wannacry | hxxps://github[.]com/Da2dalus/The-MALWARE-Repo/raw/refs/heads/master/Ransomware/WannaCry[.]exe

user interaction
yes
max time kernel
33s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
24/10/2026, 04:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/Da2dalus/The-MALWARE-Repo/raw/refs/heads/master/Ransomware/WannaCry.exe
Sample261024-e61vbsw17k

Score

10^/10

defense_evasion discovery execution wannacry persistence ransomware worm

Malware Config

Extracted

Path

C:\!Please Read Me!.txt

wannacry

Ransom Note

Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1 Next, please find the decrypt software on your desktop, an executable file named "!WannaDecryptor!.exe". If it does not exsit, download the software from the address below. (You may need to disable your antivirus for a while.) rar password: wcry123 Run and follow the instructions! �

Wallets

15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1

Signatures

Family: Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry

Downloads MZ/PE file 1 IoCs

flow	pid	Process
14	2256	chrome.exe

Executes dropped EXE 3 IoCs

pid	Process
4268	WannaCry.exe
1144	WannaCry.exe
1932	!WannaDecryptor!.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Update Task Scheduler = "\"C:\\Users\\Admin\\Downloads\\WannaCry.exe\" /r"	WannaCry.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
12	raw.githubusercontent.com
14	raw.githubusercontent.com

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
2148	cscript.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1224	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WannaCry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WannaCry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2256	chrome.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Kills process with taskkill 4 IoCs

defense_evasion

pid	Process
1336	taskkill.exe
4012	taskkill.exe
4544	taskkill.exe
4784	taskkill.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe

Suspicious use of AdjustPrivilegeToken 50 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe
Token: SeShutdownPrivilege	1800	chrome.exe
Token: SeCreatePagefilePrivilege	1800	chrome.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe
1800	chrome.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 4036	1800	chrome.exe	88
PID 1800 wrote to memory of 1872	1800	chrome.exe	89
PID 1800 wrote to memory of 1872	1800	chrome.exe	89
PID 1800 wrote to memory of 2256	1800	chrome.exe	90
PID 1800 wrote to memory of 4932	1800	chrome.exe	91
PID 1800 wrote to memory of 4932	1800	chrome.exe	91
PID 1800 wrote to memory of 4308	1800	chrome.exe	93
PID 1800 wrote to memory of 4308	1800	chrome.exe	93
PID 1800 wrote to memory of 220	1800	chrome.exe	94
PID 1800 wrote to memory of 220	1800	chrome.exe	94
PID 1800 wrote to memory of 4312	1800	chrome.exe	95
PID 1800 wrote to memory of 4340	1800	chrome.exe	101
PID 1800 wrote to memory of 804	1800	chrome.exe	105
PID 1800 wrote to memory of 804	1800	chrome.exe	105
PID 1800 wrote to memory of 1992	1800	chrome.exe	106
PID 1800 wrote to memory of 1992	1800	chrome.exe	106
PID 1800 wrote to memory of 4268	1800	chrome.exe	107
PID 4268 wrote to memory of 1224	4268	WannaCry.exe	109
PID 1224 wrote to memory of 2148	1224	cmd.exe	111
PID 4268 wrote to memory of 1932	4268	WannaCry.exe	114

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Da2dalus/The-MALWARE-Repo/raw/refs/heads/master/Ransomware/WannaCry.exe
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7fff744cc728,0x7fff744cc734,0x7fff744cc740
  2⤵
  PID:4036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,17937970463591190742,10524319933313515020,262144 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1992 /prefetch:2
  2⤵
  PID:1872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1612,i,5758187659277553551,2441556046581624499,524288 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2360,i,1332546573655563842,973722389689589592,524288 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2372 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3220,i,9198803032165540077,5282485578224082112,2097152 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3228,i,12189196397569495963,1366472625263861823,2097152 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,11160118859688786473,4007815170815907944,524288 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,6950029257442444770,302250831444684178,524288 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:4340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5600,i,11707682031541003161,11029114468095597527,2097152 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:804
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=3920,i,15494257980035458142,11572370364520523704,2097152 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:1992
- C:\Users\Admin\Downloads\WannaCry.exe
  "C:\Users\Admin\Downloads\WannaCry.exe"
  2⤵
  - Executes dropped EXE
  - Adds Run key to start application
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4268
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c 162681792816468.bat
    3⤵
    - Executes a command shell one-liner
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:1224
  - - C:\Windows\SysWOW64\cscript.exe
      cscript //nologo c.vbs
      4⤵
      Executes a VBScript file via the Windows Script Host.
      System Location Discovery: System Language Discovery
      PID:2148
- - C:\Users\Admin\Downloads\!WannaDecryptor!.exe
    !WannaDecryptor!.exe f
    3⤵
    - Executes dropped EXE
    PID:1932
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im MSExchange*
    3⤵
    - Kills process with taskkill
    PID:4784
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im Microsoft.Exchange.*
    3⤵
    - Kills process with taskkill
    PID:4544
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im sqlserver.exe
    3⤵
    - Kills process with taskkill
    PID:4012
- - C:\Windows\SysWOW64\taskkill.exe
    taskkill /f /im sqlwriter.exe
    3⤵
    - Kills process with taskkill
    PID:1336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6056,i,12425889444906513707,1049446340524642524,524288 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6104 /prefetch:8
  2⤵
  PID:5564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6060,i,4480282612464710579,2153686461422463612,524288 --field-trial-handle=1996,i,16781568584292786898,443127125434117165,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:5544

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:2648

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1824

C:\Users\Admin\Downloads\WannaCry.exe
"C:\Users\Admin\Downloads\WannaCry.exe" /r
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1144

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

!Please Read Me!.txt

Path C:\!Please Read Me!.txt
Size 797B
SHA256 227082c719fd4394c1f2311a0877d8a302c5b092bcc49f853a5cf3d2945f42b0
MD5 afa18cf4aa2660392111763fb93a8c3d
SHA1 c219a3654a5f41ce535a09f2a188a464c3f5baf5
SHA512 4161f250d59b7d4d4a6c4f16639d66d21b2a9606de956d22ec00bedb006643fedbbb8e4cde9f6c0c977285918648314883ca91f3442d1125593bf2605f2d5c6b
TLSH
T1DC01F12EAD5572115BB2C572357DA197EA02925F022E0352B907C13917BC13655FE4F1
MD5 SHA1 SHA512 TLSH

Submit Download

user-32.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WCRY
Size 728B
SHA256 9037d141ca4e8780049187009c2752810b42dfa27123f9d05023524f6a6d4fe5
MD5 61758ab82b4f1ce83b56c1c6265e9faf
SHA1 655c67cffbf2ad42bb0c192192187670c4d1fa6a
SHA512 395d6698a560e72ab20019650abe17c66de388d315258dd619d1bce658e6be9505e51a29ba75e094e4011243ad7504d8cab39a612c1d257a4af8f1134bd1165d
TLSH
T11E01991AF4134162850135D2FDE72C0EEF004D0D5E8B7AAF736D451F546187107C0362
MD5 SHA1 SHA512 TLSH

Submit Download

user-40.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WCRY
Size 808B
SHA256 50e9db12d41bea9938b11cd28786cb69948f44c028881ff771440c8a222ae917
MD5 06aed3c40584d9c51c61675a8d2aa209
SHA1 927fc4dcfd93baca49d980b64c4f41160ab41dce
SHA512 23a07c74140d3822c501c8839946ce3d395e164daed696a74a52a5a6022b3da9624e2f754405def13d078a1f56918e550b7bf7a2268567994a4e661eb8e6d29c
TLSH
T1D20141CF1229586ADB082AB2DA708B7524579AE01239B107E338B04047992AE578FB66
MD5 SHA1 SHA512 TLSH

Submit Download

user-48.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WCRY
Size 904B
SHA256 d2c1e118e3545abb8fbf016d0a8a21aa1947808b07db9c5d264ff9bddac4f7ed
MD5 43a45816300c7f859c935d11f3315ae7
SHA1 687585d3ed0ed6db965dc7818157e26a61d7c937
SHA512 ce9a9c27cb4e379e0962b146bfff377af05a6801d7eaeccd07a77a28a8280e4a88d8ff3504b62f3a6c78995eaa50e398ba74dd2632dc135151f563e0e05248a6
TLSH
T1E011B745078C1AB8DABE3175AFF8ABAD31CE641042DF3157B0000FE79BA5309C9B0A31
MD5 SHA1 SHA512 TLSH

Submit Download

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY
Size 64KB
SHA256 7d346eb552babd5c778405b01aa599b1db9433a7ba8f1c401b2b1da0be125402
MD5 4c629b9150217ba32f2261ee6457f3b9
SHA1 bee51b6b5e03d29bb1e6f59b608497cdb5e1269c
SHA512 68c3abb8179efb47d36156a90f53cd5bc5085387d30091c512b0867937e2b11cdc229b718e78c64f6b72567cb81b8a697e6b49d5e0de23a224eca9312defeb2c
SSDEEP 1536:bKRtxD2WVokfUUjNfepo6+TAfBidBHK+SO+hOOIcgLWwl9YZN7sKi8iQXn+am7sV:ujNZwpocBidxKI+UzcgL/zy7sKiHQ3+c
TLSH
T1B9530287032EB338B626A52EC827CF173A34AF564624CF75D1F15C79E2A4253B71A781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

33566e9b-6006-42af-88ef-f5cc64b8b1c2.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\33566e9b-6006-42af-88ef-f5cc64b8b1c2.tmp
Size 130KB
SHA256 528d407d792fefa67c2606840fbe3a7a92fe08ec3e27640aa868afe70ccecbd5
MD5 b607df5eca4443c60b4d2b52a8b72ae7
SHA1 8a6e5a827515a237ad116827a227b9000a1e5403
SHA512 cfcfe8e185b5206152548515b9c9b51a487301ce44a62b1ca3a481c8b3d5ba4dbe8c1f721e4d777cc9875a21209f632e047670ab398d1f88435e1835a8df9ade
SSDEEP 3072:dRP+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:dRP+hFD+7t56OD9ZfSApprr
TLSH
T1BDD31232AA91C8BBC9FC6541B157A304DE666CED41DE7A09444A5F8EE09FC4C07B3A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2905e47a-7c78-4cd3-a0ba-8e1f5f4cc7b9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2905e47a-7c78-4cd3-a0ba-8e1f5f4cc7b9.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

2c9aa019-effe-4ab5-b6f2-3dac666d2e70.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\2c9aa019-effe-4ab5-b6f2-3dac666d2e70.tmp
Size 11KB
SHA256 69de6dc15114076d475e4d2dcbd4f54f468751981803dff78752531ab5ac90ad
MD5 c653853b21659f0f1a17088bce964c32
SHA1 c9af26cd4f271345652cef22d3ee94263e07c6fb
SHA512 17294d3e2da7c128a1afbab2436f67089293d2f455551945ced92cf318cec61acb969153487bfbefa7e45c0fc427f6d759842991c793ab38adf722dd3735d291
SSDEEP 192:el64K67/7KxkXqK4I40pUZNCgVLHrKHfFKslEz9LXzKD/Qj+ErUkKN9pVS27SS0+:c6jY/7KxkXqKf/pUZNCgVLH2HfgslcLm
TLSH
T13D32D827A44DAA3F4FD8D50DCC12AF4BADF502527368092497FB9D14039A7CA214E6BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

398c1d7d-9418-43d0-9b5a-23fcd9d1a724.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\398c1d7d-9418-43d0-9b5a-23fcd9d1a724.tmp
Size 11KB
SHA256 0bb8c8e1360ad41bbbc082c761e80f35fc9faf7213c4e106fe8001891a12f4ea
MD5 c899c8d083ff8cfb4cd3304260d15c65
SHA1 680be7e62144c6eb0d024e63250650a1b95aecf3
SHA512 2801302909a791b1b7778a860f7a4ff21211047f8d78a5caaadd08650dbb31282e764bfeb2d021aa245241d876202b7671eb0c59f56e27990e6411e5ef72bfed
SSDEEP 192:XR1CDW2v71vAPRp2Z9IHsb+WNna7P6kr+OLa/kwQVyIsnAUge:XR1CaC56X62w6PTr+Om/0e
TLSH
T13642832DA9507A3B5CEBD22AF961B717D6F9102225942E84E6FD883C25EB5CC3227407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

76801f3c-2055-4b9d-b596-2b3fa8d8dd43.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\76801f3c-2055-4b9d-b596-2b3fa8d8dd43.tmp
Size 414B
SHA256 130cd2b6a25e61dd8961fb6c5dd002b3f75b1edf6832c194a47096aa79a44d81
MD5 b6d4849c570cf01947866f937e05f200
SHA1 851c8ea2a86c1ecdee94aff797682b2efce5a55e
SHA512 9ee6b58cc189e5260f49b14d949c9186e38f732dee6501be703bc9184dcb829436b08d7da0cff63c4d437db7e2a9a0331e6e9b7a9922980e7144bf85e3094e9f
TLSH
T12CE0E5B9C825EC6718FC5B181050464AEA8013272691854F7B3C8909CFB527E858681C
MD5 SHA1 SHA512 TLSH

Submit Download

4cc9fcbd-8bc4-4a50-970a-1f6a7d23faf9.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\4cc9fcbd-8bc4-4a50-970a-1f6a7d23faf9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

128.png.WCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\128.png.WCRY
Size 8KB
SHA256 7892f66708297893d65a51f9f306a0b50215e1f598e9f0650c98d20db6110274
MD5 be81dbc2068a1c482dae724ffc8a1aac
SHA1 d98005c04ebd9f191078dc239e061a9cb6a1549f
SHA512 e3fb8ddc2e66b14be104ef68878010652783dc1cd6073a58239c517de09fbf5bbca2770d82bf724ed36feeb5a6b3dfb18fae47e468df65034e389ee708c29773
SSDEEP 192:B4AsSTQdxYwtLOxHy0/Zm4/j500bpOdlVnBtObWDAR:dsbtIHy0xxL59bAdBCz
TLSH
T10B02B0CC063168338A31BEF49982E4478B1B5C76356F7B71C395686799BDAF139C0E11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64.png.WCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\64.png.WCRY
Size 3KB
SHA256 4e1f086d98b10fcf8459ca38dbb146853108b7cd45e85c61b6f4091f3b7f9837
MD5 11c0820fe88f11670d4296d57b5d5440
SHA1 3dbd646b95fde1da742d2ba9715e7e14070433a9
SHA512 40b50031ad2a0fa54566013b4261c6dadd681dcf08f180f30c6f487494b4c362a723f081b8834fd998b30b22eb136dfa04cb09d19c9c7910e474f96d67fcf883
TLSH
T15C616B11FE65A05FDF80C37C4AC8752E531C6140D9237F20AA193462AE3DC74376CABA
MD5 SHA1 SHA512 TLSH

