Resubmissions

27/10/2026, 15:58

261027-tey9ravwhs10

26/10/2026, 19:10

261026-xvef3ayvgt10

26/10/2026, 19:08

261026-xtjdmafy9110

26/10/2026, 17:57

261026-wjwqjagv5n10

26/10/2026, 00:39

261026-az5gqaaz9s8

26/10/2026, 00:38

261026-azftcstwew6

25/10/2026, 05:36

261025-gaptasfy3m10

25/10/2026, 05:33

261025-f9ab8afy2p10

24/10/2026, 17:29

261024-v2vqhsv1fs10

24/10/2026, 17:23

261024-vx9c4sv1ds10

Analysis

  • user interaction
    yes
  • max time kernel
    18s
  • max time network
    36s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    26/10/2026, 19:08

General

  • Target
    https://github.com/Da2dalus/The-MALWARE-Repo/raw/refs/heads/master/Ransomware/WannaCry.exe
  • Sample261026-xtjdmafy91

Malware Config

Extracted

Path
  • C:\!Please Read Me!.txt

  • wannacry

Ransom Note
  • Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1 Next, please find the decrypt software on your desktop, an executable file named "!WannaDecryptor!.exe". If it does not exsit, download the software from the address below. (You may need to disable your antivirus for a while.) rar password: wcry123 Run and follow the instructions! �
Wallets
  • 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1

Signatures

  • Family: Wannacry

    WannaCry is a ransomware cryptoworm.

  • Downloads MZ/PE file 1 IoCs
  • Creates a file in the Startup directory 1 TTPs 2 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

  • Executes dropped EXE 3 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Kills process with taskkill 4 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 32 IoCs
  • Suspicious use of FindShellTrayWindow 43 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 22 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/Da2dalus/The-MALWARE-Repo/raw/refs/heads/master/Ransomware/WannaCry.exe
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff91c94c728,0x7ff91c94c734,0x7ff91c94c740
      2⤵
        PID:3652
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1668,i,11256874563651150169,17281188432257951260,262144 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1996 /prefetch:2
        2⤵
          PID:384
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1564,i,14685252640661436471,2378877319339687630,524288 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2260 /prefetch:3
          2⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:5008
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=1956,i,11255001402120711625,12495578269329425938,524288 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2540 /prefetch:8
          2⤵
            PID:4824
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3156,i,8903801224262566249,8187250797688321719,2097152 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3192 /prefetch:1
            2⤵
              PID:1700
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3160,i,1807391263362282839,503074377755989303,2097152 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3228 /prefetch:1
              2⤵
                PID:4972
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4400,i,1344624630909640438,17100427620006029972,2097152 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4440 /prefetch:2
                2⤵
                  PID:4860
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5600,i,15657413370670038400,11921362925943723734,524288 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5556 /prefetch:8
                  2⤵
                    PID:816
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5668,i,4133380224371293984,6864669897410087256,524288 --field-trial-handle=2000,i,14831544678491126870,12936931458093391739,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5488 /prefetch:8
                    2⤵
                      PID:1752
                    • C:\Users\Admin\Downloads\WannaCry.exe
                      "C:\Users\Admin\Downloads\WannaCry.exe"
                      2⤵
                      • Creates a file in the Startup directory
                      • Executes dropped EXE
                      • Adds Run key to start application
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:3108
                      • C:\Windows\SysWOW64\cmd.exe
                        C:\Windows\system32\cmd.exe /c 202451793041739.bat
                        3⤵
                        • Executes a command shell one-liner
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of WriteProcessMemory
                        PID:4288
                        • C:\Windows\SysWOW64\cscript.exe
                          cscript //nologo c.vbs
                          4⤵
                          • Executes a VBScript file via the Windows Script Host.
                          • System Location Discovery: System Language Discovery
                          PID:4580
                      • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                        !WannaDecryptor!.exe f
                        3⤵
                        • Executes dropped EXE
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of SetWindowsHookEx
                        PID:1480
                      • C:\Windows\SysWOW64\taskkill.exe
                        taskkill /f /im MSExchange*
                        3⤵
                        • System Location Discovery: System Language Discovery
                        • Kills process with taskkill
                        • Suspicious use of AdjustPrivilegeToken
                        PID:2364
                      • C:\Windows\SysWOW64\taskkill.exe
                        taskkill /f /im Microsoft.Exchange.*
                        3⤵
                        • System Location Discovery: System Language Discovery
                        • Kills process with taskkill
                        • Suspicious use of AdjustPrivilegeToken
                        PID:3112
                      • C:\Windows\SysWOW64\taskkill.exe
                        taskkill /f /im sqlserver.exe
                        3⤵
                        • System Location Discovery: System Language Discovery
                        • Kills process with taskkill
                        • Suspicious use of AdjustPrivilegeToken
                        PID:4088
                      • C:\Windows\SysWOW64\taskkill.exe
                        taskkill /f /im sqlwriter.exe
                        3⤵
                        • System Location Discovery: System Language Discovery
                        • Kills process with taskkill
                        • Suspicious use of AdjustPrivilegeToken
                        PID:3380
                      • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                        !WannaDecryptor!.exe c
                        3⤵
                          PID:8340
                        • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                          !WannaDecryptor!.exe
                          3⤵
                            PID:8352
                          • C:\Windows\SysWOW64\cmd.exe
                            cmd.exe /c start /b !WannaDecryptor!.exe v
                            3⤵
                            • Executes a command shell one-liner
                            PID:8364
                            • C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                              !WannaDecryptor!.exe v
                              4⤵
                                PID:8440
                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                          1⤵
                            PID:4284
                          • C:\Windows\system32\svchost.exe
                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                            1⤵
                              PID:4080
                            • C:\Users\Admin\Downloads\WannaCry.exe
                              "C:\Users\Admin\Downloads\WannaCry.exe" /r
                              1⤵
                              • Executes dropped EXE
                              • System Location Discovery: System Language Discovery
                              PID:1204

                            Network

                                  MITRE ATT&CK Enterprise v16

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  !Please Read Me!.txt

                                  • Path C:\!Please Read Me!.txt
                                  • Size 797B
                                  • SHA256 227082c719fd4394c1f2311a0877d8a302c5b092bcc49f853a5cf3d2945f42b0
                                  • MD5 SHA1 SHA512 TLSH

                                  OfficeIntegrator.ps1.WCRY

                                  • Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WCRY
                                  • Size 5KB
                                  • SHA256 5bd848df5e3f17e991b8db3c98a22019e43f59427fc350aadd54880ffa70169d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  stream.x64.en-us.db.WCRY

                                  • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\0599537D-356A-4403-BBD4-887C17BE1A44\en-us.16\stream.x64.en-us.db.WCRY
                                  • Size 438KB
                                  • SHA256 bf646da56b33d62e20be78cc3d227604e8ac5ceeb1dcaadfe90535a1cc2a9eb0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  stream.x64.x-none.db.WCRY

                                  • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\0599537D-356A-4403-BBD4-887C17BE1A44\x-none.16\stream.x64.x-none.db.WCRY
                                  • Size 1.8MB
                                  • SHA256 dbd25bda6054945f9e2564834633f7f152ecf57e7edff0d6b438c5b7949ee09a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  background.png.WCRY

                                  • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WCRY
                                  • Size 126KB
                                  • SHA256 b4ce3231e19d85109b829b89a23dfa221b9fbd127ba5cd422f5523647a7ff3d7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  device.png.WCRY

                                  • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WCRY
                                  • Size 43KB
                                  • SHA256 7af3a226a130622f88344ce2e6be0162ce14675291f080a096787e2cfd66f26e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  overlay.png.WCRY

                                  • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WCRY
                                  • Size 28KB
                                  • SHA256 e30d7317f7b9fd586696d1ebff35855743bbd106a950ba787723e3eb5651d6eb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  superbar.png.WCRY

                                  • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WCRY
                                  • Size 38KB
                                  • SHA256 badf13fbe219f9cdb4b08530be8cda2049c4a3cc11a0035b9bcde32a319527c9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  background.png.WCRY

                                  • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WCRY
                                  • Size 126KB
                                  • SHA256 15719a8a068dd70842b7719251cc6e19c07ab82234b042227a1f2e398d907f45
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  watermark.png.WCRY

                                  • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WCRY
                                  • Size 28KB
                                  • SHA256 ac6be2c8c1bd6e42e8b87abde08035e074a8cef06b61de2262ebe26604d5a629
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EventStore.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WCRY
                                  • Size 56KB
                                  • SHA256 cd941bc9160338bb090ca46cc3a431b71bc16006d3dcfb2df627101b7035a461
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EventStore.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WCRY
                                  • Size 32KB
                                  • SHA256 de797cad152c3f6a8addb8b5dda276e1cfba880cad243823cf97562f033acbc1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EventStore.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WCRY
                                  • Size 20KB
                                  • SHA256 a85b3b886224f472c2fcccc0eafc330dc68f9d49681875806613c8e15be0f21b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  osver.txt.WCRY

                                  • Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WCRY
                                  • Size 296B
                                  • SHA256 a417e85b2c9ec5dfe6f7a128cd92126ae477e47ce8eca16b0cae12fac97077fc
                                  • MD5 SHA1 SHA512 TLSH

                                  qmgr.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WCRY
                                  • Size 1.3MB
                                  • SHA256 54b627f17f867a364cfd9c117021387f48d69a02b1bac7f11775108ebf53837a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Windows.edb.WCRY

                                  • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb.WCRY
                                  • Size 8.0MB
                                  • SHA256 d1616a33c7ab23b795c345033e8b046a29fd0dcb7be85ac12f312278651a30c7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SmsInterceptStore.db.WCRY

                                  • Path C:\ProgramData\Microsoft\SmsRouter\MessageStore\SmsInterceptStore.db.WCRY
                                  • Size 192KB
                                  • SHA256 b9660f8e8eab6a44f2824babf6380702ba92e057d1c0763850b364408fb9f45d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RegisterInboxTemplates.ps1.WCRY

                                  • Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WCRY
                                  • Size 904B
                                  • SHA256 d65cd58cf561e3886e826dc24e2a3dae3bf589d0f7b071eab8c642f8f61d2482
                                  • MD5 SHA1 SHA512 TLSH

                                  guest.bmp.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WCRY
                                  • Size 588KB
                                  • SHA256 ddf520d47a1b65a5523a1a775cfac8389e75bc0eedf812324988b97a709d6b4e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  guest.png.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WCRY
                                  • Size 6KB
                                  • SHA256 a8bf41fd7c4bec71ef1c35e1ce970d21993576d24888ea4092e42486dc0557c2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  user-192.png.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WCRY
                                  • Size 2KB
                                  • SHA256 fe67bfd04a5ca15c98058bf060f8e50b712798d0aa5342af634bbff087ea950d
                                  • MD5 SHA1 SHA512 TLSH

                                  user-32.png.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WCRY
                                  • Size 728B
                                  • SHA256 4c64375875114d195de8d7ff89cd0fee1c6399bc3ccf1fa2e3142ea7b8f3f746
                                  • MD5 SHA1 SHA512 TLSH

                                  user-40.png.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WCRY
                                  • Size 808B
                                  • SHA256 7b200fbd3a2829290553c3092d41e7a138673fb801444eee0f3882d4c8c8e05e
                                  • MD5 SHA1 SHA512 TLSH

                                  user-48.png.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WCRY
                                  • Size 904B
                                  • SHA256 c449cc003c44604090cb58ca14865dd89e4bb693f5abf46b6511f56d5fcd62e1
                                  • MD5 SHA1 SHA512 TLSH

                                  user.bmp.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WCRY
                                  • Size 588KB
                                  • SHA256 95d52dd3aa5363a1da9bb8729abd82824306a70974bc0b946fbe865c8bcaa324
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  user.png.WCRY

                                  • Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WCRY
                                  • Size 6KB
                                  • SHA256 d1cddedc24a6231f895cbfa662f8ab9571fe316f1d71563b0eaa44a3a25dbfbe
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeFax.tif.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\de-DE\WelcomeFax.tif.WCRY
                                  • Size 99KB
                                  • SHA256 1d76ed01a936a10a6b24a7e3d2acbc9ced48462787f650787fb9951f91b8a9ed
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeFax.tif.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US\WelcomeFax.tif.WCRY
                                  • Size 87KB
                                  • SHA256 5c4328cc23e1688c68a9109da2b9f5451fd5933cc1899c6de4b6d1bea1f0d644
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeFax.tif.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\es-ES\WelcomeFax.tif.WCRY
                                  • Size 94KB
                                  • SHA256 9991868b745a0710c1518d71b3e4f31cdbea2d79384964092c3aa2add18aea35
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeFax.tif.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\fr-FR\WelcomeFax.tif.WCRY
                                  • Size 101KB
                                  • SHA256 f6313a8bba09c0c58e80c01c80e5f3d20cc9763a857a74841c87613e7c926e1c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeFax.tif.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\it-IT\WelcomeFax.tif.WCRY
                                  • Size 92KB
                                  • SHA256 4728c8cbf002844ba153fe561796d415732d21408b63bce4c21e8e576a406ae6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeFax.tif.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\ja-JP\WelcomeFax.tif.WCRY
                                  • Size 77KB
                                  • SHA256 978dd6bd5e15925d2a6ef8f9d69635ca005a1f155f029d7f155923377d3bd63d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeFax.tif.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\uk-UA\WelcomeFax.tif.WCRY
                                  • Size 105KB
                                  • SHA256 dbeaca7dfedf1ed84945330869f9cc1377d2e9fc792db00f89dc86acb125e8f5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WelcomeScan.jpg.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows NT\MSScan\WelcomeScan.jpg.WCRY
                                  • Size 504KB
                                  • SHA256 3b3a49c4c9d420163c5f30c2e0f81a949827e03771cdfec34c76cf41c327740d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  cversions.2.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WCRY
                                  • Size 16KB
                                  • SHA256 16dfef0285b2939353f9da2a923d82abaf2ea315e78c0930eb743048c7f0f215
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WCRY
                                  • Size 289KB
                                  • SHA256 a2e901fa4e99a86602a17180e40d4a9d8a80eaa0bd45661c3ebe1be913de3b7b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY
                                  • Size 289KB
                                  • SHA256 00c2e81af4d92639e052ba3af06c0e9332132cbe9465ed94b8d65b300428f2c7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  {BA716305-4DB0-40D7-B577-CE418A8B8503}.2.ver0x0000000000000001.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows\Caches\{BA716305-4DB0-40D7-B577-CE418A8B8503}.2.ver0x0000000000000001.db.WCRY
                                  • Size 1KB
                                  • SHA256 2b2bcfaff3090c2293d3fd7e31bd355a2cc00698bceaca281ba416bf58f874e9
                                  • MD5 SHA1 SHA512 TLSH

                                  {DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WCRY

                                  • Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WCRY
                                  • Size 623KB
                                  • SHA256 562dddaa0be4e9cfd76701323bd154ad8fd3f3301b8855ec6e5b4cc9019cf514
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ActivitiesCache.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WCRY
                                  • Size 1.0MB
                                  • SHA256 9fe8ab52c4a4c404fff48675eb92af428bfe1b3ab17b09c7d97398f36845da51
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  8f6069f1-5b6c-4a6f-8596-a027900cf312.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8f6069f1-5b6c-4a6f-8596-a027900cf312.tmp
                                  • Size 131KB
                                  • SHA256 61846100c5996e1b6ef2b955a0db21e7afb532581909122f8ef002e9f46b7518
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  8ffce082-8fc1-4038-a097-95c6604e4dc6.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\8ffce082-8fc1-4038-a097-95c6604e4dc6.tmp
                                  • Size 131KB
                                  • SHA256 15a0a01f23fd24c7ceffae390becd12f3f0cab4ecd0ea09d65c15565cbdb9ce6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  93161dc1-74ee-4abf-888d-65307f62a8ee.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\93161dc1-74ee-4abf-888d-65307f62a8ee.tmp
                                  • Size 130KB
                                  • SHA256 eace70e7dac32af7fa8aea059e93f0726b914eff288581dbc77e2834fefcf341
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  settings.dat

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                  • Size 40B
                                  • SHA256 4804f5345dd7a1abbf91d44a7d836e7cbb1ee9fa6385975e53c6f8ec96c6c47d
                                  • MD5 SHA1 SHA512

                                  10621797-b3e3-48bc-8258-0e435e219297.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\10621797-b3e3-48bc-8258-0e435e219297.tmp
                                  • Size 12KB
                                  • SHA256 59f6d2ff9100b84edd52063d2d113c554547c731b6c2e077c2c314b9a001d892
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  666e4b69-5612-45b1-ba2d-eab01f204d3a.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\666e4b69-5612-45b1-ba2d-eab01f204d3a.tmp
                                  • Size 6B
                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                  • MD5 SHA1 SHA512

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WCRY
                                  • Size 5KB
                                  • SHA256 aa1e25df2ff05f7ed336d65a175431b795f5fc6094277a614a46f3fa156b5bc5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  offscreendocument_main.js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WCRY
                                  • Size 130KB
                                  • SHA256 539330d9837a3ba1d89aee9ec2bd0a28cfd6db42fa6f7a7f57d21992452b91ac
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  page_embed_script.js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WCRY
                                  • Size 632B
                                  • SHA256 0658a4dbe20c9935eefe422ed8a71a1e106dfee25f7092f68abe3aa227f31d6c
                                  • MD5 SHA1 SHA512 TLSH

