wannacry | eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414

Analysis

max time kernel
118s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/11/2026, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
Size 3.5MB
Sample261104-vme2hsd17n
SHA256 eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414
MD5 087f42dd5c17b7c42723dfc150a8da42
SHA1 013010ff0e5c25c48b2a4e7ed1340738a0dd8995
SHA512 0c01500ddb57bafc84c33dbbc9b2d6f16b945acd5533ea0484017291794d2d4b069f5eae14b3bb412f95849e4ab960d9685b05cb657f5c81076c9daa65d74203
SSDEEP 98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3xt:QqPe1Cxcxk3ZAEUadzR8yc4ght
TLSH
T10DF533F4E621BB6CF2540EF54856C59B6A9724B1EBEB5E39CA8005A61E40F3F8FC04D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery execution wannacry impact persistence privilege_escalation ransomware spyware stealer suricata worm

Malware Config

Extracted

Path

C:\Users\Admin\AppData\Local\Temp\@[email protected]

wannacry

Ransom Note

Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94 Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �

Wallets

13AM4VW2dhxYgXeQepoHkHSQuy6NgaEb94

Signatures

Family: Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047

Creates a file in the Startup directory 1 TTPs 2 IoCs

A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

persistence privilege_escalation

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SDB2A7.tmp	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SDB2AD.tmp	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe

Executes dropped EXE 14 IoCs

pid	Process
4796	taskdl.exe
6792	@[email protected]
6856	@[email protected]
6936	taskhsvc.exe
7156	taskhsvc.exe
3564	taskdl.exe
2104	taskse.exe
880	@[email protected]
252	taskdl.exe
2968	taskse.exe
5620	@[email protected]
6936	taskdl.exe
2836	taskse.exe
5424	@[email protected]

Loads dropped DLL 14 IoCs

pid	Process
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
4560	icacls.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound 4 IoCs

Network activity triggered a Suricata alert

suricata

flow	pid	Process
13	6936	taskhsvc.exe
13	6936	taskhsvc.exe
9	6936	taskhsvc.exe
9	6936	taskhsvc.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\evovfhxotleg702 = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\tasksche.exe\""	reg.exe

File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
defense_evasion

Windows File and Directory Permissions Modification
T1222.001

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
1796	cscript.exe

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4057491610-3392471755-192832105-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	@[email protected]

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 4 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4768	cmd.exe
6808	cmd.exe
2020	cmd.exe
2716	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	WMIC.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	WMIC.exe

System Location Discovery: System Language Discovery 1 TTPs 19 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskdl.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	icacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskhsvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskse.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe

Modifies registry key 1 TTPs 1 IoCs

Modify Registry

T1112

pid	Process
6020	reg.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
6936	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe
7156	taskhsvc.exe
1148	WMIC.exe
1148	WMIC.exe
1148	WMIC.exe
1148	WMIC.exe