Submit Download

b5478acd-0695-4e91-80c7-cb2b74f46d12.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b5478acd-0695-4e91-80c7-cb2b74f46d12.tmp
Size 12KB
SHA256 58b1103b394c19a84fcbc66c5966fcc238be658e5c60ee54e3bd348adfcec36e
MD5 d2c60d9749aa4c6af6a0d4f091775044
SHA1 2b5856672f39a2b32f53d9cb80a524de838025c7
SHA512 7b34745695a1030637dc6f623e5077d565531fc5c2bf27ade4fb1c49c2b66818b13a78c62deff8d79d53ce06ec14591df849c507bf48409c619e898bb3e36f43
SSDEEP 192:XR1CDWzv71vAPRp2T79IHsb+WNna7eHN2Hkr+OLa/kwQVyIsnAUge:XR1CaL56Xw2w6o2Er+Om/0e
TLSH
T14742A42DA9507A3B5CEBD22AF961B717D6F9102225942E84E6FCC83C25EB5CC3217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7070c12-a924-4061-af6d-9d413838fa6a.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\a7070c12-a924-4061-af6d-9d413838fa6a.tmp
Size 131KB
SHA256 7d5fbd84835f93ee6dc4e531683969c78889f7de46bae6c15f02a475c442527b
MD5 603c1f7e865ab18ed2eeb499154e6c1c
SHA1 010789e157789d79eefa791d849a4fe5f8b4647c
SHA512 7e147ac80c07d5a2ee8df148fba972693565af4133e14b8522dbd03d5a9f515a75159dbf86ac41e0102dc7102a7c5ff92ad71528198501762d9a817a300860c7
SSDEEP 3072:Qo+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gr:Qo+hFD+7t56OD9ZfSApprr
TLSH
T155D31232AA95DC7BC9FD6541B157A304CE66A8ED41EE3A09444A5F8ED09FC4C07A3E33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorBlue.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WCRY
Size 7KB
SHA256 0b66f81d4ab2096c9192bacb1ec0ab6cc6dcc708665f9872715e33b756bd5c63
MD5 6ac3d5999df43fff06954433f2772b1c
SHA1 632a5ac023b8c74cc8b3719d7b25b962d73ad713
SHA512 091cc9c20533f894cb43956d25b432987c3ed191f3685a36d9bfc342986893e31fc183f68a62eacb5daafde9bd5a862ba0987f44c55d1cbfe461c985dfa89b6f
SSDEEP 192:di3xD3SIjPZK74RgcHdRGi4Z9aPhViGhb181:dCxD3SqxKWfdRGi4uPhViGhb1S
TLSH
T13DF1AE4DCFA868738801199AEB23D20679A50F9CEF25E7039F97014F1887A2761EC6D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ThirdPartyNotices.txt.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WCRY
Size 48KB
SHA256 c8cf1b92b3d55728f2a37e0de269321806c9fc4fed79c33c83c33fb20441b41d
MD5 27a6ee2ee6303855737676f74b5f22d8
SHA1 21270bbd6a22be5d94fe1ea77fb3da660ec3a315
SHA512 d3d38cac48231c17682a4f2b4e962b6376b6814ae44749c2f4d386476c8718d3a04bb1b27316535fde8bf5842cad6e35ae8c7eec31be68217a358136bb678f3c
SSDEEP 768:Blg9t/gHy8zFD2A18ITAK5uG2rklz9f80vvwBGm9yjQOmrXY90CgetwW2sX4hZ:z62HlzFDWIT3o7+1HwBt9CQOmjKWWoZ
TLSH
T11923F2B0E61D7F64EA662F91BCC113248B886BA71488DDEB3DC061D7732F6898C19E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_16.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WCRY
Size 320KB
SHA256 a35d4c92f92b6a7fcc9c70f0584ce09360805ad003abf714c3366ac4a2fd3c96
MD5 86c8db5d2e91f3db491c7e7eba723099
SHA1 75dfcc5a7de53f4e9f43ec2c58d308565fa846b9
SHA512 7171f466c7f66c8300547c0be747c58a085b6e9281f2a02efd3a721ac0d9a7dcab6742cdab6ef3eed88f32968e732a1f6ee1cba4dd8af3eb99ef79998648c14d
SSDEEP 6144:ULPVk5dYeatvZq9dW6n3rgZDAhGt35N6f5aL7PWYH0V:mm5dz+q+C38ZTjCOPWYH0V
TLSH
T12E642320DBBD93EDEE90A92166318DEB8A00E4D27453E381AE15CA7E6D14871DFD3731
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_10[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_10[1].txt.WCRY
Size 197KB
SHA256 4c5d61c8b30e7e6f081f10bc2d35b680cc89d5ba6ea3fc1827d869147ea2b4f8
MD5 979a31eaa2577bbe782b1e87341ad8bb
SHA1 6979d6c255e885d4c8a84f920ee55fb90d9a1aaa
SHA512 e16a2454c696702687ebeb8b577a9afbb3c63ff47c3590fe43c092bf35439e1c8804e0036c94706341872edff2d306b6355349c7dbbe06cd06e26690e1f7f055
SSDEEP 3072:G6tZUVX+Nk/ethIh1xqKk8s2Mrgj/oLuV5wWa/mZC/ye/OTib1p3yGAxjNDGoh8:G6QR+NkR1xpk92Boi4WK/ye/YibfeGL
TLSH
T1731412C6598260EAF1C578ECCF918724E97BB730EE2DE48BA5C88E8B4173433551B46D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_11[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_11[1].txt.WCRY
Size 33KB
SHA256 29684d0d8134cabb937e2957c1441de07adc5c247e4d58f4f30c4463f464fae1
MD5 bb28a98f6642b302ef292c385d8d57c8
SHA1 9bc877505a44d80d5f3ed2faf35c95a6cf1e6312
SHA512 38d471e36b6887d72a53d4d42d10ed754884c07d10f599d2f35fcd44e0b29f62752bf23ef09d4e64b168b06b0fcf6d4c24bd96464d8f935fcec3936c63c1edb3
SSDEEP 768:XWrlqog7XX5K906BLBwELdQbc5MJsdYZ6N4cyjafGwxx/8VSOiRbjh1:GmrXk90GBwELObc5MJs+sN0jalx0oOih
TLSH
T120F2F1B7B53F53CA772855426A34E926EE95E8A618F2710321DF830979C73C24ECE25C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_12[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_12[1].txt.WCRY
Size 221KB
SHA256 62f6f6d528ea8044d7abd4b3098f427953342d9030a7bd012e99f593b4e38e5c
MD5 da832e894ff5f9cfa1c57dd33118d931
SHA1 4eb50efb3ae89bc2052de7d8c5eb79d90a9b79d0
SHA512 2c822cc3709d8bbf24d75dd49d66a8c0691a38d4580fdc417d6ac47b0a615069ae5644faec26a7975bf3a103593f277ee173fee0205a997a04ad91d067413ece
SSDEEP 6144:YQzyuodEMyYxMMnz8lip4qrm3AvOLBl6a55Z8DA:X9GyY6MnWxqreAWL76M5J
TLSH
T1B624239428F6B0C5FA1C9B4A0706876E24B9D2CB6233BD3AFCB40B455405BD5B6F9C1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_13[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_13[1].txt.WCRY
Size 52KB
SHA256 200ad646b3c6b8c7ac1db2c2bd222da142012b2efa44736cc66b4f36f07dcc34
MD5 77f1f96ca5bd45dfba2fb5e52b1251a0
SHA1 d1512babf5c9da0450cbcf1e0cb39366e7678116
SHA512 d24135bb1bb3958922049f8b08955817d06419f7e569904fec8a302469e782c9fc066eddcd10fd63a275a134cc8493346ba2efe2961f7aff6d58c096cdf0bb2b
SSDEEP 1536:ih1xSMfDq/eZCOX+UeqJOd5Ordgeu9iLdm:E/fu/ewOX+UeqdmZUA
TLSH
T12D33023A9F85AD6A4788663DBDF0605B803F17405AA12849731E67C0FB8B98CD3DD5F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_14[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_14[1].txt.WCRY
Size 7KB
SHA256 1cda7550a801ced9db54fa78a491bbc0e3ba06fd617b19f9bb686e74bc1763b4
MD5 7aa44fa4e708030b09b2fb0a53fa1cec
SHA1 ea19644e0224371f3ede08cfdc90c00209b8f422
SHA512 11f11df4e44ca5ef47722c1b0112c88c7cf1f20ab2f0f27dffb5ad66872d08a6e938dc6efd4f1aa82ef4320b60cb2da1007a6595d0950fcf1defaa42d8f088d2
SSDEEP 192:5SqcjYaC2y5LwPTJtPf/mXtmpJek1T1rr1vRnq4jki4mrtpySz:5xcMaC2IwvOCJP9VRq4YiBrtp7z
TLSH
T1FDF1AFCEEE06262D6FA49315F899864827C20FECBE52FA6C95132268354F46E0D03766
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_15[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_15[1].txt.WCRY
Size 120KB
SHA256 da1bf53836d98f38bb8cfc84c262cd74eeeedf420c4ac9a2a004d85c05f51d58
MD5 4e8cfff2de600aabc0419a9bf407b757
SHA1 4c1c2dc237e476d3e9cb5e3d70a24652c8d06bd5
SHA512 d20d3e11d2eab6df4260bfe292a6ef83dab1d1390f2d619f38a5a057da24c856b515d6c75a861a9ce1ab7ce4d8f96e9cd4a787b020f54639dadde7d7f00fe7ce
SSDEEP 3072:N4Z/9mEip0CPokdwlSOIhBO2WBjx6CTQe9fnF9yL3FxaCNWtedvN:0/shwkdwEO0E6yQe9HqxaCNOi
TLSH
T1DFC3123027783317A031A244D66327DCDF91C5347649F219EDB36968BAA033A5EDAB71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_16[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_16[1].txt.WCRY
Size 92KB
SHA256 07d5ded837b02832db35555a66af8a4259e4af416fe0dc735bd542d999806590
MD5 47572f6950376b6768f7bdc48cc7bedd
SHA1 90ede186595f1c108e470ae54550c1413f915ff7
SHA512 53dd709858a375aff464776976d6bd5ce7bda94ad0ce63ca7444696c1d05acd684eec1079aeaf060029c51016b34bee0715cac8c853a80f08c7e161b6adbe295
SSDEEP 1536:Z3mdntNVQDPrIQNntY/Z6pO60WMNWdYGB7vUjTCH+PMIf34wIkoyGOnkQQUHA6o6:4LQzI+tY/0wO8dS7vUj22/mkSUA6ov01
TLSH
T12C9312DD19A9FC67A3CB730F931E4AD06894FBE9D56619D6118B15B3E3A319400CDE03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_17[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_17[1].txt.WCRY
Size 6KB
SHA256 7ed5fc61be943c5823b543a07885cf3a23ee5d757b948e569f09b34d6bdd908d
MD5 5752f2214ed079ae9d51d9133d8954d4
SHA1 fe5abeb3cca5a13b79d4cd5b1c2f480a44968d69
SHA512 4525a9a0d814cdfdc9c9c7276493d7f2c1b7c2b9a7fc5323f294366ea49b238679a0e97d13922b0f3b2aa099083f666d7d0357b9803efba8abf18632c3569eeb
SSDEEP 192:ct9XE+9aqiL3vvCDCalg41yL1xIH54hZ7CVlUX9:ctFBUqibvvCDCalgSyL1W2byUX9
TLSH
T117E19E81EB2187AEE5F87EE78D1536EE059BFA821BC10DF41C88785B5263138177A612
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_18[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_18[1].txt.WCRY
Size 119KB
SHA256 29ff61f9c7ca5a9ce1668e5b965c20b2ad92f428c2d4ded6c294320687d19d39
MD5 b84bdcb6ccaa52e4ab1997273fb12439
SHA1 a82078e75e25177677d3b8ec78544b276e36e3a7
SHA512 d16ae3c5e1d94ed1addd1c8f26a46be7aa98bcd6663b88236b0e4d17fc8f1b99ef84726fab8dac904abd537fc7cb4e6cc343162eff91701b812246cef643fa75
SSDEEP 3072:dRBJ4pUfp8HmMdj19Mq5j60CXKk1S++Uis:YpQaHdj5j60Zcz+Uis
TLSH
T1CBC312C49AD6C44398066B73EF36C4A964936ADE36A434F23DD0E312FB917A87144A73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_19[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_19[1].txt.WCRY
Size 118KB
SHA256 fd8196b0cdf3f4eeb100dc6761de5d7281463e8921e1932c10f13186c01886b6
MD5 29b00609bc7de47c364d08209ca6bbba
SHA1 cfa6cee493395e3d13125b21d950da689596f269
SHA512 5e79946e6720989df0b7dde409275b7bd836c6dad3ce36ebc9ca14629be022ffa9d3b9ce678ba826d1c3a31d480a795e6cfc210dc3e616bdee72f6b68a6fe1ab
SSDEEP 3072:8VGuOpL7+pzPTqbXlnIwShNvRGCoC0tQbo3uxPkYD57kzW6SK/C:H5GpzPTqhnIFJn0tQbow1DFL6SKK
TLSH
T10BC3129A8D210F6F88BB433DBFC4D623F052D03957C99ACD2A8D5ED09BD803B5216D86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_20[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_20[1].txt.WCRY
Size 64KB
SHA256 cc0bdeaba82ee91a7239e3a7618dec159ad2f0f4ababadd6eff08621bf65eaf1
MD5 ab212aca6947e750b6804e21f6cad368
SHA1 b8eee4bb420fb114d53237d7c43f9223fc4a0d35
SHA512 3a487dbb76b443b044919555a4665b752f03d149c609bc5f1474543ce787b32f51c084afd102139b687bc17643b4b09b74b3343ad8b396b6dc7068a9e92b791d
SSDEEP 1536:etKYcvlqeo+eKYCvVAo5SWxx58UBAAh6moaF/NT:ecYcwvJZ7m8EncQT
TLSH
T14C5302546ABB0D09AD4434E1FE7154A5D8EDEB45E75A20FEDF0C65763E71C0F0022AA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_21[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_21[1].txt.WCRY
Size 44KB
SHA256 4c1b4ac439fab5c0e7115b1c0c86904df0d33c6cc0cfe807cbb70500dda0704a
MD5 206c54ecc64013529a7cd4f28d74f495
SHA1 d2f106116866de208559aab39e89e446363e395d
SHA512 e22c579bc554dab4d92349f9a18b1df18fbf046d6cce537ad34ad1dd64d2782013530b57e6400bc51dd3c0407a6dd053da64a8dd9a25534bcbd116f2adaa403d
SSDEEP 768:6VB5hiZNwom1j357Udr/4QlmrbJWPGKizzXRg9WcpbefIe0llhL+uJWU4fx93SLj:6Vmqqr/1lkIPGLzAYfIe0ll0uJD4fGLj
TLSH
T1ED23F11C12B379171B7DE6F42A57A3F5C3658A219480272FF2F8574A3A713831662D2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_22[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_22[1].txt.WCRY
Size 197KB
SHA256 14511fbffaef1aa902722dd524d84197744e422cc6cc65fbec38fa0d4c82ffe5
MD5 785996169bd5f38db84fe155f5bc2761
SHA1 7e785d6d5a7a52f54ccb911e65ae46339ac0a1ce
SHA512 fc8fd452c382b12e34200ab0d6da1e884c36590f4657c26fb0d9aabcad7492c98f20226af4ab610a38a285b65c8e5435ed56a08ab9e03b5244019a6819536597
SSDEEP 3072:H5jEfMUqbnnP410SIp1Uu+NMDwxL8aMJvPtc9B4M9pmRAUfRL+0kOFU5lv0l:H5QfMHnPOo/G1CaMeZ9paAyU5tg
TLSH
T1671422F4C5DF7023462EE47683DA6695A12836E9F805A0C605A782A9E4F5FCC09DF4CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_23[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_23[1].txt.WCRY
Size 15KB
SHA256 4067ced421871b1bfd9ef429320ec53cdde6d4a7a553e2a957dd92c621ceb117
MD5 57c36da82f7f8a7fd052912c809b087c
SHA1 0802f5e9cd89d9e536405d56bf42a917836db52d
SHA512 6571a5012b011ae0a9bd62668ce5ff205408d15e2178e021ff71f413181ff2500ef1941315d9fb5def89c96b8fcd5be0c3108884f472f5e475da03bcf5eb95c3
SSDEEP 384:0vxp0ZGqNA5AM9YwLi1h5FU4yMbUJwnfY0g4LB:egG9Afoi1h5FUJM4infYl4LB
TLSH
T13F72C0581D21D0B42AB404A966F6C7A0AE9E349C579F92563D41CC8FCCDF63C23D0F61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_24[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_24[1].txt.WCRY
Size 48KB
SHA256 18b72407b8c55097f0ece2d0004cf7ed7c5e7a98f67f136c5953a51ed51663f3
MD5 041507a146a5fab67923975378402974
SHA1 8e8f9ac9792ece035d3bdb34fe2a79cd3fc60c61
SHA512 d28768a7f8994104002a84a1af2477579ae6d4169bb4803843c9cf033d17bd3862c88ca30fbf197adb2c2c73716a65f3c9ad6ac297da6590b80bd81b8405081b
SSDEEP 768:DtbDoytJ9zh1EBnaKdGEoOEGKeoXlNPcPON352/d39eT3HAz9MDTLDRB:DrPxhOP2Oul+Of2/RqAz9gTLdB
TLSH
T11123027C4291330396129D950C892842D1D07FFD7AE2FEDD847472B975FC05ADDAA07A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_25[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_25[1].txt.WCRY
Size 39KB
SHA256 5dbcd91407654af675e2f7816b3bc5b7cae3e37e9fb4f239299a175c9c774ff9
MD5 47d73d189b16874655c88e58622f1621
SHA1 baf98056d24b5282046552e5f901cc989cff2e20
SHA512 f793f91e59b69be8b5f0c08be448e2ec155d4f79f469c2bc9724155ae66727a492ef2b08fbbb0ad36f1c638984250d269e1262441d6304605dbafd7ea540c452
SSDEEP 768:IoOk+WhbmerOQCeJV0se5UF5dZ4xhzqwdVRNsTLags1/4gM:IMHhbjOTewsrexhmwdVc4M
TLSH
T10103F12F3D4E5A0D274964F44C22090541386CAA72EE368CC5EB7CB46C7BA3F3B958B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_26[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_26[1].txt.WCRY
Size 780KB
SHA256 580400904ba9cc634416e4443741fdf0f8a159ef8ea62882fabbc730c5bc9bd1
MD5 9ca55141f77ce6ee309c4c27edbaf038
SHA1 419cea606b522ef568b0164a5ebab2bf76caf8ee
SHA512 2c196b570b57f8a36fa0cd23a273748659602afdd6aeee2eb781b05df275b98f3d7497147b06e772175492d2d8fc40cca1befa06bf0f317e7e521ff4424decde
SSDEEP 24576:/uDlfQj7pSsSSyzg/67cvGJmDy9Fw9cDmqs:/uD9Qj7kscM6kG7FwY4
TLSH
T156052316F8D8F7A4643225785257100B679DCBC625A1FB83B132EB61F44AF3F82D9D60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_27[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_27[1].txt.WCRY
Size 87KB
