768.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WCRY
                                                              • Size 312B
                                                              • SHA256 072c5b87ecbdeb0a61d245490189394e1f7ebd1a64995a78c5bc8c764d695862
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_96.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WCRY
                                                              • Size 4.0MB
                                                              • SHA256 58393dc30db4eea7314cb804bba4b6c9970d6868c897f1a4971e87be8f7f8343
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              thumbcache_custom_stream.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WCRY
                                                              • Size 312B
                                                              • SHA256 d389449d0d1de083a1996f4ef8cd58b5d7abe4961213da1d1ddb05f5723e2ebd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_exif.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WCRY
                                                              • Size 312B
                                                              • SHA256 5e76b70f0c13a76e909de96cc2f36e2972159e3ec5507f4b9fb0bf08c758d13c
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_idx.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WCRY
                                                              • Size 14KB
                                                              • SHA256 0b65684b676c89d4c660fd78740d193a506aea19dc64acd459181a8fda992149
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              thumbcache_sr.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WCRY
                                                              • Size 312B
                                                              • SHA256 7e4dadef8c9464b91eaf777d5e3372d06c7a87d20304ea3d3d95a49fb654b750
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_wide.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WCRY
                                                              • Size 312B
                                                              • SHA256 3c28f5d64f16c75554b33375c25e17ea3ec4c987ff65fe31903c1284f14dddf7
                                                              • MD5 SHA1 SHA512 TLSH

                                                              thumbcache_wide_alternate.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WCRY
                                                              • Size 312B
                                                              • SHA256 c8b1803d42ffc4d710b531ddbe27e5ac9102fe36962e99850a9a9f8ef4d59677
                                                              • MD5 SHA1 SHA512 TLSH

                                                              microsoft_logo_ee5c8d9fb6248c938fd0[1].svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV9ET3T5\microsoft_logo_ee5c8d9fb6248c938fd0[1].svg.WCRY
                                                              • Size 3KB
                                                              • SHA256 b54529f0c7bdac0b176e93c5611047d3e5b693def1ef99acd0672c70bd6c76d0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              {8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\DV9ET3T5\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WCRY
                                                              • Size 6KB
                                                              • SHA256 bc4061df5c414987c17b78f593af050a1f5590840109c277bdedcede30307ebc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              login_v2_en_O6ZAt4gw2p3brUAcUCTgow2[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\FB6DDX4X\login_v2_en_O6ZAt4gw2p3brUAcUCTgow2[1].js.WCRY
                                                              • Size 960KB
                                                              • SHA256 b0bf603c9e228a63f0e2c7cec3a77b7054527a6d972b835448a81455ef917561
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AAehyQC[1].svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\G3H6M57B\AAehyQC[1].svg.WCRY
                                                              • Size 3KB
                                                              • SHA256 12bc3322d5e63d902d358cd3d7840dba3acab5da8ffbc21689c0e59647f50712
                                                              • MD5 SHA1 SHA512 TLSH

                                                              oneds-analytics-js_v2_500d8f6d3f9acd0d4b4a[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\G3H6M57B\oneds-analytics-js_v2_500d8f6d3f9acd0d4b4a[1].js.WCRY
                                                              • Size 86KB
                                                              • SHA256 1dc12c5b2bdd91d0cfffbf0c5e3746648bba2bb13636ac3f35172a5d4b3e969c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              fabric-chunk_vendors_E7vUDAv61iVCiyoz3ABkzQ2[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\T1P4NEBX\fabric-chunk_vendors_E7vUDAv61iVCiyoz3ABkzQ2[1].js.WCRY
                                                              • Size 551KB
                                                              • SHA256 d052ac4095fc1a513e34109fec307a476805d73ea9b914665fe70bded0da3244
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              legacy-polyfill_N8Ga2ha8NZXKE88suhqTHA2[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\T1P4NEBX\legacy-polyfill_N8Ga2ha8NZXKE88suhqTHA2[1].js.WCRY
                                                              • Size 135KB
                                                              • SHA256 8f142206de9e9c12e685a043d2decd7123b61eccd5c7d58358096c283bb5e72b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              wpndatabase.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 7ad11ad141d634cb8c9968d68a49f2f4a4b719b459730d0bc98abd3b62d97835
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              squaretile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 80366ede13b127362f645faffe0c28afdbd57e2a30bfb5eba04cafa8a234cb50
                                                              • MD5 SHA1 SHA512 TLSH

                                                              tinytile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 351a6a21bbf0dfea088065e4256b9869c631d1f574a6f9d0cb0b1f0f4ab12b30
                                                              • MD5 SHA1 SHA512 TLSH

                                                              squaretile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png.WCRY
                                                              • Size 2KB
                                                              • SHA256 ab8107f2742a89f6d23b030406e7b685d07cc113f162b85ba308f05db62249aa
                                                              • MD5 SHA1 SHA512 TLSH

                                                              tinytile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 9a9636474276764ae5afc69122d8f6533cc628f63d05417a27d774136c44e0b4
                                                              • MD5 SHA1 SHA512 TLSH

                                                              squaretile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 ee04067da0106eff4a92849b052ccb1c231bbbe44a929a4ef7f1b911176e7272
                                                              • MD5 SHA1 SHA512 TLSH

                                                              tinytile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 97f447bc760b35b1ffceac95caf4231261d7c524f619dc9ad671a89084c8abde
                                                              • MD5 SHA1 SHA512 TLSH

                                                              squaretile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 3aba04afde2a4cabdd2367dcddcfa35f60d088d64955eefb32dce0e18dd028a8
                                                              • MD5 SHA1 SHA512 TLSH

                                                              tinytile.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png.WCRY
                                                              • Size 1KB
                                                              • SHA256 6e20197737b3ade4ca7d65028db938783ce6bbb5f7bb5c9d68f7b97ae919a733
                                                              • MD5 SHA1 SHA512 TLSH

                                                              53dEtUrhAV5kBHY-GXbgbWghcig.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\53dEtUrhAV5kBHY-GXbgbWghcig.br[1].js.WCRY
                                                              • Size 2KB
                                                              • SHA256 8a5faedc4274b1f06d4a555c70ddd969618c1cf38fd9f777b58f0fd3e2934e1d
                                                              • MD5 SHA1 SHA512 TLSH

                                                              5_Qy3kN7CMDIuIz_gxIKYIiSlE0.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\5_Qy3kN7CMDIuIz_gxIKYIiSlE0.br[1].js.WCRY
                                                              • Size 63KB
                                                              • SHA256 5882650cd2a27a76e99e3bb43575f9154ff98762478db1e9e68156b52ce6ebb0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              6Y5Lpywr0GtWwZp2QTDQ9BU5hkM.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\6Y5Lpywr0GtWwZp2QTDQ9BU5hkM.br[1].js.WCRY
                                                              • Size 87KB
                                                              • SHA256 0cc85abb59fe4da565180acfdf544f96ca994fb25c940d730b2e8cbf6ed921f2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              75Izh7HFgy6cSu9rdaZkYjp-stc.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\75Izh7HFgy6cSu9rdaZkYjp-stc.br[1].js.WCRY
                                                              • Size 9KB
                                                              • SHA256 4ceff60f914926c0340012901b11a38048b66b1d01f4729fed453b6038fa6896
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              BssPvDdoj1C9GPJrc4ePK4br97g.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\BssPvDdoj1C9GPJrc4ePK4br97g.br[1].js.WCRY
                                                              • Size 96KB
                                                              • SHA256 26dcb401b5c9f9228c80c2e451f55b359034c0aa3f95e675e2415c4b33345b3e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              IBajuVOUJVU3NlyWM2Txlietv6o.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\IBajuVOUJVU3NlyWM2Txlietv6o.br[1].js.WCRY
                                                              • Size 349KB
                                                              • SHA256 7aef6a4956da0d5663fddc06c2894849478b8fe3b3cbbe5f39c2676cc7fae3d5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              KiGbwlvCr6mDT2PTMkGTGMX8P-w.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\KiGbwlvCr6mDT2PTMkGTGMX8P-w.br[1].js.WCRY
                                                              • Size 42KB
                                                              • SHA256 6da0dc93e6ff73d349c7a37e0343dc056827d47d3d3dfc6f5f680bcfc89c47a6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MxeJyjNgl4Wpe6lwn5kHkr4_-94[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\MxeJyjNgl4Wpe6lwn5kHkr4_-94[1].js.WCRY
                                                              • Size 1KB
                                                              • SHA256 00fb1ff04fe7ffa57313d563d5c00dd107f4fdcf4fccb8a33e40f230b2ba3e29
                                                              • MD5 SHA1 SHA512 TLSH

                                                              RGMlHpHvBtpIoimRoi_VK90-Hv0.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\RGMlHpHvBtpIoimRoi_VK90-Hv0.br[1].js.WCRY
                                                              • Size 469KB
                                                              • SHA256 98c9d5cbad59534c5f7f7fefc675680d04fb04fbe99584b918f1665735060cb9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              S2z4mgWinRePGA60pm9jypzjvgk.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\S2z4mgWinRePGA60pm9jypzjvgk.br[1].js.WCRY
                                                              • Size 163KB
                                                              • SHA256 b3dca43b02d0b3604a682dd4d33833cb67d8bbf16c6abefb83f242f8f2de7138
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              XDGzKmz1XMmydyUdsLjQWSxd8yE.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\XDGzKmz1XMmydyUdsLjQWSxd8yE.br[1].js.WCRY
                                                              • Size 42KB
                                                              • SHA256 22a5b40a10cfa924acf9055ea824820a83e08fd335e368e77881728e7732494c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              _BnB-s6taBN8V2dSpgLpRUHcruc.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\_BnB-s6taBN8V2dSpgLpRUHcruc.br[1].js.WCRY
                                                              • Size 64KB
                                                              • SHA256 a119ba677d74d61dadb91ca8a5f6fd552b1c85e1105b651f2da28632a98ac53a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              iNPskXPmYT28qkQXzLg4o1yEVKs.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\iNPskXPmYT28qkQXzLg4o1yEVKs.br[1].js.WCRY
                                                              • Size 543KB
                                                              • SHA256 757b19d686d7f9add41dff3d0e21fd774d468a8fbedb3e4f22debe3892215302
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              kKDH_Zwhs7fhB09C7rXcLKAhJEE.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\kKDH_Zwhs7fhB09C7rXcLKAhJEE.br[1].js.WCRY
                                                              • Size 100KB
                                                              • SHA256 40426f94a4a67e0791608ecb274fbb5f5cd5450b9bd4d958b9b40e088bebdabc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              nqCMVneqreK-vgoiiO8O6mngB9E.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\nqCMVneqreK-vgoiiO8O6mngB9E.br[1].js.WCRY
                                                              • Size 135KB
                                                              • SHA256 ff7bb0414f218fe5d75939a7249a497f53d78174d7215dec39fc33821826fb7a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              sGpYN-m0KMWCBkdAq1ExBhpfbbU.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\sGpYN-m0KMWCBkdAq1ExBhpfbbU.br[1].js.WCRY
                                                              • Size 2.3MB
                                                              • SHA256 2bc9f22dca7809f118f39bd10776dab024347990bf4f0f589039d37e0045cc05
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              tgVYEgDzrpTeICVaaRca7RC5Qpo.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\R2AC88P8\3\tgVYEgDzrpTeICVaaRca7RC5Qpo.br[1].js.WCRY
                                                              • Size 1KB
                                                              • SHA256 ab0de1ac7c2150e767c5af99c4a663116c1b03625ba16cf04ef3c46a44184dc9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              ANzUnPnVY0oL0XWxs0RLJxjJLUo.br[1].js.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\HFP811RJ\ANzUnPnVY0oL0XWxs0RLJxjJLUo.br[1].js.WCRY
                                                              • Size 20KB
                                                              • SHA256 c52484aac33f2e73f040b38aba5006e6db0a8b7bfffc2cbc5425c3bffd7afea4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0.0.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{992c40a5-333a-45c2-a046-1819d9b8ea5d}\0.0.filtertrie.intermediate.txt.WCRY
                                                              • Size 30KB
                                                              • SHA256 aff68ef8e9516ea384614a2c6d9c3f14aa333c1d01192a2077273fedc9ba21bf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0.1.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{992c40a5-333a-45c2-a046-1819d9b8ea5d}\0.1.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 add6fe5d88f08e0009cd5dfe4df06064fd1dc6e1075b85450e3208445938ccfd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              0.2.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{992c40a5-333a-45c2-a046-1819d9b8ea5d}\0.2.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 a9c3a688cbe46b060738eb616ce785d188f0e5972479e85571697ea1a1d3b4d2
                                                              • MD5 SHA1 SHA512 TLSH