                                  service_worker_bin_prod.js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WCRY
                                  • Size 136KB
                                  • SHA256 5cc5931f11810de936fae19b29814d317d54fc79824daf605f84183316e4ec27
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  craw_background.js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js.WCRY
                                  • Size 532KB
                                  • SHA256 f48b68af2665c1147cdb8aab0561dbab8efc650bbe4727b6d7cb45bdb911e64e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  craw_window.js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_window.js.WCRY
                                  • Size 255KB
                                  • SHA256 bf94f952ca9728307ff0af6467ebfb21456f5fefefeec48325ccda25b903a209
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  flapper.gif.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\flapper.gif.WCRY
                                  • Size 68KB
                                  • SHA256 374729e51f0f0d6de21023c0becd0ebf0400dfc52aad6a95e6c3167c8b45e5dd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  icon_128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_128.png.WCRY
                                  • Size 4KB
                                  • SHA256 096ec76f5c93f638b3154e254f425b5b566203e8d00673d90cf8ec978d352288
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  icon_16.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_16.png.WCRY
                                  • Size 872B
                                  • SHA256 0677e75bf83a581a88ca212e79a2d117ec99d8b0c84397423a8d2282bfc816d1
                                  • MD5 SHA1 SHA512 TLSH

                                  topbar_floating_button.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button.png.WCRY
                                  • Size 440B
                                  • SHA256 d52dd81dc534df52c3525d0030d0f760ebecd1de91617cb580248b984f79c0cb
                                  • MD5 SHA1 SHA512 TLSH

                                  topbar_floating_button_close.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_close.png.WCRY
                                  • Size 536B
                                  • SHA256 ae9d0e845b2c940dabc808c5fdb323f97cdf04752ac711d35e6293bd45b7a90e
                                  • MD5 SHA1 SHA512 TLSH

                                  topbar_floating_button_hover.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_hover.png.WCRY
                                  • Size 440B
                                  • SHA256 4e5fd231806262620409abfd3f0a592baeb44fcf77d1a8d73ae101084af1fe98
                                  • MD5 SHA1 SHA512 TLSH

                                  topbar_floating_button_maximize.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_maximize.png.WCRY
                                  • Size 456B
                                  • SHA256 f6cea4ccd0720d5acc2d7a33a4961a5d78a2029a668044a564d72a78cbe22f0a
                                  • MD5 SHA1 SHA512 TLSH

                                  topbar_floating_button_pressed.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_pressed.png.WCRY
                                  • Size 440B
                                  • SHA256 4abbb920b816c11a0ccde9e2e4654d2ee4ffb0f14cdab8733c3dec5c08cca56b
                                  • MD5 SHA1 SHA512 TLSH

                                  b6cd5e23-d9b6-47d8-a54a-efec2810b4ad.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\b6cd5e23-d9b6-47d8-a54a-efec2810b4ad.tmp
                                  • Size 2B
                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                  • MD5 SHA1 SHA512

                                  ef03eaef-210c-452f-b779-1d3e1b963c77.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ef03eaef-210c-452f-b779-1d3e1b963c77.tmp
                                  • Size 1KB
                                  • SHA256 aacb044451cd4d70f485481e2596022bff8322f3dc5c1fe122402a1f357037a6
                                  • MD5 SHA1 SHA512 TLSH

                                  ef9b30a1-d844-4a97-8aaf-910316841f62.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\ef9b30a1-d844-4a97-8aaf-910316841f62.tmp
                                  • Size 858B
                                  • SHA256 89fed874b126f69dee8f3d535f80fe66d951dedbcb5c1c2b49420477deae3dfd
                                  • MD5 SHA1 SHA512 TLSH

                                  temp-index

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                  • Size 120B
                                  • SHA256 aecbc6e2aa686f77b5716374ee5f27ab097d9c493efb546d3885d1862c7f1cca
                                  • MD5 SHA1 SHA512 TLSH

                                  the-real-index

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                  • Size 96B
                                  • SHA256 9d9a12c1c0b7457256082280d903c4243fd0f20e1cf39054db1e6a60ec95efc6
                                  • MD5 SHA1 SHA512 TLSH

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\128.png.WCRY
                                  • Size 8KB
                                  • SHA256 f473220c8856eca34de2b1956ae15bca1fcf9945d0b2001767fe4aa35106f089
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  192.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\192.png.WCRY
                                  • Size 5KB
                                  • SHA256 7ce122f75ce67c9dc0079a3905c7f21d0769cf4ed8bfd70042fb2a05cd8aa8c7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  256.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\256.png.WCRY
                                  • Size 20KB
                                  • SHA256 4f2d5528e0e352e16303da9d1d1c1bf7f9079b4581929bb6ad7735a1b19d04fd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  32.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\32.png.WCRY
                                  • Size 2KB
                                  • SHA256 ff40d3944c17e692a33cb434462010af6cd2d6cfb1fd7eb34fd821d23a8c36cf
                                  • MD5 SHA1 SHA512 TLSH

                                  48.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\48.png.WCRY
                                  • Size 3KB
                                  • SHA256 6d1c78aa2725b52c5f28300c34a752d5234e147f17268c5ac010600f8a65de57
                                  • MD5 SHA1 SHA512 TLSH

                                  64.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\64.png.WCRY
                                  • Size 4KB
                                  • SHA256 9c8e62d887ed2e310c1a59372c78534eb2d4ec03f3e61c7a369c7648977b4242
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  96.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\96.png.WCRY
                                  • Size 6KB
                                  • SHA256 4b36245f045617a1d3c0ab39b1f5e26f274a7ac4961c249a5978ce7891fc1293
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\128.png.WCRY
                                  • Size 10KB
                                  • SHA256 14958ec5b42d301e5ff47e372096af6f1064f4d2c7a70a9fabad686b1a89b291
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  192.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\192.png.WCRY
                                  • Size 7KB
                                  • SHA256 470b27b4798bd0c9eb0fa01f0f3abd979c6b35d7a695d11194c3fc65a2cb4927
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  256.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\256.png.WCRY
                                  • Size 26KB
                                  • SHA256 50bd40aa6b1580962a13a6dd3a2b27a4b0fc7badc4049bd694f7549379c99121
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  32.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\32.png.WCRY
                                  • Size 1KB
                                  • SHA256 264dfbfaf32420206260ba8629afec0a80ed3d7051098377777be8b5f15e5069
                                  • MD5 SHA1 SHA512 TLSH

                                  48.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\48.png.WCRY
                                  • Size 2KB
                                  • SHA256 cf33018082dd79652991ad8c76f8c093ae0c98351556016d9b8ff32ee760ec1d
                                  • MD5 SHA1 SHA512 TLSH

                                  64.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\64.png.WCRY
                                  • Size 4KB
                                  • SHA256 c56b02629fb3f4bca2a33b22506a8b688626cc35aa1751f4d7fe30b0e3c9f69c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  96.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\96.png.WCRY
                                  • Size 7KB
                                  • SHA256 fff9c4b1390f3da9673815f709a32cce5fc1371c73461121b06744928672e5d6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\128.png.WCRY
                                  • Size 2KB
                                  • SHA256 8b4bdca649025c4be6a6293234e1bfe7d60ae0c7ffb8a1332d28535bf18ac1e3
                                  • MD5 SHA1 SHA512 TLSH

                                  192.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\192.png.WCRY
                                  • Size 1KB
                                  • SHA256 b0823b4454b5cf9f63dccba79d5b5653482c1d9ddd53794264615b56e883f5ef
                                  • MD5 SHA1 SHA512 TLSH

                                  256.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\256.png.WCRY
                                  • Size 5KB
                                  • SHA256 7596349f215fb68c492d127afc8b268b6497d705b7aa910dd8f70115c6b8ebd1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  32.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\32.png.WCRY
                                  • Size 1KB
                                  • SHA256 3f2a3e2ded232bdffa0f175672bdab86db98108d99fe51e1a03af79495cc035d
                                  • MD5 SHA1 SHA512 TLSH

                                  48.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\48.png.WCRY
                                  • Size 1KB
                                  • SHA256 fb6fc2857d19b64566d326fa8e5850e60d37b884d48b522e26b2629c0fe9032e
                                  • MD5 SHA1 SHA512 TLSH

                                  64.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\64.png.WCRY
                                  • Size 1KB
                                  • SHA256 ee0d68f81fb2bf3299ca29da4d832a66f0f207ab562efedbb0802788cbd08a83
                                  • MD5 SHA1 SHA512 TLSH

                                  96.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\96.png.WCRY
                                  • Size 2KB
                                  • SHA256 d451abe1bef39ce3e4c73c5f3cb7afe10b1a72b3d9d971a8ce78e8b6f611a634
                                  • MD5 SHA1 SHA512 TLSH

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\128.png.WCRY
                                  • Size 5KB
                                  • SHA256 e5be0c9592444b3f840b5ec25a8abf10813c46f8fa9f7debf249ca93ff1f7db0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  192.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\192.png.WCRY
                                  • Size 3KB
                                  • SHA256 c2e37ca7fdaeb099649b98c287c0381b40a372660579341f6268aaeaefc7e099
                                  • MD5 SHA1 SHA512 TLSH

                                  256.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\256.png.WCRY
                                  • Size 13KB
                                  • SHA256 81e2cfdb1c11fc03ff0e28bc41ed01a7ef81965cf173976f4d3b0df3a745ba9a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  32.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\32.png.WCRY
                                  • Size 1KB
                                  • SHA256 2cdc5494e95f10361b6b72245697bee0b60f7948886c1e7b76a591a13ca8e320
                                  • MD5 SHA1 SHA512 TLSH

                                  48.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\48.png.WCRY
                                  • Size 2KB
                                  • SHA256 166e7de8ef00695a3f8f600841a02ec14553084fdccf346bc3d6c6b3ad634115
                                  • MD5 SHA1 SHA512 TLSH

                                  64.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\64.png.WCRY
                                  • Size 3KB
                                  • SHA256 8654d8bfcf576148fbe0d0dd0e03897b9e4f4cd85fc2ec5b3532bff2b5275d79
                                  • MD5 SHA1 SHA512 TLSH

                                  96.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\96.png.WCRY
                                  • Size 4KB
                                  • SHA256 d760eaa875996626e7ce51ae0e2cb7347962dedf0640b825e1cfdfc0cbe90f2c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\128.png.WCRY
                                  • Size 2KB
                                  • SHA256 d95f292ae7ace2fc4748157263ca0214053578533b9c5360b69097f3620e297f
                                  • MD5 SHA1 SHA512 TLSH

                                  192.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\192.png.WCRY
                                  • Size 1KB
                                  • SHA256 e7cbeb1335540b5e50d0b4e58c0e8d6f0b1d876551663178dde20023acb2896f
                                  • MD5 SHA1 SHA512 TLSH

                                  256.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\256.png.WCRY
                                  • Size 4KB
                                  • SHA256 df5883ce8b842b666244cbaa16ce96f4378599774887556d0a3df057747d48ad
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  32.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\32.png.WCRY
                                  • Size 1KB
                                  • SHA256 73a9459ce09b98d121508d506304a118da018a7d54f9f368a848e11d654bfa8e
                                  • MD5 SHA1 SHA512 TLSH

                                  48.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\48.png.WCRY
                                  • Size 1KB
                                  • SHA256 415aa4f8d30157e23bd203efbadd903f6e0bed7f2aed9fc11ed7e892baae8e54
                                  • MD5 SHA1 SHA512 TLSH

                                  64.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\64.png.WCRY
                                  • Size 1KB
                                  • SHA256 686468bd78ffde1e507faebb021d5db6926fbcedab9841195cda06f72bb760cf
                                  • MD5 SHA1 SHA512 TLSH

                                  96.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\96.png.WCRY
                                  • Size 1KB
                                  • SHA256 ac6e827d65d10fc0260bdda5edd28d7c028ada481f6a968103cbc56d84bdf823
                                  • MD5 SHA1 SHA512 TLSH

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\128.png.WCRY
                                  • Size 3KB
                                  • SHA256 686be8396900861330caecd8bfc32465c49fcb09a5483e09e65d43d1bd94ac82
                                  • MD5 SHA1 SHA512 TLSH

                                  192.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\192.png.WCRY
                                  • Size 2KB
                                  • SHA256 9979131c54002ffd7fea7ebd92abf30be187c99d41f94467e494a82d4a14fac8
                                  • MD5 SHA1 SHA512 TLSH

                                  256.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\256.png.WCRY
                                  • Size 6KB
                                  • SHA256 ca18f3f392138eb34719d7aeefe7901243a810aaa64b0ac48a9f1e07405c872f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  32.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\32.png.WCRY
                                  • Size 1KB
                                  • SHA256 eebeed33f46cc627aa28e35b9afa3c1bca1819d1110fbffa9eebfe47c53b5ad9
                                  • MD5 SHA1 SHA512 TLSH

                                  48.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\48.png.WCRY
                                  • Size 2KB
                                  • SHA256 825fe8da72e73921124fc7ee0f018ad1f4b8fc20803678d67e8ce144d9eb381e
                                  • MD5 SHA1 SHA512 TLSH

                                  64.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\64.png.WCRY
                                  • Size 2KB
                                  • SHA256 9bc4e66525cb759b29995c4c3ec79d96a1a12d66cfb70ab254c5a35747288173
                                  • MD5 SHA1 SHA512 TLSH

                                  96.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\96.png.WCRY
                                  • Size 2KB
                                  • SHA256 e8d9c0edf74ded3a99b9c01120192775ab7818b41d8b826a14006607494c254b
                                  • MD5 SHA1 SHA512 TLSH

                                  128.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\128.png.WCRY
                                  • Size 2KB
                                  • SHA256 d8bfdf4e88762bebc49b6b5615e9d17ad99f9bd9ab2b9216bc9ddc21430ae7fe
                                  • MD5 SHA1 SHA512 TLSH

                                  192.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\192.png.WCRY
                                  • Size 1KB
                                  • SHA256 fd4dad21ddf01d4438f3662d033b5c9e0fed483c6ec5cf8e1b15cf4450e7b181
                                  • MD5 SHA1 SHA512 TLSH

                                  256.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\256.png.WCRY
                                  • Size 4KB
                                  • SHA256 32d1319b2f1b5894cfa318893318866c3415bfe083f52f678492a4002edeef06
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  32.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\32.png.WCRY
                                  • Size 1KB
                                  • SHA256 c406e878ca234876707327e0cd87d5d0f726ad72d84cea3f1e85eb5cb2ce83c8
                                  • MD5 SHA1 SHA512 TLSH

                                  48.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\48.png.WCRY
                                  • Size 1KB
                                  • SHA256 9fb96baf2ccb3b82bcefa6befc8fad394442f19e95cda45338804d46f7108492
                                  • MD5 SHA1 SHA512 TLSH

                                  64.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\64.png.WCRY
                                  • Size 1KB
                                  • SHA256 e6923ff6e71026c2e123c5aa76af1e5651a6ec85e6d14310118eed4bc5de05c6
                                  • MD5 SHA1 SHA512 TLSH

                                  96.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\96.png.WCRY
                                  • Size 1KB
                                  • SHA256 f0564963c13024ad75ef0c05912edbf6033d65f73a680c6052be8aa150684212
                                  • MD5 SHA1 SHA512 TLSH

                                  bcfcda8e-ece4-4663-a703-4e1553ebd7fd.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\bcfcda8e-ece4-4663-a703-4e1553ebd7fd.tmp
                                  • Size 17KB
                                  • SHA256 f7e0a7036b9bf87d18941afe0a0039bacd2a6a85b55115963a1d3bb3d3d25ed8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  e9195846-684f-4a3c-8a2f-ff81d6a16c80.tmp

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e9195846-684f-4a3c-8a2f-ff81d6a16c80.tmp
                                  • Size 414B
                                  • SHA256 e4c4afd64a105ac1914406f9b2223a19ce4cf6c513bd973acf58b8403230fe14
                                  • MD5 SHA1 SHA512 TLSH

                                  heavy_ad_intervention_opt_out.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db.WCRY
                                  • Size 16KB
                                  • SHA256 68618537f9083e078cdc3eefee3ba9cc40472bdc81fe916569613f3d19529424
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  data_1

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\GrShaderCache\data_1
                                  • Size 264KB
                                  • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                  • MD5 SHA1 SHA512 SSDEEP

                                  first_party_sets.db

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db
                                  • Size 48KB
                                  • SHA256 0c2a7d9a05ecc2cc77765a0a5d71529f2237755fe60ac3d742d6c07805f80d14
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  first_party_sets.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db.WCRY
                                  • Size 48KB
                                  • SHA256 46ee9ded01d2390e95ebfe2b831d183002aaabba6acead46fec3638450c740d7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IconCache.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\IconCache.db.WCRY
                                  • Size 11KB
                                  • SHA256 ddbbe8565f4f5e30787f19d5c6c3e6312ddd6928c1432fc83257babf8af44d47
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EdgeEDropSQLite.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WCRY
                                  • Size 32KB
                                  • SHA256 7d53c840f3a9c4c4c9c0afff7387fccbed7b18a1c2abd5f9fa4847b5189dbd85
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EdgeHubAppUsageSQLite.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WCRY
                                  • Size 32KB
                                  • SHA256 c380d8956683408208ae4b0892fa96e6cfe74f9cd307fa1fe17d4130905c866b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  index.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WCRY
                                  • Size 664B
                                  • SHA256 140771aa56a15887c1bc272b72e64b3474e52423e3d040216dfb3d2e3070ed3f
                                  • MD5 SHA1 SHA512 TLSH