SHA256 4c9b3bc5f1604ecc1f762a0513926f2015eb2d6b0f99ae579a0d6fbd3eb063a1
MD5 d0dca7b6470588d72763ad5d7727722d
SHA1 4032b3b5d690626b53af923fe7d879029ce516cc
SHA512 ef65e84e295a23b6de19ecc6f1b31764669089c27fee53bd08b19685c62adc94076d644b012db9a046264efdad83f92f4adbbf89ab3aa999e4489d31d6c9ec2a
SSDEEP 1536:P2n15XvzaZH+bUhUuVXdUA/we6D1SmYOnDSirps3Z4glZMsQRMIsZeLxwRHg0gzd:+P2Z9hZLUJxYODSKpC3FQRMTZe1wRHg/
TLSH
T1C993028B5F14FCABA2034BF58FFC6D08B096694D84791FE7708F35478848B6611B689B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_28[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_28[1].txt.WCRY
Size 181KB
SHA256 449bd97b64c6c2a974171a04eefdefa75385fba25a4057d1f102e75c94c1a5b1
MD5 d38be2f5fb53a5028e29c171f999f625
SHA1 341d30730f456e8d6faaaf880d9766ade5a6b30c
SHA512 9c1f496aaf21724c689ae8d07c409b49303fce36fc5ee16f7ed64e776dcbbd0012de2cf948073d7fc7c6b12f527e91f8dab3c477d7babcef5f4663084dc703b7
SSDEEP 3072:VE1PwP6cpXT99sdVSsyP2tl3EJkcNnsXYuWTf8UjfZblqMExHkb7ec:+9YxIHyKNEJkcN5ukfZkMsE3ec
TLSH
T11F0422E3423CA55430126BDFFEC89A8A41D59060B1641CC688727B1EEFEAF31F606799
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_29[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_29[1].txt.WCRY
Size 17KB
SHA256 e35b21ff14a994179fd99db2d582321855a60566e1e5295028dd51490b31ef0c
MD5 77fef12cda51366850fd2b9faa6f9a10
SHA1 67fd9c0cc2d11a15bd217be4d73f363f0267b231
SHA512 4d1f3df0b544606155d4d5ece40eeaa83e127c31d9fc77c7c231a567a291a4a629756058abd98406146aa97b93d4a6574415c86054ba4f66800391036540ccf1
SSDEEP 384:4cCT5SlVErKcVN/Drvpu76l8L4IxK6SYV6h2pk5EJP9Q:1ao/ErVPoGluzK6Jbk5EJPy
TLSH
T1AA82C10994E5C6053DFDDD2EE6270244AB00A96575278CA529387F619A38E47C9C3E3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_2[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_2[1].txt.WCRY
Size 72KB
SHA256 8197984cb59a73c7e7d54802ac3fa6f24574a274c76a2250100db786d5f354e0
MD5 a8f871b3e71b935e8a8e4a2a07f8cca2
SHA1 b7ea44da970c302e906fb42c78ca374736151176
SHA512 78705e51d3600493a9c046e0c5275313f9568f94a6676794c4b7c3fa6c10c5776c73a901d7ffff6571b65e4b504a9df30e67703c86f451c761b9540330402a5a
SSDEEP 1536:hjF0G95jhbB4wGbuc0geaIoe+e6fw3mixt7X9TaQLjpxsj3Vm:9F085jhl4wGHTjO3hRxt7XMsIm
TLSH
T1AA731286AA282E04EDD574D1CFFA5C1AA93734466005BDFDB667B0E46138612F3147E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_3[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_3[1].txt.WCRY
Size 18KB
SHA256 a3bcb20befad7be56178e8862b747e2ee341ac6cd52c903501245bdea6e62485
MD5 5e2f21d344e0f826fe8ab927d04a7ab4
SHA1 ab6112e9ae189d72c799b1d6dcfa0dda8f077e3d
SHA512 264295ffdcb542861b2866c7d471ca393644302b447213d4fd215aedd82bbd9908fa99545e75ad07fc1f54dd8caf76df9d861efe65a46015255f71223173fab2
SSDEEP 384:OCXcnQi1r2K/vE0GPX0ZpUPS1op788Aogg9IzGK2wBllSudtj8Ch5xt:dsQS7E0FZpUuo588AGK2MnndxhB
TLSH
T1EC92D1A6694FC088EB265BCBAD168B5CEDC4217C74664BC82581B35DF8D9CE4CB05F2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_4[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_4[1].txt.WCRY
Size 20KB
SHA256 424f56897c6f40090e4227cc4cb4eba1d0c08a7fb4d09e30008f066459178d27
MD5 98f6f666a25715d5473cecff0d7514f2
SHA1 aaa6446ce9b8fe1338100dcdf9618a2f7af23a99
SHA512 87d41e21efc01694f0693004f8356e2eb119f136f4b2401a671b1507c5d186ec29e52bffee931697b28556c1ab00b103091083efd192b95461b632c9be6a31ce
SSDEEP 384:X/6qkueRd7yj385C2e7mjq4ZABZrm8bdO8SXgAMbWA9+RgSRJGgPuUM:X/6qSRpGcDO4iBKXgAMbE1vlM
TLSH
T12592E1A49A7D6E248D4CCD8CDCC3BCA27843E8757384D79CB89473B8948427A3CE1287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_5[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_5[1].txt.WCRY
Size 1KB
SHA256 49fafec0cca913731c400447a3bc5b8e3cd8d306426c02e90ed6d5da700af933
MD5 eda309ba5b7019eea6fffd7cf9aebe30
SHA1 60de97cd2eeab9dab1868c691064dd048aee60ad
SHA512 f899fa845d549152d9d6bf763be0831a4931a108cf55d885ced943b53780fc857675475fe1156c63e43092950fb797ec2d56fd2c0cb6894287c82cda77604bb6
TLSH
T14B312AA4AF6BE7913729A1BC0D07BFE0C4A48C8A79F39C76001824FF24635F0AC79516
MD5 SHA1 SHA512 TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_6[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_6[1].txt.WCRY
Size 36KB
SHA256 1fb4ae4a29155d6b428db38c81e08a05e93c3fff0abe8249ea26defe7dfbca99
MD5 0603d9492c15b18f8807ac3911e3d0e9
SHA1 77cb273b5b43b56278a2ae937452fa6e7f5c21c8
SHA512 a7573c99409b5a32b13bd24ec6c8e28455c59d4a64c623d0adbb80db27bc0b94e090e4a6da224ffac8f1b695a55b871e01a1749e2a673ef122695254ed962ae7
SSDEEP 768:KnCO/FMX7NcuIol1jjrcgDNF0D/lhCUizkvYlkRqLPEYoPPOQ/WIRo:Kn5SX7NcuTl1D5DN2NhCUizkvirEYons
TLSH
T1ADF2F18D8D375A9DA95D50B72708B2DBFD2025E14CC9FA93D4373F4248926CF070A672
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_7[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_7[1].txt.WCRY
Size 165KB
SHA256 6f8cc4f177a469e7778a9c66db1731882cc3b89b423ba2b6c5279349e542603d
MD5 49a106c306fde48a9fc3d07254c6451f
SHA1 f0f578610796676afe6d4ae5fbde8e6e604569bf
SHA512 92bb62965dd389ff249120f5c073efbfa419a2dae4a1962f8791b6c21e39fb3886808ed71409fb438b3a0d19c5adf4937458171ddd1b185a62ffad09edb501c5
SSDEEP 3072:H0P7unlbjVLlUMAyNHWrGYwqPiJsimYZ1ROEpZ8+th41uvYneX9MRH0d:H0junlbNlUyWwq6JKenPZXmOYeo+
TLSH
T149F3128D7AEAB3F22ECC427B0D4F4C399ED599F2413A07E8CD154641BEE458355AA23C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_8[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_8[1].txt.WCRY
Size 50KB
SHA256 7a12ffc4ac8e3fcf53d5b2b9f2fb69d98594582a5cf929347300926c350b9851
MD5 ff5cb8cff4765c0487c714f1c2b3364b
SHA1 8b2077f74cba578f27dae5e68cae37f25246588d
SHA512 6f2a33e1909f76384ec57f3ef93a560439187ee12a9706d72bf4f4d89c2e527cfd01aa58ce3ac41d855c67c3b70e65a6ca1a73a1aee266b5c54d22ce32a1f607
SSDEEP 768:GM6DgydmrPnph9Wa6PgdCGIQvjSVWyBU3JphnA4Ob07ci8iKv5FiXfo9bgOLPkna:dDyArf9j64zjSVWN5/nr8iORAbaX
TLSH
T1933301E37BA3C4E4B1C9B343D1071694E771900948BFB619349ACA482F582DABBD3B19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_9[1].txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\ES08DFK2\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_9[1].txt.WCRY
Size 67KB
SHA256 494b2453d60aa8dea7c15c5a0e9c16d4d657251fb587edfe723c737d69776495
MD5 7ccab486b23da3aec0796606a9fd2d85
SHA1 140a133403714a93a12ff15f7fd36940d286a731
SHA512 b1860462dd2d0a0a9bbd952f487f38b5d97ce45ca136477ccb8050c04742a3acdf69492ecd49e5350ada212e66f0e277f1186b4093b5eba6f1e111bac9a27025
SSDEEP 1536:EzZiTOVoXZrohKOVg5xRr/ZYDFMt8JJITFAflBD5Vfpd:9TvJrzrXRbZYDFtEFCV3
TLSH
T150630274670D26FEABD78E185FEC5B6C3284221E49141B52180F42DCE6B79B6C9F63C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0.0.filtertrie.intermediate.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{8ae8431b-7e4b-48bd-8f80-0243ad2b18a2}\0.0.filtertrie.intermediate.txt.WCRY
Size 30KB
SHA256 f9bf55ebf69b2ceaeccf587fa784f2e5479f4bb584050748af0703c0803d9435
MD5 537773251d1ff1959da24b79197a5c24
SHA1 63fd4219a969a19ca5813979ef37422182dfe0e4
SHA512 110490381468aa2bdcf9453e16765524404130a0f8d1a27e20400942fcbd6d2707856c3b4f0e53b3baccc735e086a2eb6c69d9b374c3784a224a7b92d7fa0032
SSDEEP 768:p8V0cqGeLmlRa0+32V8wm4OryZcl/RL6uHDxafWbuK:pNTLYa0Z8iZyL6GDcfWbuK
TLSH
T1B1E2E02CB17333DC53EDAA564C8EE326769DD2529435E828010ECAC585AF1C5A1EF6F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0.0.filtertrie.intermediate.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{9c5d5757-6c11-4da8-8882-784504d67f17}\0.0.filtertrie.intermediate.txt.WCRY
Size 30KB
SHA256 a7f0f7a9ecc83769b218e2717e7f837bb506570a84a79b51d36fa8e12460226a
MD5 f17abaab6a15f119555050f1d158bec3
SHA1 f376cc9d3d5c409bbb3587c653bd740720cb6242
SHA512 f8f95cfce43e4927d1670eb82880362ed5a4c2361b2bd586ee2b73b5feecb2f820f626949bc0c6decc20c4c38d57f829fae5f18955cc9d2add8ba1a55a92106b
SSDEEP 768:6GC/3OY+qnUC94f0q6vaLDLC0Bu3iKaNFgaRU+PXN7j9iOEkY:6GCmY+IUT8q8+XC0Q3pagar97xiO3Y
TLSH
T114E2F1C485E6CBDFEE54ECCBC8823750B4A56AE33EB5463C29A4354E31A9C5D308F912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{f11e6496-72f5-4ce2-b9a1-9bbf45269702}\appsconversions.txt.WCRY
Size 1.4MB
SHA256 f8412c418834862bdb0931bfe671e835001306a50e42fb026cecebf282685d19
MD5 51bc814c2a40e6c01ae306495622bb7a
SHA1 723154d162c0c74c1af93db09ad89d72fcfb708a
SHA512 d7b865cd8bc513dcfbeb0edb8bf4ab5ebdaac3d6ecede9ceb8c588e5fd0b15d436a92307602cbf70781dfccdb0c485fa1686c6a46d337ad4d6f740a95973edcc
SSDEEP 24576:bnAyVBM9oqSdAMmBqqq4Fi2kpQ3zZzpmuvuHdarElh6ZMjLdJw:bnAybMSqGz44lp0FzpmuWHxhNVJw
TLSH
T13265334F2A9450C280E2825F584B6A921D77F4AFCE7524B76EFBC48E7B92E7243F1144
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{f11e6496-72f5-4ce2-b9a1-9bbf45269702}\appsglobals.txt.WCRY
Size 343KB
SHA256 a1b167e7b1927832fd10518f22c81fa0d8b10b9992a1f4bccb83029545962141
MD5 0b5067da2dfe843298ba257cfa94e362
SHA1 393e926266d1a4f451787d3b19907da4a39deb09
SHA512 91de2e3a7fc1fd61fe4027c8fda58dad4f3b3ae2a4978cefe5d26240727b5c89a5127ead7e739af6b42ba7ba6af40cad6accc94952021d1ddde1f6d983a0fc9f
SSDEEP 6144:YbBpgrDTM578iPVpUC2+r31c3hzfSyrEygKp9bC+qVGlKpL7sX:Yp0HM5nVxBcJSybW+Dl
TLSH
T15B7423BAF1EF156EA15480A8478FF05EEE6E105524BCCCA7CEC214B011E1C79919C6FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{f11e6496-72f5-4ce2-b9a1-9bbf45269702}\appssynonyms.txt.WCRY
Size 238KB
SHA256 1af26d8b2f93f184b1ea79b6735dad557e8fee5609b6044eaa2d438421f3bef6
MD5 509661121c5f6ac1f0721902c3d2a97f
SHA1 00a91a93d1087985e904c86daae3347142714eb6
SHA512 6408fd3d9faaff983449e353f97b37caa96d7c3f5e6ed8683fca944d1d595995672c67a1b033c6c8a6392ca46fa9db07bf40c3391d96a48f722857d8c2b3bb0b
SSDEEP 3072:kbzFGyvzLaoax9cmiHchWQUFJwvlBQWYThrtfMtTPXYfpfKRMYD3GcCNVO+/vqO:iKoax9FiHoWQ4wQWqhJfILCyp3Qb1vT
TLSH
T1A43423695F9F16DBFA35843A824C2A46C5AC487D392DF85E1CCF32DBE8876838905D60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{f11e6496-72f5-4ce2-b9a1-9bbf45269702}\settingsconversions.txt.WCRY
Size 520KB
SHA256 25f27b1408f6770d0eda9d19919730c464046bcb4202ab3fee765d1ab9976243
MD5 2ddfb23312031ae38686d90d829bbe9e
SHA1 0c61ab74c2da8aa69146d46e49a526c786f4b43e
SHA512 e4add3d42766e7d9c70f031323054453dc0d156137e4452f52a0430efe843dccd41090eefd8c837c339147e7b40bf09d7f54c51b50f6ed04252dce887d425a1c
SSDEEP 12288:BoHONp7B0atspoGR79HkBi3m500VbrXs8AnGBjgjfnqklbQFyjrXvjM7/:d90HoK40m5jbzs8AGqhbQqLjM7/
TLSH
T19FB42361181709D194FCB7F7D01E02183EB94D540F6DEEBF41F6F96F86A92EE622A006
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{f11e6496-72f5-4ce2-b9a1-9bbf45269702}\settingsglobals.txt.WCRY
Size 43KB
SHA256 ad48487ce3fbe1b8362aa640837c783c747e74ee8ce6f56f4f47e341cde0d825
MD5 50b070a389535f5dced0cbc959b598dd
SHA1 6f484171adc3125e7c6edfafb1d9c753d57641f1
SHA512 a7cbdf16f812d54a6f8b1bc82d32803e2d399423b8bc98aa659204ffbc092e4c9f5017857a8f3c7b901e77a168321e8ed1948271683ea512bc3e4a316899dd5e
SSDEEP 768:3LpZqGMMBgkm2awvlhGFhUi5Mi7NBTnUqnSWsaHaKteBcSnNB/k42Wp+u:3LpJpIwvlsFhUkfTUgg/pp+u
TLSH
T16A13F1346F8575D908AABF64FC3583155EA587B29049C70A98233AD8811ABAF0D7F48E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{f11e6496-72f5-4ce2-b9a1-9bbf45269702}\settingssynonyms.txt.WCRY
Size 101KB
SHA256 0f18689926104c4fb98471a7508a89578256159d0f8024331b74f6ad764a4693
MD5 f58834ba408cb39636990e755dee17ca
SHA1 4fca6d8dfce64e04be31f8e3e8e8015d2c5222c0
SHA512 c57c87512eeba3f50c18a3b33ef20d41b88c118aec162a50fe69788b982febaad341d22f3d866eb04e7e039ebe1c0447cbfb55e453fcb0736a89111255f7e842
SSDEEP 1536:vC1oQPgaZWoHU80qLtCXlqWqMVH5jf+xRoKBGI51O4GVQzp8UVWmmmRtw+En:vC1/gaQ404tClVZjf+xRVtOZUxmeEn
TLSH
T14BA3120639E63DB4309ABE1B1B98329331AD3F517CDA539393E30A3603B5A7D548685F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppCache134336129508011967.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129508011967.txt.WCRY
Size 59KB
SHA256 9a216838850e53ab90f29d674fb32152eaa0604883292773ce8743ecd7e52f27
MD5 defcecf6946ed620b561cc4b8bd12f3c
SHA1 f20d36195c159bd064c93f826c4e81099efb2f70
SHA512 075acb81c46ec77e6924c2d42857a9cc85d746814cc6e53e26fd2c43c8c4a9f2bb13d4aaef262eff6d12168ed87ed1e5778a40037646e364cc6fb864e763c32f
SSDEEP 1536:YzHEUzhjTbO+Yf0cQMG2JCl1JM9i2jc0tYt:IHPhfbO+pcnGz1JM9fjcKO
TLSH
T15653013F17D1AEAF74B2CF5E1CEC90462D2F2E0E553A5E81D88704ED7D84A194B1A392
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppCache134336139034379356.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139034379356.txt.WCRY
Size 73KB
SHA256 8672242abce906a3e51b4b1fa6437be452f06be3de44eb6771b9d9d99903cdb7
MD5 d1a24bcb281a4ece15fea75171c1eff7
SHA1 ac38436a4dbbed4476e81a9be3a6054fc5fba316
SHA512 4b6563209a31113bdd0ff3eb11945278b6e53859ab9746ea0eacf84eb2c7e368d4e9a35fc47071cd2215926be735d774173e1da41903833c61c0663b0e6361ca
SSDEEP 1536:I0fO3G8j+175vN0S/h0TLV3imaEkFVA8aLendiR4r:DEG55vmSeTNima7u/4ddr
TLSH
T1F27302FE503D6CA2E18C56A2BD66A4D98F07107823D8DFC43FA25BB1EDE094C827E151
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppCache134336155137983943.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336155137983943.txt.WCRY
Size 85KB
SHA256 679ac33479a2db28937ac16a50124b2752ff1f903b706841f079378527bad380
MD5 7939b455f74dfd26ae561976e71ec90a
SHA1 a8cfe00a608ff1989f46395e5977222afcb6cb11
SHA512 b39bba164d672c91b4ae3c100b6db8d7404efcf6f7617d1654157b3bbf75abff12ab25dbb93d03a2bebe62e0b813f9a8ecc0e36e1670ddb30cf92f92e95c84bb
SSDEEP 1536:sSwT6JcPKbdk7zPYbK4v49uFh84eHDwg8tei9RGkyoMDurdvB:sf8SKb+7kW4OuFhCkj/RxVMKZZ
TLSH
T1AE8312B66E11EE358D5A7EA09C38812E6B1D6FCD91AB88242D70D09A32568D311AE31C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10.WCRYT