                                                              0.0.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{a616dab8-2071-4ac0-98bf-0e9ada8a0df9}\0.0.filtertrie.intermediate.txt.WCRY
                                                              • Size 30KB
                                                              • SHA256 e460cf23d9870e6b32a5d965774e37f0a378be68bbe7399e7713be7781cb7c95
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0.1.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{a616dab8-2071-4ac0-98bf-0e9ada8a0df9}\0.1.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 67137aac1bb44802d01abe41066adb64b5d53d8f4def3c7964f410773e75d46b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              0.2.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{a616dab8-2071-4ac0-98bf-0e9ada8a0df9}\0.2.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 a30fbdf4a331c1561ef47ec8c0aad5804b9c3ed7316a21ba68c8e20e9f924027
                                                              • MD5 SHA1 SHA512 TLSH

                                                              0.0.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d9286590-c2df-4f03-ba8a-2fbb812aefe9}\0.0.filtertrie.intermediate.txt.WCRY
                                                              • Size 31KB
                                                              • SHA256 4a416db2e9686f0f2afcddba331e6d909fae1e8fbd54e585148f82293b0ce254
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0.1.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d9286590-c2df-4f03-ba8a-2fbb812aefe9}\0.1.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 1a26f84f606325ff4f18e1ce314cc3f96f9ac6014b751256ae9e6786a60e9f0a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              0.2.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d9286590-c2df-4f03-ba8a-2fbb812aefe9}\0.2.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 86bb43cb57b377aabf18def4216606f1e35e5afefdc89250c9433429eea80585
                                                              • MD5 SHA1 SHA512 TLSH

                                                              appsconversions.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{08ddbdd3-9559-4a97-a908-329d6b450ce6}\appsconversions.txt.WCRY
                                                              • Size 1.4MB
                                                              • SHA256 a4f91e38e22cbbd782971b208b09f522ea790f37aa1accbfdc0b1f5a124c7bbf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              appsglobals.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{08ddbdd3-9559-4a97-a908-329d6b450ce6}\appsglobals.txt.WCRY
                                                              • Size 343KB
                                                              • SHA256 125bff6e4ef6f238b113d7f8169ac8a06d6fa7d41c7f2cf7b07f2155f2897aaf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              appssynonyms.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{08ddbdd3-9559-4a97-a908-329d6b450ce6}\appssynonyms.txt.WCRY
                                                              • Size 238KB
                                                              • SHA256 1d572a4cca62dde5a2d9d2ed208a5edc9e809373ad5282a844ae50a62105dd22
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              settingsconversions.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{08ddbdd3-9559-4a97-a908-329d6b450ce6}\settingsconversions.txt.WCRY
                                                              • Size 520KB
                                                              • SHA256 0e23e2e71dda67be4ec9e076fa0d63eb33d40abcdaef37eda1223540a865f27f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              settingsglobals.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{08ddbdd3-9559-4a97-a908-329d6b450ce6}\settingsglobals.txt.WCRY
                                                              • Size 43KB
                                                              • SHA256 f1a53d4872f9ce43187455a3147dc564897ab551b2b44562b3fe079dc3c048be
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              settingssynonyms.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{08ddbdd3-9559-4a97-a908-329d6b450ce6}\settingssynonyms.txt.WCRY
                                                              • Size 101KB
                                                              • SHA256 ecccfa6c7725f736a6fc66a7bafbbdfb7d9ff003722773d7c0d82bd85adb1ea1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0.0.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{dbe6959b-abdc-4c9c-b810-5a09a586db24}\0.0.filtertrie.intermediate.txt.WCRY
                                                              • Size 204KB
                                                              • SHA256 910bbaf9769c5951589abdb48f3e2ad4ed2bd8887f6a7e1ac3fd8eb9f38fd20c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0.1.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{dbe6959b-abdc-4c9c-b810-5a09a586db24}\0.1.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 58646cb0fff0027ff02840cf7c5cc485fb7a932740864134a5c76c6535f66a88
                                                              • MD5 SHA1 SHA512 TLSH

                                                              0.2.filtertrie.intermediate.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{dbe6959b-abdc-4c9c-b810-5a09a586db24}\0.2.filtertrie.intermediate.txt.WCRY
                                                              • Size 296B
                                                              • SHA256 30aa6e1a0a87ded0f12058ffcb6d764cdea70e64f832ae736b80635e78207ebd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              AppCache134336129050804655.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129050804655.txt.WCRY
                                                              • Size 76KB
                                                              • SHA256 a07dcd7952e0f097892b7e097f566ec09ada1e4285cf93b38e1806624db63a1a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336129725738058.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129725738058.txt.WCRY
                                                              • Size 77KB
                                                              • SHA256 9248300b802e2228eced05732cf53022275fa0906eb1a0e6e062b4f6d07361a4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336130503567780.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130503567780.txt.WCRY
                                                              • Size 77KB
                                                              • SHA256 8d8994169c5c091edf30a34ea1bb874e2cde7fa63b9f142b1ba462241b0d8ffb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336130809285074.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130809285074.txt.WCRY
                                                              • Size 66KB
                                                              • SHA256 311afdce4763409d33bbc4c2fe0a264d9b9e5da91f59c47bd11498702496746e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336130907304676.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130907304676.txt.WCRY
                                                              • Size 59KB
                                                              • SHA256 1e1959669ebd4ca3bc044cc01e3f9f243a2cbe6e11a23d17af8080f83cdd87e0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336130917324885.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130917324885.txt.WCRY
                                                              • Size 56KB
                                                              • SHA256 651e1ed3371cbbbf944f6fed2e7c726f7dee1fd2f81ab122e4a0128f95c73d57
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336130935299442.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130935299442.txt.WCRY
                                                              • Size 54KB
                                                              • SHA256 b217d1cb020a29503273212d5a637b7f3a9f1ec99fb4debf7c0ee1584d3944c7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336130944567214.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130944567214.txt.WCRY
                                                              • Size 53KB
                                                              • SHA256 76778ace536503b929c12a6b7b028e3dcd23187b417d68c94e7908a659d953bf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336131098195107.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336131098195107.txt.WCRY
                                                              • Size 47KB
                                                              • SHA256 d3414461f829bc482b702a024015e8120f59665c90f9c1bcd0e41bdd501cd0b1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336131791889137.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336131791889137.txt.WCRY
                                                              • Size 47KB
                                                              • SHA256 90cd8123cca2dd414dc92b4dd94a5eb32ddd4f6b38ab6997758a272fee4143d6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336137580679605.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137580679605.txt.WCRY
                                                              • Size 48KB
                                                              • SHA256 4c3f4fa4c7b3a7bd07f877cfaaaaa8f0024f35a34c35e69a11d567ae3c51654d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336137930535312.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137930535312.txt.WCRY
                                                              • Size 49KB
                                                              • SHA256 06d41e67105f309157fbf7543f24e6359e11e53dfb9c3f22b33494bbf6cdf7df
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336138232894918.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138232894918.txt.WCRY
                                                              • Size 53KB
                                                              • SHA256 3e8c75dd0c1f32b02310fa3ab0d9a2ca566d6f5491816db48f5c24e1b59a8fec
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336138848964832.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138848964832.txt.WCRY
                                                              • Size 64KB
                                                              • SHA256 3aec81a15e68883d35269f4d177001e374245de9df2946cd09dd1e7a100fa5c1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336139330998058.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139330998058.txt.WCRY
                                                              • Size 64KB
                                                              • SHA256 a1653eb77ef1fb907deb0a4ca9d8debb70e90f3ae3a4b9ec1684e93d26d59bba
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336139447125412.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139447125412.txt.WCRY
                                                              • Size 65KB
                                                              • SHA256 67fc6958c4dd058080b41aeff3a1d929c38df58f2e44fe8954dcd5bdb2ed5793
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336140704271946.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140704271946.txt.WCRY
                                                              • Size 67KB
                                                              • SHA256 82e073959bb34fdf3a87b74fce37a6bfcc4e9573cfac798ada83bba80630a808
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336141007763927.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141007763927.txt.WCRY
                                                              • Size 73KB
                                                              • SHA256 e04724c53f4660aa36c72ad069c4758d1e820edd64e74352fa0232fa54e1f9d5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336141280933115.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141280933115.txt.WCRY
                                                              • Size 85KB
                                                              • SHA256 12cc48428a78e18712d13c780f63c20a16a0fff443b78bd6a92fc3bfd5c4ab27
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336141304639019.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141304639019.txt.WCRY
                                                              • Size 85KB
                                                              • SHA256 aeea1176724d8842fa02f7f82b2cfd7cf9b3a1d40b090e00b2504aa00c373d22
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336141657495253.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141657495253.txt.WCRY
                                                              • Size 85KB
                                                              • SHA256 34de7b3d68d233a045abf30592a80fb8166b26bab30117e262a0ff3aa4bf3d77
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336141957078058.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141957078058.txt.WCRY
                                                              • Size 87KB
                                                              • SHA256 67babda30d8a58aff2e82120c633d1a32d4adc73ae2421d7d072231de985e2c1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336142257101664.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142257101664.txt.WCRY
                                                              • Size 88KB
                                                              • SHA256 ed1461aa0dc600aa3d714091929ea30302c05ebdb6eef1ddf019bbca933b0d3c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336142557018706.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142557018706.txt.WCRY
                                                              • Size 88KB
                                                              • SHA256 db1696f9fec972a8cd3ca7cc8b576bfdefe7b2f74881d719367553563824c5c5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336143501540300.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336143501540300.txt.WCRY
                                                              • Size 88KB
                                                              • SHA256 d905c1840f38cc1206f6f5488b68f3d819a25bb6abb4ac9a151b205aff4d8378
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336180355752981.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336180355752981.txt.WCRY
                                                              • Size 88KB
                                                              • SHA256 2b496f7aa36f514d8cacf0eea0c0dd949b85b0e861a34cd18d259769cf92b9c9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AppCache134336180655651925.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336180655651925.txt.WCRY
                                                              • Size 88KB
                                                              • SHA256 d8240d19fa5bc644f72a60833725c911d9160db5031dd52c08aa87450d10e110
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SettingsCache.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt.WCRY
                                                              • Size 670KB
                                                              • SHA256 65d6e6cf8470a9683952a6e64932408fa597ecb58cd2a272457ae313ec1be14f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              0.WCRYT