                                  heavy_ad_intervention_opt_out.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WCRY
                                  • Size 16KB
                                  • SHA256 a1b3fbbb7adc2f54ae9c12e112754630f2591ba23e1aa2c44784e5897adb6712
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  load_statistics.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WCRY
                                  • Size 80KB
                                  • SHA256 afe4140a91d9af49a13eadf4074082961a5b0846677ccdc752430a147dc647a8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  mip.policies.sqlite3.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WCRY
                                  • Size 36KB
                                  • SHA256 f0879912cee936fedf4ab4a80861e8df5069df0b80f1ffee21917251ba406cc4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  excel.exe.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WCRY
                                  • Size 36KB
                                  • SHA256 d881f7c8e1e6249ea168233960148f310a4898f1fa7d1038e317f6f2024be879
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  officeclicktorun.exe.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WCRY
                                  • Size 52KB
                                  • SHA256 66df467bf4d32fa39ee1d34e97244ba66d1a36f067defdd5bc0c01e1dffe5d4d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  onenote.exe.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WCRY
                                  • Size 24KB
                                  • SHA256 e072e2c0b409217033d42cc5d8ea3449f8448704c96c3bf68399382c027d30f6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  winword.exe.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WCRY
                                  • Size 24KB
                                  • SHA256 c2d3992a9901ffaf781e2046b371efe3bc173afedf5bf05021e19b9e5ed25ef5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppBlue.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WCRY
                                  • Size 5KB
                                  • SHA256 c96edd239809517bab9cd4de83a88dbfb374df268ec15fc3a32ce810fdef3e63
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppErrorBlue.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WCRY
                                  • Size 7KB
                                  • SHA256 907ee23f8bc80fb4b94f1dc8dfd2dccfa5e3e6adc59af1e35469508468cbd9c5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppErrorWhite.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WCRY
                                  • Size 8KB
                                  • SHA256 d2ee644d1838f648898dc489861796d94d8570d562dcc4057fd36475a87ac549
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppWhite.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WCRY
                                  • Size 3KB
                                  • SHA256 979e94bd22a5e0943777d378c3de4de80c2982d8df8c8a05e75d2d911c6c0b9f
                                  • MD5 SHA1 SHA512 TLSH

                                  AutoPlayOptIn.gif.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WCRY
                                  • Size 374KB
                                  • SHA256 99f3f33297be18837c189967783916a485a0ff270cba10c470ea1bb672f6365f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AutoPlayOptIn.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WCRY
                                  • Size 10KB
                                  • SHA256 3efb858692f024233bc30d105235e1111c43d6b61beccd82d2e006bfba662f4e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CollectSyncLogs.bat.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WCRY
                                  • Size 6KB
                                  • SHA256 f5f6a5b10114d7b5cc4e1d48378c808e6956d225caaac0f462bf2df043b4d29b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ElevatedAppBlue.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WCRY
                                  • Size 7KB
                                  • SHA256 1b0e10b16b12df091ab37161f9562cf1806c89825d5fb3835784bc25c9234fcf
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ElevatedAppWhite.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WCRY
                                  • Size 5KB
                                  • SHA256 52ccc24ffe3edea4cbfa933c75e1e74c1bd5ad15ad839096218fc881c86d4e2c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Error.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WCRY
                                  • Size 7KB
                                  • SHA256 7cd0bab2d57728194399a3b623f26e7b63c049c38dd506c01265dc785fec0afc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  KFMHeroToast.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WCRY
                                  • Size 15KB
                                  • SHA256 34ea422d7c606a4b7a9cfcc75baf4de0655c2f98ed1bc4d6fb2f6cda53a3efc2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  KFMLockedFileToast.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WCRY
                                  • Size 10KB
                                  • SHA256 beabe10e0d56c91b1bdb1b1afb70c1255380620496f8e83cf8df0eddb00b7284
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  KFMScanExclusionToast.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WCRY
                                  • Size 10KB
                                  • SHA256 4fb6f8e5ef127e7f5c13153218116ed8bf2f2b059cec718d7e17c0a3d1638e29
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OneDriveLogo.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WCRY
                                  • Size 4KB
                                  • SHA256 23a00e57036b6f174071b03fe5ac3757da0c1ee077732bd84fa4c3081afc690a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  QuotaCritical.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WCRY
                                  • Size 8KB
                                  • SHA256 e53585f4999b2c153237134bed01f00b11ddbc6d488ad2d9953411bf49c4d78e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  QuotaError.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WCRY
                                  • Size 9KB
                                  • SHA256 d832e77b3124c879cb7f5a83a45387d303bd3570b831d3f5856568d72967c5cc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  QuotaNearing.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WCRY
                                  • Size 7KB
                                  • SHA256 51846ae3954abd4c1a9e3cf3a76041fd18721230bc9451e4c7b5e1c8079efcb5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ScreenshotOptIn.gif.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WCRY
                                  • Size 238KB
                                  • SHA256 3047c39c8896765451d84d87b39b90c33ac13f67908253b66676c010a0f72231
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ThirdPartyNotices.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WCRY
                                  • Size 48KB
                                  • SHA256 784af50a08888faf17c01eba32d28552274a45fa4d625666df1caa3b67e927d2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Warning.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WCRY
                                  • Size 2KB
                                  • SHA256 f4aa35f6199aee780e633c3f1e10533beb8f530d74031bfa40e5934e1acf656a
                                  • MD5 SHA1 SHA512 TLSH

                                  alertIcon.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WCRY
                                  • Size 1000B
                                  • SHA256 399d8d5cd3c91a6b8cffd85930e87290f96a80a0e2c9f7b2e2188c790df5633b
                                  • MD5 SHA1 SHA512 TLSH

                                  acmDismissIcon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WCRY
                                  • Size 2KB
                                  • SHA256 98465beb82938e9232d000cd381b96c3b27dc808b05f41e02a717b5eed7685d4
                                  • MD5 SHA1 SHA512 TLSH

                                  blurrect.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WCRY
                                  • Size 1KB
                                  • SHA256 7e96de846510f9843070f1b05cbdfb53b2165c725b8053641e5117cd2403b6f0
                                  • MD5 SHA1 SHA512 TLSH

                                  checkmark_finished.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WCRY
                                  • Size 504B
                                  • SHA256 6e2206ed11157a2efdce11242ea25cf0f17f9f2cb05f0bc0c3dd7fde6e27f2f1
                                  • MD5 SHA1 SHA512 TLSH

                                  checkmark_hovered.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WCRY
                                  • Size 680B
                                  • SHA256 298064f62c075911b53dd3301600585df3ab3b30e698e836e953e7284018ef4a
                                  • MD5 SHA1 SHA512 TLSH

                                  checkmark_in_progress.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WCRY
                                  • Size 680B
                                  • SHA256 d8fd140fd1839ceec73ff8799fa9fe96cb8e879aeeb5c9b89067e74aabbd14b1
                                  • MD5 SHA1 SHA512 TLSH

                                  checkmark_selected.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WCRY
                                  • Size 680B
                                  • SHA256 ce971d7948f1b2fdda3d0f7a6f79a863de7eb2db56dba91c68c3af5bd5f9e3ae
                                  • MD5 SHA1 SHA512 TLSH

                                  chevron.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WCRY
                                  • Size 584B
                                  • SHA256 ec815457ffc4ce8756e11559bec953bd827aa9c7c8757927bf01fbe4b65ca69a
                                  • MD5 SHA1 SHA512 TLSH

                                  chevronUp.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WCRY
                                  • Size 552B
                                  • SHA256 4be3f87ffbe7de8d37800b64a88cecd707197581796b31dffde0e82610182ca2
                                  • MD5 SHA1 SHA512 TLSH

                                  cloud.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WCRY
                                  • Size 1KB
                                  • SHA256 93427c8a04d1beff868c3d583ea43db34ff81918b15302314153aa591f5c1553
                                  • MD5 SHA1 SHA512 TLSH

                                  done_graphic.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WCRY
                                  • Size 15KB
                                  • SHA256 a5c082d1f51e8b3bcb342b006e92823eedf958ae6d3567cd79524c65435052bf
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  errorIcon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WCRY
                                  • Size 1KB
                                  • SHA256 9455fddee2c85413c062033424e3ae73893b2412ba0c669ab2fe559822396667
                                  • MD5 SHA1 SHA512 TLSH

                                  folderIcon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WCRY
                                  • Size 1KB
                                  • SHA256 18344d78ba654adc1800feaff76f3a038952ba070b88c2c5102590929acb9f26
                                  • MD5 SHA1 SHA512 TLSH

                                  folder_image_desktop.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WCRY
                                  • Size 2KB
                                  • SHA256 81af5ceab02b099dda1c133b2e90645bf64e9d8428a032f929c5f3d16626bdd7
                                  • MD5 SHA1 SHA512 TLSH

                                  folder_image_documents.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WCRY
                                  • Size 10KB
                                  • SHA256 41c4a8dfc68487a3d6816ebb9d5fcd22df0e78fffc31c24d74d32a1aa77a3805
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  folder_image_pictures.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WCRY
                                  • Size 7KB
                                  • SHA256 b8b70d66535cdcef5e09d59db399e3019b2b456212345b3e2fe303e2b6fbb3b8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  globeIcon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WCRY
                                  • Size 2KB
                                  • SHA256 7174a4fe8cae5cd4b38de0be37355be3bd4cf0a97485dbba40cceeecc25c3d78
                                  • MD5 SHA1 SHA512 TLSH

                                  iceBucket.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WCRY
                                  • Size 6KB
                                  • SHA256 b040660b95e5a4ba088c6f221790fb06a05a2c1d14366c0a84653b3c4d864dea
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  infoIcon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WCRY
                                  • Size 1KB
                                  • SHA256 b3d3b76be5efde825aad983fe41a8908686e442fc7692e6a8c3b6b95b4ff4fa2
                                  • MD5 SHA1 SHA512 TLSH

                                  kfm_folders_image.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WCRY
                                  • Size 20KB
                                  • SHA256 cc4e1a11c55a04f8632dcffff6bbc13298c7eacaf66df5ed15c35cd8009e3536
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  loading.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WCRY
                                  • Size 1000B
                                  • SHA256 ee1f4be38f398cc4e1e59ff3e65c7d15bfcc25cdf1419e84c6dc2802e5df305d
                                  • MD5 SHA1 SHA512 TLSH

                                  loading_spinner.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WCRY
                                  • Size 712B
                                  • SHA256 85508a3e838ac1104594b387fdbfc3dfc8c53e67b1ad013a6f7b58c7dc137969
                                  • MD5 SHA1 SHA512 TLSH

                                  onDemandFiles.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WCRY
                                  • Size 7KB
                                  • SHA256 6bf1348ca93b7a2b1888e80a57ffc020078c1f72b4dd87bc8cbea1f0a02d7085
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  onDemandFilesDehydrate.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WCRY
                                  • Size 9KB
                                  • SHA256 62e7e6e4112d4d9545f4e21239ac3dc872ec6dccb7167fe074fc5322f0e941cb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  onDemandSelectiveSync.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WCRY
                                  • Size 2KB
                                  • SHA256 70ae62394400e7e89933c5f37d24cfc66806689ea5c63c99d5cd9556ffc3091e
                                  • MD5 SHA1 SHA512 TLSH

                                  overflowIcon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WCRY
                                  • Size 1KB
                                  • SHA256 f36d140dfda217ce279d1cd35e94653f7a327ec60a7ca040f2fac3577ba5d67d
                                  • MD5 SHA1 SHA512 TLSH

                                  overflowIconLarge.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WCRY
                                  • Size 1KB
                                  • SHA256 3537229877c5e8ce3ee9e19617959721f721b6f413ee4ed5a917134a559a49c9
                                  • MD5 SHA1 SHA512 TLSH

                                  partiallyFreezing.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WCRY
                                  • Size 4KB
                                  • SHA256 71e86a40590275d1b26e91c2ac6fb79403887de9bc850645128a880075373942
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  paused.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WCRY
                                  • Size 600B
                                  • SHA256 94f4a6300f31eae62157131660ba01c512c3ff18b025bf12545c2eed369151b5
                                  • MD5 SHA1 SHA512 TLSH

                                  premiumIcon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WCRY
                                  • Size 664B
                                  • SHA256 eab3823ac7b5212f4dfd9e9b96e8d10c172192e28983a33db3841bf2ae5c5722
                                  • MD5 SHA1 SHA512 TLSH

                                  recycleBin.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WCRY
                                  • Size 3KB
                                  • SHA256 0b05e5ae46877118dbdcfbb92747548c49eb2ae0292a8c74b23d674bccfd28a2
                                  • MD5 SHA1 SHA512 TLSH

                                  shield_icon.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WCRY
                                  • Size 1KB
                                  • SHA256 1a8df79adb0d2ac15ff178a79ec3a1712a9f116a099b6ad0c4ce318e69b607ba
                                  • MD5 SHA1 SHA512 TLSH

                                  signIn.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WCRY
                                  • Size 10KB
                                  • SHA256 4b5df4f5cdf4c32fc4bd7365e5ad0bd64ec692947eeb08a61fe1e47fbd1002a6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  stackedIceCubes.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WCRY
                                  • Size 4KB
                                  • SHA256 dbc660e939e9e74ceeccf0d88b428746b374176ef30ccae4881b8ffbc8c35e13
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  warning-symbol_grey.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WCRY
                                  • Size 536B
                                  • SHA256 b2892abd278335c3e1e98d88adea4d6633f8778034342da8dda46ac58cc3a5a0
                                  • MD5 SHA1 SHA512 TLSH

                                  waterGlass.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WCRY
                                  • Size 2KB
                                  • SHA256 95d82daef64594c8b78587173e8d9469a66a4de425b702af880512a8eecfadd5
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-black_scale-100.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WCRY
                                  • Size 936B
                                  • SHA256 c03b12a49f4e7785ed37d02d44a207150b9d82f70cf777c166103f84c5942190
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-black_scale-125.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WCRY
                                  • Size 1KB
                                  • SHA256 ebdbe9ffb558be7052dcc002c44dd24b4ae44758d34dd32c31573019b659c599
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-black_scale-150.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WCRY
                                  • Size 1KB
                                  • SHA256 5aaa3026e0cb6ed561c857d4fc2a8c384dccacec128bdee6e5f48e82de42712f
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-black_scale-200.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WCRY
                                  • Size 1KB
                                  • SHA256 970b133104f26c4da544ac6ad8e52234085a39ed096dd46aae2119c150524f3c
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-black_scale-400.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WCRY
                                  • Size 3KB
                                  • SHA256 dd1a59d46643bf53d71eef7d76af2dc3c23bebcba86d9f7e72358187152eaeb9
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-white_scale-100.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WCRY
                                  • Size 952B
                                  • SHA256 23db70aa498d79977d6163d21eefd45368565adcf4d8ac1f2521f13e09782f64
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-white_scale-125.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WCRY
                                  • Size 1KB
                                  • SHA256 e9f1d5d794c2458bf36d21795358a086d5b3a4946d4f34b9f9a92d70fb5b34a3
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-white_scale-150.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WCRY
                                  • Size 1KB
                                  • SHA256 e8e8e8bacccca94928ef62f7ab9d789431006886de480124025ec1767f714934
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-white_scale-200.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WCRY
                                  • Size 1KB
                                  • SHA256 3dbdbba667d572c0ba371cc005a6af8e301c3a3eee4a7cec101de70893af31e1
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.contrast-white_scale-400.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WCRY
                                  • Size 3KB
                                  • SHA256 06f84f6bce5799a34b733c4be71a909e6384344eea3332a9a3e0b576e2ce4fb3
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.scale-100.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WCRY
                                  • Size 936B
                                  • SHA256 f814b98aee81f2012d2fbc91188b4584f43d6712e7e1fef781d5e1bb9a742f10
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.scale-125.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WCRY
                                  • Size 1KB
                                  • SHA256 1866ab282010bd03ced71f34deb99deb2fc0435225a327a172df30e151ebed92
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.scale-150.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WCRY
                                  • Size 1KB
                                  • SHA256 9cd21c2a233e207c9d3845b024998457d04e1279a7028fdda03ce44b91b825df
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.scale-200.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WCRY
                                  • Size 1KB
                                  • SHA256 0bda81e198d29e827fab55e98df2be807b56b081b810218e06d5f3e94f87f466
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveMedTile.scale-400.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WCRY
                                  • Size 3KB
                                  • SHA256 be616fa31bcf9af5f735fb78850f60aedf49e501685a9534d7d8b899bde701e7
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-black_scale-100.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WCRY
                                  • Size 696B
                                  • SHA256 d99ff2960853eb6f4cf11485010f743358517201efee1c49ad66fab96d7d3117
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-black_scale-125.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WCRY
                                  • Size 808B
                                  • SHA256 4f4ac9aa56027f3195a944978f4d2150c806176222b504153b052f8d21f227b9
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-black_scale-150.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WCRY
                                  • Size 872B
                                  • SHA256 c9355fbf01ed94ec573e8a8385d2b8933a5f9bbbfd730e5f16d2e847900c7474
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-black_scale-200.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WCRY
                                  • Size 1KB
                                  • SHA256 275635537a5170634fe8c4173e076c12157a906463074f17015697b7d77c881f
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-black_scale-400.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WCRY
                                  • Size 1KB
                                  • SHA256 cd50b4046d65f3de86421ab40316815ec289b1ebd764f77e18f0ade296a017f2
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-white_scale-100.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WCRY
                                  • Size 696B
                                  • SHA256 7bf83e4f11d70353707f25283af3b38d540914f3f5660b8e3405c9ba20ebb46b
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-white_scale-125.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WCRY
                                  • Size 824B
                                  • SHA256 3cc5bb2839a4b301633a99728548f166b2203ea63157f1328632ed144b97326f
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-white_scale-150.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WCRY
                                  • Size 888B
                                  • SHA256 ea10607bdacdd5cd5190d018573a6e16a1ce169061fbad94f8cbd4017ffe9941
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-white_scale-200.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WCRY
                                  • Size 1KB
                                  • SHA256 6619d92bb1ac7428f4b0746336179a1d347fdaea3829232a74a2e7634f2300cb
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.contrast-white_scale-400.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WCRY
                                  • Size 2KB
                                  • SHA256 612301ab137eb7ea0ea77d757bc0bc48f0b8e6cc480c52b9adab71923c925179
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.scale-100.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WCRY
                                  • Size 696B
                                  • SHA256 14be7da462fefa1c8dc846af9099573ac0903175a580cad0173755003dfd5597
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.scale-125.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WCRY
                                  • Size 808B
                                  • SHA256 3984f6e4a9e72ac8acfafb15bcc537ef3f436f96674b34dbddeaa32114dc89b7
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.scale-150.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WCRY
                                  • Size 872B
                                  • SHA256 976c826c32dcf3fda3bed89a8cd8ac13aec432f015567d48ed639b7ee61e700e
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.scale-200.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WCRY
                                  • Size 1KB
                                  • SHA256 84fe6441ac45493c02348c4adc17e22818e60f6e816d64b07f9cb15b24c2a525
                                  • MD5 SHA1 SHA512 TLSH