Path C:\Users\Admin\AppData\Local\Temp\10.WCRYT
Size 64KB
SHA256 2b458c48dd20870bb817ae588b91d422cfa27e4610175348e98cdabf7dbfe76e
MD5 cfe68e5ebe957b6d75c0c1a91f25d34a
SHA1 c04881bb9f603b6b7fe6f2563337d72934110ad0
SHA512 f35a38375da25d11bfadf6351b532ee80a223532366e85c97b80f37be7522aee0ecd93255dc5597f138da3fa8beede3aa30a01ad69d0fb8a8d757adcd37638b6
SSDEEP 384:DL/aNU/gT2/Hl/MI/Zk/Ey/eX/MA/NV/CzS/1o/Yd/eAe//r/tM/D3/6k/pe/tZb:dRI1t
TLSH
T1B453A4A53281CBF3313966A0BCD9E525E13926B1E0E88F4561FA9613FC5ADDC62313D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_vcredistUI26D7.txt.WCRY

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI26D7.txt.WCRY
Size 11KB
SHA256 8761d508060ac386ee67297ec56e96dd7f7a24988a04a0d9e3f6f841b0a9856a
MD5 8b277b69ede892ff71c5ebf4782d9418
SHA1 f4961bdf87762f4c80781c4a5776d479acda7029
SHA512 6cc45b6103a5ab098a7221b5def90590c936c31d840c91d200ff51f903319b5e16e925319794256f4ce03385358f01bb2d6279be09a1cc11274afe0877dc5cd5
SSDEEP 192:HS/T7I+s4Ka/Cqd1+0vDtv+I0ckjBN+JnZvJg4si4qQD8UEP+2jJs2y2oTJMAckt:yHFX1+0vhvwDjXinZRE2s7EPDjJsRiAh
TLSH
T17842BF7172B7260BD596A6AC3DBEE2458CC00F44F552A83390AA5EDB02F9CBBAA15510
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_vcredistUI26FF.txt.WCRY

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI26FF.txt.WCRY
Size 11KB
SHA256 dc55c4d1dbfa3d3c15af98c4ddd960af41805a1119c778886e54373813f88093
MD5 234e437bf796fc68714584cee662789e
SHA1 45523344807caa115193ad0c0daa808b1d42b335
SHA512 effc7f7352fbcc727e4a8752f4bf269fd5723b963bf51157a3a787c6774db47bdb733e53c40dcabf5d7e509c6b8a50d0f15c15bfd9a1d4be61cf2b20d757a6f3
SSDEEP 192:yqPhbkguwBtq959It4FLbppEudHtcfY2D7w93E+RWh5nEZd+gpi66fRJUtTLVxtC:lZbkgu75lFLb/4fY2D893PRWhKD+qiNV
TLSH
T1F742C058F3440694F6C5E6620B56244D4FB150BD2C1BB9C849F3D63C30892B5B9DB0FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mapping.csv.WCRY

Path C:\Users\Admin\AppData\Local\Temp\mapping.csv.WCRY
Size 121KB
SHA256 d88974ac184682d33b7efd0399b6f0b0e201df7a33296d0392f935ccc03b5527
MD5 2af9bcf9b0f9389f5118c4d6694ea425
SHA1 57960abee6c5b09094a73375cbcdec916c67d5c9
SHA512 58795d0c469a6cda8ff05c6885d31c22899aaa70403eb32014e732761b0bafc8268db8d5a456490b0bd95206a91e8814a6ab8fef7b4a4f0303b9b4c0ef546534
SSDEEP 1536:q5JtJphrC19Ashbg0vZ/0/hIy/EmHytxPSjhL0+PkXWq8kHlebpTI0IZx9SUhCfr:G3ZQ5bg0GZqyLlkXp8Wm8/9vExMjERb
TLSH
T168C312E7504D3F2207EB93A00B98D352AAA57B077C115BC96E5C950F368423EF526DBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveUnblock.dwg.WCRY