Suspicious use of AdjustPrivilegeToken 51 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	1148	WMIC.exe
Token: SeSecurityPrivilege	1148	WMIC.exe
Token: SeTakeOwnershipPrivilege	1148	WMIC.exe
Token: SeLoadDriverPrivilege	1148	WMIC.exe
Token: SeSystemProfilePrivilege	1148	WMIC.exe
Token: SeSystemtimePrivilege	1148	WMIC.exe
Token: SeProfSingleProcessPrivilege	1148	WMIC.exe
Token: SeIncBasePriorityPrivilege	1148	WMIC.exe
Token: SeCreatePagefilePrivilege	1148	WMIC.exe
Token: SeBackupPrivilege	1148	WMIC.exe
Token: SeRestorePrivilege	1148	WMIC.exe
Token: SeShutdownPrivilege	1148	WMIC.exe
Token: SeDebugPrivilege	1148	WMIC.exe
Token: SeSystemEnvironmentPrivilege	1148	WMIC.exe
Token: SeRemoteShutdownPrivilege	1148	WMIC.exe
Token: SeUndockPrivilege	1148	WMIC.exe
Token: SeManageVolumePrivilege	1148	WMIC.exe
Token: 33	1148	WMIC.exe
Token: 34	1148	WMIC.exe
Token: 35	1148	WMIC.exe
Token: 36	1148	WMIC.exe
Token: SeIncreaseQuotaPrivilege	1148	WMIC.exe
Token: SeSecurityPrivilege	1148	WMIC.exe
Token: SeTakeOwnershipPrivilege	1148	WMIC.exe
Token: SeLoadDriverPrivilege	1148	WMIC.exe
Token: SeSystemProfilePrivilege	1148	WMIC.exe
Token: SeSystemtimePrivilege	1148	WMIC.exe
Token: SeProfSingleProcessPrivilege	1148	WMIC.exe
Token: SeIncBasePriorityPrivilege	1148	WMIC.exe
Token: SeCreatePagefilePrivilege	1148	WMIC.exe
Token: SeBackupPrivilege	1148	WMIC.exe
Token: SeRestorePrivilege	1148	WMIC.exe
Token: SeShutdownPrivilege	1148	WMIC.exe
Token: SeDebugPrivilege	1148	WMIC.exe
Token: SeSystemEnvironmentPrivilege	1148	WMIC.exe
Token: SeRemoteShutdownPrivilege	1148	WMIC.exe
Token: SeUndockPrivilege	1148	WMIC.exe
Token: SeManageVolumePrivilege	1148	WMIC.exe
Token: 33	1148	WMIC.exe
Token: 34	1148	WMIC.exe
Token: 35	1148	WMIC.exe
Token: 36	1148	WMIC.exe
Token: SeBackupPrivilege	4308	vssvc.exe
Token: SeRestorePrivilege	4308	vssvc.exe
Token: SeAuditPrivilege	4308	vssvc.exe
Token: SeTcbPrivilege	2104	taskse.exe
Token: SeTcbPrivilege	2104	taskse.exe
Token: SeTcbPrivilege	2968	taskse.exe
Token: SeTcbPrivilege	2968	taskse.exe
Token: SeTcbPrivilege	2836	taskse.exe
Token: SeTcbPrivilege	2836	taskse.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
6856	@[email protected]
6792	@[email protected]
6792	@[email protected]
6856	@[email protected]
880	@[email protected]
880	@[email protected]
5620	@[email protected]
5424	@[email protected]

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 1324 wrote to memory of 1340	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	90
PID 1324 wrote to memory of 4560	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	91
PID 1324 wrote to memory of 4796	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	94
PID 1324 wrote to memory of 4768	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	95
PID 4768 wrote to memory of 1796	4768	cmd.exe	97
PID 1324 wrote to memory of 5948	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	98
PID 1324 wrote to memory of 6792	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	101
PID 1324 wrote to memory of 6808	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	102
PID 6808 wrote to memory of 6856	6808	cmd.exe	104
PID 6792 wrote to memory of 6936	6792	@[email protected]	105
PID 6792 wrote to memory of 7156	6792	@[email protected]	107
PID 6856 wrote to memory of 2020	6856	@[email protected]	109
PID 2020 wrote to memory of 1148	2020	cmd.exe	111
PID 1324 wrote to memory of 3564	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	115
PID 1324 wrote to memory of 2104	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	116
PID 1324 wrote to memory of 880	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	117
PID 1324 wrote to memory of 2716	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	118
PID 2716 wrote to memory of 6020	2716	cmd.exe	120
PID 1324 wrote to memory of 252	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	122
PID 1324 wrote to memory of 2968	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	123
PID 1324 wrote to memory of 5620	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	124
PID 1324 wrote to memory of 6936	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	126
PID 1324 wrote to memory of 2836	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	127
PID 1324 wrote to memory of 5424	1324	eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe	128

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

Views/modifies file attributes 1 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
5948	attrib.exe
1340	attrib.exe