                                  OneDriveSmallTile.scale-400.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WCRY
                                  • Size 1KB
                                  • SHA256 67ba09df2ba3191bd0fceed1a25d71b4598727b9aaa7274dae5f539e4acdc458
                                  • MD5 SHA1 SHA512 TLSH

                                  cversions.1.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WCRY
                                  • Size 16KB
                                  • SHA256 c128dea9367c6d18b23f9169834a6813d65cddf49368e2a527b4647bed564c86
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  cversions.3.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WCRY
                                  • Size 16KB
                                  • SHA256 323cfed5773ba9d8d47b90678975fc1249ac883ad177c360cb1fad2e0fd845b7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  {03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WCRY
                                  • Size 414KB
                                  • SHA256 53b8cf7e49511d92e80214266534af81865bbd4974a663f8cd22a830b0534765
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  {3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001e.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001e.db.WCRY
                                  • Size 93KB
                                  • SHA256 6cd8d8c538cbe2f558694e3cbaa3b573bf88938f42d03e7fde46ca6bb878f70a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WCRY
                                  • Size 83KB
                                  • SHA256 49ce38653183ed091b8a1892cefc134a6c3bac0aec715af5ffd5801f934ebfa8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000013.db.WCRY
                                  • Size 85KB
                                  • SHA256 4633ca1174d51b4d97b72171d27b907e2c89a2d758345b72fc377821214139d0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  iconcache_1280.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WCRY
                                  • Size 312B
                                  • SHA256 41e0215ec8b18a4f44e7a4526786c874792bc2428489959dd4e794ff011a60ad
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_16.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WCRY
                                  • Size 1.0MB
                                  • SHA256 504609d6b80311682bbfc79bb07248df7b22c1d5929e9bbca9b9f8c43735c53e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  iconcache_1920.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WCRY
                                  • Size 312B
                                  • SHA256 ff2c731777b9a0df9f188bb8ba0c2ee8be6b6272ec31aa3ebd62bf89c1d34cc2
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_256.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WCRY
                                  • Size 3.0MB
                                  • SHA256 e1232d2b00055a1c2cdb6eebfe35913402e1a162441398f5392dec4002c50d41
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  iconcache_2560.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WCRY
                                  • Size 312B
                                  • SHA256 0ef8f809bed4b336fd802344d7bcb9577866d03be208162d40dbcf0e02309d9d
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_32.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WCRY
                                  • Size 1.0MB
                                  • SHA256 8a5be9eea23f8b09194d5dfa58f44eaeab3d93b2544cf5774041109e931177f0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  iconcache_48.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WCRY
                                  • Size 2.0MB
                                  • SHA256 e6a4874e9db2d51c33941c6c233df455d7965bfc8711c542d91603343d7d1f2a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  iconcache_768.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WCRY
                                  • Size 312B
                                  • SHA256 fa27584359272e60ac39d2cc7e03f2348b18b563e6507ce258b31987796f0d26
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_96.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WCRY
                                  • Size 312B
                                  • SHA256 77548af6c01adc82e4e7e92a586a4771979b383b91990def62729e16702c8c74
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_custom_stream.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WCRY
                                  • Size 312B
                                  • SHA256 9e8295df5957114720c8fcba77b6dc92e78be5fea56e29f0bf2b178ef6d147dc
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_exif.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WCRY
                                  • Size 312B
                                  • SHA256 2eacbf6f2a272c8ac3d3d4e24473b3b8ae3f94499b8f628171ace73f32ec931a
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_idx.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WCRY
                                  • Size 28KB
                                  • SHA256 7e9a2d54db4f44fec4ed3e3a25f2f188b2502639d984be5f5807ae4e9b0488b0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  iconcache_sr.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WCRY
                                  • Size 312B
                                  • SHA256 6785643860b68d75216ef47b247eee2e363ac9328ec89c74d3a94e3a4caf3fd5
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_wide.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WCRY
                                  • Size 312B
                                  • SHA256 f5df876948970c5d124941f6977069ca2c0043b61f2a6baa630769e20fd79aec
                                  • MD5 SHA1 SHA512 TLSH

                                  iconcache_wide_alternate.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WCRY
                                  • Size 312B
                                  • SHA256 ac3eaaacbadaf9145c4a0d25d5cc115a7786a53a8eec26fe0a32e8e85c0b989b
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_1280.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WCRY
                                  • Size 312B
                                  • SHA256 b384c397e1a027f817cdea04f48960cda53d95a2fa578570cc1093a99431b50e
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_16.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WCRY
                                  • Size 1.0MB
                                  • SHA256 11bc25657e96b3bc46fe10fd408d53bde154c448bfa3dd414951093e567701ed
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  thumbcache_1920.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WCRY
                                  • Size 312B
                                  • SHA256 fac7e1594c949bcfb893cf3ba81d09f5efa459c9af3e73d515f8a8749177897f
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_256.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WCRY
                                  • Size 1.0MB
                                  • SHA256 5c049389778665321a103c3f78a88e3c939af87a34e1840decce4c74365a3de1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  thumbcache_2560.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WCRY
                                  • Size 312B
                                  • SHA256 4464f39ff1d00f61d03ee919c20b5b565d4499b8fc594a39934af8a818f3fbf9
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_32.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WCRY
                                  • Size 1.0MB
                                  • SHA256 65a2f5fdbfc9a365bb72c1b472cea582430d7bd466a1a40e6e887793431663d9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  thumbcache_48.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WCRY
                                  • Size 312B
                                  • SHA256 f34168ef0669f6cb480f4b1c6ba384ef529d1fdb5855deacf2a646a7fb2b32f2
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_768.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WCRY
                                  • Size 312B
                                  • SHA256 03322f92e57b3e1f6f309bc444fb13dba2023583b7190f24627ba6e45b64e42d
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_96.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WCRY
                                  • Size 4.0MB
                                  • SHA256 34c3818810efc86d13c3830414c6682da764cacdffd790be4415e10c6f3479ca
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  thumbcache_custom_stream.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WCRY
                                  • Size 312B
                                  • SHA256 57c175c65d5da74605a61a0529b69af9ee931ae33635d56257fe76bd18eac2ef
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_exif.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WCRY
                                  • Size 312B
                                  • SHA256 c241a410aa8272f15e115c2f71f3ae5716aeccf51a535cfe05d3865cde755a10
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_idx.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WCRY
                                  • Size 14KB
                                  • SHA256 f86fc4914c3dee7f28fea5ed1e3ec5c0ceaea95f60f1eea526d7573093970643
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  thumbcache_sr.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WCRY
                                  • Size 312B
                                  • SHA256 0504c9f9f0cf299c78a2e84c70f2d59f1d8c9cffc5456fb6b7d5036cdf2e0fe5
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_wide.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WCRY
                                  • Size 312B
                                  • SHA256 def7fda67289bae645042911ee3bb6a26b423442ae8575a06f414aab573f17f6
                                  • MD5 SHA1 SHA512 TLSH

                                  thumbcache_wide_alternate.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WCRY
                                  • Size 312B
                                  • SHA256 aeda3558d215d6ed7e374996e41288d0ddc9e9cfac2185c032fc62a11c73cfd7
                                  • MD5 SHA1 SHA512 TLSH

                                  fabric-chunk_vendors_E7vUDAv61iVCiyoz3ABkzQ2[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9GMOGYPF\fabric-chunk_vendors_E7vUDAv61iVCiyoz3ABkzQ2[1].js.WCRY
                                  • Size 551KB
                                  • SHA256 e40535b7a41e2ab4176fa9b9468c32ec3557e1621711741a934b6142e5ca5bac
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  legacy-polyfill_N8Ga2ha8NZXKE88suhqTHA2[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\9GMOGYPF\legacy-polyfill_N8Ga2ha8NZXKE88suhqTHA2[1].js.WCRY
                                  • Size 135KB
                                  • SHA256 ccaae88cf6a330d99097d3a70c7f2a691ee5f50973c2b9cb4fc41af8246df781
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AAehyQC[1].svg.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\JAXEZ455\AAehyQC[1].svg.WCRY
                                  • Size 3KB
                                  • SHA256 a924f0feb7589c597f25debf1d521c9ae9cf201e880b8148f867c01340fe3b2c
                                  • MD5 SHA1 SHA512 TLSH

                                  {8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\JAXEZ455\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WCRY
                                  • Size 6KB
                                  • SHA256 383a1840ee1713ede0b7c0332921e24f24ffdf9e1c232cebabc7794d714cc5c6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  wpndatabase.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WCRY
                                  • Size 1.0MB
                                  • SHA256 258dfd03dfc270d09fc92927002d7d0182a2f41082776c6299fc52e15a1749d0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  squaretile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png.WCRY
                                  • Size 2KB
                                  • SHA256 155b2201d4e06b30191471d58031771ec9fb95b3fe5e55c710ea6a756cd99faa
                                  • MD5 SHA1 SHA512 TLSH

                                  tinytile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png.WCRY
                                  • Size 1KB
                                  • SHA256 8951415ba0cf9636ffaf180029a29a598dc6a8ab7e577216015c217b1c9b0066
                                  • MD5 SHA1 SHA512 TLSH

                                  squaretile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png.WCRY
                                  • Size 2KB
                                  • SHA256 24de745b923dfe001b5a15911b428dd166f31f8901cb76f0b81e579fa30cef75
                                  • MD5 SHA1 SHA512 TLSH

                                  tinytile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png.WCRY
                                  • Size 1KB
                                  • SHA256 17a2f0a5b93987f28448af4c3b9d5abc4aefe90f040fa5cb3061e721439a064d
                                  • MD5 SHA1 SHA512 TLSH

                                  squaretile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png.WCRY
                                  • Size 1KB
                                  • SHA256 f3664334a9fc2c24b44eeef306c670e83129f6c756baf85254822c9da2abaff3
                                  • MD5 SHA1 SHA512 TLSH

                                  tinytile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png.WCRY
                                  • Size 1KB
                                  • SHA256 614e9a98df4673be5687c93b33f0fb5420444fd84a9903d35de851413d45aca8
                                  • MD5 SHA1 SHA512 TLSH

                                  squaretile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png.WCRY
                                  • Size 1KB
                                  • SHA256 27ed2c2d22c9d0ab9ec4bd6556f385cf5def33baacc15844d81cbbdeb49c1498
                                  • MD5 SHA1 SHA512 TLSH

                                  tinytile.png.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png.WCRY
                                  • Size 1KB
                                  • SHA256 695bbde92feedfd274f3c8b55ed9b175915104e266af0df4dbe72a8a7d53b139
                                  • MD5 SHA1 SHA512 TLSH

                                  53dEtUrhAV5kBHY-GXbgbWghcig.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\53dEtUrhAV5kBHY-GXbgbWghcig.br[1].js.WCRY
                                  • Size 2KB
                                  • SHA256 d012442cba3265ce8637022775ce80cb6c02abf2e7c1835a59a9925c451d7af7
                                  • MD5 SHA1 SHA512 TLSH

                                  5_Qy3kN7CMDIuIz_gxIKYIiSlE0.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\5_Qy3kN7CMDIuIz_gxIKYIiSlE0.br[1].js.WCRY
                                  • Size 63KB
                                  • SHA256 13147f477fe3253191fc3b8c74dd3bd59391c421f23502c7ec2163fad9018e53
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  6Y5Lpywr0GtWwZp2QTDQ9BU5hkM.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\6Y5Lpywr0GtWwZp2QTDQ9BU5hkM.br[1].js.WCRY
                                  • Size 87KB
                                  • SHA256 3f9b8ab31e9e3e7e314f7565e8d818be3574b3dab73f71feaa0cc756ed8b21c0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  75Izh7HFgy6cSu9rdaZkYjp-stc.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\75Izh7HFgy6cSu9rdaZkYjp-stc.br[1].js.WCRY
                                  • Size 9KB
                                  • SHA256 3c4b73878cc50a641b9d5c286820871a8fc676ab4c55350623585e32aa066ecb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  BssPvDdoj1C9GPJrc4ePK4br97g.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\BssPvDdoj1C9GPJrc4ePK4br97g.br[1].js.WCRY
                                  • Size 96KB
                                  • SHA256 16e0446c8104bb501c94a90b7842f16250e65f4411366f83fe0249d480cc8281
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  IBajuVOUJVU3NlyWM2Txlietv6o.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\IBajuVOUJVU3NlyWM2Txlietv6o.br[1].js.WCRY
                                  • Size 349KB
                                  • SHA256 9d8ca5c9cbc5030cb1d0fd6178e84fc6fa74ca4ce7a211442a2e7e1b5fce9479
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  KiGbwlvCr6mDT2PTMkGTGMX8P-w.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\KiGbwlvCr6mDT2PTMkGTGMX8P-w.br[1].js.WCRY
                                  • Size 42KB
                                  • SHA256 a3d23e98dad15afe19fcc411cdb989b767b6a5596af73a424d4ed08c2b0d2dff
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MxeJyjNgl4Wpe6lwn5kHkr4_-94[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\MxeJyjNgl4Wpe6lwn5kHkr4_-94[1].js.WCRY
                                  • Size 1KB
                                  • SHA256 cdcd858e9d87007514338e1f6e38da3f9aed280a676e0209d1f18102a1bd7f48
                                  • MD5 SHA1 SHA512 TLSH

                                  RGMlHpHvBtpIoimRoi_VK90-Hv0.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\RGMlHpHvBtpIoimRoi_VK90-Hv0.br[1].js.WCRY
                                  • Size 469KB
                                  • SHA256 706708c409d03f0441562b47c111f5d52d58ff5136e67abbbe88da67ef61cfd6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  S2z4mgWinRePGA60pm9jypzjvgk.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\S2z4mgWinRePGA60pm9jypzjvgk.br[1].js.WCRY
                                  • Size 163KB
                                  • SHA256 6e62d9008a52d60d7f4b53ff6ee21257ea620cdfb2b0d339fcf5bc1f1be97de3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  XDGzKmz1XMmydyUdsLjQWSxd8yE.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\XDGzKmz1XMmydyUdsLjQWSxd8yE.br[1].js.WCRY
                                  • Size 42KB
                                  • SHA256 5c19d3d5a34e3504e7af1b807d07d0b2267aad9752bec185a76e8197f5d45196
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  _BnB-s6taBN8V2dSpgLpRUHcruc.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\_BnB-s6taBN8V2dSpgLpRUHcruc.br[1].js.WCRY
                                  • Size 64KB
                                  • SHA256 6404d5a1e726d60b7eae8f45eba5344c5f6c2623fcab91ab9ed1b752a636bf6c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  iNPskXPmYT28qkQXzLg4o1yEVKs.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\iNPskXPmYT28qkQXzLg4o1yEVKs.br[1].js.WCRY
                                  • Size 543KB
                                  • SHA256 ab26e0da6b412748f0b36cc29eda247f9d814b9ed305a1e97ea31f19e3db1b7e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  kKDH_Zwhs7fhB09C7rXcLKAhJEE.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\kKDH_Zwhs7fhB09C7rXcLKAhJEE.br[1].js.WCRY
                                  • Size 100KB
                                  • SHA256 34244e8db9b6d3c791f4ba5b7979dfb779096a6d2006d85f719743aad5d24c05
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  nqCMVneqreK-vgoiiO8O6mngB9E.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\nqCMVneqreK-vgoiiO8O6mngB9E.br[1].js.WCRY
                                  • Size 135KB
                                  • SHA256 586cbb22034ec74b9a7806171a4eeff6471030260922ab55da3da77b6bf64120
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  sGpYN-m0KMWCBkdAq1ExBhpfbbU.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\sGpYN-m0KMWCBkdAq1ExBhpfbbU.br[1].js.WCRY
                                  • Size 2.3MB
                                  • SHA256 2d70eb0d6998acb3af80853a791074e1a2f26126b675cdf427238507fd0b5ce4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  tgVYEgDzrpTeICVaaRca7RC5Qpo.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\FTR41BYG\3\tgVYEgDzrpTeICVaaRca7RC5Qpo.br[1].js.WCRY
                                  • Size 1KB
                                  • SHA256 2fd600401d3b84823ef70fb07d9e846a92cbf88b8334d81d1ac7f718ebbfb4ac
                                  • MD5 SHA1 SHA512 TLSH