Path C:\Users\Admin\AppData\Roaming\CloseSet\ResolveUnblock.dwg.WCRY
Size 148KB
SHA256 c14c09ae29bd3784d60b53c8f74901132820ba9a26557a1c717ecbd0e09a31e1
MD5 eb05523ba7a9ed91e1a80c703aa334a2
SHA1 fce3ca73c86aa969ce0a6d0c5439db38aa49c3c1
SHA512 eece561ad8867f89ed9edf4e4f1143b9460f5c52368fb4693fae58e0d277e8021fdd7dd9de6aa6743a79611e8d3f1873c4b25dbbf805cd4e5ad6528f68f9f8b6
SSDEEP 3072:qZhGNqoZLehCgueaDkvcBaaYmhi05bmEhcAbq8H8fO4TFtqN45YdZs:qZkNqoZNDzE1mgymYc748TTFts46dK
TLSH
T18FE3123F029B9698A386BC717B0281745112E212BC4EADC2DA265E1FDFBF940F57531E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendRevoke.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\ConfirmBackup\SendRevoke.jpeg.WCRY
Size 1.2MB
SHA256 efb059178cd1b0bc20d886f610f669eb58a57655353338da1a9da099023b3d5e
MD5 a9eb038857aee83dfadf39ee8496f415
SHA1 c46f165ae3b34933f429dffdb66f28eb804c7a92
SHA512 e5c69bedbe52d2da5b22776f9b376cf73d24865714e0b0a374d5dc005c1a93c191854638347492d7ebc2f5fedf641a5aad84d31297e8fe2dbbc976070de2e77d
SSDEEP 24576:HDgCq5f2aF+EYepy4/9P1o0+d0lCKsUTh+UiL2ecSRMjfCKfDQLV:cCqf9xe4oQYkiLRRM7CKf4V
TLSH
T14E4533473074BBB2E9B87E50A0BABEAEF424596CA04D4534EE96C3294C1FBB5D0135D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitUpdate.dot.WCRY

Path C:\Users\Admin\AppData\Roaming\ConfirmRead\ExitUpdate.dot.WCRY
Size 192KB
SHA256 418b67566e84bfedf3a5b560bda3094d2cca270604a39663e0435c4515d236bd
MD5 f645878024bbec136e7e99dd3f77c73d
SHA1 c3adf6d9774484de015e3b1373fc433b475f6e41
SHA512 1c1dd8f5b95da1ccec02d50a4d9ad6eb9958c61a2d5597207acaa9d5738c60349d95ea83438120164a41d7b89349cb4eec53b4396f921a379365073485093328
SSDEEP 3072:+euXb7UTyjq5AfwmNhNTTtfOnLbeNe8CFgz1gV5m2ZcEgEy/Rb532:4XbKz5AfworTTtGn+N7+nmpEg52
TLSH
T1B51422A7B109FDC3490F99261B26B6C1A63F3C9D86C9F222E1907D7E7C442905F744AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishWatch.jpg.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertFromConvertTo\PublishWatch.jpg.WCRY
Size 574KB
SHA256 1f0bfa01d8046ac4682082e865c4de0d05ed5496a7985a8b8fa57916df57f2b2
MD5 b540c1f0fbd00e67417598c7287f56f7
SHA1 31044c4d861ce1e47266b5de3aa9cd2e841b5cd2
SHA512 bf4a00e3c890b39b13a3c0467c2464637d023c851006853c674fe5965e9720978b8959689bb7dbd80f30731327e6bb2ac739aaadabbdd3f60fba9c4ec8405f02
SSDEEP 12288:dBhKETDJjMHsyoBCMqjYFs31A4QgHhjiLcMXjkgA3MCh72KY0n:ThKETDqi0MqkA1A4NHW30Th7x
TLSH
T1CCC4232D847356DAFD6B2203CEDC6912B209B3AC7275C9CB2B542C048B9D7ECE771691
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendFind.csv.WCRY

Path C:\Users\Admin\AppData\Roaming\GroupMove\SendFind.csv.WCRY
Size 720KB
SHA256 9b8116e9e60ceeb90ad1709d688f771f89c3d564525bccbf58b1d4ab64319e17
MD5 f35fa3b206cff686868a8d6aecef321f
SHA1 4b1cdd54a1b595973989d4937f62bc6c8e25b7a4
SHA512 49da5085fd0843d04cdd06857760252cbb005313dcb630bcb11f7666b0c9d7a872ed1eb5664db107c9ddd451f02a603fe639bac087022b9095c80dd1c9a8985b
SSDEEP 12288:xLDe+inP4P8/bM7Wgd9zaS8mA7aU6cNJ/YqOw1fZ1mb4qYwSl52fQKGRTo9CX:xLwnQibaBa646cNJ/IwtmfFSPgWloK
TLSH
T127F423A4A74C4DEDBDD33400AF20A4BED5EE3CDC4693CA00C5FA16AED515C8616BA778
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CachedImage_1920_1080_POS4.jpg.WCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles\CachedImage_1920_1080_POS4.jpg.WCRY
Size 76KB
SHA256 f3fe240ad35697276764474e807e761058d43c8105232b765a7c01b71d17965f
MD5 965b378dcbcc31d9eae029c6535acf73
SHA1 55875c219c6c4a28fa0164cdf89e790f60e56264
SHA512 a20702bd816d3fbb19762572767bf18644aaa3ae9e145ba6e02a04baa24f31a87c6b22d3f2882c20fda20ab5dd4631c156ba1582a7783e9e2b379a80d3a16729
SSDEEP 1536:6XxqUW9w3LbsEUkN2CGfgFJ7vfUfO+IAQV49qiPi78t/hRa6McGM3aHJF1J:mbWKHsCkCGfg7x0Qu3S8RbaoT3aprJ
TLSH
T15F731280FC6E42A9ABEC7195720721171B0618408F993C6770DCA9BF2B2B7A7FB72014
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeDismount.wmv.WCRY

Path C:\Users\Admin\AppData\Roaming\ProtectMerge\OptimizeDismount.wmv.WCRY
Size 187KB
SHA256 ca51b669d7b4c0222febb2244b410931d46c1ff6e884d33e15d338db130bcce8
MD5 64e50f9f46a859fce3226b45cbbad032
SHA1 bc5df457d96f9734537ce92c8f79509677ce805a
SHA512 beba25ccc1b4d53ac84dc5d2f88316e39d8dae0a58e4b9a5b51c611028e4d1b04df7ea74728dd575549cc3b2537ef5de8815460f974ce5c6fd68d510c2fd5cd4
SSDEEP 3072:3ifSXorbOt9lzgwfZRxU68CXH7r0J2mJeCir6k9KqsvN5M1t23tw5W6MmPnJh:32SobOt926YCXH7QH6PKfvM1odw5W5mb
TLSH
T1E3142295136B9B757287E5F19E32390DC0FFF60828A1E4CC2F610C54A2DA1BF926D361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectAdd.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\RestartTest\ConnectAdd.jpeg.WCRY
Size 749KB
SHA256 5695d2f3ccf6f32f374115fb441d3275fac3de883c38e9a286ccb68af1755a8f
MD5 8680bd662a9644154b2c1ae8f0f32302
SHA1 2eea3a003aac275f4077a42ec4c645247cd20f46
SHA512 078031dac494811eb7637230b823e7c7f4f803591ebd22a2e0066fc5be8d3048a988eb191c14f23e54a875f27018cac65cc27f83c674c9d3d860267bfbe8e211
SSDEEP 12288:D0MBIJF6HPRVvnVZeLkaFm7aRA9faJSiizXSphAlr/so0y9OUk2+8bAoAvzYxrqz:D0MB8A7VIm7ZRQ8zXbV8Uk/bog
TLSH
T10BF4234391B0C2A97948B755019D4FF225AEF76329ACB76EFE1DE80AD08DEC9E002157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantUnprotect.mov.WCRY

Path C:\Users\Admin\AppData\Roaming\SuspendBlock\GrantUnprotect.mov.WCRY
Size 128KB
SHA256 86f8547b3898430d45b87fbba9d11f7343c73eabd578027a1c347ad6a7f1a393
MD5 d9d5e5b7e09f1ea008f2733aa4ac10be
SHA1 65be86e0498b76a17dab6ee46f194afd81935444
SHA512 f72f2c353c8e209a1bc1b67d6b738f0341cf7975ffeaffbe7231c4e62ed2879efb586c7d0ffc3c87f93b79979b753f731f36b3ef3c92438c71638ce6cb18a7b6
SSDEEP 3072:yWq8s9MvLtiAYcD+wxhaFZGyzrAK9PKq6d3BBxVK:ydMvKcyUsPzrHgRPPK
TLSH
T1D3D3125DCBC14607A45882BA853DE2C42165E0949BB22C6D0FAC5B3773437FEE6D507E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendInstall.rtf.WCRY

Path C:\Users\Admin\AppData\Roaming\SuspendBlock\SuspendInstall.rtf.WCRY
Size 768KB
SHA256 43f5344357f70683bd20e92029f91421c2a296ad77dea174d0780185cd5e48d3
MD5 aa5062eafb7704442c4c123619c5fd0f
SHA1 419888d0744776021f1c2ecca2bdd35981324bde
SHA512 e80a239fe5372149484ef56c4c56ab18d3fa266fb673eea88eb589e4622fb68d357e571daa6521bbb5b264c8cca9a398b3f1c6ed2940c3e920736dde43433bf2
SSDEEP 12288:M2yAaCyhbP/lfaF8ZTGV/umVFwkCPz2yNv7Q7XDVi82V4v07yTgiusFI9xlDHl+:fI5amZSVvOte75B2Cs7yMiu5b0
TLSH
T1A3F423CFAB3F17B96EAC423C8486DEE59190D3748296B32197FB748B7770E182615390
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupDisconnect.bmp.WCRY

Path C:\Users\Admin\Desktop\BackupDisconnect.bmp.WCRY
Size 511KB
SHA256 e731656e95d16e3ffd6ee8d0c9ad76f44bff1e27141ac2bab1f5fedcea29c2d8
MD5 b78a668faddcbacb0abbeb3cf75c5e9c
SHA1 7ca58962c8a5032e70c9535a09db9e6139a57990
SHA512 8f56507ea5eedc23ec753abcc7036babd79a4f191ddfbbc332f7b5670ff7d2626df712ced71f7b46e5ea7c767e8eedc8952f0a7aabc937d2e6fb86a08270c9ed
SSDEEP 12288:sLfgXw6oJUFiMZxvY0gqujQybujBtf5M29gDhhEy5:6fGwj3IHnfdFG3Dhv
TLSH
T1B9B4233E9BC782EC214F94998C6A83D909FB5C0C37B94DA5702D79837F799D5E06802E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointMerge.wmv.WCRY

Path C:\Users\Admin\Desktop\CheckpointMerge.wmv.WCRY
Size 1006KB
SHA256 baef704712ba831d1161c47bb938572e80e07835cdee422b76725e40c50113cc
MD5 b6ad7cffea1a6b438b8e42437f00403f
SHA1 1c47edfb8bdd163365a31f9f4bdcc51e86d99083
SHA512 d8411f05ffaf1c0bb4c78fb1300a0eb896e94c7d4d0e0bcd1c4febe847ab30b9101abdc6ef50b734bca69acff33f5a1eb8b9ade031f02c080462e695cfe96618
SSDEEP 24576:AJQkjVAyN3Gg+aaBJO4K/qWrTRW4zQhKgxE:ArjVAyN3G9TzfDWrEcQtC
TLSH
T16F2533E1C4EE08D1F099879F330136DA567B1F721CE4E80225FAF52AFC6A97C9C49496
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertAdd.docx.WCRY

Path C:\Users\Admin\Desktop\ConvertAdd.docx.WCRY
Size 16KB
SHA256 a16109a1164a49a1755977a85a9e35268252bc55fe6118bb121d6a5ef81d4d7b
MD5 2ea38c0a53a56741cad34c1a3c75d671
SHA1 2b6973b1e26a65fe1c80562dd92e93fd848638ad
SHA512 162fa6c446dcecbb93dca5495c4aeb7985a83b93b9b7a0787ea3fd9fb1d8c3da3a42caf29c1f6c5858c2bfb1d4a68fc529c3a492cc5621bb8d62faaf79bdace5
SSDEEP 384:vXi6k9MEf376CCRLwF0LRHJte9Vzwl5sH//E6nmn2hRgRc5Uu6p6Ljq:vE376CMLku9JQXE6nm3Ro6pKq
TLSH
T13872D0BA476E057764A301B35C78AE01AEBA9777FA761EBE14904A5E1017F9CF1C030C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallRepair.bat.WCRY

Path C:\Users\Admin\Desktop\InstallRepair.bat.WCRY
Size 790KB
SHA256 9499af8aa001e5011dbee451052f0c033439bc417be91352a491dbec3a318462
MD5 55bb1a4f945192a40512693a3fa793b7
SHA1 8276869c7ae6d6a16500e59ce1dff68577a24889
SHA512 5e3690a8a156b227c5f448631a25a5c07449c0567cb46983596f693bd2ce8e636ecba11a87c85d80bcd0ec36cce6098f4250411ebbf49e0b349a3d89caea9d1f
SSDEEP 24576:BHHtlPD8Rdi99Z7Hp06Q/S5hx4W88sQsvES7cw:hHD1bpjhxR8USj
TLSH
T1000533D80E09941EED8FB27B5DCAC9DF4A363BB651C89C8E0BC451A64FB50831ECD50A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeMerge.avi.WCRY

Path C:\Users\Admin\Desktop\InvokeMerge.avi.WCRY
Size 1.4MB
SHA256 6df9ef567cde1cfd32014485858bb89a4c418aed3b94c7ce3e95174b553c5bab
MD5 93553b42dc15800822f64b6cce5e3b8a
SHA1 b874b384ef9055f9c52f31d4eebbd2d2422f1aff
SHA512 2495833ca77753858bf45defd56651ee0168e24e56900070bf4662f3b8befd078996dd3fc973451375e77c95f4115fa13aeaa123eeee7c6e997fb4da1f12edf2
SSDEEP 24576:CYJTXm63Y6xEFIqsyj+OQzXRiVjMU3a15nGl5FZ4Rka6upqYSjbTaYPnrxLwuKRR:TJySEIlyj+zT0JmGTwhabTaIrxLAR57X
TLSH
T1896533DE17C3C3C18F9619DD243F3017FAB8F953584EA198464B1227A29EEC0EA6516B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinWait.rtf.WCRY