C:\Users\Admin\AppData\Local\Temp\eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe
"C:\Users\Admin\AppData\Local\Temp\eceb2f25bac4cbca1da5f4e390124912cd91f541ad1ccada2ae2b46f4aceb414.exe"
1⤵
- Creates a file in the Startup directory
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1324
- C:\Windows\SysWOW64\attrib.exe
  attrib +h .
  2⤵
  - System Location Discovery: System Language Discovery
  - Views/modifies file attributes
  PID:1340
- C:\Windows\SysWOW64\icacls.exe
  icacls . /grant Everyone:F /T /C /Q
  2⤵
  - Modifies file permissions
  - System Location Discovery: System Language Discovery
  PID:4560
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4796
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c 48991793812002.bat
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4768
- - C:\Windows\SysWOW64\cscript.exe
    cscript.exe //nologo m.vbs
    3⤵
    - Executes a VBScript file via the Windows Script Host.
    - System Location Discovery: System Language Discovery
    PID:1796
- C:\Windows\SysWOW64\attrib.exe
  attrib +h +s F:\$RECYCLE
  2⤵
  - System Location Discovery: System Language Discovery
  - Views/modifies file attributes
  PID:5948
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected] co
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:6792
- - C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
    TaskData\Tor\taskhsvc.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:6936
- - C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
    TaskData\Tor\taskhsvc.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    PID:7156
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c start /b @[email protected] vs
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:6808
- - C:\Users\Admin\AppData\Local\Temp\@[email protected]
    @[email protected] vs
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:6856
  - - C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
      4⤵
      Executes a command shell one-liner
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:2020
    - - C:\Windows\SysWOW64\Wbem\WMIC.exe
        
        wmic shadowcopy delete
        5⤵
        Reads the TCP/IP host and domain name from the registry
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:1148
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:3564
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:2104
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - Sets desktop wallpaper using registry
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:880
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "evovfhxotleg702" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2716
- - C:\Windows\SysWOW64\reg.exe
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "evovfhxotleg702" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
    3⤵
    - Adds Run key to start application
    - System Location Discovery: System Language Discovery
    - Modifies registry key
    PID:6020
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:252
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2968
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:5620
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:6936
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2836
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:5424

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4308

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

File and Directory Permissions Modification

T1222

Windows File and Directory Permissions Modification

T1222.001

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

OfficeIntegrator.ps1.WNCRY

Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WNCRY
Size 5KB
SHA256 706f63fbcc3248617c63d1c90dc7e65e79bd5c2e8e9058e16e4c2a46ee1e2e79
MD5 2d59530f83b690ea1eaefab588bde3bd
SHA1 e1954cb03944bfcacd0790172eabb8c2e445518a
SHA512 98cb33a06409b003e24cce4d00977ca22f72033ccfb4fbcce9ffaf839355ab5c61c6401a81a20c1f66ddfbc5cd3f4d10a6f3b0352613aa59489e71cc99bb58bd
SSDEEP 96:oR3pGBJK+t9pdZGK4qT4hu7Nut95y4L0QG1sUNk6rFjkwsYtKT8g0pMzxcc2m4xw:KGO+t9pdZQqT4hu7Nu/5/L826rCwsSTs
TLSH
T1A5B17D632E08F3691D28313C591DCB495C911919E3AFEE7A3921050EDD3F45449287EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.en-us.db.WNCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\27BD3A68-1D42-4278-BE21-034F6F45EA8C\en-us.16\stream.x64.en-us.db.WNCRY
Size 438KB
SHA256 a1ec44332514afb6699aa529a97a13a5e7d8c1918993bb7220c22d8db6ef572c
MD5 d0859fcbfac08480c9f43382993816d2
SHA1 829c72fba24cd2077c8785bbd7bd5425541484c9
SHA512 fce2e6aa293019d845d0a155e93f155267c7c15d1360c610732912dad1b69daaaf9a092132c8ea4434c1d1008ad96caeb349f7163200b3e4decd020629824c78
SSDEEP 12288:8riru5AKt8LCyqdJzNSocbhJIVQIWDSM0GjpZ5/O:+648LCbPDc/Iy7/O
TLSH
T136A423B85CAC80F3895AEF52C63F70984E73C0D074B8D5EC1A093B795D5B991E2AF521
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.x-none.db.WNCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\27BD3A68-1D42-4278-BE21-034F6F45EA8C\x-none.16\stream.x64.x-none.db.WNCRY
Size 1.8MB
SHA256 1c0cb5f1d2a5287f9319c66d49191512a279676476b5681f9588f25908ac9f09
MD5 a8a86a6f99ea5c8db990db8d3bcd2ff1
SHA1 26386e85bbbc6fe58570f4cb02eae01a43986c70
SHA512 471f4b86c88362ed2b259986351f1a0060fa916bdaf94bc07af2a0783919e2a74e03b57059775cb022170d127fd0c792e515958579bcf33eab9943d9d9c6276e
SSDEEP 49152:w71+tzOzoT0eK4+qUE4iAMFGui7voYuH0x9LLwnf+tB51L3jFn:w71+tztXnUE/FTcIH0Xnwn2B1Lhn
TLSH
T176953396BEDA74D795BB6434E762388F1C0EBC1F77746E1A717EB1CA61403891F28880
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY
Size 126KB
SHA256 5f271808c4cf2388c35670b9f2ce462ba359865ce2a877ba55c6270302f3922c
MD5 3b3417b8aff6db9c0fc446b61aacd9da
SHA1 506a12d8a1f13b9f74a5a04d38ccacab7ed82fa1
SHA512 1791f4d58249e312291fcc6876d473b0eac8c439be626b0459a386771be1d67ede388369b60e72dd7d9fc8266864497d97e52c7362dc37cc52f7c2e6b660e17b
SSDEEP 3072:WMHPFhrMc7x4BpTD+HFXYz1TwBOR1GoNwxsDK+JrwBKy8JJUselVT+xV86gq:WMHt1apTCHFX61TwsRgxsO+2z1/TYVcq
TLSH
T100D3128D8FCB344F5ADE0480CD144AE8DBB0E577AC5046ECF90BAA94BB407E4BD649D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