                                                              • Path C:\Users\Admin\AppData\Local\Temp\0.WCRYT
                                                              • Size 5B
                                                              • SHA256 8e1e6a3d56796a245d0c7b0849548932fee803bbdb03f6e289495830e017f14c
                                                              • MD5 SHA1 SHA512

                                                              1.WCRYT

                                                              • Path C:\Users\Admin\AppData\Local\Temp\1.WCRYT
                                                              • Size 5B
                                                              • SHA256 d65b6a3bf11a27a1ced1f7e98082246e40cf01289fd47fe4a5ed46c221f2f73f
                                                              • MD5 SHA1 SHA512

                                                              1.WCRYT

                                                              • Path C:\Users\Admin\AppData\Local\Temp\1.WCRYT
                                                              • Size 85KB
                                                              • SHA256 5a791eab4e39482d4959f7524b07afa5fbd20c77f6bfb78032ee42a6586fb940
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              15.WCRYT

                                                              • Path C:\Users\Admin\AppData\Local\Temp\15.WCRYT
                                                              • Size 1.0MB
                                                              • SHA256 ecfa790517141024a88c66ee03adc5c8db8dd99c0bc84052037a242fb7696b93
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              16.WCRYT

                                                              • Path C:\Users\Admin\AppData\Local\Temp\16.WCRYT
                                                              • Size 64KB
                                                              • SHA256 2b458c48dd20870bb817ae588b91d422cfa27e4610175348e98cdabf7dbfe76e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              18e190413af045db88dfbd29609eb877.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\18e190413af045db88dfbd29609eb877.db.WCRY
                                                              • Size 24KB
                                                              • SHA256 a83d1a04a1b327eaabb5c340ec8cba7065e089bb950c47630fb8afeb6081046b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              6.WCRYT

                                                              • Path C:\Users\Admin\AppData\Local\Temp\6.WCRYT
                                                              • Size 88KB
                                                              • SHA256 136519afa92cf4671020f3ee33ecba057942e989ec2e2a48b60aaf57dcb9ee16
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              8.WCRYT

                                                              • Path C:\Users\Admin\AppData\Local\Temp\8.WCRYT
                                                              • Size 53KB
                                                              • SHA256 6a1e4e2f85a101ffb1fe9f46fdf4e81a9ecfb0435488730aa35f8f9a1a249892
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              BroadcastMsg_1789140184.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\BroadcastMsg_1789140184.txt.WCRY
                                                              • Size 280B
                                                              • SHA256 0894064d0cbf7927945b3081afd5d31eb88fcd81c7f01d12c6039d807b126cb9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.WCRY
                                                              • Size 1KB
                                                              • SHA256 a78cba7041f5a6772c63633f728703c9b1a811af6447d297ffb74eadbd29ec27
                                                              • MD5 SHA1 SHA512 TLSH

                                                              dd_vcredistMSI2941.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI2941.txt.WCRY
                                                              • Size 427KB
                                                              • SHA256 88bca105f5824accf6fcaf018a49b6c2e2161d4aebb1e32fd0b947f166cccb74
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              dd_vcredistMSI2968.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI2968.txt.WCRY
                                                              • Size 414KB
                                                              • SHA256 d9cb1262d1ccf26379ed9e9bbb68b49b907de7ce05ed6016addc91f6fcc73624
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              dd_vcredistUI2941.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI2941.txt.WCRY
                                                              • Size 11KB
                                                              • SHA256 32f2f4b9aec033a04d83ac886e990808d9cf1b4e799fd105382af56a3e38737c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              dd_vcredistUI2968.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI2968.txt.WCRY
                                                              • Size 11KB
                                                              • SHA256 92bdba987134540caf92acc5aa000275e6ddc915eb43bbeccb671e97891b8c7d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              mapping.csv.WCRY