Path C:\Users\Admin\Desktop\JoinWait.rtf.WCRY
Size 635KB
SHA256 8bf9261358590a4ec743b91af8b1f60043902640ca03022c8fe082c5811f9a00
MD5 9e6e7393ebcabeef73b8d619ae31cb8e
SHA1 e4548dca6dbd9cf6767f93dc0ec98475327b003e
SHA512 5d0c54449d2cb61fb41d24e82fe77d4eec0ab209d78155587c8f2cb3f2f9d62ea36a72242b6cbea09d3714f9a1bb19e190b694408affe394c088a0d8e4191683
SSDEEP 12288:9euqqy6iC1xALaMjlg9JcLTSvl+MWSoOonr6x7OMq+OISQRIJjLmpdeKSjaA:9XRPxALaqgYLiq79nrK7OCOuRIJjLmpM
TLSH
T1F8D433875ACD7A0CA07F77C517217C1F4E4BB1A8368205B53728A5260632F6762DECBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopEdit.mpg.WCRY

Path C:\Users\Admin\Desktop\PopEdit.mpg.WCRY
Size 449KB
SHA256 0930bddc0e1a43bbdd8019623985ff6e3c79a3c624d5fe51a67dd0ca3ef8fb48
MD5 eed508f135a0d0e071b5fe021d60de42
SHA1 4fa1231b539e5bda24c4b104702c06a7343dc5c6
SHA512 90e632121bd07d765a550833079e0ce8148bac1a3d4d4b81f701085a6cffe98ab129928714031bfca05d62f1c23e3dbbe548d58a7bf48557fd7a4c86ce03dfe8
SSDEEP 6144:sDwYLtT1V8tMiwtXCF9u15KGRDR1Q46oSIa/p98yBsespxlJJSIzLhJfQd13fB:DYpT1VF1CS1faoOT9yxlLSWLhxw1J
TLSH
T128A42329FB70B72F97407A3D6D652D8ACBD1D4109525E61832B88BD8DD0AF0251B2FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairPush.docx.WCRY

Path C:\Users\Admin\Desktop\RepairPush.docx.WCRY
Size 17KB
SHA256 3a6e717f32fc0e3022132a6247f5bebc7ff28f62596b637daadf3bf79f44c184
MD5 4a1189fb50bad3a1539d85bd82817984
SHA1 2f023457cfb65476a74244178e9097052a8f21ff
SHA512 d23c44f63179769bea64a4a18d2f746f066c41de5bb8e142059d980e4f21e23a57724160ad8561d0c586c8cf7a87bdbc9bf010c2ba7a5a8017bf519bfc97559c
SSDEEP 384:4+gpehTfEO3njn2UFVB5pSOF+sdvmkz630obAR7tK:bbTMOXjn2UcOFxdjDtw
TLSH
T1C182E05867FEC3746A0CCDBF6B712405BFFD9080685D04CE0BEA2C796E1CAE1A169A01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeExport.docx.WCRY

Path C:\Users\Admin\Desktop\RevokeExport.docx.WCRY
Size 20KB
SHA256 47dcc43325095ecd715bc2c8383704b8d25eff42bf623ff5bd83205f2bbb867b
MD5 1b8f28e0b9161ef15be4e1b5c52e6c9c
SHA1 f823780cc1e9169b43bf6945e99fdeda928aec5d
SHA512 e8bbdf099efca2b807cf8f11f97d3e532ab07a191369f7bc01ed21c9f5425bd7a620cd4d4e57a225654306d4d517f130a9643b0a30e04e3afaac590a73c256d4
SSDEEP 384:856vC/+scTIpgfcppu4CxCCN9u7/36dYQTuye6Om9lY:A6vlscTkgfeUCCnur3e0yXOmo
TLSH
T13B92E1CC302D2348D58D971AE6FD99D9532B979B10DC796C8FA7188C88F1D7436CB21A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveUse.svg.WCRY

Path C:\Users\Admin\Desktop\SaveUse.svg.WCRY
Size 666KB
SHA256 c000aeddb938ada305c5ed2dbca9148057707f4ce1e9c5ee74608eef8d4fda35
MD5 6e739af27630b2fb5d4309a8e8b27ec4
SHA1 2cd914c7a3a8b0666d6f794003b979257d524077
SHA512 a1b2078e20e7dd1ef3e18e190612922333d79c021c932ea0a74721e842132dbcbfd22ab004375504de9f85a2bec3383b7d435886a62d2bbc6c504bb618d31b74
SSDEEP 12288:4JgkKsJB5plLz1FUlDCK7p1q4nVEdTO1Xu7gSOlpY4mLDtNVqai:4hP914luk3/xe7gSqpoDfVxi
TLSH
T1F5E4336B859B308437601EB8E1B4C9855A9A7D52431E2DBC31FD30E336F2AF1B1B1967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectSync.asp.WCRY

Path C:\Users\Admin\Desktop\SelectSync.asp.WCRY
Size 480KB
SHA256 39020e0655bcc2a75a136d9e62a4b832d9b5cb137030aa2c3b4a67520bb3392a
MD5 9931fcf489066aa1609214e807a71216
SHA1 289cfb4c1e1f47da65ffe813a94a7ba5f6bbf9ff
SHA512 c54017afd5dfeebea78a2109845853b26bfc74b3c2e34aad2ad6b6eac6bd4a2939f1c6c0ab7d51768fccc73f1576442b0864832e578b8f498acb6c79e76ecb34
SSDEEP 12288:K9GIXiRWga401dLcbFQp2DqpXBUVxd8pk4agTtm/XjVyEZ:kfi8ga40MOp2DqgdEgnvjVyY
TLSH
T1FDA4237E46F5009450A41EA2BEF762E67942C8FF1D8075C740EEB12621E5348FD9BB23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowPublish.m3u.WCRY

Path C:\Users\Admin\Desktop\ShowPublish.m3u.WCRY
Size 759KB
SHA256 f60099b7bd42dacb0e553dea9d1475f67c5ddfadadcb05fd5fad421767ba6090
MD5 41d04d1841c3348444c65243923ce8d7
SHA1 b1d51fe52472b65cf756ea74983d9f3a9a0be14c
SHA512 682f594cc1299dba68134ccb6565a5288a78a04e749827cc069d345d81131c4da879d54e82cb77051414e48fbf8ebe12921e3b80f20eacf2b188062c04582308
SSDEEP 12288:4cBKVGkj3g7VdA85Bu+ph+7uCAlWAmu5NyIxcrnRknOvDll26bm2Xh0UxvctlT7N:pMH83u+phnzwI6nRFLbbm2Xh0Uxo3EqL
TLSH
T1B5F4231C02DEB5C6875E3FBFAE16C653A08A2F1166013E7A74FA806398DCCB495C5937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowReceive.mpg.WCRY

Path C:\Users\Admin\Desktop\ShowReceive.mpg.WCRY
Size 697KB
SHA256 23801220c8d38daf843b03064788d92d2fd914dee8903f31b2a3533509f162ac
MD5 944d3fdf46af4d2fccaf1a8a5f765c36
SHA1 acb18a1808c1352f9c3063bdc3c14d7c18e83ad1
SHA512 0cc5db692761c4a01013e7ddfa97680f39f466d1b40982435d4c683560e3030ab397df74312c6cc34b0de956acc17e643525ebdfe6e3af62a296c6cd506571c0
SSDEEP 12288:Zenr8IH5u9Lx6Jo3N45/hu8juObjQC4axz1UhWrYytJYQExxkfM0aDeo9wD1qDip:Zenr8IZSN6k45/hugX74cBUhWr9pekf9
TLSH
T1B1E42302BE3504A35A5AD77A88F68043C88DF5462EDE8105AB4FEF70C46F894BDBED14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitWatch.svg.WCRY

Path C:\Users\Admin\Desktop\SubmitWatch.svg.WCRY
Size 882KB
SHA256 7cab39626c5d0ab8c67dd83e4d46a80b04faad662aa31731e134989dee9d9981
MD5 57f95db7c1ce4a8e797ab4579e92a43e
SHA1 961429c72f15f4d6837b51643b0fc5954672a274
SHA512 37f033ba8c805be408a147a3ed1119cecb8bba030968f5aa65236982a633f7c87b22fdeea8644cd531bfa167c5cc8f262c75780d75dacae51fc186bf8d27a6f5
SSDEEP 12288:gZ/UBYUpjBRSEdpwZH2F4YroY9+6AWg4N5v99fyzerPi204Lzq9u8ofcmWj4rTIX:gEpxHmI7AB4v7rYvoSsRO
TLSH
T12D153307C4307782295A3FC85B5C0B396245EC9B42BF9317E1F7C6AB65B08C3E65A726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertUpdate.pdf.WCRY

Path C:\Users\Admin\Documents\AssertUpdate.pdf.WCRY
Size 666KB
SHA256 1a4717b2e96c8beb11d40fc52ba29e5497eeae0f6d23732c642cb5791815ab1a
MD5 c094e638fea11f566ca02223498fbc79
SHA1 737a6a312d127f7896d1541bd5b6685d73486601
SHA512 9bb19b1131d6babc93354d0d62281d5af12be52261c5639e70c3fc1efd874a338e1b44d800876c644225739398b231d595de66e9476776bc72fefb1b7666ee1c
SSDEEP 12288:2RDKF471WtZppPGE9gCgihkFrJ9H48MSq01ksGaKYK4eJZ6NQeKjoO7x4Ma4j+LR:6a4iZppL+38kNX5lq01hK94eJAKeK77k
TLSH
T1F2E423A0ABBED14F5872E6F51D00711C6C2DFF6EC6976614D602CD57AEAE0D404B391C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointExpand.odt.WCRY

Path C:\Users\Admin\Documents\CheckpointExpand.odt.WCRY
Size 824KB
SHA256 abe79c24e8907dc23e700e4229efe2f37abc5fa805b5fc83d129fbdff296788a
MD5 036bba8387b85946926eb49329fba7c7
SHA1 3edc2148e8f0a76851049dcfafb1a9e0a9db4133
SHA512 c9c4ca9880353dd264f7652f6de0b3bbb54d2a01264f29234be959472c5558f8c6b65a964a8aa1a54dffac5fda1f30d74d18eb50285ef59ff92f724b1445d015
SSDEEP 24576:Cmy2XuauZA4XM/2Ew8HM3B8mgEZnDuOiMZkaICpaMDR6+N:7v8Y/2ExHuyEZnDxFpx96W
TLSH
T17D0523C8EA34009B627D3D9EE98FFFBA47E184C1564663C6D7269A00F1651CED1EA0F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseEdit.xlsb.WCRY

Path C:\Users\Admin\Documents\CloseEdit.xlsb.WCRY
Size 801KB
SHA256 544c4cd9aeb9ebcbc4470d3cff5067d68c47a0a2d91006de3b3614d5ad5bf53a
MD5 b439a460e80a14d6d7e35f93eb26653e
SHA1 a09b42aff78aedb3e40c87884eb3fe3e0b2530cd
SHA512 0245df91a5557bfd0e758cfe7c2c6167f2a98963aa79f36bdd43ca2e3673b1a50480e2d34dec83e253a24e76d5959aa8eca909a3d562bdb64846ab01140f8e01
SSDEEP 24576:eMOP5PYzZSLN36aod8AzAXDL0hQ3v+Vz6L:wP9Wc6NGAzeL0hQ3Qz6L
TLSH
T1CB0533985FA5D8F7F32CEA3DCB7467576C0A21789617B2E8287F99D311EB20920E0471
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertOptimize.xlsx.WCRY

Path C:\Users\Admin\Documents\ConvertOptimize.xlsx.WCRY
Size 12KB
SHA256 13f0ecf2f61f5ba93236240f631a771945a0313965e08efa0496177e1fa9a0b0
MD5 ac3ab23985277b8e3e77a6ad9582d8a8
SHA1 3c334f183084a5cb0069477fff6c01274aa85b94
SHA512 619fb403f09fb294cd1e8bb4d450d2c9c1eb5da42b4ae3c01189850694ebea7e3200334445bdf66ed6036944bb8828bde2ea0212f1b89dff171e23eda367768e
SSDEEP 384:ko8grkcP8bMIR5L62bbNBEnn9oHDA+/iVPV9jpQaEj:ZkQKMInz1Gn+HMfVfK
TLSH
T16A52D1C58A0905ABBA57E93EB629B7940D8F8E144ECFFCA9282C9D57E257E003351132
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyMount.dot.WCRY

Path C:\Users\Admin\Documents\CopyMount.dot.WCRY
Size 598KB
SHA256 83e535438f76a7daf2a47cfe567b084dcf9c69523899f34c12d4daf447093ba6
MD5 6a206ff507279a5c4f78bf413ba019cb
SHA1 be146cc56fc9f69f2e44295928d8c17021241a72
SHA512 996fc12b713f9332b66a86ab498bbeeefa15ace49185a11fdeba8d0760bfad1583aeac81321b194dbdf08fbaf77a7d593387b684641b242ce1933ee68092c6b7
SSDEEP 12288:CseJsk8HaXpmQwWH8uCXW2OsNnk2JbLiI/q64gHw66E2RQZbv7kb:jeI6ZmQwWH8RXW2OsNfpLj94gQzaJ4b
TLSH
T1C7D4237D739618295E4779EFE33683B8A1ABB1F0875C5352237E6E2C1AE511830381DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandOptimize.ppt.WCRY

Path C:\Users\Admin\Documents\ExpandOptimize.ppt.WCRY
Size 395KB
SHA256 c0f864453320b5d9bc56ce33d44e1c0ba58e848a9b0c593f88a0061664ee73c9
MD5 4aa3ae492841a1f3b42334b3152f626a
SHA1 965263e4396cf86575b7f037a82873cff40b17cd
SHA512 397f0ee783efd20a71252d5f55b72fce2438ad388a5b840ba977017f105e88f41d2c5349550722cdb07c6780eaffebfa5d29a641315caf38290d94f43a941959
SSDEEP 6144:DsZNd4DxznfduLA16LSqxdzmvcAUC/3aZRLAl1YcL9UT1uC6KWNcgw3K0lVtWotN:oZEddb1CXxcEBCshYYcRsr6Zc93Kg7Aa
TLSH
T17B84233D8A01B8E8AF77F897A6CF52B215B1CDAC10F524CDAF58607F6030959E4D861D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeDebug.pot.WCRY