                                  x8RtLy5Qwx61338qTHt4EuBfnOo.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\7SHSQ3DD\x8RtLy5Qwx61338qTHt4EuBfnOo.br[1].js.WCRY
                                  • Size 1KB
                                  • SHA256 7c6acd8e29bc4be5e8c3117b745e319e0d13b6081783e877e313e1cf42b1772f
                                  • MD5 SHA1 SHA512 TLSH

                                  ANzUnPnVY0oL0XWxs0RLJxjJLUo.br[1].js.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\OFO9N1J4\ANzUnPnVY0oL0XWxs0RLJxjJLUo.br[1].js.WCRY
                                  • Size 20KB
                                  • SHA256 77060e553c90d1bd4418cd697407a590489908722ed83d74a600f66af8c12442
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0.0.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c4a0e953-6fff-4d0c-a684-0ddf5aa256bd}\0.0.filtertrie.intermediate.txt.WCRY
                                  • Size 29KB
                                  • SHA256 844704445eedc30957534a9b68e844301be96fe88fee9655d23be0f7264157e4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0.1.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c4a0e953-6fff-4d0c-a684-0ddf5aa256bd}\0.1.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 c5282f782f2c8c4cd63d6ce1702a15de7df4ce484ad0d6e09e7eb8818d30f51a
                                  • MD5 SHA1 SHA512 TLSH

                                  0.2.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c4a0e953-6fff-4d0c-a684-0ddf5aa256bd}\0.2.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 a408076abcfe2555adb9314d23854b252bc72564374d21d03f5b043582a68819
                                  • MD5 SHA1 SHA512 TLSH

                                  0.0.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c9ec02ad-b108-43da-a518-f23c96b158e6}\0.0.filtertrie.intermediate.txt.WCRY
                                  • Size 29KB
                                  • SHA256 26af6bc5bfcb45745fe220232c24d7114e3e20701cb2c87ceaaced5515ab0356
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0.1.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c9ec02ad-b108-43da-a518-f23c96b158e6}\0.1.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 92bf020ccd12ed0684d7da089387788f3292e16da5c98a0c0a7f61ac9a781dcb
                                  • MD5 SHA1 SHA512 TLSH

                                  0.2.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{c9ec02ad-b108-43da-a518-f23c96b158e6}\0.2.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 08e6fc338063625fb15b8f6867858d70239966a182bf90c26a3acce5f61c0b66
                                  • MD5 SHA1 SHA512 TLSH

                                  0.0.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d7e1a99f-1f34-4caf-b6a7-3f0e373c8517}\0.0.filtertrie.intermediate.txt.WCRY
                                  • Size 31KB
                                  • SHA256 a320850233f4309bc5d282934a1e2170452fd685864409b3454252243f0c520a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0.1.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d7e1a99f-1f34-4caf-b6a7-3f0e373c8517}\0.1.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 7c38bfecb3e350bd41312959a660e9c5330dab4c12b0c3db48762c2ce1bd1636
                                  • MD5 SHA1 SHA512 TLSH

                                  0.2.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{d7e1a99f-1f34-4caf-b6a7-3f0e373c8517}\0.2.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 1e60b32c1362def25931214db733b6d575ee11e9834a6d8d1616f76b0d915dd8
                                  • MD5 SHA1 SHA512 TLSH

                                  appsconversions.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{38059567-b46b-4b56-9de5-c96f78a5776d}\appsconversions.txt.WCRY
                                  • Size 1.4MB
                                  • SHA256 0566706ee08eba586010acd7b91564a4406821aa4e07d65573ff0e56c4f66ecc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  appsglobals.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{38059567-b46b-4b56-9de5-c96f78a5776d}\appsglobals.txt.WCRY
                                  • Size 343KB
                                  • SHA256 a1043413091b99896aaeed4975365fd038fde1b52f57b4ed8c925b9c80cbad93
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  appssynonyms.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{38059567-b46b-4b56-9de5-c96f78a5776d}\appssynonyms.txt.WCRY
                                  • Size 238KB
                                  • SHA256 6f1cb6c5197e666834496e905032d1ed6b4bbf1e68d49db43bc7fb6d703267d0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  settingsconversions.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{38059567-b46b-4b56-9de5-c96f78a5776d}\settingsconversions.txt.WCRY
                                  • Size 520KB
                                  • SHA256 585430207746d134cb2bc239ba50c0776ec283e23ec93864eb42d8341e32c702
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  settingsglobals.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{38059567-b46b-4b56-9de5-c96f78a5776d}\settingsglobals.txt.WCRY
                                  • Size 43KB
                                  • SHA256 aa4610ea31580d6ca22c2b2badf173b374a2fc2911f67b2987f3912d9178dfc8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  settingssynonyms.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{38059567-b46b-4b56-9de5-c96f78a5776d}\settingssynonyms.txt.WCRY
                                  • Size 101KB
                                  • SHA256 bcb7e510e1090f7e7e3439d39dc6dd1bba4c9b8f99b2eebe8f341c8cf26064f1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0.0.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{22adf64f-a8c8-4544-bbe3-0f59415c024b}\0.0.filtertrie.intermediate.txt.WCRY
                                  • Size 204KB
                                  • SHA256 2f18e35f5f6de4aa09b31167142686688ed8dcd9897661a08473e207bd5bc3af
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0.1.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{22adf64f-a8c8-4544-bbe3-0f59415c024b}\0.1.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 8d4590db1cb636df7c24eafc88b7838ba196d0ff1b063b0233809d00ea111183
                                  • MD5 SHA1 SHA512 TLSH

                                  0.2.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{22adf64f-a8c8-4544-bbe3-0f59415c024b}\0.2.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 fed876d01d87a780264c86aa2c9ef64d6ee76e690677daae89d5d312d72520b1
                                  • MD5 SHA1 SHA512 TLSH

                                  0.0.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{fe98c2e6-eb02-45ca-a4ff-f237e998aac2}\0.0.filtertrie.intermediate.txt.WCRY
                                  • Size 204KB
                                  • SHA256 80497bbbc7236d19202686255bd7352f52f7d4ee8b547852be549f8d032e70d9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  0.1.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{fe98c2e6-eb02-45ca-a4ff-f237e998aac2}\0.1.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 6ee9c04f0dc4397d318849be76dcc2cc4a518b3ed09d6db1da821dfbfc4d75f5
                                  • MD5 SHA1 SHA512 TLSH

                                  0.2.filtertrie.intermediate.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{fe98c2e6-eb02-45ca-a4ff-f237e998aac2}\0.2.filtertrie.intermediate.txt.WCRY
                                  • Size 296B
                                  • SHA256 fb0344ddda80960734c8ee5a78faa0dfd519ce741af4b927ad7a14f55e403ce0
                                  • MD5 SHA1 SHA512 TLSH

                                  AppCache134336127931345854.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336127931345854.txt.WCRY
                                  • Size 76KB
                                  • SHA256 02e60ad317d450302d702f4496dc72b18c04c3752586047422ecf14766a2823c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336128604905644.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336128604905644.txt.WCRY
                                  • Size 77KB
                                  • SHA256 a2fcdabdc6fdded1daaa2c53de123f1abd066801a80ec56830682684578118de
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336129336526466.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129336526466.txt.WCRY
                                  • Size 77KB
                                  • SHA256 b4da5b22782c00fd3b79f062d6f5bece06a92fbff44e771fbe0b486ae8a2a417
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336129651633768.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129651633768.txt.WCRY
                                  • Size 77KB
                                  • SHA256 24c5b4d14de19182581b4442a0b25e0e61fbe6337758e7696b274aecbe17733d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336129678611126.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129678611126.txt.WCRY
                                  • Size 77KB
                                  • SHA256 ad7a4ac932cd6b86cdbde75ebdbdc0b45d112e0d62713b3bfa8e004d03721e06
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336129701748623.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129701748623.txt.WCRY
                                  • Size 77KB
                                  • SHA256 9bb18315797e36f177b1ba0ef3b218ae8dfc13ae14bd9716a37b6dd081c6485b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336129820085266.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129820085266.txt.WCRY
                                  • Size 73KB
                                  • SHA256 a0a1df21d4caaa568565c95eae487525e8c1a3ca5f78ada443ace453c1705078
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336129860205848.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129860205848.txt.WCRY
                                  • Size 72KB
                                  • SHA256 833b907d6ae3b94e3c32d8a95a9bc6d390a63669878c44a03ebbec8cbfee352d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336129939233612.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129939233612.txt.WCRY
                                  • Size 64KB
                                  • SHA256 31fd26320e0d698771d1edf0e8202fe15afb69162a35bcf3be0c1f188adc359b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336130160133796.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130160133796.txt.WCRY
                                  • Size 47KB
                                  • SHA256 136b0753e85008a1ff286acb81c9789f0e504db08597065765d4023abb19ec3a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336131008568956.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336131008568956.txt.WCRY
                                  • Size 47KB
                                  • SHA256 9c2a26e372ab8c80adf3316a63c633d7e243ef5be1de5bc58315aa5f081f8307
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336136767662393.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336136767662393.txt.WCRY
                                  • Size 48KB
                                  • SHA256 89cecee503b72fe56a3980c3c4218ca9e6cb69285402f1234782524ac4e99ed4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336137127075024.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137127075024.txt.WCRY
                                  • Size 49KB
                                  • SHA256 edcfa45b2d10feaec556a4921942907a5aaae1197104b5f7689ebe594611b30d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336137430086918.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137430086918.txt.WCRY
                                  • Size 53KB
                                  • SHA256 d5971d017ca33d44663d6abba1fb52c2d09fd4e1b3c3b23d00ec074f01835542
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336138739039349.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138739039349.txt.WCRY
                                  • Size 64KB
                                  • SHA256 18f0369be648c518d49aef5f1268b569f05afebeed2974027d80fe06bf986ce2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336139036802989.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139036802989.txt.WCRY
                                  • Size 64KB
                                  • SHA256 01f6ef5299ab2b4ec5400d8d295f0d1726828ee362c1a04c8012b30705d09cc1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336139612179003.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139612179003.txt.WCRY
                                  • Size 65KB
                                  • SHA256 bb57565ca2c245a5293cf8b4823e6aebebec9cccedcfd1cf6c8def885e6841aa
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336139911646035.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139911646035.txt.WCRY
                                  • Size 65KB
                                  • SHA256 ab78cf5a6dff2758b608c1c9ed48a201d714f840e55e6b24f0a81ea79932579b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336140843464772.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140843464772.txt.WCRY
                                  • Size 67KB
                                  • SHA256 36ead0b508b772a4c37b661994ce221394e7bc884995e99f712a878d42915aba
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336141142908884.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141142908884.txt.WCRY
                                  • Size 73KB
                                  • SHA256 2ab397e4543d57fff6d2cedfad3130acab41e2e018da8ce654237f9a41621f74
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336141394816223.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141394816223.txt.WCRY
                                  • Size 73KB
                                  • SHA256 a52453e462ee4a09fd4e7da780be9b7c0230e58b3ab23d796b06a2cbf5aefd0f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336141442783201.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141442783201.txt.WCRY
                                  • Size 74KB
                                  • SHA256 4bfc487fb666943c0ca03ad756522f2696d8e5732803db817b605fcf7d4319aa
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336141800692368.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141800692368.txt.WCRY
                                  • Size 74KB
                                  • SHA256 dfee06d69ab414223380fc3cc40b6955fbd6fd346520956ca6df98b64d4a5c09
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336142081599731.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142081599731.txt.WCRY
                                  • Size 76KB
                                  • SHA256 636a888b81033d530cc01043060db387f9525caadbb9e9177f25ce8d0c5c4c29
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336142381738405.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142381738405.txt.WCRY
                                  • Size 77KB
                                  • SHA256 25b50237d9457a5e2759b951730cba23d14b3784a2540103badddc3a413b27d2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336143605231593.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336143605231593.txt.WCRY
                                  • Size 77KB
                                  • SHA256 617dd66104add1e59fd3f194bf7ad3491739aef66139c816e64f13298063b123
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AppCache134336157367734366.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336157367734366.txt.WCRY
                                  • Size 77KB
                                  • SHA256 60b0f972fb25ea2e3e9b98875967694a0a97d00d693a38520dac9447b02c2808
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SettingsCache.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt.WCRY
                                  • Size 670KB
                                  • SHA256 71edacf78b560b6005d38e49f2e91273dcb825d6e87d0d3963035a6b06213be0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  10.WCRYT

                                  • Path C:\Users\Admin\AppData\Local\Temp\10.WCRYT
                                  • Size 74KB
                                  • SHA256 85501266a737ccf147e37a1477e7e9b932af367ec3fa0f4410fcfa188a60f310
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  14.WCRYT

                                  • Path C:\Users\Admin\AppData\Local\Temp\14.WCRYT
                                  • Size 77KB
                                  • SHA256 78295accba015ce7e2505440be5b267e685070a15b1a6d62f86f3dc6c4e63030
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  18e190413af045db88dfbd29609eb877.db.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\18e190413af045db88dfbd29609eb877.db.WCRY
                                  • Size 24KB
                                  • SHA256 b883bc52a03156b09cc270552ec7363b036c34707d9ea9ed8d89f1f36f221c8e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  19.WCRYT

                                  • Path C:\Users\Admin\AppData\Local\Temp\19.WCRYT
                                  • Size 47KB
                                  • SHA256 250fb68887a41693c65e8dae268a37e78f30a92176c5033d68f4d9852881f51c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  5.WCRYT

                                  • Path C:\Users\Admin\AppData\Local\Temp\5.WCRYT
                                  • Size 64KB
                                  • SHA256 2b458c48dd20870bb817ae588b91d422cfa27e4610175348e98cdabf7dbfe76e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  5.WCRYT

                                  • Path C:\Users\Admin\AppData\Local\Temp\5.WCRYT
                                  • Size 5B
                                  • SHA256 8e1e6a3d56796a245d0c7b0849548932fee803bbdb03f6e289495830e017f14c
                                  • MD5 SHA1 SHA512

                                  7.WCRYT

                                  • Path C:\Users\Admin\AppData\Local\Temp\7.WCRYT
                                  • Size 5B
                                  • SHA256 d65b6a3bf11a27a1ced1f7e98082246e40cf01289fd47fe4a5ed46c221f2f73f
                                  • MD5 SHA1 SHA512

                                  BroadcastMsg_1789140104.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\BroadcastMsg_1789140104.txt.WCRY
                                  • Size 280B
                                  • SHA256 28739a46cf5b5d91ed1b78b4e59ad1313778169587760ffd27a518a6df8b2675
                                  • MD5 SHA1 SHA512 TLSH

                                  dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.WCRY
                                  • Size 1KB
                                  • SHA256 5431b9755e452d4247466a0a186a8e58419331c000b606560fd1d55d7fed4544
                                  • MD5 SHA1 SHA512 TLSH

                                  dd_vcredistMSI2832.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI2832.txt.WCRY
                                  • Size 427KB
                                  • SHA256 b7cb3a6c3fed6704ee9230380a77feef8386941e94617b5d4be17a4c1ed0ca67
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  dd_vcredistMSI285C.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI285C.txt.WCRY
                                  • Size 416KB
                                  • SHA256 43ad57b5b11e40fac8f140d09c755fe3b9f323a1c823c6c6438e2baa29f81ecd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  dd_vcredistUI2832.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI2832.txt.WCRY
                                  • Size 11KB
                                  • SHA256 c1099adb82ceb130555028481bbafe4e7c661e555566df3231b8ff7127696261
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  dd_vcredistUI285C.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI285C.txt.WCRY
                                  • Size 11KB
                                  • SHA256 01a0e7523bcc9cf02f9f20fc55d8641677e8a0a9ddff8f0130f4197c247d84ec
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  mapping.csv.WCRY