device.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY
Size 43KB
SHA256 3a08c40ac639740f8d9070ef329c290bb167be835dc9de9a8f4a9976d33469a1
MD5 7c1f24e481fa2b63b654ccb94e30bd9e
SHA1 e8a92628dca794984a323e4e006a399cb00c14d2
SHA512 cd2ed78a9811d5b55b2cd873c47c942b52842c44d36824f6640809a10b52eb834257e62f7957cc5acadaf738bd26ba218b5dd3641743dc9aa3266206314aaa2e
SSDEEP 768:uifZ9ApfJFdBCf1ODS4OHOJLiy1kdc0efkorZz62qwwX21epZmGhy+XpjU:lfYxvU+S4OHwL71km9xtelwM21eq6y6G
TLSH
T15513F1155537AEB2D1EAD1851F338E97787A4A6B6B0E2547F4DB339C1F28CC210C42A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY
Size 28KB
SHA256 0e64546bb6dd646baa354270371f560a13d7a08b6f2cefab79c799a874330c92
MD5 522b12fbfe7a5d8173fa935ad3c1bd8a
SHA1 be7b0e132f94abb278b89d040c0d4d0474b3aec2
SHA512 06c293b96b19f8e55f74af204393c944ebb61f1d611aeb82d5e74efd3ae65682a1a8d992b2359897de26fdd5a440b71c445ca29ed80e88e20789f5bd69fc9a4b
SSDEEP 768:nn0DEULyU3J6+uDtKqMQ9NdQLtwSVeOMKD6b49E6WqYDdKl:nnkfGAuDtKqxNdStwSMYzOfqYDdw
TLSH
T173D2F190FDB5D6CEC0E56ACB4C1DFFF78AB45A0F47052A63807C78A6E5B4489430A6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

superbar.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY
Size 38KB
SHA256 f48d774cc111c6ed907ecad4c2ca9d5c7a4f45c0d056a9ec0f3b41fafeeb4eb4
MD5 9cb4d6e3894db256169e59aac9ea5eba
SHA1 476943178571ed6fac7c518746e56497a7748044
SHA512 adc9a9c8ddf84196b7ca49f14d904be9d140e793e7bd83d5c0b9aff392c6f3e374ef7a037333fd7d6888a86974bad99aa46a7868cc4367abdf0b271416610f6c
SSDEEP 768:hdsuSYe0VdW3ys+gb55HhASYJuB5HBB/18fIDR7QdSoAqP5a2XJQ4p0qP:h+PSDZIbTNB5h38wDpQ8ojamJ9p0qP
TLSH
T1EE03F203CC290407C7EF552611244699F3D9DE54FA2A3E027967E2EEF45C6AFA7B40E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WNCRY
Size 126KB
SHA256 de4e365775054e7c7060d3eec935ca6e56b3ba72a78d8c9b84e576333a4c6d19
MD5 8af66586aca167b2e3e016811af3fc59
SHA1 b5b8ce89b80a75055c6b4ac36ea3be23d0acbf86
SHA512 9878dd4d74e869912d830c73329eb561c45bc4f608ae62e8ed0a0a877674e7e4c8616a28a7b095db57f7be0361d1ec835453034751a170597331b64f20a52c7f
SSDEEP 3072:ruHWuB02BDpTwNiKz+LFktQHXgVPo/DAd+3rHxMKnmvUtUX:r4fT9cajkw/Ek3bxFnWSM
TLSH
T15ED3231DC490CDC89CD5876F802F92DDF9077DF64A8FEBE125AD9E532118BA28752838
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