                                                              • Path C:\Users\Admin\AppData\Local\Temp\mapping.csv.WCRY
                                                              • Size 121KB
                                                              • SHA256 7de4fa5381397a1cabe4e103aefdd4bf260cce7875378a5ac07f4c3e5c37946a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompleteGet.dotm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\BackupPing\CompleteGet.dotm.WCRY
                                                              • Size 1.1MB
                                                              • SHA256 78c457bc9f1d4f1a9b26f241c54566ac3b513ea0954eaaeb0102a8c8cb5b398e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SetUnlock.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\BackupPing\SetUnlock.png.WCRY
                                                              • Size 2.2MB
                                                              • SHA256 3452d3ff1b7a9611be6a84139a055b9d106ec093e8a9a8a3b430ebcf195a4316
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              TestMove.wma.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\BackupPing\TestMove.wma.WCRY
                                                              • Size 669KB
                                                              • SHA256 dedfaa5c3a2f878fd9a37c8d89d4ab5ea2bf45f4cf85f7f52a49b14f7f77e786
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              TestRead.mpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\BackupPing\TestRead.mpg.WCRY
                                                              • Size 585KB
                                                              • SHA256 aacc6378b56aa6ad7f14d547eabadc99521ac3aca3af06a9849639935af27703
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UninstallClear.bmp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\BackupPing\UninstallClear.bmp.WCRY
                                                              • Size 1.6MB
                                                              • SHA256 409f4e604d3c4ff715f848c4a6f082addf1424a02f2479c9ec472046e35f58f9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnlockUninstall.m3u.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\BackupPing\UnlockUninstall.m3u.WCRY
                                                              • Size 836KB
                                                              • SHA256 2c24fd2d94e4e6df4d261a2b6863069d62b4dd5755fbc8e8f84ea9d0d9322075
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnregisterConvertFrom.tif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\BackupPing\UnregisterConvertFrom.tif.WCRY
                                                              • Size 919KB
                                                              • SHA256 a9f88ff60edc12e3e975061e5f8562f0279da05c9da1141b65fb5f5c3e96e42f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EditClose.ppsx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\EditClose.ppsx.WCRY
                                                              • Size 556KB
                                                              • SHA256 33c525e67244fb6c9b7c2d9d65c013a9500f54ae96b480a378821384781c67c0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EnableSet.rtf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\EnableSet.rtf.WCRY
                                                              • Size 248KB
                                                              • SHA256 831282bbc44c7484ec7020cacc19cfe0d5aba05b0b0af369deff63663cd8eca6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FindCopy.mid.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\FindCopy.mid.WCRY
                                                              • Size 234KB
                                                              • SHA256 3e2467b34bdfbb3c5d7c964e947e2e22dca91b84ad542c2baefbf1b5b9a40407
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FormatExit.cmd.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\FormatExit.cmd.WCRY
                                                              • Size 355KB
                                                              • SHA256 9498f3d266363bcfaedc82e906dee54d5eb6a00bcc73bb7bc83763da1b13196f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MountInitialize.mid.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\MountInitialize.mid.WCRY
                                                              • Size 515KB
                                                              • SHA256 0f9c1c8f0b436b1984cdfc0f326199c04195b20c0c8e6c3a3bd8bef222554945
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PingCopy.dot.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\PingCopy.dot.WCRY
                                                              • Size 274KB
                                                              • SHA256 655d375d6dc2b5dee8b18ecaaad071b63ae279f37742eb56b40ab4fea90d6c68
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PushDeny.xlsm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\PushDeny.xlsm.WCRY
                                                              • Size 381KB
                                                              • SHA256 7e573be86cd06f639b8456780ca34a6cdbba2527afb5a9ed354ca7e7d806fabd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestPublish.zip.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\RequestPublish.zip.WCRY
                                                              • Size 408KB
                                                              • SHA256 deba4e22645f60e96f9a2f5b9dd03f37bcff5dc8cd39fe819203dfe1a2fc541c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SyncDeny.vsdx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\SyncDeny.vsdx.WCRY
                                                              • Size 395KB
                                                              • SHA256 007418796bd7c3170501c7f5f387418f5fcb22f0fc4d134453fbbf3d5fc09e9f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UndoCheckpoint.wmv.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\UndoCheckpoint.wmv.WCRY
                                                              • Size 422KB
                                                              • SHA256 f85cfd814a2f1b5ac1f612fe47c73f19ef49a3062253cba01ccca86807462c83
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UndoCopy.xls.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\UndoCopy.xls.WCRY
                                                              • Size 221KB
                                                              • SHA256 062daf004f9604b8e6c7666c856edcf915d674aded4d8b2742699d1f1f574165
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UndoGet.xlsx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\UndoGet.xlsx.WCRY
                                                              • Size 194KB
                                                              • SHA256 e166ef61f3afc6f139a951ef0fc4ff1d23e690840f782fc0a3f677ac955b976a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnpublishNew.wmv.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\UnpublishNew.wmv.WCRY
                                                              • Size 475KB
                                                              • SHA256 9e9fcfc5408b996eb17a3a2aac0c49ffcea3bde6475a7bfed35dd550f62d5521
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WriteRestore.xltm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareOptimize\WriteRestore.xltm.WCRY
                                                              • Size 489KB
                                                              • SHA256 455f16bda64df94702a11fe395b05de59a81c03ec7cd75221b0e87e27d9d27bd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompareNew.bat.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareUnpublish\CompareNew.bat.WCRY
                                                              • Size 498KB
                                                              • SHA256 4eb4a8cdd7fae3afba2123eca0b806b97146cc24020aab928ee39fabc3dbacc4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertProtect.mov.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareUnpublish\ConvertProtect.mov.WCRY
                                                              • Size 398KB
                                                              • SHA256 013ef29c39cf2730a7f299a9871e2353d3db2d99add28ebab52587e85db3ee78
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EnableConvertTo.jpeg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareUnpublish\EnableConvertTo.jpeg.WCRY
                                                              • Size 298KB
                                                              • SHA256 d88f886c40dc393ca31f86e9812248ac804e424af5a5040c7b82ab289592825d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FindReceive.mpeg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareUnpublish\FindReceive.mpeg.WCRY
                                                              • Size 448KB
                                                              • SHA256 bf5dd1bb3ed355798b4a65d975490b641c1397847bac7d4e707725719b9020e7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SearchOut.vb.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareUnpublish\SearchOut.vb.WCRY
                                                              • Size 647KB
                                                              • SHA256 12f2299e791e09776cf423775efe1bf24a22af270f26e49058191fb6ba9fdde3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              TestMount.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\CompareUnpublish\TestMount.js.WCRY
                                                              • Size 796KB
                                                              • SHA256 4b5a76f2db4bf8a3e235ae921da7c29edaf7ac0e53aac3ee5d00b730e2b5c07a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ClearApprove.rtf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\ClearApprove.rtf.WCRY
                                                              • Size 303KB
                                                              • SHA256 b2129de0e12938bb15b88b5c526ba174cf5b5ad5603868e39faa2167242c29c7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FindRestart.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\FindRestart.txt.WCRY
                                                              • Size 657KB
                                                              • SHA256 4c64465defeca546b7e9e9010909d0f79f4057913f68fc019bac77abb7fb4db1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FormatEnter.odt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\FormatEnter.odt.WCRY
                                                              • Size 341KB
                                                              • SHA256 0d01bfca322e450cea1dd545ebcca556c07ac80e71cd339bd4a83d6400df6144
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              GroupPop.pdf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\GroupPop.pdf.WCRY
                                                              • Size 442KB
                                                              • SHA256 8e476c4b25b916eca8ac9ef1a57b9534d8f05b87103678a82b272474caf3704d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ImportResolve.zip.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\ImportResolve.zip.WCRY
                                                              • Size 632KB
                                                              • SHA256 916969faf9e992c1ef3f1f36bef9e12633fe6745c8b855534ee55174edfe97e5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              InitializeMerge.dotx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\InitializeMerge.dotx.WCRY
                                                              • Size 898KB
                                                              • SHA256 11dbc2ee9ed6bbc0ae0a9110481498bac1f29bf8844b1d2d4317fb3c25d57885
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              LimitPop.mp3.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\LimitPop.mp3.WCRY
                                                              • Size 556KB
                                                              • SHA256 cdf243c97ddde2f3aed5f0ffdc08342433b303d833a954feb7fd4103fbb35e27
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OutRedo.xlt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\OutRedo.xlt.WCRY
                                                              • Size 354KB
                                                              • SHA256 e81f30cad80eca1e6a814a5c5e9953a3e00ab287889687ca7e61db0dbb60e6b5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PublishStart.asf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\PublishStart.asf.WCRY
                                                              • Size 468KB
                                                              • SHA256 cfdc3efff4f00ae33a70dce757db8078ba57529a270dffe876f4222d86e483cb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RestartSet.sql.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\RestartSet.sql.WCRY
                                                              • Size 253KB
                                                              • SHA256 805f8f1f9ace62bf4e133e6e810c1e308aeaa72e112e196d498f3c828afaf8cd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SearchReset.sql.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\SearchReset.sql.WCRY
                                                              • Size 240KB
                                                              • SHA256 73c46dc72b316e9d3dc5f177309a15c0fe56fd34cae1fc6c89312d37ba30a120
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SelectLock.tiff.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\SelectLock.tiff.WCRY
                                                              • Size 518KB
                                                              • SHA256 203594cd63693a110b95bfc44ab15c5ebf53b84678b9baf0fd874368da279d67
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SendAssert.rar.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\SendAssert.rar.WCRY
                                                              • Size 569KB
                                                              • SHA256 034d1db592bee475697b9882f7f64062dff57734a8a75d2082b1f775640e6de0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SkipRedo.bmp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertConfirm\SkipRedo.bmp.WCRY
                                                              • Size 505KB
                                                              • SHA256 9cfbd89f92ef85560fff2547a1ba1ba11fc7b1c4ad0d3d32bc6983b0ddafd6ef
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AssertAdd.docx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\AssertAdd.docx.WCRY
                                                              • Size 210KB
                                                              • SHA256 ce15fb9f21e66d1866546e31c21139fb0594935b7f080f298bf854eae14de019
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              BackupUnblock.sql.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\BackupUnblock.sql.WCRY
                                                              • Size 399KB
                                                              • SHA256 f7ddf1a4dc5e0faf18e56033a7a219b7c625f86f7127ef039a9257219ad9879a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ClearConvertTo.pptx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\ClearConvertTo.pptx.WCRY
                                                              • Size 300KB
                                                              • SHA256 3e0b6f8bff04c1ea2bc9b0570c213af8b262c9a0ad7e955de1154f0b31d2c618
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CopyResume.tif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\CopyResume.tif.WCRY
                                                              • Size 177KB
                                                              • SHA256 fc45b0d795ae056191141cd94076b4c431609ff9638badec32c7efb1157fc64e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              HideDisconnect.pps.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\HideDisconnect.pps.WCRY
                                                              • Size 292KB
                                                              • SHA256 cebca2d5ee7b5a82f196913a6f885dbcb08858fe16d0b0f17c4e3a3942bdf795
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ImportResize.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\ImportResize.png.WCRY
                                                              • Size 193KB
                                                              • SHA256 95553d8e73bb379c54f349e83c644ed6809753ca88ccfff4cf270dbc79d6548e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              InstallTest.mov.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\InstallTest.mov.WCRY
                                                              • Size 160KB
                                                              • SHA256 0f2779c2495ec1ba281a579eb9d0a94c6d900de14af403708364302d68ee008c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              JoinRestore.odp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\JoinRestore.odp.WCRY
                                                              • Size 374KB
                                                              • SHA256 9ad953b680bc29833dde554a76316449318af51c597b9089e0dcc873a13cafe3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MergeSubmit.wma.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\MergeSubmit.wma.WCRY
                                                              • Size 341KB
                                                              • SHA256 13199771671ba76d799c1c55a2f84602472c1c721fea94cfd4fc5050104d8918
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PingUnprotect.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\PingUnprotect.png.WCRY
                                                              • Size 308KB
                                                              • SHA256 f68ac36cfc168a42d439ec28ac26d4211e740b367a6919e452f87d6045728253
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ProtectWrite.xlsm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\ProtectWrite.xlsm.WCRY
                                                              • Size 185KB
                                                              • SHA256 ef8f62c0b79afdc5cac445221d422cd37afa570149b49231c98c3fa2e84b0d5a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestOut.zip.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\RequestOut.zip.WCRY
                                                              • Size 234KB
                                                              • SHA256 bd3dc5872aefd0697195ce89058af61e6d9e84590b46a94c03b5e2ebe8ae3765
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestRegister.php.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\RequestRegister.php.WCRY
                                                              • Size 382KB
                                                              • SHA256 646491de6d02b9f84e69130f9c3e79fb7baa6c9de91afe26901f33fadcbdfcfa
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestUnblock.pptm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\RequestUnblock.pptm.WCRY
                                                              • Size 284KB
                                                              • SHA256 a685fb393a4173075272e92f07f0311d1f39fadef9d461da291dd5a4e6209569
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ResumeEnter.zip.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\ResumeEnter.zip.WCRY
                                                              • Size 432KB
                                                              • SHA256 ce0c5a4f83ced1dd04306675c4cfa2b0272b086bef6721100b128deb01a5ec80
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RevokeGrant.dot.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\RevokeGrant.dot.WCRY
                                                              • Size 333KB
                                                              • SHA256 4e7539cf1565df7949eb3976ae2c81e0e80eac9569c7de865b2dd794d1f7dcd3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SearchInitialize.mpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\SearchInitialize.mpg.WCRY
                                                              • Size 325KB
                                                              • SHA256 67c612cd2e0936ed5aacddd4fd33f044a9275b3af50f178b752eb45007cca6ce
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SubmitCompare.asf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\SubmitCompare.asf.WCRY
                                                              • Size 226KB
                                                              • SHA256 3aec7a7d3adde948ee76c280aea61f1cffb5eaf97544cf79709004c99c8d669a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              TestOpen.bmp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\TestOpen.bmp.WCRY
                                                              • Size 251KB
                                                              • SHA256 99a49c38c2d542196b6fe3d82ed97f555d6620f0057b0cf4cdfe3219caf28599
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UninstallDismount.raw.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ConvertFromUpdate\UninstallDismount.raw.WCRY
                                                              • Size 440KB
                                                              • SHA256 50388a923080599ff2fe234abeb6b4a7d509e061aa450764dc722ff20271cb6d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MergeCheckpoint.ppsm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MergeCheckpoint.ppsm.WCRY
                                                              • Size 444KB
                                                              • SHA256 11a868ef9102a4bf01e89f6de5045e4d87019a24457e3541d81be23932160c4a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Normal.dotm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WCRY
                                                              • Size 18KB
                                                              • SHA256 1b1bb434ab40813cfc6acb407eaf9174eda85dddf3f37d727f5c443680fbb3ee
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CachedImage_1920_1080_POS4.jpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles\CachedImage_1920_1080_POS4.jpg.WCRY
                                                              • Size 76KB
                                                              • SHA256 fe4c09b2c320bdd64234d761b0deb22d9c1e2aed3610b512d21edc2b9d6e3b50
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              BlockRepair.xlsm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MountNew\BlockRepair.xlsm.WCRY
                                                              • Size 737KB
                                                              • SHA256 ec1fb1a26837027b8cd85a46cc41178e373cf82ecf4b44f0c296f1333977e5d6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertToNew.ps1.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MountNew\ConvertToNew.ps1.WCRY
                                                              • Size 901KB
                                                              • SHA256 09d0282926f585e97e68c3284e1b53eaf775e2cfb848109ecaeb453e7b73b0c3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              GroupSplit.dotm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MountNew\GroupSplit.dotm.WCRY
                                                              • Size 409KB
                                                              • SHA256 ace479a096e5086615ed04cd5d923a8b7370a6a1e3ff0ad6f3fb71c28bd8be82
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OptimizeTest.xltx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MountNew\OptimizeTest.xltx.WCRY
                                                              • Size 1.1MB
                                                              • SHA256 654b823733e04670f49099e2e16d4ad98db7d9f843b69fb913e5e47a338868d5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OutOptimize.ods.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MountNew\OutOptimize.ods.WCRY
                                                              • Size 614KB
                                                              • SHA256 03963b81b3ab5a153c76bdb616cbb3e928d28842f982a1f38859caa588e9a9aa
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              StopUnlock.odp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MountNew\StopUnlock.odp.WCRY
                                                              • Size 573KB
                                                              • SHA256 1d45a1f5eaeb878f761a8074c93b2d17ed38a97136dc69861cbba13eb2526790
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnpublishResolve.php.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\MountNew\UnpublishResolve.php.WCRY
                                                              • Size 655KB
                                                              • SHA256 0abeb2966bdd3441b34a8c57f9fa9a62d90bec009586146fb6c858e54d2a7742
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              prefs.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\ng7xsgm0.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WCRY
                                                              • Size 776B
                                                              • SHA256 3d9164daccc714994e514aeeef9b5f21d8f45d4c89b6649c1ed9c8ccbc1c1668
                                                              • MD5 SHA1 SHA512 TLSH

                                                              cert9.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\cert9.db.WCRY
                                                              • Size 224KB
                                                              • SHA256 e51b9e0a35e6c6c3ab38acd673a7f4264a27fe0870d052c81a900835cf723d0d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              key4.db.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\key4.db.WCRY
                                                              • Size 288KB
                                                              • SHA256 17b79aa05c501a5b7de7fb09e6b448336e51ace362eff68014e51e2a6647e9f6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              pkcs11.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\pkcs11.txt.WCRY
                                                              • Size 808B
                                                              • SHA256 cf21a262f704e58fc766ae2ef485196c0f01b7594c0d3e66102fb29d55fb21e0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              prefs.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0inymrgq.default-release\prefs.js.WCRY
                                                              • Size 7KB
                                                              • SHA256 4f4aedf5d7beef3a74a8d5dec8dfe4fb28d2c5362d0966eaef4100b4f5f69d4c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              user.js.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\xynr4oz2.Admin\user.js.WCRY
                                                              • Size 536B
                                                              • SHA256 8cad3f0809acf30494c017e389cc3086ae72874b3ac45add7cd2d55ebc575291
                                                              • MD5 SHA1 SHA512 TLSH