                                  • Path C:\Users\Admin\AppData\Local\Temp\mapping.csv.WCRY
                                  • Size 121KB
                                  • SHA256 f2ca92f8f691fae3edd998519aa0113265449cbf0e714aa5717a64a1ce73a7bd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CompressConvertFrom.asf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\CompressConvertFrom.asf.WCRY
                                  • Size 462KB
                                  • SHA256 e6fc5a8c32d739d1def6322c88ba8b9067c99b0d5f3f9b3c9600bbb99ffb507f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConvertFromCopy.zip.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\ConvertFromCopy.zip.WCRY
                                  • Size 370KB
                                  • SHA256 a8428d21c4a6b284ec0f6d59774e8db70d648ccf1db3102838c1bbc37cd8f058
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ExpandExit.gif.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\ExpandExit.gif.WCRY
                                  • Size 472KB
                                  • SHA256 626fc8342dda6767e6c78a3e2cf82a9077e798cdd90e23e93224c86296dcce24
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  FormatOpen.mpg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\FormatOpen.mpg.WCRY
                                  • Size 308KB
                                  • SHA256 61afbd1536d6b961bd98031731772c7981d148b9b290658b53aa8d6d4d7e1009
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  GrantConvertTo.bat.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\GrantConvertTo.bat.WCRY
                                  • Size 390KB
                                  • SHA256 95874e3b7f3f8ad88aa4f8122c1c373a3eebf62b5527e4e788ca018058746aec
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  JoinGrant.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\JoinGrant.svg.WCRY
                                  • Size 195KB
                                  • SHA256 b205f1eff288378dfe47844b30bad228367abb47b0763942b87c5fe4b38c40f1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PingResume.rar.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\PingResume.rar.WCRY
                                  • Size 400KB
                                  • SHA256 61cef0743045f741d4effdf95cdc4b2239e8e8a0edb0eff8aa015f80d4f9b371
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ProtectGroup.avi.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\ProtectGroup.avi.WCRY
                                  • Size 246KB
                                  • SHA256 fa23a68ca45adebcca4df3847dbd61fa613bb3a435af6a249fec09d6a23c899b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RepairRestart.pot.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\RepairRestart.pot.WCRY
                                  • Size 257KB
                                  • SHA256 37b84f67bddcb3a7b4770686727f43dbe42cb25f69943556613eb477f34e9ad2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RestorePublish.sql.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\RestorePublish.sql.WCRY
                                  • Size 339KB
                                  • SHA256 5c63369ee0aafdeac3421a7ec7833da0795bb1c2ad9a7f8c487139e7015568e0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SendSync.odp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\SendSync.odp.WCRY
                                  • Size 380KB
                                  • SHA256 614611e7aa061f1b8918834abb96f815db0d17167d646127ed1cd537b9784ba9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SetEdit.ps1.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\SetEdit.ps1.WCRY
                                  • Size 215KB
                                  • SHA256 baf473021fa1829a06ee03a6c2a57b067609bf8e3b7ba42f19d6eee5a26709ae
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SplitSuspend.asf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\SplitSuspend.asf.WCRY
                                  • Size 298KB
                                  • SHA256 70485956dcb4a11ca01d4483e596ff2786f994915777c26aa6127eebe69a6bfd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TestDebug.bat.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\TestDebug.bat.WCRY
                                  • Size 267KB
                                  • SHA256 be6c5819649e52a4139d206a6e8dae3d976ea1cd248d788e5ee5088b8d7b1c02
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnblockDisable.dotx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\UnblockDisable.dotx.WCRY
                                  • Size 493KB
                                  • SHA256 8b636d6be07db02e322dc38d1ba092a1a89af8cc5702c8664db0c0b66a846f99
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UndoJoin.mpg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\UndoJoin.mpg.WCRY
                                  • Size 277KB
                                  • SHA256 22b92fc9a37ea78698eb1908124ee38914beda86ddbc7c0d9ca394b1539051e2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UndoUnpublish.mp4.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\UndoUnpublish.mp4.WCRY
                                  • Size 328KB
                                  • SHA256 fb40ef6d9b4b449cdc4164a67ec8537aded0fcc4d267ab9b3b97cb7317461841
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UndoUnpublish.ods.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\UndoUnpublish.ods.WCRY
                                  • Size 185KB
                                  • SHA256 9bc06e996904fa3858476805f3ded3edf6d9d6f0ced9ad051133810ac54b7576
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UninstallSubmit.tiff.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\AssertRestart\UninstallSubmit.tiff.WCRY
                                  • Size 503KB
                                  • SHA256 ca65b20d4f53213f7d0260842a8adc5a220f6a70de95d11db8291e9de1ef30f3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  BackupRevoke.csv.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BackupRevoke.csv.WCRY
                                  • Size 665KB
                                  • SHA256 547e514dd9300f45f8844bc93f51acd27023b7746e152248a37bd734a4c34ef9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ApproveResize.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\ApproveResize.png.WCRY
                                  • Size 358KB
                                  • SHA256 f8f36dffe4e207f36fc1ba39319bc0ce1cb82e35859df9fa7873d0c04e8a7608
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AssertUnblock.php.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\AssertUnblock.php.WCRY
                                  • Size 339KB
                                  • SHA256 0d6d44ab661a3e0b1afdbdfa2407ab717615d0bf561b6c21039cc4395eb8e817
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CloseSelect.ppsm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\CloseSelect.ppsm.WCRY
                                  • Size 551KB
                                  • SHA256 1b8c76e63a72f40a1a238ac1d0778e468cf6afc644bf3dec708e7d919d4bb5b9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DisconnectInitialize.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\DisconnectInitialize.txt.WCRY
                                  • Size 871KB
                                  • SHA256 e8a919e97d9ac34e72f022065c2b492af3c721f49aaa7cfa890ec1daf9706877
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DismountClear.wma.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\DismountClear.wma.WCRY
                                  • Size 629KB
                                  • SHA256 edd63228a2a39062f43dd0313f26be4d3a26dee7c1a2b9027c610c373df69bd6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  InitializeConnect.vsdx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\InitializeConnect.vsdx.WCRY
                                  • Size 416KB
                                  • SHA256 03a2294c802c3b007f0bb67629e395dc2d34af96e3b4e0a8be0cb9eb07854fa4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PushAssert.rtf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\PushAssert.rtf.WCRY
                                  • Size 493KB
                                  • SHA256 9d1a1330191e8ec5f373382e81e3a2bd4b15b8991cd898ace346d5007740284e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RestartConnect.potm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\RestartConnect.potm.WCRY
                                  • Size 513KB
                                  • SHA256 637f32077928d30d2d7b9f27717e7579562a08246667d256fedd8622a0aa7af5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SearchInvoke.pptx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\SearchInvoke.pptx.WCRY
                                  • Size 280KB
                                  • SHA256 0d7ba50aa8c14ff94a8a93e85814d34f0ff35a6c6cf97da783c07120007c4c22
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SendSync.zip.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\SendSync.zip.WCRY
                                  • Size 571KB
                                  • SHA256 46f55ef844a5631fe2d9a6e45eff1bbbd6e879557959e1b9f46597fbf1141799
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  StartDismount.wma.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\StartDismount.wma.WCRY
                                  • Size 377KB
                                  • SHA256 9461efd93d48f84c530d5d52f2903a78cc04214487b8a67924c1dae8fc26d09a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SubmitLimit.wmv.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\SubmitLimit.wmv.WCRY
                                  • Size 397KB
                                  • SHA256 6624fbd7a3f5a83e02efeceded8affa83fc0cfc2a5a8005e2d46964fe9af0bf4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SuspendExpand.js.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\SuspendExpand.js.WCRY
                                  • Size 610KB
                                  • SHA256 00a64e0ef93f0683f0eb0068c74a3fb6d4602681fa6f19e49276c972663f846b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TraceInvoke.mpeg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\BlockRegister\TraceInvoke.mpeg.WCRY
                                  • Size 222KB
                                  • SHA256 9fcabe0a957b4dccbc967b450e61ab54d5fc4fe81406aba657aa08cbbe22774b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EnableConnect.3gp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\EnableConnect.3gp.WCRY
                                  • Size 378KB
                                  • SHA256 1bcec0dece9601499939a800730d169a91c6d64df12156bca2bbb7c0fcf71b73
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EnableSave.wmv.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\EnableSave.wmv.WCRY
                                  • Size 574KB
                                  • SHA256 4cf640fca6269c4a9f6d2cd6dea28b5daa99ca5c4ab8b1c718e15c32032b2366
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EnableUpdate.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\EnableUpdate.png.WCRY
                                  • Size 882KB
                                  • SHA256 d3f313c4d0094220afa72fcd760c3feddda8fc226bc9f16e9a57bc46ca65bb69
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OpenCheckpoint.potx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\OpenCheckpoint.potx.WCRY
                                  • Size 322KB
                                  • SHA256 d27815f4cf877a1a35bc1de600b8c8d19f253b18b9453aaa2fb41ccfc7531aa2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OptimizeInstall.3gp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\OptimizeInstall.3gp.WCRY
                                  • Size 224KB
                                  • SHA256 efd1086306c62f6fc01b80f338789ce3490cc096be69fd1e0ea8ec1d633ad05c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ReceiveResize.mov.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\ReceiveResize.mov.WCRY
                                  • Size 602KB
                                  • SHA256 405f897fa2ba6e47333d1ee055f0889022eaa7b764ebd1ab44c004d7d420b1bb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ResolveSelect.ppsx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\ResolveSelect.ppsx.WCRY
                                  • Size 336KB
                                  • SHA256 7c1e846fe42ee907ab3eb31d8eebd142214c4e2eb4184365c98124975a382fba
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SkipInvoke.mpeg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\SkipInvoke.mpeg.WCRY
                                  • Size 266KB
                                  • SHA256 fd0bbf8b252bc13751e67dc12aee1c5ff50a899a693f99dac09fc1576560cde2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  StepNew.3gp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\StepNew.3gp.WCRY
                                  • Size 616KB
                                  • SHA256 9f273d44e0cdf88357dd6e9c705a36313e4451aa01923458a9c3d7376d41950d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SubmitShow.js.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\SubmitShow.js.WCRY
                                  • Size 462KB
                                  • SHA256 2c5d057a64876d998126d10e7bb6d8c36c18044b8a37a42b43b99ced5d770c89
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SuspendConvertTo.xltx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\SuspendConvertTo.xltx.WCRY
                                  • Size 238KB
                                  • SHA256 b1d772c81175c837890ba224b9f8931c3a574b53c1687964ac7ba43a9e75e214
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SuspendShow.rtf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\SuspendShow.rtf.WCRY
                                  • Size 504KB
                                  • SHA256 740421211fb36bd3862a046ea354cec27b4ec0456e3b4edd4748b52b7ce638b8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WriteHide.xlt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\CompareSave\WriteHide.xlt.WCRY
                                  • Size 308KB
                                  • SHA256 700047332c93868682001b68a5aeadfba47aa5bab041808a840dad3d1702bebe
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CompareConnect.potm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\ConvertToRequest\CompareConnect.potm.WCRY
                                  • Size 430KB
                                  • SHA256 badce434307e5a7328e9698984a722bdeb3c5585258d826ca31e2cfaf09a8868
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MoveUnlock.mp3.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\ConvertToRequest\MoveUnlock.mp3.WCRY
                                  • Size 358KB
                                  • SHA256 b7db9f212b40e309cabf4a729cb55f12e0740dd1415755e3133209484c871fa1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ResizeReset.avi.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\ConvertToRequest\ResizeReset.avi.WCRY
                                  • Size 484KB
                                  • SHA256 eda6fc6692baaed9c28af448082d71dc2993a823262b0d01ba092fefe2f2b77a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SyncSubmit.pptm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\ConvertToRequest\SyncSubmit.pptm.WCRY
                                  • Size 197KB
                                  • SHA256 1baed702df96f8b63bd4196acacf6d4724a09e0e38ec4fa84016777705788fcf
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MountWrite.pps.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\EnterNew\MountWrite.pps.WCRY
                                  • Size 1.3MB
                                  • SHA256 0ba2f0ad8c443926fd19bc54127a3d33be0fe387c17a4db65c1ecdf5a91ea4b5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OutSync.odt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\EnterNew\OutSync.odt.WCRY
                                  • Size 1.9MB
                                  • SHA256 19549071df715d3f754f338a08f331b26559ca5fa2a3cc60028bb5dd9e1bf9f6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TracePop.jpeg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\EnterNew\TracePop.jpeg.WCRY
                                  • Size 605KB
                                  • SHA256 6f0148dc149016ccb0a090fb96ade22d535adf8f204c401c79fd648405fb8efa
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UninstallOptimize.dotx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\EnterNew\UninstallOptimize.dotx.WCRY
                                  • Size 1.2MB
                                  • SHA256 15d7c4c31b4ba01ba9a0cafeb8b7b8b482a783b82584920aba1c8a13bb8b793e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WaitReset.rtf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\EnterNew\WaitReset.rtf.WCRY
                                  • Size 512KB
                                  • SHA256 6fd3eb36c3c0980aa4a6ee96c5a0d81ef8bea49ca132967dd4df91a50b1bc81c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  GrantFormat.potx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MergeMove\GrantFormat.potx.WCRY
                                  • Size 2.9MB
                                  • SHA256 0ff9c10ad6ea0bda73e7fb3960e488d43cf3abd184d15bf75365961aa08eec52
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SetOptimize.dotx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MergeMove\SetOptimize.dotx.WCRY
                                  • Size 768KB
                                  • SHA256 0b32d4891c3c1bce37a6639dbd8e9dd6153a6c8afef614196ccca9dea15fbb86
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  StepUnblock.mid.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MergeMove\StepUnblock.mid.WCRY
                                  • Size 1.7MB
                                  • SHA256 434e6400ef5ab0022011514a8c13dbf5c4e385bddf7dc1d4c9d50bf5c2008a60
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TM01840907[[fn=Equations]].dotx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx.WCRY
                                  • Size 50KB
                                  • SHA256 cee01ddf5f088e9df31a9021efc530826da5b791c0b40916ab355fb61b5aa27a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WCRY
                                  • Size 46KB
                                  • SHA256 68c3dcd9a579326af7a11285bdd4bc0e92b11fec59bb79d00b2996561a8d99b7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TM03998158[[fn=Element]].dotx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx.WCRY
                                  • Size 33KB
                                  • SHA256 3baafdc5edcaff177b36d359e37eb9f806a5aa219ebc1ebcbb0acc33de4ba145
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TM03998159[[fn=Insight]].dotx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998159[[fn=Insight]].dotx.WCRY
                                  • Size 3.3MB
                                  • SHA256 4c48f8fffeb05c169dbde52592d1ba1555ce6993ad6f585361cd6b664fa59fd3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Normal.dotm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WCRY
                                  • Size 18KB
                                  • SHA256 e8e7661df65a1614b25b5580cfa93e7c2382587a571502a459a10fcc6c129a9e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CachedImage_1920_1080_POS4.jpg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles\CachedImage_1920_1080_POS4.jpg.WCRY
                                  • Size 76KB
                                  • SHA256 d477faf4f3c893d2bf29f0d13abbaeb1b58bd5820b1219eb3d9464b11234018e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DebugConfirm.mp4.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MountSelect\DebugConfirm.mp4.WCRY
                                  • Size 377KB
                                  • SHA256 c387e54a5488412857fb07cd4585c7c50f76c9498c8316e7b885525b64719843
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DismountWait.bmp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MountSelect\DismountWait.bmp.WCRY
                                  • Size 814KB
                                  • SHA256 fbfb34d4591957c891c1d7091c0c2a27a4b0e5f10341714c7fdbd90990c458d0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  InstallUnprotect.mp4.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MountSelect\InstallUnprotect.mp4.WCRY
                                  • Size 496KB
                                  • SHA256 60242a6452a4a9b7736ed01d2ecc51d47cb1b3e6120daadf11513fa24b7a1681
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  LockHide.wma.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MountSelect\LockHide.wma.WCRY
                                  • Size 1.4MB
                                  • SHA256 92959095f44e1c4a6acca7de51a339a2a89b530a23554e9d31a4bd406953b8aa
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SplitResolve.xlsx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MountSelect\SplitResolve.xlsx.WCRY
                                  • Size 893KB
                                  • SHA256 e6cd9eaf53a5bcb70c03718e481f28f9ef1dc972ef517260b776702512fece2e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnlockClose.vb.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MountSelect\UnlockClose.vb.WCRY
                                  • Size 933KB
                                  • SHA256 c131abe4fdbe81361c1e45cf6245f23c479425cd741bb52ac1ca94ea07f3e052
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnlockRegister.xltm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MountSelect\UnlockRegister.xltm.WCRY
                                  • Size 854KB
                                  • SHA256 2c53f598c191d12be7544db75720ae946845263b38fefa8dd868f7a4b19957af
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  BlockFind.csv.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\BlockFind.csv.WCRY
                                  • Size 355KB
                                  • SHA256 c04d081e24775d56d9980bbf0b527b7522e0409a42414b9463bbeab58de92960
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CheckpointPing.zip.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\CheckpointPing.zip.WCRY
                                  • Size 236KB
                                  • SHA256 f8eb4431fd8858dfeae2ddcad4fda80037bbaf1d8a51858c5d08984939bff8e7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DisconnectUnpublish.ppt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\DisconnectUnpublish.ppt.WCRY
                                  • Size 458KB
                                  • SHA256 75939190f3d0093103da40fb989b9c260cd510939c91354298c627d55d4c2342
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  GrantClose.iso.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\GrantClose.iso.WCRY
                                  • Size 222KB
                                  • SHA256 de2adf49d4026d868bdc99a7c134347f0d409678c112f00bee4ed780e214a271
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  InitializeWatch.mpg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\InitializeWatch.mpg.WCRY
                                  • Size 251KB
                                  • SHA256 51414b4abbba60d5236765d1d2d11d3eabe0ee8eff2c1ec6cd36aa097a8b3952
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MergeShow.vbs.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\MergeShow.vbs.WCRY
                                  • Size 503KB
                                  • SHA256 a463df6c2bd2b4e882e9586e031645ff8c7f2a4bb205cbae443cc8c27ce4afd4
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PopEnable.mp4.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\PopEnable.mp4.WCRY
                                  • Size 325KB
                                  • SHA256 06654f8f93336eeb2f766143236f5cb818235ad7c0b5f6e90cd01eef15ef140b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PopImport.xlsm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\PopImport.xlsm.WCRY
                                  • Size 296KB
                                  • SHA256 55206fe9d9586f96694ba3a8d87fad884f8b5d521f483f775b683c14f99c5e4b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ReadTest.xltm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\ReadTest.xltm.WCRY
                                  • Size 577KB
                                  • SHA256 9e7ce5839a4ce4e3f8d50bd24fe9b2121625b773db7c801de57fe2022aa93e19
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RenameCompare.docx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\RenameCompare.docx.WCRY
                                  • Size 473KB
                                  • SHA256 42a179c895875443593c04639b4a87b5d68b3dd79069b3d6476fcd8831c8c60f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SkipExpand.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\SkipExpand.txt.WCRY
                                  • Size 370KB
                                  • SHA256 39564e201ae1ba1caf7a2d9842a1188fc93a42bbfbfcdbf36b6a4bd5a231cc8f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SplitConvertFrom.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\SplitConvertFrom.png.WCRY
                                  • Size 310KB
                                  • SHA256 ae3e2e14346abc533e5be8841dbd80e2ac489480575541a80a99182a4566f1d1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SwitchRequest.asf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\SwitchRequest.asf.WCRY
                                  • Size 591KB
                                  • SHA256 90ec70758a389298c7abf158f1b0482fd2c811d8d539da9a977571634837454b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnblockExport.sql.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\UnblockExport.sql.WCRY
                                  • Size 517KB
                                  • SHA256 14965f0a3c9d3bf301796415b435f8da07bcd3dbf12f600044c83f5a307fec84
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UseSplit.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\MoveReceive\UseSplit.png.WCRY
                                  • Size 444KB
                                  • SHA256 1bbfe32315c92607e94057d589208a8f9671f0130b15e4550262b76f590234d8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  prefs.js.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\uylgm8c5.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WCRY
                                  • Size 776B
                                  • SHA256 9b22a7936def396f3724cacddc10b52910720d757d2845febd101a9662cabfff
                                  • MD5 SHA1 SHA512 TLSH