Path C:\Users\Admin\Documents\InitializeDebug.pot.WCRY
Size 778KB
SHA256 afa2600c4c1a370e989d20366340a0aa0d801b9eb6c255fb454b7b38da10d3ed
MD5 8eba1fce2ab6a13d59ddf1cdcec9f3fe
SHA1 09b339afa4419f55c406ba08babff7a7e2345bc2
SHA512 0bb35c899364ea454d81c2c1aa37e8b3cbde6d84a1394c6367656db1f255409d2c62ada51c8178ad89d347ef32492fedb33472f1325fbfa5eff215ed2675648b
SSDEEP 24576:ViTKdkDo1WSuYhveRPypOSaLya+6bxOOwzMJuHyPw:0WyDSFWRPypXaGIeM2p
TLSH
T1630533607E632C2A6534CDEF9147212142A8B204CA97F03D65DC954D2FE9AE0792BFF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeMerge.ods.WCRY

Path C:\Users\Admin\Documents\InvokeMerge.ods.WCRY
Size 1.0MB
SHA256 487a7fc2f165afd16439af157843e2bbb5ff74300559b4a1da93066e55aaf63d
MD5 3c34f9404034d65eb67d451b09a9f98a
SHA1 9139023c09ce5deecc730daee84793afb0d2de9b
SHA512 0e08079925791b52bc3ee80b0e9f1b92a8577e7d3ca49850b2e642f1ff5208d16aaf684253fb0143ae9c6957ccf0ae03179e431b5033e9207d3b914f4bb5d651
SSDEEP 24576:mYyyLmyejkItzKUeg+utuMuo6MekB68zRXe8IHHuDqh:mMmVk2ADJMes6KXe8MHXh
TLSH
T1CE3533D372D4BC8D628041BBE8A36EDA813640CB72DF9771711A1CBC626FA1B5C6C752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitDebug.docx.WCRY

Path C:\Users\Admin\Documents\LimitDebug.docx.WCRY
Size 17KB
SHA256 0089d38b22f5500d4598f05200f0f443e16d3de0ca4afbd94073bab1a2680038
MD5 ac7bac70cb7c56086523e81f9ff97841
SHA1 4b82e3a56d7ac039002c03cb849e9cdfab3e999e
SHA512 06e3de19b33d537380a22edd66106609c5f6be66ce2fcc0474b8b5cc7035ff2e4730048b7f4d57603c207c3b96bdfdd414f824f66934070153b9bcdd84f4f561
SSDEEP 384:jlJdJO+8Z5sINOMwEPi7G1TJX8udaS260uB9zPI:jXdkziI87G11X8u86J9zI
TLSH
T1D082E068E256564E0598118C1A18D84C3A1AE48FE0D6CB5C7FCC48ECCECDA9B20EFCB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureDebug.dot.WCRY

Path C:\Users\Admin\Documents\MeasureDebug.dot.WCRY
Size 485KB
SHA256 f7f3db749e69af4a718f24d17607a0a72777e8030147958b8a9b2c674e77e911
MD5 0e9b6878f0743e009370b31433253df5
SHA1 af1779ecfba9f05aa00a93f3a19b4b23ef676639
SHA512 f26a1fedcdd67b23c9b71a93a405d33831606ea034601b25ec4d2964d9c64603b7947df72d88a7f93543cbb22770711e968c94ce1a9d49e4b37ca8b468eb5166
SSDEEP 12288:oRvBEsrlTkMejWk0yGlYovhRLXYjILgyAG8c1pH:osO7ejCYuRLXlLjAIpH
TLSH
T1B7B43369BFB54F7A9F2A3231C4096770535DE8D00FD68DEB8D9CE01239615DE93042E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountBlock.dot.WCRY

Path C:\Users\Admin\Documents\MountBlock.dot.WCRY
Size 1.1MB
SHA256 f7c9e0912487aec5f9d5cbfa01daa78e460d6fbd02ef7c07094dc3ed5c348597
MD5 482a61798c5d32085d9a804366d0162d
SHA1 17a69b8f05c439dad3478210f2a8345d1d59a62d
SHA512 10606fd209ddf431e6998eacdd1487168b600dbd60c7e64cd1544d351ded7334b97e1146abf145fc51928d041a816b94e3315e8a9cdeeb24d9a1a0612e9a4463
SSDEEP 24576:rznH5x49WReVe0HN0ySi2ExTr80il76t6dEHGyHAOS+U:/nQueQ1Qi746dDywl
TLSH
T1AE45335D49AF3AB56037895BCE0C7A931248F651FC379611CDFB0880B12EDD6DA1ACE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Open Notebook.onetoc2.WCRY

Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WCRY
Size 6KB
SHA256 4189d64e630e146c58c147f739a4afc7676889abb8b6d75c05c5c4461a7a9838
MD5 e13b4173f1433070904a8d38d79ca2d2
SHA1 4592a735755eaf562598bb3a5e8ff50c4d5b8df8
SHA512 bbb56520a12bab2ab6587d0efa3f85a388dd76e947bb8b076ca6918fac5f2f58a21794c854c62d95f5d5860a7d7bc86cd11cf487ce6a7103fd55edc0780eb3ff
SSDEEP 192:F/bQb1+op9DgQJepc1vN2mA1GY6q382DwEGBy:BojgI222tGBy
TLSH
T15BD1BFEE58771AE9A4AC30E70280BF78087798D20FA5E6D04B94A17B15C282FC577739
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenRename.xlsx.WCRY

Path C:\Users\Admin\Documents\OpenRename.xlsx.WCRY
Size 13KB
SHA256 39ae494c91014f36c8e6c3a18d8a222a9e9af97e87442498fe168cb1b0d6aed4
MD5 1fdf012980fe480caf45a6dca340fff4
SHA1 71ebb70f5d158880a60a90ae8e17950153933dc4
SHA512 e40aaf0a0191c09ac0372e3ac41345f1de31dab040233a72bb619c390aad809e84b28160948d310a384cd0224b1793d85597e66399a9d636a397258b1c51dcad
SSDEEP 192:NYMBQDHHNmbgojctmdmr/JiRqfFzkCiRd9QekyR2TopNCrcuQfeWUtvwrVEgHvUj:Otmbgojncr/G+FzkCYmTKg/9WURsFMj
TLSH
T13B52CF86837118238152385AAF3D9C602F98AD81FA40F8DDE0DC763D9EE549CA3DA4F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Outlook Data File - rexqjukgzb.pst.WCRY

Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - rexqjukgzb.pst.WCRY
Size 265KB
SHA256 6a0fdc7edaace4cb6a6950b3ba7ecd6475bc5ac771473e8e789b9df5cb3ddc66
MD5 490bb51a44b9b0e796b3a27ed96d7122
SHA1 676a245c7a3fbc126ac8ebf5ad49377eb2a8424e
SHA512 e6a148b45b7db614ed9010c40f0a10c0f22b3313c85c64c447eda0c71fd30d0b931d17e79097288ce46e25e988764b8e653a306ad90b8e11b38108905d42c8bf
SSDEEP 3072:EHw/w38mRQZmAOihwgTlgktNpvX5DTujeaMktmHppRJg1HVIWECUHvf65ZpeFMye:EzNRQZMavTvkD43uEvHq501U
TLSH
T1134423255C0D2FDC8D5C9C97164F5FAEF600221E2580670224BBE7D1A6EC732E7661EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectCheckpoint.xlsm.WCRY

Path C:\Users\Admin\Documents\ProtectCheckpoint.xlsm.WCRY
Size 1004KB
SHA256 a2d6bcece9dd86834428cad2c4aaaeb1c8be328406ae8dbf2156859f62b0204f
MD5 cc2f9c81e51d8dba599bc4cdb929d53e
SHA1 03c7ccd2bcd247717bcd10d857a160fa03c2ebc1
SHA512 1814f16826927539f3d9553caca9ca78ed8b51a8e453de5af8a5faa33d593f42e518c2d24aa260f12492d5cd7cfa7f96c775ee44f20ca7c0459f4ccddde6d452
SSDEEP 24576:p3hUsPG9AkwqGnlw4Y94Mogk940Wu5xnQrMtrG1UcmW:FhUsPOAkwD7i4MogB0Wu5FR251
TLSH
T11F2533D1284AC97C6851B5AAF2CAE9FDB3BCF6B1FC0B7197417EB487450766C2C8A500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushReset.dotm.WCRY

Path C:\Users\Admin\Documents\PushReset.dotm.WCRY
Size 846KB
SHA256 ef511e789e023aac3169323c77e738cabca6f149b00723237c3ce6c8b50a6f9b
MD5 f235d14d889db1a5b45eb7b0a30cf4c1
SHA1 945511f962b4b57d4404f1ef7c999b0bac9be0ae
SHA512 278d1148f4e240b9018e709de9e62691332a088c79a166499f1bcad90e73d7a494d25bbdefe20d9fb1619b972c50e10832cd079099aef9d57c8a8b25e5d39164
SSDEEP 24576:U2whZK8TQ1CWezJDTWOg2B53r6RUUsHt++w:UJTrICWeND64hSUUUY+w
TLSH
T1A90533982AD45B2B0D0C2644189504BFB6AC756DB34F452BB0813A3F7BF16F727DD8A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetLock.xlt.WCRY

Path C:\Users\Admin\Documents\ResetLock.xlt.WCRY
Size 417KB
SHA256 dff138ed853ee41a945ebe46759f8db0b2e68871829b986ac56b38949dd95812
MD5 1be5655dabe2fdd67eff4453bb59a39e
SHA1 721fd51fdb60f8dd26d652f6037202ad1a6eb1c7
SHA512 eab1d749b299dd965e5a5b8ca6ed3a7fc5bde267386161da81811b5468379e26461a1e8ef7f29522992ce96b5fad4facb62bd7843f3bf239730a0b790b6df1a2
SSDEEP 12288:U8Q5je0UuxFMpTU1M7A0CcESClPlTS8lLJSsW:U80Sru0pTUS1CcEfs8lVS/
TLSH
T1DD942300D9E998890DE6AD8E2A2D1CFDCD8321CB853F5705D05BA7518AEED1D72E037B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeCompress.xltm.WCRY

Path C:\Users\Admin\Documents\ResumeCompress.xltm.WCRY
Size 620KB
SHA256 dadaeb0198e7ba728f1c47cf407b309ea1daa1456d7f34574183613483eababd
MD5 337411841a42b9f74c0657fdf18e38f4
SHA1 4a2f74f0f9cfeca7e7e41d2a4f2a26802897b565
SHA512 7ca9494fd5d764b832fd012dc223475cc424e6989b993670d9238bf20fe56b1b9f9cc73f69c1556ceb5099d8a26c34ac867b131d85b15d87357e2a91aed9bc5c
SSDEEP 12288:rumHFKInAXB99r7h2JIKEI8OEQhJA+VJJvRy/E13c+rOEC:nH7AD9r7hGbV8QXA+LDy/Avrc
TLSH
T1BDD42325751AB2E36265339E9781CE2AC0729835B391F2F3813F53D8E46B3D8F091D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveDismount.vsd.WCRY

Path C:\Users\Admin\Documents\SaveDismount.vsd.WCRY
Size 643KB
SHA256 02c20dac3f375a9d539f282671b9ac7bbd6c4d526f0db84c27361f917a071d53
MD5 33468493839efcbcac8de58f559ebbb8
SHA1 841c0b8472a8d02d0452a0d0aa6f9db04bd58942
SHA512 17e8f00c5f2e2b55235efc786a4f51f5761c20246095e69965fae46d7466543ee96bb7155f1ef1e2e618dc8c7d56582ed388cd54bee935c841daa9990043fa58
SSDEEP 12288:gvSUFacwmjVuzjZ05z1fK/M5qB0GRipDIdsy6aQ:gaaaxmjVA25pSMNGYRMZ6aQ
TLSH
T11BE42325395FCAD6693807287E4DB2201CC52C1604FCA5FFA4DABBB3E95217067DB321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowSuspend.dotx.WCRY

Path C:\Users\Admin\Documents\ShowSuspend.dotx.WCRY
Size 575KB
SHA256 cfb3d5618fb5dfa474520e3349d7e410c8c9a442364d0880bf25c5231f8a9354
MD5 da17b020b12b42e74b8f12964f36981c
SHA1 dc063f1c08f468108948af45bb6e494884231a19
SHA512 d5754e3ad9382176b8489171636f207436c8304ff8de5d0cf1f0029cec596349a35a5b6dafc2f49cb2f80b6e88e6a63793ebf5763b373787b2c3de72c33c3347
SSDEEP 12288:5uxCwMXYpA1WoH4d27RYqeSihMuu/wDiYWlDn1vLW8UaPK:5uxCYpVD27Rvihdu/w2LNZBk
TLSH
T19AC4233925DF441AEAE11754C3EEBE74E6B18C04291893C449F265B81E528DB3B3B27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncHide.pptm.WCRY

Path C:\Users\Admin\Documents\SyncHide.pptm.WCRY
Size 1.5MB
SHA256 4e78f6b908238f90a32fa7c0ff22174fc3ad2762bc52b53d5a4b07797f5d883b
MD5 335b88f2707027320ecf29eeaeaae4a3
SHA1 d3a47da8718e6d7207f83a0f7f833ef834ad80ee
SHA512 245de8e20f0c1d5843aad72973af8172e6650d36f31491a48b1283e1f911c65adc00195cd91f512c952f0da4df0d079c4ba8bf4213c87b8a3b85810a9bedb372
SSDEEP 24576:xA2cWGpElfTNfBnQAqwg25Nubu3iayBdxmzVap2O5LgSlXSgSHzv3kgxMQhOFl2N:m/WR7HQAqwg4NMu3GBmvOTlXFSbnMONn
TLSH
T1D57533DDC4504BB80A07A5F5DB8F69A80AFA31447C46611E07A9CF71AEF2738B7DE241
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceCompare.rtf.WCRY