                                                              OpenSuspend.mp4.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\OpenSuspend.mp4.WCRY
                                                              • Size 352KB
                                                              • SHA256 96ff9e21ae10f56fdf1a39dcce85cc899a5b2dc6c565712821ef90501bdb100d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ClearResize.mpeg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\ClearResize.mpeg.WCRY
                                                              • Size 482KB
                                                              • SHA256 0c23c6325bc53a80930708ad6e514de04a0e5985e507e081f53a626b1a61db3d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompareRestore.mov.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\CompareRestore.mov.WCRY
                                                              • Size 389KB
                                                              • SHA256 8fa2db61e570ae00d3d1bd7164800a751b07b2604d92822f680f97598f835ee5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertFromFormat.tiff.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\ConvertFromFormat.tiff.WCRY
                                                              • Size 794KB
                                                              • SHA256 fdc66012b75dd60c5f1209e87ee0ac48bd752b7c30c013dbe667a718f629fb9b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              DisconnectWait.bmp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\DisconnectWait.bmp.WCRY
                                                              • Size 545KB
                                                              • SHA256 a9288c4ca5cb6472b99b5a36492a207a32734911f7c384470db4520ddc2d817b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EnterRepair.pot.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\EnterRepair.pot.WCRY
                                                              • Size 856KB
                                                              • SHA256 8517a0fdbb978fbacd3432571d70b841871d597175dd36913c64deff66cd9304
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FormatSkip.xlt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\FormatSkip.xlt.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 46592c181c17dfcdd3ff4756e6d5294c8ebaa9bc113caaba9c3d4874ece9e671
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RestartBlock.bmp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\RestartBlock.bmp.WCRY
                                                              • Size 1.1MB
                                                              • SHA256 5d127a97b628c235380b98aebb5ddaac731ac20096b9dfcaac614fca1678b7fe
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SaveShow.cmd.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\SaveShow.cmd.WCRY
                                                              • Size 576KB
                                                              • SHA256 a638e415066c7b3dbbeb254d5665df104bbab830054397808351c90b9fcd19cc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnblockFormat.mpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\UnblockFormat.mpg.WCRY
                                                              • Size 607KB
                                                              • SHA256 7c4f2ff62f77ddd143d5da30f1c6136211853cb1d6e1ab8b1fde8bb39983730d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnlockRestart.mp3.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PingPush\UnlockRestart.mp3.WCRY
                                                              • Size 949KB
                                                              • SHA256 44ad384eab82dfbf8685b12be680c1bed40dbea18f8dd2a9c4e5128949a39867
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PublishRegister.pps.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\PublishRegister.pps.WCRY
                                                              • Size 170KB
                                                              • SHA256 64a1230b935d5519658624982d2364c93874d26bbc512069802fa43e7bcadb45
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompareSwitch.iso.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\CompareSwitch.iso.WCRY
                                                              • Size 470KB
                                                              • SHA256 295ad5f656d0a711162da77838c927f8a6009812cd826e154a490016c3e0e858
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompareUnregister.docx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\CompareUnregister.docx.WCRY
                                                              • Size 392KB
                                                              • SHA256 46978626aaed0373716bc68f4b974fed88321ba123690dd4f06d161a6cf1964a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConfirmSet.asf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\ConfirmSet.asf.WCRY
                                                              • Size 725KB
                                                              • SHA256 53670b1c4b12c09caa741e1b2b1d7dff29175f9de43d196fe687d1d51e01bf86
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CopyAssert.mpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\CopyAssert.mpg.WCRY
                                                              • Size 568KB
                                                              • SHA256 840faf7dff2ba96b7ecd85a0e254046e7710644acba89c3753b780532b6f5ff5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ExpandExit.xltx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\ExpandExit.xltx.WCRY
                                                              • Size 783KB
                                                              • SHA256 c074a313f170691324250ef1d2865345e35f55e5aee145ddf3452951980123e1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ExportDisable.cmd.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\ExportDisable.cmd.WCRY
                                                              • Size 431KB
                                                              • SHA256 bd4e6ac103203b7394d081bae2efa302ccf6d9ac485577c2fb58e6bfbfe593b0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              GroupCopy.cmd.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\GroupCopy.cmd.WCRY
                                                              • Size 274KB
                                                              • SHA256 23ac5d65c2d4654ea0a43068a140a5b4cf4ee9feb7d77a10bd8c1834c10bf817
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              InstallApprove.jpeg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\InstallApprove.jpeg.WCRY
                                                              • Size 411KB
                                                              • SHA256 78cea33e38ed1562351351c800ae107eb83ad8beb8dda458ffa748c2b3ae110b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MoveInitialize.potx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\MoveInitialize.potx.WCRY
                                                              • Size 646KB
                                                              • SHA256 3aec7063def10629aa4a7592736dbeadc14301ea62f24a7c445de5988a5b586d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OptimizeAssert.mp3.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\OptimizeAssert.mp3.WCRY
                                                              • Size 607KB
                                                              • SHA256 a2ff53e0096f9544c1894b1977004808a0591ac4aa521397d1ae254a7896935b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RestoreCompare.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\RestoreCompare.txt.WCRY
                                                              • Size 333KB
                                                              • SHA256 7edfa4cb2c15182e3653a1111e4694c05353ede1a249d08bf441eb191c8a1808
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RevokeFormat.mp3.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\RevokeFormat.mp3.WCRY
                                                              • Size 509KB
                                                              • SHA256 29d16757c22bd5ba87631424184075e274c8323984c92be438ef0b24defb7f7e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SplitWrite.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\SplitWrite.png.WCRY
                                                              • Size 666KB
                                                              • SHA256 6751769779b746053de084d63330a248aeca46a313a986ac9b136d414208e96e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnblockSync.dwg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\UnblockSync.dwg.WCRY
                                                              • Size 490KB
                                                              • SHA256 cda4c1b67a390844dcf9d1b0ad2b6abdee4f5c470886f92f24c860025921f2f1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnregisterMount.sql.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ReceiveConnect\UnregisterMount.sql.WCRY
                                                              • Size 313KB
                                                              • SHA256 3c4dc987628d941b69a2e8e81c058181ed595eb82b27be0674426da4cfd4e7ed
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CopyRestore.tif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\CopyRestore.tif.WCRY
                                                              • Size 847KB
                                                              • SHA256 d015481ff6bc55e0409263c3a06ca2b2358a746759b7d82be76e86d2ff79b148
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EnableStop.rtf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\EnableStop.rtf.WCRY
                                                              • Size 656KB
                                                              • SHA256 364b522e872b01bc8164e8c5bf3a5fb28cec19a1af8814a9462204d0633e9913
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ExportUnlock.mov.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\ExportUnlock.mov.WCRY
                                                              • Size 537KB
                                                              • SHA256 59ed97b14618af360b5884807d35fb40f120b3a162300e851c8c7f24c48ebb1c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              InvokeConvertTo.gif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\InvokeConvertTo.gif.WCRY
                                                              • Size 800KB
                                                              • SHA256 abbd7a4e8dfb640311c9627afd214c6447c985cd19225abdced65212c0657a28
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              JoinTest.mpeg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\JoinTest.mpeg.WCRY
                                                              • Size 1.2MB
                                                              • SHA256 e286afc6cdb39bbd6521841479b0babf4927138739d00cdb36c45f0beef9f267
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ProtectSend.pptx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\ProtectSend.pptx.WCRY
                                                              • Size 704KB
                                                              • SHA256 b6938935cb9e53151a71167cbc21972bb2910252e4d430d1614f728c1938edef
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RegisterLock.mp4.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\RegisterLock.mp4.WCRY
                                                              • Size 418KB
                                                              • SHA256 1b378812a5a1cb7c48075628837f9ee5a68544fe0f940ee8db91b38d5f04a23f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              StartGrant.odp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\StartGrant.odp.WCRY
                                                              • Size 561KB
                                                              • SHA256 c9274d4124c5c63f77743e3103f5daad4ae9bfe2b424ccf81e800fca50dd7df9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              TraceUnpublish.docx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveInvoke\TraceUnpublish.docx.WCRY
                                                              • Size 919KB
                                                              • SHA256 1ce1351a9acce6821ddc1449c4d794e4a96924369ebb95f69da5fdc02d6d808e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ApproveConnect.ps1.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\ApproveConnect.ps1.WCRY
                                                              • Size 1.3MB
                                                              • SHA256 cd5608a2624721ebc9f0c5382fe0837d689041958598ebe589182eb89a248048
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConnectImport.3g2.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\ConnectImport.3g2.WCRY
                                                              • Size 965KB
                                                              • SHA256 2912f74ada064c8bc10b478d3ca28dc4b16803508373bf621adb894fd8cc3f1d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              DebugUnblock.odt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\DebugUnblock.odt.WCRY
                                                              • Size 1.1MB
                                                              • SHA256 ee103b215513a9cbb0b55cdbd65705ca8aacce006f21a7025c231d197272d019
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              JoinRepair.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\JoinRepair.txt.WCRY
                                                              • Size 2.1MB
                                                              • SHA256 b18ebbfffb99f9a0a4f7bdfca7f256e08fa32c4689875b29cbee1ad58b6911e0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MoveExpand.mp4.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\MoveExpand.mp4.WCRY
                                                              • Size 1.2MB
                                                              • SHA256 59b65e96b7c91acc1d89466211e1b580020fac67c1db6f9fbca449a32a80e815
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ShowTest.vb.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\ShowTest.vb.WCRY
                                                              • Size 558KB
                                                              • SHA256 f1dffbfba080d7bfbf38d17377d693fba52cbc6a558b0780ae81b25d9164df9b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SplitEdit.avi.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\SplitEdit.avi.WCRY
                                                              • Size 863KB
                                                              • SHA256 fc5028ccc0f9059636f2f5add6f3d64a12a0a499e956455ff0727a2028276389
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SplitOptimize.tif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\SplitOptimize.tif.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 5206bbcd933b9c919ab9746abe733a42930456faf4c30764c15701a7a6532a9b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnpublishShow.docm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RemoveSave\UnpublishShow.docm.WCRY
                                                              • Size 761KB
                                                              • SHA256 8790747562bdce141d0db68554594198bfa1641799311ae03b912eb8189f09d3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertFromFormat.wmv.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\ConvertFromFormat.wmv.WCRY
                                                              • Size 359KB
                                                              • SHA256 af11c5f4dd55077d3999074c46e3701b6a4f12f8625598224e5b5f7e90982a12
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ExpandConnect.mpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\ExpandConnect.mpg.WCRY
                                                              • Size 254KB
                                                              • SHA256 b0dfbda07913c443da5ee9f15b139d33dfcab8a83534bb90142bf9ba93485e5f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FormatAdd.mpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\FormatAdd.mpg.WCRY
                                                              • Size 264KB
                                                              • SHA256 ee8e8d3df8b24aabe2ce319640f661d7351ac88535c1ee02e28567745871e47c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MoveDeny.ppsx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\MoveDeny.ppsx.WCRY
                                                              • Size 244KB
                                                              • SHA256 9802061323128790a287f5fb76690014cc8d5e8c66b50eba021115631cff5142
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ReceiveResolve.xlt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\ReceiveResolve.xlt.WCRY
                                                              • Size 196KB
                                                              • SHA256 8b048c6044bb30ecac9bcc0dc5510653de80002f7bf7a0b508f9c2ae906d62c9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestUse.jpeg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\RequestUse.jpeg.WCRY