                                  user.js.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7z1h8bxw.Admin\user.js.WCRY
                                  • Size 536B
                                  • SHA256 8f261252663525c209472d971d5c9e4e5172ac7faf980507ed82e4c0bdadf1ff
                                  • MD5 SHA1 SHA512 TLSH

                                  cert9.db.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\cert9.db.WCRY
                                  • Size 224KB
                                  • SHA256 c44b33388920e99d6145faa06c0cbfb43894bc380946ae35d9c179b1300361da
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  key4.db.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\key4.db.WCRY
                                  • Size 288KB
                                  • SHA256 8e2038e103c6f53b92cd7d4f8332991144c298b42cdbca52d23d517e2012c49b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  pkcs11.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\pkcs11.txt.WCRY
                                  • Size 808B
                                  • SHA256 c29458ad7e7e4257fecc971eb5baf1204ed015404313f9515a5a4909578a6247
                                  • MD5 SHA1 SHA512 TLSH

                                  prefs.js.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\acaoqdel.default-release\prefs.js.WCRY
                                  • Size 7KB
                                  • SHA256 7e0fed30e2482f2f5b553df00a2cf323bdacc487583c015d862e5d9ba130ea3c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  BlockPop.vsd.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\BlockPop.vsd.WCRY
                                  • Size 512KB
                                  • SHA256 4583bc0893c27109dadcd603058b0f61ce1fea7b72a28a183e3bd7bef99538ec
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CheckpointShow.bmp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\CheckpointShow.bmp.WCRY
                                  • Size 392KB
                                  • SHA256 fe65e3a7d76270eba1f353a92d493b29b2a30ae2c0b9f0209d12b577f0be7bb6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ClearInstall.docm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\ClearInstall.docm.WCRY
                                  • Size 290KB
                                  • SHA256 604dd9edda68ac2d3983a81b46e71b572b8e63aaaa73743d848a5718dbd602cd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CompleteRedo.7z.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\CompleteRedo.7z.WCRY
                                  • Size 580KB
                                  • SHA256 c911e1d450cfc09cdd428850c0dbc8a3e2e59c1799eef1c24a89114247bca6ff
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DebugShow.pot.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\DebugShow.pot.WCRY
                                  • Size 734KB
                                  • SHA256 ea09230e3fc0d1b7f081ccd0dbbcdc6622b20dd344c2ee14e6fb2c4bb53dcd34
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DenyWatch.jpg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\DenyWatch.jpg.WCRY
                                  • Size 273KB
                                  • SHA256 e923c28deaad301ec32fef2e66baea2b9c14ec824d56f63bb61eeed22feebac1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  LockSync.bmp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\LockSync.bmp.WCRY
                                  • Size 1007KB
                                  • SHA256 d523c9c3cafcf5b91a58c847dfbff7314d944e5a7aef02fedf2212869ce72abc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MeasureJoin.pptm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\MeasureJoin.pptm.WCRY
                                  • Size 341KB
                                  • SHA256 d519c94698af76f01c9ba1ff65cec9329e7b96a0c80f302af5c5fef0df16d8df
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MergeApprove.docm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\MergeApprove.docm.WCRY
                                  • Size 648KB
                                  • SHA256 0aab9b147cbc95a419c5ca67127c1c844a5c55356b52de2e2d0c73cf152f9907
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  NewConnect.xlsx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\NewConnect.xlsx.WCRY
                                  • Size 426KB
                                  • SHA256 acbcf98a053d6d0deda9718578438989d7b36c516fea2b2f1522acf8e1db073b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OpenUnlock.pptm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\OpenUnlock.pptm.WCRY
                                  • Size 375KB
                                  • SHA256 c72d53a960d54a8cc21b178a99bb33c7fd75410573885374b4d97135c3bc7a80
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RequestWatch.sql.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\RequestWatch.sql.WCRY
                                  • Size 256KB
                                  • SHA256 a326ec2ada678edcc99274e6b0087f1bb2d3ce834514104389bcb163ba88ee77
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RevokeDisconnect.odt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\RevokeDisconnect.odt.WCRY
                                  • Size 700KB
                                  • SHA256 4113863cb226e0c108aaf6e7395c9cb96649016b99596b08dfde805b6ed73b44
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SetRestart.potx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\SetRestart.potx.WCRY
                                  • Size 495KB
                                  • SHA256 126b242e90946455ae7e6a67b6572b19aef2e2391d6bf6c3927bd0cfe642a6ca
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SuspendConnect.wav.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\SuspendConnect.wav.WCRY
                                  • Size 409KB
                                  • SHA256 5ebbdb8cc38cb820fc1b0b648a1e6b98d6b06c80ee93b5ad438a21d1462ec1a6
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WriteConnect.bat.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OpenRedo\WriteConnect.bat.WCRY
                                  • Size 614KB
                                  • SHA256 f8bb10d98c1cee3430d9012f91e660eb51ec71c29bf603903423fcc116d32a2d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OptimizeWrite.iso.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OptimizeWrite.iso.WCRY
                                  • Size 478KB
                                  • SHA256 5dc09a53dccdaa4fda3c7d3e5948ffae1f7ccd84cae804ace4f4e87f890bdc27
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OutConfirm.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\OutConfirm.txt.WCRY
                                  • Size 341KB
                                  • SHA256 d1d3ffc1ae7dfc34f5558089ce012b9f65bbe2942ac21b492eabf72b1b8cf4c1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PingRevoke.vsd.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\PingRevoke.vsd.WCRY
                                  • Size 700KB
                                  • SHA256 69ecb4d15e851a09afd5e1aeda60323d08c850fad264f48c177fc2d2639bc33d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PublishMerge.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\PublishMerge.png.WCRY
                                  • Size 307KB
                                  • SHA256 6b1275e65092ea63047bcc67b1632ace621ecfbb45824407205cd11290add91e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RegisterAssert.pot.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RegisterAssert.pot.WCRY
                                  • Size 631KB
                                  • SHA256 5c43fea8414cfdd0b20b5b509049ea731ff7e859ed0a5643fff49fd3e18786cf
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RestartNew.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestartNew.svg.WCRY
                                  • Size 512KB
                                  • SHA256 32961f1732a626b0d7e64ecc12f838c9e1ae6725a1404d3f1448e39e653f508c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  BackupFind.dwg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\BackupFind.dwg.WCRY
                                  • Size 508KB
                                  • SHA256 7ffb4c135313e4e17a0984d7149783ccc7de7cc3e6f9057b9702de7f8695f404
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DenyStop.mpg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\DenyStop.mpg.WCRY
                                  • Size 320KB
                                  • SHA256 604331bd7da08ed19de9d8890f9dbbbea319e24334738731dd81ba67e6eaed0a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EditUninstall.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\EditUninstall.png.WCRY
                                  • Size 420KB
                                  • SHA256 37e55d4e9a4616b3ffde94b2920e477cb9128f8ed5876dd0497a91a2dc7349ad
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ExpandProtect.bmp.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\ExpandProtect.bmp.WCRY
                                  • Size 294KB
                                  • SHA256 4e4a9b443fe14d9738dff6bb5c697620f0ccb1578b6f1614b2ecd600897d3853
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  InitializeConnect.pptx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\InitializeConnect.pptx.WCRY
                                  • Size 483KB
                                  • SHA256 fd323d29ad9cf03be2200023632468cb9bedc41eadc816e08c9c50a022077e19
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ProtectConfirm.mid.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\ProtectConfirm.mid.WCRY
                                  • Size 520KB
                                  • SHA256 ba6e10b9cbb4dbf07d3c1bc1b429ff5be88ebc6dac6ede0c1384b25ed8d0e1b1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ResumeMove.dwg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\ResumeMove.dwg.WCRY
                                  • Size 533KB
                                  • SHA256 b4defeb6cf3e6f70f7b611e6b2b8d221a39b3ab561d9389ad669a53f2f42050b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RevokeEnable.m3u.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\RevokeEnable.m3u.WCRY
                                  • Size 232KB
                                  • SHA256 834f7c7c6cefbaa10506e8902cb6cc6bf5089904eddeb2888fdf3063d4bb648c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SaveEnable.ppt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\SaveEnable.ppt.WCRY
                                  • Size 432KB
                                  • SHA256 0bdf8ddef5988e1d8dfacd8d15c4284d6e185b36fef03625d66e9cae5e5f1063
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SetPop.m3u.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\SetPop.m3u.WCRY
                                  • Size 620KB
                                  • SHA256 85b4fb8ab810f8800120f8d10faaa823d3bb2ce3fbb7c9c7ea3e29289611888d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  StartRequest.mov.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\StartRequest.mov.WCRY
                                  • Size 470KB
                                  • SHA256 5d510de91b256077e8fe8c52b21bc35971e4816fe12273253487b426c50d707e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UseOpen.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\UseOpen.png.WCRY
                                  • Size 307KB
                                  • SHA256 9f4ade1722cc1245c7e4208dc9d29ac98e4480c04d65e5195c0b57b3250a257f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UseProtect.mov.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\UseProtect.mov.WCRY
                                  • Size 633KB
                                  • SHA256 f4e08be65615f5327bdc06991c5e7f8d01a1486046a4200171bd8778e30f921f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WaitSwitch.mp3.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\RestoreExport\WaitSwitch.mp3.WCRY
                                  • Size 332KB
                                  • SHA256 759d36e8c4ec549e5351c9b44b3515e9f81842ff645320ecc33510d3f90d00b5
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SubmitSuspend.pot.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\SubmitSuspend.pot.WCRY
                                  • Size 409KB
                                  • SHA256 4c62c2fc45b465fbb1ef2718ceb562c6b0aa9d0d330f45a789de7fe1d3016714
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AddUninstall.m3u.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UndoAssert\AddUninstall.m3u.WCRY
                                  • Size 390KB
                                  • SHA256 822d89a540866da82944d5ec64d5dee8ad174a5ec350efad863a87d9b7e04fbc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DebugConvertTo.tiff.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UndoAssert\DebugConvertTo.tiff.WCRY
                                  • Size 702KB
                                  • SHA256 cb2b526b3cade32daef0cc7cdea6bba9c27d1c7823324f5ade5dd53b78663e81
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DismountAdd.js.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UndoAssert\DismountAdd.js.WCRY
                                  • Size 608KB
                                  • SHA256 463f33b305560e4478166e63ff99cde3633fa6dc20e213418f63e6b662b4a8e8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PublishInvoke.avi.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UndoAssert\PublishInvoke.avi.WCRY
                                  • Size 327KB
                                  • SHA256 2918495fd7088f23966b008b84adbbe4892d60e04c6b1ac85a1e1771dea90038
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ResumeRead.png.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UndoAssert\ResumeRead.png.WCRY
                                  • Size 671KB
                                  • SHA256 279c89b583aceb04350b96ef7087b0d6d4332390c29ab403516a75f31a73a592
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnprotectTest.bat.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UndoAssert\UnprotectTest.bat.WCRY
                                  • Size 452KB
                                  • SHA256 df8f9f7113462c71e4bdd1cf733d65799126cffbf42b72be85e521b28c1a53a3
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WriteSend.mpeg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UndoAssert\WriteSend.mpeg.WCRY
                                  • Size 577KB
                                  • SHA256 ec1138707236a650cf3c83f5eea698d8fb1fcceced55114b54e219bed8d19c65
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AssertSet.m3u.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\AssertSet.m3u.WCRY
                                  • Size 313KB
                                  • SHA256 1fd9180c1f668ccbd863fc4e3f8c32a7ed3396006b9683eecc382e606ee60742
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DenyInitialize.doc.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\DenyInitialize.doc.WCRY
                                  • Size 479KB
                                  • SHA256 b26c0e0c6b2b3262b3146bf84d090c8edd5ac6b8d8ce15d48700496fa8b4d845
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DisableStep.rtf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\DisableStep.rtf.WCRY
                                  • Size 428KB
                                  • SHA256 ad4cf6b9e716e4ea2e0b83d09067f4bc3a7cd804577ede570398c64d1a22a332
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  InvokeOut.avi.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\InvokeOut.avi.WCRY
                                  • Size 505KB
                                  • SHA256 708e5c278ce00d03af715247dac69cef3cbf2f5f1215516271a0afa8fa05929e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  JoinClear.mp4.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\JoinClear.mp4.WCRY
                                  • Size 390KB
                                  • SHA256 595a0496022c119514aab43dc061c28285e22a858caff4d038e4d152f0752ec0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  JoinConfirm.ps1.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\JoinConfirm.ps1.WCRY
                                  • Size 326KB
                                  • SHA256 4c5eee2963b080ec3a43a78e41a4cbfc72150294cf594a14461e0b7b1c830545
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MoveSet.mpg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\MoveSet.mpg.WCRY
                                  • Size 377KB
                                  • SHA256 f66c094277d9f23de19fc347d864041ad2a18d2add0988481b5d8cbfcdffe890
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OutConvertFrom.vsd.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\OutConvertFrom.vsd.WCRY
                                  • Size 403KB
                                  • SHA256 2e87f60a47108dc1df3dab11d6dc2c016b619a15ae9e0f13d413bf939207d20d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PublishStep.jpeg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\PublishStep.jpeg.WCRY
                                  • Size 211KB
                                  • SHA256 268c3a8074033208b15a4891870719f9e2026076fdf6dc6ac77636dcd8a02478
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RegisterGrant.wmv.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\RegisterGrant.wmv.WCRY
                                  • Size 415KB
                                  • SHA256 e248e3edf1a04b59f5958a278347527e57df66d340112d33f318c435608fc99d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SearchDisable.zip.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\SearchDisable.zip.WCRY
                                  • Size 249KB
                                  • SHA256 2f007486ad1651c871cb81640b18809060c27997f6177b650c1ed04e83c498fd
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  StartFind.mp4.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\StartFind.mp4.WCRY
                                  • Size 364KB
                                  • SHA256 08f7480e63f24e123d184286c3abba979a8dcaf86794b269ac0aeb6abda040ff
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TraceSearch.dwg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallInitialize\TraceSearch.dwg.WCRY
                                  • Size 569KB
                                  • SHA256 8ab93ac7102e50845003f544b52b08608938670730fe2435c94dea5527056f51
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ApproveJoin.pdf.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\ApproveJoin.pdf.WCRY
                                  • Size 611KB
                                  • SHA256 ff35841503d88e6f3098daa165b29b9ee1bb069d1708daa23029795ff2dd9e0a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  BackupFormat.mp3.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\BackupFormat.mp3.WCRY
                                  • Size 385KB
                                  • SHA256 7bedafac7271160dba45fe22812b72f7a3e5244e771edfcc826cad2a4528e619
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConfirmConvertTo.tif.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\ConfirmConvertTo.tif.WCRY
                                  • Size 398KB
                                  • SHA256 7cb864a49e8139c25dff8772c516ca8a055ea655fee40f770f5a28e1b873070a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DisableFormat.odt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\DisableFormat.odt.WCRY
                                  • Size 638KB
                                  • SHA256 f6f717e0a676338f3dd2d9f90ab523b7b1deaa2eb0365a2bace95f54e1339c4d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  HideRead.docx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\HideRead.docx.WCRY
                                  • Size 505KB
                                  • SHA256 cd73897deb5043022b5ab3e0602c6655bafd726ab04b7c2e4471d5165b6a56ea
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  InstallBlock.sql.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\InstallBlock.sql.WCRY
                                  • Size 465KB
                                  • SHA256 78ed2d0b5b80fec7f2534aacef1e34e4777b56ac33c4e72cf1ed518df83b88d1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  InstallOptimize.pptx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\InstallOptimize.pptx.WCRY
                                  • Size 239KB
                                  • SHA256 616763629694934fd96a5588eab859d954efcdde41cf252e8b37230080b88751
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MoveSubmit.avi.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\MoveSubmit.avi.WCRY
                                  • Size 292KB
                                  • SHA256 850a82c5e18e8a13123e7041cd80fb502111fa082d2c18cbc523ebb3a6e2e605
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MoveUnblock.docx.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\MoveUnblock.docx.WCRY
                                  • Size 584KB
                                  • SHA256 5f4165f5609d2b27105e5f44682dfb69633c908a53407117579c1838047f23cc
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  OpenEnable.xlsb.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\OpenEnable.xlsb.WCRY
                                  • Size 372KB
                                  • SHA256 b1a9e6f1ba0f2925cbb3be2013460906c1f2952fe84c3d7878f5cbd0803f17db
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PublishRemove.pot.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\PublishRemove.pot.WCRY
                                  • Size 305KB
                                  • SHA256 050c954497de9bd5ee74989cee66bae6e9c2b8ced93829228ff41a26c5eff9ad
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RenameRevoke.php.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\RenameRevoke.php.WCRY
                                  • Size 266KB
                                  • SHA256 6a4b332dd35cb8f86f9f6d938e2cdda441c1c867e6066e787552c073fda6db2a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SendUnlock.xlsm.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\SendUnlock.xlsm.WCRY
                                  • Size 518KB
                                  • SHA256 c00c2412c4651e19c3683daa151d6f59a23b2c4a38b281c40e3cdaa6b4ff6539
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  TraceDeny.js.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\UninstallSwitch\TraceDeny.js.WCRY
                                  • Size 345KB
                                  • SHA256 70a78482ed45ba5e8a3d8353068091d15c630b532f678213a4f0f506777bb8c9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConvertFromOpen.iso.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\WriteGrant\ConvertFromOpen.iso.WCRY
                                  • Size 1.7MB
                                  • SHA256 8fe63d7658e52b5b9775a27e83d9f0f1a2c116454f0dff2f45c9559b26b36450
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  PingMerge.xlt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\WriteGrant\PingMerge.xlt.WCRY
                                  • Size 1.5MB
                                  • SHA256 f6e5ba6da388f9314d3d26c8d0d0ae9d2b0266eff4a37ad3dfc4c3922a246c21
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SaveBackup.svg.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\WriteGrant\SaveBackup.svg.WCRY
                                  • Size 1.2MB
                                  • SHA256 2b89f3bc35185542fc00b26158ce251e0172e8c7324396ac1265206e9ff0e30a
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnlockMount.txt.WCRY