watermark.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY
Size 28KB
SHA256 a3424e60eabb802f962440ac66679cf27449947f6c383fb3bf57d2c18bb2f2f3
MD5 cbc67df5c955bb3acdb36d92ca1fde60
SHA1 9a0ecd18aa279a327e7898db88c91a87f38c1744
SHA512 19967dfc91dc5a9b1834a19ee0d6fc3083da1d1b9ffb518287019a110038e5ee37fbc88e89a16ed0d263447d42b6cd53628b9add686d0a96d373fbada61de11a
SSDEEP 384:nxw2BdZpdYAO7JEHCsoNVMF4oeccK0BANGMZ3mq8/DqjSHMVrarZ7q7EwuSWofIr:nxwGZ/Yh90W6Fecc6NGMZ35EsZrA2Ir
TLSH
T19ED2F23DC4A250B974FD3E1AD3DDDE8A1B6A0D4DA53DC2E1CD45F22560CC10849F16B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WNCRY
Size 108KB
SHA256 73326b6ab8797101ee3601a87f6ddeffdd27cb00628f8bbd714d0d141ce32bfe
MD5 86669d20733752d957f95741892b9d6d
SHA1 09126ccf74f7bacdff6a3a7a87ae91b08d702386
SHA512 8130dd2bbfb45d7ace4fab02aa2a9af73a7b5c4e2caf8693ba99244475869ccfbf1abc35bf879aa8977257776cb06637d95d74ba07a8e9a4f65aa12ed37236a8
SSDEEP 1536:ZQVEFoUJpYJHsYIulOyEl5p0I0dLT/gNF4mOEqy+rhQTdckNhVqMiM0ujg:CVHUJCsTu4KIYbgNF4UqylTXnAMp9g
TLSH
T1C2B312A0616A827D76EC3A85C768591428ECEB4D3C505EE6D90F77F0C415AC70F24F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WNCRY
Size 48KB
SHA256 99efbdbca4e7f9d976b9f89b6497eab3a9cc52309c9a98941826c0c05fafb60c
MD5 e5c556d8e69ee13e4d20558e3ec448f7
SHA1 8b96a8c70fa229523aec05e071840030e874cec0
SHA512 973be099bf1260d177906173797437443959a9fb0d69efc244066dea586eadbdf539aca2b466fb3973245c5d9d365751919ccc82108bb9a1cb94146bdaafe3cc
SSDEEP 1536:Jx3MiKw6IwR/N3a3vF7NJUya6Z+A1BMtmUyb:JtMfNN3SFc+b1utmU+
TLSH
T15323F26F56D2901B269D4479FA1C93F43FA43630F091CE0DA56E6C96CAE4B5E07C82CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WNCRY
Size 20KB
SHA256 74e3777c6fe508ee3989aa67e590cf2d5fa20989be4446cee01651a917196995
MD5 c4fe8c189b769ee538d6d5883558d1e1
SHA1 c7dd7bd8304e72c058e8b0a49047e9fd1d429758
SHA512 48eea5ba180d234301be80b984cfbe639723fa77836c3ebf68c457467cd631033746f55987decc6a8a32b9badcd5ffc6d6e943c86b3b2884c05e5751b4cad4b2
SSDEEP 384:wMUgdRKmqbjJZJOW9E5erUXV4SFDq51la:wMpf0jxJQXV4xE
TLSH
T17F92D1CB28AF1EF9F9C21BD022FFE6607971148560B90988090167F6DAF20933547D2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osver.txt.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WNCRY
Size 296B
SHA256 e9da96cffc816a8d051c0744282855cd0c4e31466fef05caf38085bec75e1d1b
MD5 bf004c59aa2fce562735189d6a79505d
SHA1 86b387d468d0f4e8b3d4502bfb60f1f73809a520
SHA512 be57a7762fe1d0917ab3f562d6dc33e19ad6eed4c239f9cb57878021f48254dc697c35c428b09925bc4f500a0c10b6962310708c3bdb44eca97f46f5cdf2e7ec
TLSH
T1D3E0E7C3D5204CCBE56B15FDF4E4443498B0D50D6E8734191449FB9E0B8044D71147C7
MD5 SHA1 SHA512 TLSH