                                                              • Size 350KB
                                                              • SHA256 c82b7adeb5c7b8e5a94404d77232ad1ac71889a784ebfe8e70f5eedb2df23ea4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RevokeMeasure.m3u.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\RevokeMeasure.m3u.WCRY
                                                              • Size 321KB
                                                              • SHA256 32569f251064fd0f4d388a13bcbc16fd51ae7ebfc6f81f17b0e4c8541ec1fa9e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SubmitGroup.tiff.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\SubmitGroup.tiff.WCRY
                                                              • Size 216KB
                                                              • SHA256 d74ab60ef04fad073a886ebd65fe2525019d7ed0417c278c6abc4c22ebb5ef19
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SyncCheckpoint.dwg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\SyncCheckpoint.dwg.WCRY
                                                              • Size 168KB
                                                              • SHA256 aa2c2b43fd38f7efc0914b788daab8869125cea411a20edfd7f25a45abc46fc3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnblockResize.bat.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\UnblockResize.bat.WCRY
                                                              • Size 388KB
                                                              • SHA256 7839f6a0896e6f6ee50dcfb7c9e51cc4c1f1182bc9305e90a1ff8d7b7b49ae24
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UndoStep.mpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\UndoStep.mpg.WCRY
                                                              • Size 417KB
                                                              • SHA256 0e76e912c570b706a3f398ddb50231d1a6c8576602a00aa637358bbc545167a2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnlockMount.zip.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\UnlockMount.zip.WCRY
                                                              • Size 292KB
                                                              • SHA256 d484ba7d47298aae6e8fe7831ee0496f6d05b4575e4abb7883794f1f7e4a567f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnlockSend.png.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\UnlockSend.png.WCRY
                                                              • Size 187KB
                                                              • SHA256 4838901c18193ce41d08dc2aeaf4f0bcac42e18ae8d74b10d91ec33dc2408175
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WatchMeasure.ppsx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameMerge\WatchMeasure.ppsx.WCRY
                                                              • Size 585KB
                                                              • SHA256 8eef624963ad667c2f900b75bcd8a3eabd64f3a2393cb4920eb27626eb2fe323
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RenameTrace.jpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\RenameTrace.jpg.WCRY
                                                              • Size 239KB
                                                              • SHA256 28397092190ba126dfe39b2f435009381adf476dfd36d7d437e967701867212f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertFromUndo.zip.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ResolveComplete\ConvertFromUndo.zip.WCRY
                                                              • Size 992KB
                                                              • SHA256 9ef4d63d6f46114329c4e0e7579b82b125c034e01d6ead4bdf7f087a7ae88290
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CopyUnregister.dotm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\ResolveComplete\CopyUnregister.dotm.WCRY
                                                              • Size 904KB
                                                              • SHA256 541c4453a065b94a8252190c7725d21da13d4e5b347942bc29dd0d4ecd4744b4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ApproveRegister.zip.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\ApproveRegister.zip.WCRY
                                                              • Size 408KB
                                                              • SHA256 4f6e1611a3233276c4f4b9226a5a34e7573a97c313c01e92462e142bc49fe2a3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertJoin.rtf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\ConvertJoin.rtf.WCRY
                                                              • Size 391KB
                                                              • SHA256 4e262d3c1246012e5d4f06d71c9298fb9bd59fb8cc0f2a645473e68da9577035
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              GrantImport.ppsm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\GrantImport.ppsm.WCRY
                                                              • Size 782KB
                                                              • SHA256 1fea51c5b34352ba5efbba1c6b6616611d71690fbc4912a761c62686503587f1
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ImportDeny.raw.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\ImportDeny.raw.WCRY
                                                              • Size 357KB
                                                              • SHA256 e8058cc45179380976f8b91a58d58f9d6a56614327a145624c147e9e473e3d60
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RenameCheckpoint.jpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\RenameCheckpoint.jpg.WCRY
                                                              • Size 425KB
                                                              • SHA256 c2a809e044bd0ee665f88f77c5f5635a63c5a5591a8ab4bf3bfcb61afc491d48
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SkipSwitch.pps.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\SkipSwitch.pps.WCRY
                                                              • Size 765KB
                                                              • SHA256 d12713c6040a00c485ffbeb9176419211b95ecbc98e88b4603eb40cb53def86f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SwitchSkip.svg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\SwitchSkip.svg.WCRY
                                                              • Size 731KB
                                                              • SHA256 52cd489dcdbccdf25520c0a37b118a64962341eebc8701d20e400ce79e59ec0b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnprotectRepair.jpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\UnprotectRepair.jpg.WCRY
                                                              • Size 578KB
                                                              • SHA256 ffd7d50bd2bb67537ae50c238cd86cb894584a05b05b43f6fbf00c00fa619dc2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WaitUninstall.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\WaitUninstall.txt.WCRY
                                                              • Size 663KB
                                                              • SHA256 f07f401ea2a79507d694856d7cc121e4b136468393042c002e1c601062158526
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WatchDisable.3g2.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\WatchDisable.3g2.WCRY
                                                              • Size 289KB
                                                              • SHA256 ae2a77281e44e999a996e844b4864659a3278ebbdfebb8cf94c81c4db41e65a8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WatchRepair.wmv.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\TraceStop\WatchRepair.wmv.WCRY
                                                              • Size 323KB
                                                              • SHA256 4c05a65c6767fa6eaf7d6d10ec0c41413a6e16f5cae5903b1da0ae94a65aad61
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ClearShow.xls.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\ClearShow.xls.WCRY
                                                              • Size 281KB
                                                              • SHA256 852955c3b3f3925a16a07cf4cfca50ac7bb2ad2c4c1859196e8e9bd2b2152963
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CloseCheckpoint.m3u.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\CloseCheckpoint.m3u.WCRY
                                                              • Size 319KB
                                                              • SHA256 35143a9600bf751dc65c61a26da228eb9ee49e00019051abc34f1acc42f9fedb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompareExpand.wav.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\CompareExpand.wav.WCRY
                                                              • Size 395KB
                                                              • SHA256 31a4f286e5779fbc06ce0f5de342bd9f16b961fc4b205e600058bb8bf3834775
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompleteConvertFrom.rtf.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\CompleteConvertFrom.rtf.WCRY
                                                              • Size 549KB
                                                              • SHA256 1fb650aa52543649285146127f72dd3b980be2aa51a26b5990855ca0b49d8f61
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EnterSet.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\EnterSet.txt.WCRY
                                                              • Size 447KB
                                                              • SHA256 4c89642905648a042e0b67c4739dd0d30e1d96fff0303ba4fc83ae129c5b9c3a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ExpandOpen.pot.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\ExpandOpen.pot.WCRY
                                                              • Size 957KB
                                                              • SHA256 f2b6cf6b39751aa51e5c4042dbbeb13534614c2879c99e409cc9ebd97809bfc6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ImportMount.gif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\ImportMount.gif.WCRY
                                                              • Size 574KB
                                                              • SHA256 f3e1b4705a17b3801c48c49ce3e85d62c99b61a2a74b7736be96b30cb7cc0753
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              InitializeStart.mp3.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\InitializeStart.mp3.WCRY
                                                              • Size 510KB
                                                              • SHA256 741eda64affc9707eaff1c43852a4e6405720f4df552cb2bac0515dd64418b22
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OutDeny.ps1.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\OutDeny.ps1.WCRY
                                                              • Size 587KB
                                                              • SHA256 4c01a097ff7a748ca4aa86d012b74ed8e90e0c5ebe973646e40ab4f7dc295cdc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ReadInvoke.tif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\ReadInvoke.tif.WCRY
                                                              • Size 561KB
                                                              • SHA256 37d5dc03b16622cab5e94c767a26d34ac3405ecdcda8a66a485509e26749587b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RestartApprove.mov.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\RestartApprove.mov.WCRY
                                                              • Size 664KB
                                                              • SHA256 e77fe399ff44feecdba4ccd4b5a00b781f356d5e287e3bd62a431fd03ae72d83
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ResumeInstall.mid.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\ResumeInstall.mid.WCRY
                                                              • Size 268KB
                                                              • SHA256 7dec53b8ba253a4e334a95a71877a51e62019c004f455701e749afe8b15c074c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SearchCopy.bat.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\SearchCopy.bat.WCRY
                                                              • Size 625KB
                                                              • SHA256 d647ce21418abd357e7fd992530fcd3ba15c3a2ae6692a87fbde683c75cee511
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SearchNew.xlsb.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\SearchNew.xlsb.WCRY
                                                              • Size 370KB
                                                              • SHA256 4f8cb28e9a39031d94149bceb7946e6eab4daac7b86a1a1356f34c468182205d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SwitchOpen.xlsx.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\SwitchOpen.xlsx.WCRY
                                                              • Size 485KB
                                                              • SHA256 46afd7d65d35b25403922edbaa6e384301bdb46df8b1b7ef6ee300f9b8b4aa01
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WatchUnpublish.jpeg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UnpublishShow\WatchUnpublish.jpeg.WCRY
                                                              • Size 536KB
                                                              • SHA256 1b85133c7fa3234981ed806af1a50e39c83341e1e0298bbf6d03c4734a94bae8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UseSplit.pot.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\UseSplit.pot.WCRY
                                                              • Size 261KB
                                                              • SHA256 1e867cf732525af47c064324de58fef5cb7ffa855df709d4d7b6b9c9c60b66c7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WatchExport.xltm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchExport.xltm.WCRY
                                                              • Size 330KB
                                                              • SHA256 4575eb7ff01a4a3c240c18cf7b012e404b7313a7e56f19bf9d39d2eca2f319b7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CheckpointReset.raw.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\CheckpointReset.raw.WCRY
                                                              • Size 660KB
                                                              • SHA256 31954497c70c4b61287781559f7558fca05f4d68055f496b38c304162a8b05eb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CheckpointUnprotect.tif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\CheckpointUnprotect.tif.WCRY
                                                              • Size 645KB
                                                              • SHA256 da641ee370517724d542cd34a781054a60ba2d200f91e63fbd88057f2a56f39c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompressStep.docm.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\CompressStep.docm.WCRY
                                                              • Size 405KB
                                                              • SHA256 ffa5e99cb91ca2aed1b7a07d0d660a2600b501e11227f8a5e095de4016c5c920
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PingRestart.tif.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\PingRestart.tif.WCRY
                                                              • Size 390KB
                                                              • SHA256 3be5a1d2120fd14238ac5049ca27e236b17d7e25cafd88fd7e97526ca5ccfdc4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestRename.dot.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\RequestRename.dot.WCRY
                                                              • Size 360KB
                                                              • SHA256 9a102316a86b2c5051447e095bdad66f65137976e2a6f9f42e3c22f9fac77095
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SaveLimit.txt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\SaveLimit.txt.WCRY
                                                              • Size 315KB
                                                              • SHA256 dd62d235228459025d1bd88f6140e25347f1bb7d212cbfbdef1df7df28955b4c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SaveRequest.3gp.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\SaveRequest.3gp.WCRY
                                                              • Size 420KB
                                                              • SHA256 0078f579415d1be07c10b2c6af2a6200c1e7190ba358bde5183fb609d3278130
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SearchCompare.jpg.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\SearchCompare.jpg.WCRY
                                                              • Size 510KB
                                                              • SHA256 cbc9d26daa458cd6538f6704be773e18d06901cabe652dd7bed56cbf4491316b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              TestConfirm.odt.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\TestConfirm.odt.WCRY
                                                              • Size 270KB
                                                              • SHA256 03e949837b451bbd3333627a6ad4a93043dc8d43d0749b19fc87065019d5a948
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnprotectEnable.avi.WCRY