                                  • Path C:\Users\Admin\AppData\Roaming\WriteGrant\UnlockMount.txt.WCRY
                                  • Size 1.8MB
                                  • SHA256 663fe1fbe91d0380fc0f1a9e10ce7762bbdc94723489dda53898e71993fa39ef
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ClearOpen.xlsx.WCRY

                                  • Path C:\Users\Admin\Desktop\ClearOpen.xlsx.WCRY
                                  • Size 13KB
                                  • SHA256 953d95b26165e0d8127e8ce74b6f17007d35d5e33d3f4dac866df69bc8041825
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CompareFormat.bat.WCRY

                                  • Path C:\Users\Admin\Desktop\CompareFormat.bat.WCRY
                                  • Size 1.0MB
                                  • SHA256 6b6c6872e2d787aa8cf0bf76885dd755a51b0caaf4efccf456e63c06a68b3d53
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ComparePush.xlsx.WCRY

                                  • Path C:\Users\Admin\Desktop\ComparePush.xlsx.WCRY
                                  • Size 12KB
                                  • SHA256 8d6008389171468229363c43b8ab6c020cb62e80e61d74605e3fec92b17b3a89
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CompressOpen.tiff.WCRY

                                  • Path C:\Users\Admin\Desktop\CompressOpen.tiff.WCRY
                                  • Size 666KB
                                  • SHA256 b156b2969e4b77708b5f633a20f3103c5e43eecb92f2223acbd1796ecc93e22b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConvertFromMeasure.3g2.WCRY

                                  • Path C:\Users\Admin\Desktop\ConvertFromMeasure.3g2.WCRY
                                  • Size 356KB
                                  • SHA256 59a402997c51039917aed1e45228a1bb1c351e0745512b81d5ba5ff85b612772
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  DenyEnable.xlsx.WCRY

                                  • Path C:\Users\Admin\Desktop\DenyEnable.xlsx.WCRY
                                  • Size 9KB
                                  • SHA256 c677b84faf657b3ae32832b2ba76be9e2ceddf46a96bc4ca11ab135916f7f93d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ExportGet.svg.WCRY

                                  • Path C:\Users\Admin\Desktop\ExportGet.svg.WCRY
                                  • Size 283KB
                                  • SHA256 b7d199b1a3b73a6a75ddb241543c9fea3d0e724f7c3f46fa9fcfd0118040ebee
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  LimitTrace.avi.WCRY

                                  • Path C:\Users\Admin\Desktop\LimitTrace.avi.WCRY
                                  • Size 758KB
                                  • SHA256 42cd8fab27c165f97073902ee7acf21e80bdbbd5bf78171dbe8351e188841134
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ResetApprove.xlsx.WCRY

                                  • Path C:\Users\Admin\Desktop\ResetApprove.xlsx.WCRY
                                  • Size 9KB
                                  • SHA256 76e9bc9daedbcf1953a640040f682c88846352a25b1a0d8baf21bf90efdcd86c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RestartRequest.pptx.WCRY

                                  • Path C:\Users\Admin\Desktop\RestartRequest.pptx.WCRY
                                  • Size 502KB
                                  • SHA256 5795c01e329ee944fec8da2a08faf66f6493b5c8c5878d05be61c6c2e55ab73f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RestoreClear.docx.WCRY

                                  • Path C:\Users\Admin\Desktop\RestoreClear.docx.WCRY
                                  • Size 20KB
                                  • SHA256 0ed6ffe9cfdc0dd0680e4fb08651966da0c7d917f71d6c22279d4903abb1e46e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SplitExpand.docx.WCRY

                                  • Path C:\Users\Admin\Desktop\SplitExpand.docx.WCRY
                                  • Size 18KB
                                  • SHA256 def6746cf342893546bf6ac6c36f481afe77dce114a663a19299af3cf711906f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  StepProtect.xlsx.WCRY

                                  • Path C:\Users\Admin\Desktop\StepProtect.xlsx.WCRY
                                  • Size 11KB
                                  • SHA256 69521c267d747d939bdc790c889a9468539e042716b891f2864f8f93acc18aff
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WriteUnblock.ps1.WCRY

                                  • Path C:\Users\Admin\Desktop\WriteUnblock.ps1.WCRY
                                  • Size 648KB
                                  • SHA256 c163822d2c986a240e5a60423531c91f4180ce90e0583f6b49567514af529696
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ClearPing.pot.WCRY

                                  • Path C:\Users\Admin\Documents\ClearPing.pot.WCRY
                                  • Size 1.0MB
                                  • SHA256 1b2f28a36a128c2fba02c4996a89feec5a69c041ca12dea4ac563901119f84ac
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  CompareDisable.xlsx.WCRY

                                  • Path C:\Users\Admin\Documents\CompareDisable.xlsx.WCRY
                                  • Size 1.3MB
                                  • SHA256 2e4bcf0aaeed17bc1ce6c3b1e950e6f7089cedaccf1a37bcf31a2577268ce3a7
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConfirmRedo.vsd.WCRY

                                  • Path C:\Users\Admin\Documents\ConfirmRedo.vsd.WCRY
                                  • Size 825KB
                                  • SHA256 8024933809dbea30122b92c9cd517e3010e2daec30a39687394400abcade60c8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConvertFromCheckpoint.docx.WCRY

                                  • Path C:\Users\Admin\Documents\ConvertFromCheckpoint.docx.WCRY
                                  • Size 14KB
                                  • SHA256 aaa664bf31fc12e6894169de335bb14543d349c4d0a90ef5d85ef3c571ee5c7f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  FormatResolve.ppsm.WCRY

                                  • Path C:\Users\Admin\Documents\FormatResolve.ppsm.WCRY
                                  • Size 1.1MB
                                  • SHA256 6ab4bb177c1f217def0c1145b4bd2115c5513477ee57bb58e680ff562d22ec5b
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  FormatRevoke.docx.WCRY

                                  • Path C:\Users\Admin\Documents\FormatRevoke.docx.WCRY
                                  • Size 18KB
                                  • SHA256 ffc16c5a7b3ef611d56bb4abc3bc006eefcba28d36c22f4ab3b30f1a201f3c5c
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Open Notebook.onetoc2.WCRY

                                  • Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WCRY
                                  • Size 6KB
                                  • SHA256 1011677fbbac36c9032ad4c77d6320df001519de41324dce30a08a51868b9924
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Outlook Data File - fdaxnzmoij.pst.WCRY

                                  • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - fdaxnzmoij.pst.WCRY
                                  • Size 265KB
                                  • SHA256 87076c6a93d65d79267ce16b4ef7ace45d29a4e171bed011142ff4a2eb765143
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  RestoreWatch.ppt.WCRY

                                  • Path C:\Users\Admin\Documents\RestoreWatch.ppt.WCRY
                                  • Size 605KB
                                  • SHA256 c1c3b24bbeef001fd3a91fedd3c5ed557eedd74d4a3d105522ed42e0afee3a78
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  SwitchTest.docm.WCRY

                                  • Path C:\Users\Admin\Documents\SwitchTest.docm.WCRY
                                  • Size 715KB
                                  • SHA256 9b98935fdcc0d42d21467314762aa8a866f8fe8b3b6f6b89f04e90d769304612
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnblockDeny.pptx.WCRY

                                  • Path C:\Users\Admin\Documents\UnblockDeny.pptx.WCRY
                                  • Size 1.2MB
                                  • SHA256 cbcb207f96f71eaa77bb01a2ee9a5f9d79b6026576f9ff79cd381b06be0dc602
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnregisterGrant.vsd.WCRY

                                  • Path C:\Users\Admin\Documents\UnregisterGrant.vsd.WCRY
                                  • Size 1.5MB
                                  • SHA256 c19b8ce8b65ee401b2097865b3f99a82fda59dea8e50db9cfe574ff20e10d14f
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  !WannaDecryptor!.exe

                                  • Path C:\Users\Admin\Downloads\!WannaDecryptor!.exe
                                  • Size 236KB
                                  • SHA256 78e3f87f31688355c0f398317b2d87d803bd87ee3656c5a7c80f0561ec8606df
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  !WannaDecryptor!.exe.lnk

                                  • Path C:\Users\Admin\Downloads\!WannaDecryptor!.exe.lnk
                                  • Size 590B
                                  • SHA256 5534a10d2bbe287e78dfecbde3405e4f00b49bf02bbd1a539643fbb290717496
                                  • MD5 SHA1 SHA512 TLSH

                                  00000000.res

                                  • Path C:\Users\Admin\Downloads\00000000.res
                                  • Size 136B
                                  • SHA256 d3d9c5cfcc87a37d45a45a70dfca70def4d03a8ac64e16a28576f034f5310701
                                  • MD5 SHA1 SHA512

                                  00000000.res

                                  • Path C:\Users\Admin\Downloads\00000000.res
                                  • Size 136B
                                  • SHA256 4b1e63b8d4bfb596f9fd4de32c4ccd4721e272082ca4be57cce93737c741d3ee
                                  • MD5 SHA1 SHA512

                                  202451793041739.bat

                                  • Path C:\Users\Admin\Downloads\202451793041739.bat
                                  • Size 318B
                                  • SHA256 4288d655b7de7537d7ea13fdeb1ba19760bcaf04384cd68619d9e5edb5e31f44
                                  • MD5 SHA1 SHA512 TLSH

                                  Unconfirmed 352787.crdownload

                                  • Path C:\Users\Admin\Downloads\Unconfirmed 352787.crdownload
                                  • Size 111KB
                                  • SHA256 d274992c22a02a48750bc8a57886abfc0f11e7059b767582d0086e3e5e3d1ea2
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  Unconfirmed 352787.crdownload

                                  • Path C:\Users\Admin\Downloads\Unconfirmed 352787.crdownload
                                  • Size 224KB
                                  • SHA256 be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  c.vbs

                                  • Path C:\Users\Admin\Downloads\c.vbs
                                  • Size 201B
                                  • SHA256 5d57b86aeb52be824875008a6444daf919717408ec45aff4640b5e64610666f1
                                  • MD5 SHA1 SHA512 TLSH

                                  c.wry

                                  • Path C:\Users\Admin\Downloads\c.wry
                                  • Size 628B
                                  • SHA256 98f0456dace69f0a361420ca3dd82e630903920a377f1f1c999aff8adc1a4234
                                  • MD5 SHA1 SHA512 TLSH

                                  c.wry

                                  • Path C:\Users\Admin\Downloads\c.wry
                                  • Size 628B
                                  • SHA256 bf22e8e18db1638673f47591a13d18ee58d8c6019314bab5a90be82ae3dc9538
                                  • MD5 SHA1 SHA512 TLSH

                                  m.wry

                                  • Path C:\Users\Admin\Downloads\m.wry
                                  • Size 42KB
                                  • SHA256 402046ada270528c9ac38bbfa0152836fe30fb8e12192354e53b8397421430d9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  r.wry

                                  • Path C:\Users\Admin\Downloads\r.wry
                                  • Size 729B
                                  • SHA256 c9e9dc06f500ae39bfeb4671233cc97bb6dab58d97bb94aba4a2e0e509418d35
                                  • MD5 SHA1 SHA512 TLSH

                                  t.wry

                                  • Path C:\Users\Admin\Downloads\t.wry
                                  • Size 68KB
                                  • SHA256 a7dd727b4e0707026186fcab24ff922da50368e1a4825350bd9c4828c739a825
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  BackupOut.odt.WCRY

                                  • Path C:\Users\Admin\Music\BackupOut.odt.WCRY
                                  • Size 285KB
                                  • SHA256 460e9c205fa6cd4a72d46867a5525090d0f9ade62039da3f1e108380fcfb5883
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MeasureOptimize.dot.WCRY

                                  • Path C:\Users\Admin\Music\MeasureOptimize.dot.WCRY
                                  • Size 818KB
                                  • SHA256 b694a15b85e03a39ca96bee992e04e0c329c71afa7ffafd25f0715d1c25b4d83
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ShowStep.jpg.WCRY

                                  • Path C:\Users\Admin\Music\ShowStep.jpg.WCRY
                                  • Size 558KB
                                  • SHA256 e064973f81f0122fadf42253357e28789f712b70af1b7c72d95d7f8d9dfe2242
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  AssertResize.png.WCRY

                                  • Path C:\Users\Admin\Pictures\AssertResize.png.WCRY
                                  • Size 574KB
                                  • SHA256 fa2b9263e248f3b37ac7f8182e74fd8254492cfee52f46a9d0b1b3038c50bd4d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConnectSkip.jpg.WCRY

                                  • Path C:\Users\Admin\Pictures\ConnectSkip.jpg.WCRY
                                  • Size 421KB
                                  • SHA256 bc57df2a88f9b34d90a001e2b278a7a8295feaa65d2afec1d5cf622f19a40d9d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  ConvertCompress.bmp.WCRY

                                  • Path C:\Users\Admin\Pictures\ConvertCompress.bmp.WCRY
                                  • Size 242KB
                                  • SHA256 a22d601becf6e4f9e5d3b44be8ea4849102b1d19fb5d3e360f7ca38ac5d00ca8
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  EnterSet.png.WCRY

                                  • Path C:\Users\Admin\Pictures\EnterSet.png.WCRY
                                  • Size 268KB
                                  • SHA256 2101da0d5fb18a1c3d0148f7fa45c4ce4de1d5f89cdf3ca465e36fbd13f327fb
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  FormatRestart.bmp.WCRY

                                  • Path C:\Users\Admin\Pictures\FormatRestart.bmp.WCRY
                                  • Size 293KB
                                  • SHA256 1927f8d6877ef0eaa9daea48d60ed3bc116965df28585fd4e9e215f30011925e
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MountCheckpoint.tif.WCRY

                                  • Path C:\Users\Admin\Pictures\MountCheckpoint.tif.WCRY
                                  • Size 600KB
                                  • SHA256 1407bb474abef0864a65f3aa711ed15891d86de68b15aeeff7beb2ed555a11e9
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  MoveSkip.bmp.WCRY

                                  • Path C:\Users\Admin\Pictures\MoveSkip.bmp.WCRY
                                  • Size 370KB
                                  • SHA256 06e28010ebe482d8c7bdfdc7dee60e0a1ec54f400652a78eb0a9f1bebdb5cd0d
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  UnlockUnblock.jpg.WCRY

                                  • Path C:\Users\Admin\Pictures\UnlockUnblock.jpg.WCRY
                                  • Size 523KB
                                  • SHA256 b038d4d766d69f340856a666241f3ec4790b73b96b856a9fa0fd77af89879879
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  WriteRead.tiff.WCRY

                                  • Path C:\Users\Admin\Pictures\WriteRead.tiff.WCRY
                                  • Size 549KB
                                  • SHA256 d3e7474ed01463858c3ebe32bf0139eee918e6e599b985f9ce2bcd7cbe1684c0
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  rWH.jpg.WCRY

                                  • Path C:\Users\Admin\Pictures\rWH.jpg.WCRY
                                  • Size 25KB
                                  • SHA256 3d4531daa7f1afc6fc7b2f44eef8fae2d740c2f166c9d36f63b6bc01e155f7d1
                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                  memory/3108-88-0x0000000010000000-0x0000000010012000-memory.dmp