Submit Download

qmgr.db.WNCRY

Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WNCRY
Size 768KB
SHA256 6c1dce9c093cd7e967b0992bb08848c3b5fad1fe75b3dcec67028a9e3635afd8
MD5 925af27eba11868f8f82720d493c9364
SHA1 afbb7a09d8918fe8b4729832a22f632a4123264a
SHA512 216222f4dca6840382e19d8141fc34edafd7e32ac35805e38728b99e060cb63fdd60da677cc8aece890843bff2576313e4dc2320a784231967172dd07f463e29
SSDEEP 24576:uU8v1dU1dDOErwQ2FD4+lUZS2MXn41Vjrxn:uR9KjiEmnlUEo13
TLSH
T183F4336DED60500E3B22A9DD9E464C6EF3CF172BD444F981AD8FF2223494EAC2DE6115
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PropMap.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db.WNCRY
Size 76KB
SHA256 8bf6c43bacbe2656299adcd1bef07a39a12156cb58b97020f36bb71fec742f20
MD5 a2c1216ef772125267f9eaeebb33861c
SHA1 963185e62326d50a989defe9ab37c5b8fea88002
SHA512 86b2270211bdb3ae49ce2607d3c3e87fd737dcd53729ade32fb8d7e9348bda8e5990e69cc1d255fc7e539946e4758637ef1a00107be7d3d1f4b473e80ae6946e
SSDEEP 1536:Qd1v1TYOCxBUWNC9klhHVbyOHoWuYU0AFnYJMaxYoAlcG7Ctu:Qz5YX0k3HVKWLU0uYaLuG7Cw
TLSH
T1777302C3B468F657B8857A3E60A15FEE752AE94225FE7BB25D0F35821319F408D9C083
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SecStore.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db.WNCRY
Size 36KB
SHA256 4dcf17ee34b827644e101ed135a85b7d71f3b2189d1e7e0e9175e3fae50b4a6e
MD5 0583fc20b6abbd97462d8e11459c8f21
SHA1 b2bd4156bbb121c0b866b2e16784edd851ab825b
SHA512 a9e5cc2fbb191b7363ec02a704a28233a67b7d8d9e4269e835a22a6266addf299e32975ce1fab466446ea9c3e6c3b9c276e88d837663943d5cebdfb7d1578f56
SSDEEP 768:5SUUT+lPpjAq0qxCT8LFxlJ6IsseM2/gW0/BO5qAmOJhAjjBZkLMk:5PUqGqne8BrJsgW8RyMHw4k
TLSH
T12DF2F1D18C7CF64DCCB1B571E09C24EA1EA8AEF1DC989F9B4970BD58131924E5E220F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-gather.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db.WNCRY
Size 44KB
SHA256 a409cdb4440df10d1724d0d293d7bc4fe678bef633f9491b45e986f50611ac98
MD5 c3370350e188a4ebe2bfd08119614cd7
SHA1 e4acb1b11dac1cd1a2506543ee776d9c31185aa8
SHA512 304cc917d385a2de26f84e4af6fc9f4970108b50c141b58551d9222c763648270619c9f11b1424a3be57f89db56d13ddc00cebac7be0eae6f350e84346385196
SSDEEP 768:dbGK+cAD+xVxz5LYG8it2e2uBQ1NGvuBTZzkivMD74c52HscABOz+Ju0Lu9SLe0:1GdCXYG3t2e2YWNZJ27nsA0qJu0KSLe0
TLSH
T18F1302A95FF8FFAADC670D2B4AFC2CB7F4AA305003C04469159949F43663584BD2A01B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-usn.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db.WNCRY
Size 4KB
SHA256 ded16562059b41b1eab89ce42bff23f571d5f2ea19ee5322f693d60d6f6f8d26
MD5 ea802611e237fe7e6ebbee0e37b534a1
SHA1 67c2757f351bbdf4606cf32b36381244118f98cb
SHA512 6ad9ae468de7734f5e761ffca7b0e0dad69d467c889a05cd0fced7730908e2b2dcbfd0210f48a9ad8b8e4836146c2ca506b421e54cfec18827e5d85d49e9e76f
SSDEEP 96:oe0ACqptvJHFf5WsafPbbz3GM3QNZbht2+o4u9IvytHdwuv7gQxk:IACq3vJlfIsabTgzbnk9Kcjnxk
TLSH
T1F1917DBFAB580C42DD6934230B66C61A6F7E1C2E7E177614DEE14A0623521777789D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db.WNCRY
Size 544KB
SHA256 8608a14ae71d5c33508db10c4773c4ccd1896650fa8ce17a9d93d6171a10fa88
MD5 55f4139181da2b6fc61fb8f4390d8bf5
SHA1 6a5422ad7bfad7cd14c78f70f02d636d1f05c329
SHA512 a35de6a136a5c3fae42911dfbc6b23dc6bb2a38562dc4aaac2966c674daf287841b36f1f28c78d14978e024f00dd11a085629a4c0df090ccbea7404b8731f54d
SSDEEP 12288:nIg2pO4t97nl3PogSw19WyqQCoC/G/ol1X7vqHds:nIlO4jpogSw19WyqQCx/9XX7vq9s
TLSH
T1DEC423D359101B1C26E13EC536F7E76EDA604B1632120FB0CF1D13EE545A623A76E879
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterInboxTemplates.ps1.WNCRY

Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WNCRY
Size 904B
SHA256 b5932ded480a3a015f308181cb1ce9abc700bf8a33bb8343fbf0194a22c6fe51
MD5 4add8e387b48c3b8d9f8002a9e99e7e7
SHA1 f63921b28c2e39635a1511cc68996158a4aac678
SHA512 5248dbf0fc678a15db2a60693ff0a81f5bb24044cde650b46471984bd15fc1a0abe468f0bf0bddbebf028adc83245ef1c180228b2a16ab2790d5392417b76410
TLSH
T1F211B74A5249688B70486F6D40A068D6473B5B8378479192DC4D74EF0AFE4178BA3C54
MD5 SHA1 SHA512 TLSH

Submit Download

guest.bmp.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WNCRY
Size 392KB
SHA256 7cb5c6cab71f3fd17514786c09b4e16018ab80c5bfbfbd743e8318d3e1343d05
MD5 95e25079814ce092493fdb7bf7ec4bec
SHA1 2376c1d2085c503c6af4f23115ebcb54a8c36ecb
SHA512 1dd79bdddd7da152f5feba0cac6143d006486153d56cb065f8426d58eecf702a8ec84a336587bae8353ebc09d99ecc2a46a66272f936651ca32bb0cfa52c0f7b
SSDEEP 6144:unhnVt+2/yQpcInMkmKxluFd9U0Vnk5T8rVIfa/qgtGmeffFpy/PcIOQJkH:udVQKmpFd9U0Vn64rGfKquGmefqUtOkH
TLSH
T1868423ABC874B94FE0145A53ED4E909144E8B5A94EDAB4D11398F68AC8F30316FF72C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

guest.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WNCRY
Size 2KB
SHA256 ce58826a00cd52c1e5fd73daacb3b13c9ed2e398ef0391f16d8375a69dd99e3a
MD5 c06bd3019aa89c739bbfc0a5657a20be
SHA1 26442e6539d47c8889f9be091340f5ce145aec50
SHA512 cd80634a67531538caa38650c188a992c48023abd566fa609bda5186f3739061f275d7ea39dd360b426721a82248215111d6dd80f878a1b17f5f777cd73ed3a6
TLSH
T101411A61A6BF5B409B5B7B551760E6224F7027BCF3E046AAE458F08F933292C19972B0
MD5 SHA1 SHA512 TLSH

Submit Download

user-192.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WNCRY
Size 1KB
SHA256 7ffc5532a1bec238ae4e4366e1790b472c01eac4cd229edf512238aaae67b49c
MD5 6609bc380a78546c58e14876e88c6360
SHA1 67d09185a4b5d06cabca006594ddd44195b02221
SHA512 6c02b854ae68af1aec18401bcd2046bc34fbd3e6a7938f455fd6ddb57848c25d8a235430c6787360c333b305052059688185310a3adcb814ed9ebb841c5d3ae3
TLSH
T13211E97D2B4EF017D90324236AC2A1EB3E817D09C43C80869CC4A4639DF25CC8592612
MD5 SHA1 SHA512 TLSH