                                                              • Path C:\Users\Admin\AppData\Roaming\WatchRead\UnprotectEnable.avi.WCRY
                                                              • Size 525KB
                                                              • SHA256 5f3dd87c78139095a182dfe4330b085c36592447ed1e7d3e0b8ce9074bf07295
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConnectDebug.ppt.WCRY

                                                              • Path C:\Users\Admin\Desktop\ConnectDebug.ppt.WCRY
                                                              • Size 575KB
                                                              • SHA256 470625eff5cc129046038c77d7ee66fb01f1d9b8e8c22a7fd76b18ce2d5c059b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EditWait.docx.WCRY

                                                              • Path C:\Users\Admin\Desktop\EditWait.docx.WCRY
                                                              • Size 518KB
                                                              • SHA256 88e51a40d4784c15fa4d55e1577ef9bfe658e1571722e41a3a4713aa59ff5dc6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OpenImport.tiff.WCRY

                                                              • Path C:\Users\Admin\Desktop\OpenImport.tiff.WCRY
                                                              • Size 691KB
                                                              • SHA256 5026608cc7929dc8704e10f267af99e6c903c9504d31053fb9da93ebedc26298
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PingRead.pptm.WCRY

                                                              • Path C:\Users\Admin\Desktop\PingRead.pptm.WCRY
                                                              • Size 892KB
                                                              • SHA256 21831f6139b9c49827655f16fe92f1114ea9d29a0b71466cdefe5fe753f537fb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PingUnpublish.jpg.WCRY

                                                              • Path C:\Users\Admin\Desktop\PingUnpublish.jpg.WCRY
                                                              • Size 633KB
                                                              • SHA256 c5df1ad594bd59d527f27349111ebd7b1bfcf5354069ae99bcdaffeaa799d5fe
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ProtectRestore.xltx.WCRY

                                                              • Path C:\Users\Admin\Desktop\ProtectRestore.xltx.WCRY
                                                              • Size 403KB
                                                              • SHA256 23a95df733f986376db0d0fa3eace184f8abfe37be22cacc15459c962a20c31e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RegisterMove.xlt.WCRY

                                                              • Path C:\Users\Admin\Desktop\RegisterMove.xlt.WCRY
                                                              • Size 489KB
                                                              • SHA256 013c3cafe905473752e8077502db10c49e4b6e32e72e659ffb35ce9fc15ad887
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RenameAssert.dotx.WCRY

                                                              • Path C:\Users\Admin\Desktop\RenameAssert.dotx.WCRY
                                                              • Size 1.0MB
                                                              • SHA256 e2075e3f71633c0393eed686f1c05fc089ee4a44152db0773c04fc7263653bd9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RepairUnlock.avi.WCRY

                                                              • Path C:\Users\Admin\Desktop\RepairUnlock.avi.WCRY
                                                              • Size 719KB
                                                              • SHA256 a512bbce0701bea8d822b6334fc68b99321602116f9eb8270fda26b328638b76
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestOptimize.xlsx.WCRY

                                                              • Path C:\Users\Admin\Desktop\RequestOptimize.xlsx.WCRY
                                                              • Size 16KB
                                                              • SHA256 ca3059aa3bda43826b642aa1c832a590e5d7045daa7a1ee5f05503acf6d2ab9c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ResumeNew.docx.WCRY

                                                              • Path C:\Users\Admin\Desktop\ResumeNew.docx.WCRY
                                                              • Size 1.4MB
                                                              • SHA256 d3724a7134924d93c1bbc321291bfb282e6925df8459357ecb8c0f7c71b50ceb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RevokeExit.ppsm.WCRY

                                                              • Path C:\Users\Admin\Desktop\RevokeExit.ppsm.WCRY
                                                              • Size 978KB
                                                              • SHA256 3901e1477cfd3834932a78a6cb44f020eb1ede740e5dcfdb964f20309978a00b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SetPing.xlsm.WCRY

                                                              • Path C:\Users\Admin\Desktop\SetPing.xlsm.WCRY
                                                              • Size 374KB
                                                              • SHA256 fd962df98e33fe7682a3a946d8e0a34a87b68d76ab8bafcfde7dab7d0a42edd4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ShowUnprotect.xlsx.WCRY

                                                              • Path C:\Users\Admin\Desktop\ShowUnprotect.xlsx.WCRY
                                                              • Size 834KB
                                                              • SHA256 ff16575ae2a0660a69e328f3adc6e58c25c97dc938d7d05c633701d91bdc0ca5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnblockSend.xltm.WCRY

                                                              • Path C:\Users\Admin\Desktop\UnblockSend.xltm.WCRY
                                                              • Size 604KB
                                                              • SHA256 90c232cf216b09edb7af3370f1f8ebaa3add2af07292a47d85c3f5f8898a9a0f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ApproveNew.odt.WCRY

                                                              • Path C:\Users\Admin\Documents\ApproveNew.odt.WCRY
                                                              • Size 426KB
                                                              • SHA256 f4dbd1a4f82bb56e448406f26d59fd206119b5ead315dc1f56287857fde58d4d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompareFormat.dotx.WCRY

                                                              • Path C:\Users\Admin\Documents\CompareFormat.dotx.WCRY
                                                              • Size 346KB
                                                              • SHA256 8c453c43db3b1e1a9704fe15baf69b5a71ad926e82463a8a026f240e60f1cfad
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CompleteMount.pps.WCRY

                                                              • Path C:\Users\Admin\Documents\CompleteMount.pps.WCRY
                                                              • Size 560KB
                                                              • SHA256 b526ea5e15edca541e36e5552d466bcf95092c2d878024773daab3fcf76fb2c8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EditRevoke.docx.WCRY

                                                              • Path C:\Users\Admin\Documents\EditRevoke.docx.WCRY
                                                              • Size 17KB
                                                              • SHA256 13e5131a2bd0866ac4edd9272c0960406db87cf2e69731b895d27af5d3728483
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              FindReset.xls.WCRY

                                                              • Path C:\Users\Admin\Documents\FindReset.xls.WCRY
                                                              • Size 800KB
                                                              • SHA256 8dedcf922f5aa1ec68ad7d58cb50f299b87a11799bf04e035ed6857c20456acc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              GrantResume.pptm.WCRY

                                                              • Path C:\Users\Admin\Documents\GrantResume.pptm.WCRY
                                                              • Size 666KB
                                                              • SHA256 c17c8be1759f467650d7d0109c58d292d0754b51f700ee8cb21a2bdda3e4ee8b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              HideSplit.docx.WCRY

                                                              • Path C:\Users\Admin\Documents\HideSplit.docx.WCRY
                                                              • Size 506KB
                                                              • SHA256 2ba588995fd88a8c95e2d9ad3525b2eb77d5849cac4da364509acf2b153bb2f2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ImportEnable.docm.WCRY

                                                              • Path C:\Users\Admin\Documents\ImportEnable.docm.WCRY
                                                              • Size 533KB
                                                              • SHA256 01a689694ff68eabff06ea09796ada0826acdfc560f321eb1a4f04fa05abd6e4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              InvokeSkip.pot.WCRY

                                                              • Path C:\Users\Admin\Documents\InvokeSkip.pot.WCRY
                                                              • Size 640KB
                                                              • SHA256 d3889f7018d3bed8d00ad3a8b8ecc7aa0797b306d312cf81b0c464ea2213521f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              NewAdd.potx.WCRY

                                                              • Path C:\Users\Admin\Documents\NewAdd.potx.WCRY
                                                              • Size 693KB
                                                              • SHA256 d59a3d9f648733bc1973fd9c8c7cf452d790f09f0f9be9606a6c09b35e30d796
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Open Notebook.onetoc2.WCRY

                                                              • Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WCRY
                                                              • Size 6KB
                                                              • SHA256 8bd81646c6cf2e82cb6f709c0c350ce8711531eb80fde4f78061710c26ada649
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Outlook Data File - kaoergzjpb.pst.WCRY

                                                              • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - kaoergzjpb.pst.WCRY
                                                              • Size 265KB
                                                              • SHA256 9688d25beaefec7d5e64bc8ebec5915108d368dfae726f2a887be89c3815b388
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ProtectMeasure.docm.WCRY

                                                              • Path C:\Users\Admin\Documents\ProtectMeasure.docm.WCRY
                                                              • Size 373KB
                                                              • SHA256 45cb48c15ddfae54047ffdcb47fa26305b3bcc0bd732c8137756641576170835
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PublishEdit.odp.WCRY

                                                              • Path C:\Users\Admin\Documents\PublishEdit.odp.WCRY
                                                              • Size 613KB
                                                              • SHA256 4597f897f64872ce491b53a51cfeb8b8d89ec40c36c9cb1d89b61f0a576feaff
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PublishRequest.pot.WCRY

                                                              • Path C:\Users\Admin\Documents\PublishRequest.pot.WCRY
                                                              • Size 880KB
                                                              • SHA256 e15d0ae194c3b9afdd989c314438b98149ecff9a3d7eca5bf5afc11702ec1f1f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PushUnregister.xls.WCRY

                                                              • Path C:\Users\Admin\Documents\PushUnregister.xls.WCRY
                                                              • Size 480KB
                                                              • SHA256 1ab7797e49fff4de1ffe9071f174ad34c3d89c57bcad8e25d6315d2ee5a2cb57
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ResizeSave.docm.WCRY

                                                              • Path C:\Users\Admin\Documents\ResizeSave.docm.WCRY
                                                              • Size 586KB
                                                              • SHA256 cb31658c1c9a9659dc4ae173a7f73e2d44fde3b05e39575ebf681b292a56e2d4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              StepMeasure.xlsx.WCRY

                                                              • Path C:\Users\Admin\Documents\StepMeasure.xlsx.WCRY
                                                              • Size 12KB
                                                              • SHA256 2608360c4a94d1fcabb38ef9650f59965c56c3a8895d2a68d69ed2e897638a88
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SwitchStep.xls.WCRY

                                                              • Path C:\Users\Admin\Documents\SwitchStep.xls.WCRY
                                                              • Size 453KB
                                                              • SHA256 e2662db01f16914c25a648948de5e3886d186d3a871d8a5185d8e6cacc9cdc91
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              TraceConnect.potx.WCRY

                                                              • Path C:\Users\Admin\Documents\TraceConnect.potx.WCRY
                                                              • Size 400KB
                                                              • SHA256 f05b3c0ee67e2195ef52bbde57e1fff25a983264ef21d02830f920030ba55f8d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WatchStop.potm.WCRY

                                                              • Path C:\Users\Admin\Documents\WatchStop.potm.WCRY
                                                              • Size 720KB
                                                              • SHA256 96250d869ec0810e3f26da2a39a3aaa6682d0e3a64c2e72cdcb266d45ad82d1c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WriteUnlock.dotm.WCRY

                                                              • Path C:\Users\Admin\Documents\WriteUnlock.dotm.WCRY
                                                              • Size 906KB
                                                              • SHA256 9ccb980937d4852bee80750796d7851ff15795f08260c25751c4b4492312a58e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              !WannaDecryptor!.exe

                                                              • Path C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                                              • Size 236KB
                                                              • SHA256 78e3f87f31688355c0f398317b2d87d803bd87ee3656c5a7c80f0561ec8606df
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              00000000.res

                                                              • Path C:\Users\Admin\Downloads\00000000.res
                                                              • Size 136B
                                                              • SHA256 f0773085e88f40f2dd37cfffb54f64f689e6b5ef9ee368fdf7598d87d0e01c5c
                                                              • MD5 SHA1 SHA512