Path C:\Users\Admin\Documents\TraceCompare.rtf.WCRY
Size 711KB
SHA256 7035e9a38f486c3521423939c4998d6d11384226f8ba0b7d8292b6a53f302ccf
MD5 e177775e78b7c25c0d6429d4eb3697bb
SHA1 a607d01c8e5657764b22dd7b6bd3904f06ae78f3
SHA512 d0e674a3160fdbba259cec8909e88a0bb05e4c4f19d085e56cf5e3c1724d65cc6055052f3cbb4d4b1bb15103bf7f924e4f13da46bdaa4941479097199c452b13
SSDEEP 12288:sgW8wgvIe15QUvRYBi++vjbpkJKXR6KtY8un4+7DOR0BJ8+A6Ojsr2ZoqV0Z8/7C:sN8wgv71KUvqBi++vjbpPXR3Ox8+Nr2W
TLSH
T105F423EC775D20B1BD0886A5EEAF88684BDD1C7F1975A1BDF1933A00BD23917DB28241
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallSave.csv.WCRY

Path C:\Users\Admin\Documents\UninstallSave.csv.WCRY
Size 1.0MB
SHA256 8f3b942285a25d119f80dcade530521e4294541ffed82f751ed466603a442c01
MD5 5ebc3b1d747a349cd14ec0036e5ef60b
SHA1 9392cfd489397d9c986e752a7b2cdd339522b5f9
SHA512 f4da5b7c63676c1f7882b587ff5e3ae0d8a4f8016f29d64076641ca96fb81bdfffa5784fbcfc40f38492eb7351d04ac5e432840ab848d3e6b2e113215d8b4a53
SSDEEP 24576:Q8BweR/I1gcdvJlaZlWXQQ0r98ntb8F45GyC1lHtnTpLJ:Q8BweB6dy8N0u98SfC1BtTpLJ
TLSH
T11335335BEA4298009E9376543DE0A3B7B09ED4803E2573E99D43FD9B0EB2A5C52D0D7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishDisable.ods.WCRY

Path C:\Users\Admin\Documents\UnpublishDisable.ods.WCRY
Size 440KB
SHA256 3e225df8c9ed307cc46ac28c8ca9ea98d76bfaa08f0bfa08c13c6e90fa910d73
MD5 5c121732365ded0430f063ad6f20addf
SHA1 3b131240f97d7ceccae835523b0edee0acb41dcf
SHA512 c2ea6b351ca2da9d3968d96bc98e1d72da2210352e77244232d7d7fba9a92cbb6908abf7f0f637072238f8787d228641ea869ef1356ec15e6af44c980d0a0142
SSDEEP 12288:2ZH5WhlQeF5jYhApp4aLJfI9j1l4+hdtbP:UH5WDQenjYhAppFW1dtbP
TLSH
T12AA4234557A186850BB38D5806B48E18B99C9D66DF911BC05BBF28FB1E1BB9F03C873C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitPublish.csv.WCRY

Path C:\Users\Admin\Documents\WaitPublish.csv.WCRY
Size 959KB
SHA256 881246aa2c9249e4c0a45512641da0ca65726fdccd12e278aeafa7a74f86cb28
MD5 dfea2806425aa72f9aae0c6e4804ccac
SHA1 386953d9939a2a01cde3d6c38b759feb0c8e943c
SHA512 fc876412346374168fd61ff5051b18c35fad2c85515d0f1e760d78ed395e16d86a7e24329dc5cc300f73b4d0d6100de5da359294c15bcafcb18c1aac0409a560
SSDEEP 12288:EzHrT2VPw9TJQkV6nXC3dl/YPBvSFhtAwdkwdmBhehFmqWA5fHWkmOZ4Y84qyb41:aH2d+KsmC3dlKxSF9kc8AVq2V0yx4zP
TLSH
T1E225333F6F9C3CF4046E1659FAE22D1CB1CF1567FC0F5387A8045EA9529C482A4B9E25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

!WannaDecryptor!.exe

Path C:\Users\Admin\Downloads\!WannaDecryptor!.exe
Size 236KB
SHA256 78e3f87f31688355c0f398317b2d87d803bd87ee3656c5a7c80f0561ec8606df
MD5 cf1416074cd7791ab80a18f9e7e219d9
SHA1 276d2ec82c518d887a8a3608e51c56fa28716ded
SHA512 0bb0843a90edacaf1407e6a7273a9fbb896701635e4d9467392b7350ad25a1bec0c1ceef36737b4af5e5841936f4891436eded0533aa3d74c9a54efa42f024c5
SSDEEP 3072:KeJJ0eIVAnbWOECR+uJ/0EJzBelG4t1nXFnQamKNQHFZde5tHEGaa:bqrVOEgZJcYelG4tQamKN2ex
TLSH
T16A34A416ACD3812DF3D736B88001C7BCA8A72E1095261B7BB694F8DC18367E5CE6651E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

!WannaDecryptor!.exe.lnk

Path C:\Users\Admin\Downloads\!WannaDecryptor!.exe.lnk
Size 590B
SHA256 efd2ab5045d119bffa172aa8880a8dbdef6c1845b820ec3b5d4fa30a12bfa6be
MD5 6ab498add6a21a8f603b7d24d9ca40a3
SHA1 beadcb501bd53b991e43d2a60ecbf237f238aeae
SHA512 2e1b654c7901d72c0646bda6115f58b08ea1aef22acccdd2f33c080c849d2b921ecf23456447f3fa852d09d0f278293f5bd0a68bc66eb2dd7fd4e96ef293a73d
TLSH
T15CF0542887F72E4BD927823E0B3583455B753D80D647A71D0680360E8D31801475DE97
MD5 SHA1 SHA512 TLSH

Submit Download

00000000.res

Path C:\Users\Admin\Downloads\00000000.res
Size 136B
SHA256 9cb3f731260ccb6d37d6cb0e0622d9abd8575f97a54ad3f0daa393f04f55b646
MD5 d4e2fe068382ad8288ce69ae464a5ef4
SHA1 415fac2b32690f1b1917cd2f615cbfdec104bc6a
SHA512 3c4a8b64319ba61ff0fe63b41208e183d7087d13b27267a559d2738ba3071b838f3e057ab414df43908b433b29c457f11f385543fb81af6d4b434c5322b59e4a
MD5 SHA1 SHA512

Submit Download

162681792816468.bat

Path C:\Users\Admin\Downloads\162681792816468.bat
Size 318B
SHA256 4288d655b7de7537d7ea13fdeb1ba19760bcaf04384cd68619d9e5edb5e31f44
MD5 a261428b490a45438c0d55781a9c6e75
SHA1 e9eefce11cefcbb7e5168bfb8de8a3c3ac45c41e
SHA512 304887938520ffcc6966da83596ccc8688b7eace9572982c224f3fb9c59e6fb2dcaa021a19d2aae47346e954c0d0d8145c723b7143dece11ac7261dc41ba3d40
TLSH
T16CE0861D7588F57512435242C93EA1EC91D55C925702AE18DFB7ED54A6005BC096E003
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 87153.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 87153.crdownload
Size 95KB
SHA256 2cd92e59c0a295333c44f51dd565323c6b9fe827a285ca67be6e76280f1443e8
MD5 31bf2fca4b2c49cb254ede51ed98be45
SHA1 682b8ed601f7297779e5d07b47f4f02b92923aab
SHA512 74dd3bee39b6c4a7fa029c9a649a53c73239b17a04c760be58b156c1dc9450f45baa15b763e494dd6124215511a07f44db05b686d0b91b193a4fcc80067e0766
SSDEEP 1536:Y05rlD8MeRYq1CepN9S4A3VsU8j5bevh2erRjpgelHume8cn/xVG9:Y059femWRwTs/dbelj0X8/9
TLSH
T1A8A3D0267B60A73FD0B205772802D5B74EF9A9D1A1EC9F4AD38D09950C00598AFF3A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unconfirmed 87153.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 87153.crdownload
Size 224KB
SHA256 be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844
MD5 5c7fb0927db37372da25f270708103a2
SHA1 120ed9279d85cbfa56e5b7779ffa7162074f7a29
SHA512 a15f97fad744ccf5f620e5aabb81f48507327b898a9aa4287051464019e0f89224c484e9691812e166471af9beaddcfc3deb2ba878658761f4800663beef7206
SSDEEP 3072:Y059femWRwTs/dbelj0X8/j84pcRXPlU3Upt3or4H84lK8PtpLzLsR/EfcZ:+5RwTs/dSXj84mRXPemxdBlPvLzLeZ
TLSH
T1A024015A7A61877FD0B20532746194FB4EFE0DD3F5A89A4FE74D0A501F048884BE3A9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c.vbs

Path C:\Users\Admin\Downloads\c.vbs
Size 201B
SHA256 5d57b86aeb52be824875008a6444daf919717408ec45aff4640b5e64610666f1
MD5 02b937ceef5da308c5689fcdb3fb12e9
SHA1 fa5490ea513c1b0ee01038c18cb641a51f459507
SHA512 843eeae13ac5fdc216b14e40534543c283ecb2b6c31503aba2d25ddd215df19105892e43cf618848742de9c13687d21e8c834eff3f2b69a26df2509a6f992653
TLSH
T1DED0122EA4D9E9675263A153463AD64CC5E258607B21B7119F92EE08736043C0E7E043
MD5 SHA1 SHA512 TLSH

Submit Download

c.wry

Path C:\Users\Admin\Downloads\c.wry
Size 628B
SHA256 bf22e8e18db1638673f47591a13d18ee58d8c6019314bab5a90be82ae3dc9538
MD5 663e55df21852bc8870b86bc38e58262
SHA1 1c691bf030ecfce78a9476fbdef3afe61724e6a9
SHA512 6a54be1fa549633a2fd888c559207437b8f6efda98bb18d491c8749f39e9754f1e680fa8e2d623777b5f665b2c04d19385c75ce4e61fb251db16018963a9a6f9
TLSH
T155F012046281190CDD18023D001045538530CB4412008B8244204042827C1F36844134
MD5 SHA1 SHA512 TLSH

Submit Download

m.wry

Path C:\Users\Admin\Downloads\m.wry
Size 42KB
SHA256 402046ada270528c9ac38bbfa0152836fe30fb8e12192354e53b8397421430d9
MD5 980b08bac152aff3f9b0136b616affa5
SHA1 2a9c9601ea038f790cc29379c79407356a3d25a3
SHA512 100cda1f795781042b012498afd783fd6ff03b0068dbd07b2c2e163cd95e6c6e00755ce16b02b017693c9febc149ed02df9df9b607e2b9cca4b07e5bd420f496
SSDEEP 384:S9sLTK3SWTsPzy3EFejoJQBO21z4oCTeo75Y3kmA31dv61QyU:S9s3mjoJb21zZrS14I
TLSH
T12D1320B800425795D26323E4FB27F0497B2BF41464E584D876EBC2BD717FDACE660A22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

r.wry

Path C:\Users\Admin\Downloads\r.wry
Size 729B
SHA256 c9e9dc06f500ae39bfeb4671233cc97bb6dab58d97bb94aba4a2e0e509418d35
MD5 880e6a619106b3def7e1255f67cb8099
SHA1 8b3a90b2103a92d9facbfb1f64cb0841d97b4de7
SHA512 c35ca30e0131ae4ee3429610ce4914a36b681d2c406f67816f725aa336969c2996347268cb3d19c22abaa4e2740ae86f4210b872610a38b4fa09ee80fcf36243
TLSH
T10001106EAE5576110BB1C972317EA157FA06419F022D0262BC0A913D17BC17620FB4F1
MD5 SHA1 SHA512 TLSH

Submit Download

t.wry

Path C:\Users\Admin\Downloads\t.wry
Size 68KB
SHA256 a7dd727b4e0707026186fcab24ff922da50368e1a4825350bd9c4828c739a825
MD5 5557ee73699322602d9ae8294e64ce10
SHA1 1759643cf8bfd0fb8447fd31c5b616397c27be96
SHA512 77740de21603fe5dbb0d9971e18ec438a9df7aaa5cea6bd6ef5410e0ab38a06ce77fbaeb8fc68e0177323e6f21d0cee9410e21b7e77e8d60cc17f7d93fdb3d5e
SSDEEP 1536:L/MNGh1blJ3aMfSSPz/chKRb7Z3DK1YwVp2sQ6plKRPNV0BCg:L/sQES7b/jZ3AYgp+Na
TLSH
T1376302D7EBB42A9F7E210D483894BEAC3325834644F3515FE091DF061A68BBCA39529D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectOpen.jpg.WCRY

Path C:\Users\Admin\Pictures\ProtectOpen.jpg.WCRY
Size 285KB
SHA256 ee3885b32836dd6c21e070ba5be5b8424d4ac97cdef1d8b27598d25211b78b6c
MD5 a24fe80fb2a75647e3f524452e2ef146
SHA1 7c83db43b527febbca7c3aff692e8c4d9501655b
SHA512 38a024b34d23cdfc183d15e49574141509eabf1bc37042eb92d1d39ebc49277bc32cbc8aba3852e4eece11677cffb90998f03c53671cb6c72c025c0c1cef6181
SSDEEP 6144:PVyEFcrAaDGgZZ6K+C0esjlde37UvlkJ6Pcw4T8tCYStI/4ya:PVyEa3D9ZZ6KDHsjnT9kOxBLUEba
TLSH
T1CD5423AB27F02891AD5238DF6243AB47885045849E3DC71778251AE75183AFFCE8D8CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kBNPKDw.jpg.WCRY

Path C:\Users\Admin\Pictures\kBNPKDw.jpg.WCRY
Size 24KB
SHA256 6d36b9c9da397c09a4533682b88166d27a68a772817f93d650e5f7060ec529fa
MD5 89e4c87c143cd438fa37cee8592e8416
SHA1 2318cd338782b4c7a6de20077defbda16680af23
SHA512 b8586ab4e6f19f8d59bb9e7920b1ec2f6ecc624828be4a41a6bd0dbb2022cdeebb1a7d902239c169845cd8f6919aa741f37134d76cde6d71196093b9cfb94930
SSDEEP 384:1T2SUf67PA1fsfEn6s84MBDAF3LRRiTF4YR/y7zpVv/Dczp4sDuJcUaPw5jfUJdr:5FUe6swSFk3Tih40+H/sDFUa45s/9
TLSH
T1D8B2E1391E2750C6763F6CB61CB6988D8464CB989A1E2EF0351E7781BDB3540EFE0648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4268-84-0x0000000010000000-0x0000000010012000-memory.dmp

Download