                                                              00000000.res

                                                              • Path C:\Users\Admin\Downloads\00000000.res
                                                              • Size 136B
                                                              • SHA256 231717ac39ce6bb3c743516fa73fd1a4e56c56ffa8886c123b7e39ce5294bce7
                                                              • MD5 SHA1 SHA512

                                                              00000000.res

                                                              • Path C:\Users\Admin\Downloads\00000000.res
                                                              • Size 136B
                                                              • SHA256 430425dd1283d4594a6b04f6e742536ff037fc244088fdf2febf4bc5efaccbf9
                                                              • MD5 SHA1 SHA512

                                                              52241792812118.bat

                                                              • Path C:\Users\Admin\Downloads\52241792812118.bat
                                                              • Size 318B
                                                              • SHA256 4288d655b7de7537d7ea13fdeb1ba19760bcaf04384cd68619d9e5edb5e31f44
                                                              • MD5 SHA1 SHA512 TLSH

                                                              Unconfirmed 235821.crdownload

                                                              • Path C:\Users\Admin\Downloads\Unconfirmed 235821.crdownload
                                                              • Size 224KB
                                                              • SHA256 be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              c.vbs

                                                              • Path C:\Users\Admin\Downloads\c.vbs
                                                              • Size 201B
                                                              • SHA256 5d57b86aeb52be824875008a6444daf919717408ec45aff4640b5e64610666f1
                                                              • MD5 SHA1 SHA512 TLSH

                                                              c.wry

                                                              • Path C:\Users\Admin\Downloads\c.wry
                                                              • Size 628B
                                                              • SHA256 bf22e8e18db1638673f47591a13d18ee58d8c6019314bab5a90be82ae3dc9538
                                                              • MD5 SHA1 SHA512 TLSH

                                                              c.wry

                                                              • Path C:\Users\Admin\Downloads\c.wry
                                                              • Size 628B
                                                              • SHA256 922bd1c7884ddd80786d6b963d13038820796de38d44464f0ae0a9c50142ce04
                                                              • MD5 SHA1 SHA512 TLSH

                                                              m.wry

                                                              • Path C:\Users\Admin\Downloads\m.wry
                                                              • Size 42KB
                                                              • SHA256 402046ada270528c9ac38bbfa0152836fe30fb8e12192354e53b8397421430d9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              r.wry

                                                              • Path C:\Users\Admin\Downloads\r.wry
                                                              • Size 729B
                                                              • SHA256 c9e9dc06f500ae39bfeb4671233cc97bb6dab58d97bb94aba4a2e0e509418d35
                                                              • MD5 SHA1 SHA512 TLSH

                                                              t.wry

                                                              • Path C:\Users\Admin\Downloads\t.wry
                                                              • Size 68KB
                                                              • SHA256 a7dd727b4e0707026186fcab24ff922da50368e1a4825350bd9c4828c739a825
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AssertExit.vsdx.WCRY

                                                              • Path C:\Users\Admin\Music\AssertExit.vsdx.WCRY
                                                              • Size 338KB
                                                              • SHA256 295133a22f81d703e14f25fddd54742fdd172921f5855d11e1cc0f52f9d5bcaa
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              CloseJoin.zip.WCRY

                                                              • Path C:\Users\Admin\Music\CloseJoin.zip.WCRY
                                                              • Size 429KB
                                                              • SHA256 fd16b6e680ea42e18106fd2ab9ccef6827c4a558c55e3f5fc138d0fc0ab21863
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertUnprotect.mp3.WCRY

                                                              • Path C:\Users\Admin\Music\ConvertUnprotect.mp3.WCRY
                                                              • Size 308KB
                                                              • SHA256 ebffb51de8e20363670e673954c3d472aba18cd1acc13acc50a8039e8000460c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              DismountMount.png.WCRY

                                                              • Path C:\Users\Admin\Music\DismountMount.png.WCRY
                                                              • Size 978KB
                                                              • SHA256 4573815c523e6275f8495a1c4af1be773ca5af5dbcbdabe815b0d6d59e91a0fb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              EnterResize.mp3.WCRY

                                                              • Path C:\Users\Admin\Music\EnterResize.mp3.WCRY
                                                              • Size 398KB
                                                              • SHA256 17ec674843ea6e38789fc1b86c980ae8a86b281cb13d5cc1cbabdc4dfed4d779
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              InvokeLimit.pot.WCRY

                                                              • Path C:\Users\Admin\Music\InvokeLimit.pot.WCRY
                                                              • Size 383KB
                                                              • SHA256 a4f08eb03d50ad73015669aba2998e0321c6646fc32d3b9ef9098da5c9934ebe
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              LimitRestore.dwg.WCRY

                                                              • Path C:\Users\Admin\Music\LimitRestore.dwg.WCRY
                                                              • Size 293KB
                                                              • SHA256 a9087ce9de32a3f2cf2b68cd985d45a98ec5b0dfb7a1c635925e39a6d4723870
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MoveMeasure.7z.WCRY

                                                              • Path C:\Users\Admin\Music\MoveMeasure.7z.WCRY
                                                              • Size 624KB
                                                              • SHA256 a3989eb49a46252da0a3509f3e12d69b078c73d1ce1f7deca3474cbcb2b7b5bd
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OptimizeWrite.jpeg.WCRY

                                                              • Path C:\Users\Admin\Music\OptimizeWrite.jpeg.WCRY
                                                              • Size 684KB
                                                              • SHA256 fc8058c83388d479650e9110c2ea7c81392f12b203ff90eae19db1334b3dc16c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PushWait.tiff.WCRY

                                                              • Path C:\Users\Admin\Music\PushWait.tiff.WCRY
                                                              • Size 669KB
                                                              • SHA256 2fc29456eaa20663a65778485a09aad24bad8e13e02165f16165742ea9e6bcf9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ResizeImport.mp3.WCRY

                                                              • Path C:\Users\Admin\Music\ResizeImport.mp3.WCRY
                                                              • Size 489KB
                                                              • SHA256 1111dc7b355a1f6620eac46875d235e84782540fd4f25ce1a3d29db304cda174
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SuspendFind.asf.WCRY

                                                              • Path C:\Users\Admin\Music\SuspendFind.asf.WCRY
                                                              • Size 504KB
                                                              • SHA256 b9650551f7cb18665c101341cb89abbe3aa4d76355320fe40bdeb84e26fb7adf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SuspendLimit.xltx.WCRY

                                                              • Path C:\Users\Admin\Music\SuspendLimit.xltx.WCRY
                                                              • Size 579KB
                                                              • SHA256 a934d48718120737aececf7ff0d57abc96e0d78b4b7eb94dda58fcc1579d2921
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              AddInvoke.tiff.WCRY

                                                              • Path C:\Users\Admin\Pictures\AddInvoke.tiff.WCRY
                                                              • Size 284KB
                                                              • SHA256 034b4a912eb679106da3206f5f30c7493a48a69d25d9b4b935bc201cf00d0445
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              BackupClose.dwg.WCRY

                                                              • Path C:\Users\Admin\Pictures\BackupClose.dwg.WCRY
                                                              • Size 408KB
                                                              • SHA256 9254f7a9d91dff0fe923c510f025f797a5e35f03487eb60d67d883eb64f52604
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              ConvertFromRedo.raw.WCRY

                                                              • Path C:\Users\Admin\Pictures\ConvertFromRedo.raw.WCRY
                                                              • Size 377KB
                                                              • SHA256 4649314869f6ee161d2129060058337616efeddbe37ac594f067e308e17dd8c9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              GroupRepair.tiff.WCRY

                                                              • Path C:\Users\Admin\Pictures\GroupRepair.tiff.WCRY
                                                              • Size 336KB
                                                              • SHA256 a727426f970ede60d7346c3296eefb0f5ae1b3fc49ee8c9779a8559a1da3dadb
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MeasureBackup.dwg.WCRY

                                                              • Path C:\Users\Admin\Pictures\MeasureBackup.dwg.WCRY
                                                              • Size 274KB
                                                              • SHA256 21dbe5c9a90c17018c901a65cd8d8c4fc6aab37c34037c006d9dc5aaaa4cfddc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              MountReset.tiff.WCRY

                                                              • Path C:\Users\Admin\Pictures\MountReset.tiff.WCRY
                                                              • Size 295KB
                                                              • SHA256 7c61b5b51d582327e30954a6987f48baf443f123b54b367218ffa7cd1b448464
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PopResume.gif.WCRY

                                                              • Path C:\Users\Admin\Pictures\PopResume.gif.WCRY
                                                              • Size 357KB
                                                              • SHA256 40a1917683eb844f509714f290cf50f1a0d32fd8b99d87f6c600d096c1bd1faf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              PublishUpdate.raw.WCRY

                                                              • Path C:\Users\Admin\Pictures\PublishUpdate.raw.WCRY
                                                              • Size 481KB
                                                              • SHA256 e22971046ae09e23825226c24d50d1781f7553ac206ab1cf38085039464f98da
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RemoveStep.raw.WCRY

                                                              • Path C:\Users\Admin\Pictures\RemoveStep.raw.WCRY
                                                              • Size 191KB
                                                              • SHA256 024d8f2c0e1733b14b12ba3860d3e63845c6a441a27b6c5f619692953310266e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RenamePush.jpeg.WCRY

                                                              • Path C:\Users\Admin\Pictures\RenamePush.jpeg.WCRY
                                                              • Size 212KB
                                                              • SHA256 11ea12a98f4b349805f5799c8c4d2328c841b7f6c2df334310a9d2b41b6377b9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RequestSelect.gif.WCRY

                                                              • Path C:\Users\Admin\Pictures\RequestSelect.gif.WCRY
                                                              • Size 222KB
                                                              • SHA256 6bbd12b47e7ee375abef6236d68d6fdc71227495987fd811728c42761d292a13
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              RestartPush.raw.WCRY

                                                              • Path C:\Users\Admin\Pictures\RestartPush.raw.WCRY
                                                              • Size 367KB
                                                              • SHA256 37a1d004f82c0df4de7aaad39fd6279fee987264f421c737fbb877ac34187c18
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              SendHide.tif.WCRY

                                                              • Path C:\Users\Admin\Pictures\SendHide.tif.WCRY
                                                              • Size 181KB
                                                              • SHA256 a1daf5e51ee3d63e7ee3883949e4a56c36b8b1ab18c208eaeac13e4846e33338
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              UnregisterRequest.dwg.WCRY

                                                              • Path C:\Users\Admin\Pictures\UnregisterRequest.dwg.WCRY
                                                              • Size 305KB
                                                              • SHA256 ec7fb6140e64f3ad4a950c6c205605c63a76ac8edd96cc6b966b94053e67d584
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              VCAcAtN.jpg.WCRY

                                                              • Path C:\Users\Admin\Pictures\VCAcAtN.jpg.WCRY
                                                              • Size 25KB
                                                              • SHA256 78891a0f361d0babd991a3524546f0f8181ba84c7794210797a9ced7aef34cd0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              WriteUndo.dwg.WCRY

                                                              • Path C:\Users\Admin\Pictures\WriteUndo.dwg.WCRY
                                                              • Size 233KB
                                                              • SHA256 485e55f694ff0208d3eb05973acb76769d7164e870edf9912e0b3b1ee5afc2c3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              memory/2148-143-0x0000000010000000-0x0000000010012000-memory.dmp