Submit Download

user-32.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WNCRY
Size 472B
SHA256 cb332172b64d6746b612dcf1a579843825b0c6b1330d71b6a14c31b5b1df3470
MD5 6a199524c8667b0f3cbb46d199886040
SHA1 7d30a2b0cd83692e5d14e4d503840ce7ff4dbc7d
SHA512 4d36b902ccd6149369007980a2c554d9689d14d86a4245ad43118d082306ff8c9e15dcd7f0cd7df0d956185ea7ce918aab1eaa6575373ac14e2b942761c1b135
TLSH
T1BDF0DC6D80863569D0F1D2F20101A5E9A53FBF48AA8A4C30DE735A058805A1E4A586B2
MD5 SHA1 SHA512 TLSH

Submit Download

user-40.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WNCRY
Size 504B
SHA256 21ebddeace87840568cbdcee8d97ddc1dd8c7767e8c6b0632d4512fc2ed17654
MD5 2a4793487cca652dc5253b2b481605b1
SHA1 3d157bb8d4c74ab1367828a3a5993c67c7f4de61
SHA512 517d4b225e264e8befc9ac286e24da3c3de6d06a8ff68ad368e19dd75acd6b81bcdf42255e86836a8bf0bf4a0a7d4660df5aeb1aa4954a57a451d7e83bedca28
TLSH
T101F00E860E4D5840E87118FD865188813C1A84DE9BAE8DAC79A50C91244CECEDA6ADEB
MD5 SHA1 SHA512 TLSH

Submit Download

user-48.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WNCRY
Size 504B
SHA256 84a1665bcc561138f3e6e6ebafaf5ab88b1e4abfba7b5952ef590f5481421ffa
MD5 7ea70c8ea03d4065bd8e94732629baa5
SHA1 41e058ab6bb36b6bbb958bf9bf68c16640bd291a
SHA512 750b3c0e149576c5b0109a799f7c919076f218e181263811280b316c6e9db82e5924480e60302cffe1b4d9fe6e50b751b18e0d79c1e32c761cb1101f1167b15f
TLSH
T173F075304B496CA84BA38DB444E11FC367208720C13419F3727836156C081425B2009C
MD5 SHA1 SHA512 TLSH

Submit Download

user.bmp.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WNCRY
Size 392KB
SHA256 aec463ae637aeccf7507c7af79df06ff6a9c0346faffb9a9cce138489e9db4ff
MD5 d2dc7891b546bbfdac4155b904f1028d
SHA1 23e7a4cdd727a1d68d144ddd113cb7cd90a35564
SHA512 4c8fbd0bd6d8497aff5008d89d937771ea6035e6d1300ab525047925d9f516fc9968be183e997e3b7e9dc842110692c320b224a1a334f822412c53ec36d017d4
SSDEEP 6144:Ohk4p7BN6mkwJ1LE/mzlw7CX05QhqEx6A+tJgsk1cvJPDPpGL9zNnQ7u:bUsmxfY/mZw7Y4Qbx6AIOclAPN
TLSH
T1568423FEDCA23F11D611D15C07B517330A9B49E680E1CB4A918EE8FD916ADE31277EA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

user.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WNCRY
Size 2KB
SHA256 d2a009d782fbb7d0f459a5ad2e372293760e1ec763117454b6da99ebe70bb3da
MD5 39de2109aef4726b5ed1d4f8a3c2c5b8
SHA1 14b6064ae17aa37f83f6f8761d03812b3b03c63c
SHA512 e49a9c4bcc30192e73b5387dd569c9cc8aa3c6181327a96579c2f6d2065ddd38f397274e1fbe3054ef67572688c72255ab0f0ba3f0146ed85234587e7ea4f9b8
TLSH
T1144118A18542D7C33B24C84AD0113600BC07ABE1C219926ABC6EA3A35360F2A5E7381D
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.2.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WNCRY
Size 16KB
SHA256 d312a5b2acb1412af5a380eaeebfdf0e7658c5e80d3203ff69a65f40d08341f5
MD5 1cdeb215663d62b7c9c6d9e85687ce00
SHA1 1ed99d014cf14b8245d689b6d1834241dba1cbb4
SHA512 0b2bd40d86efac56e6c26952382b0431e1287f05f3465d6648f05ed09ce630ac83c099ca36af4b02bcfc8b65d604f637e5aa75d525ad242372a5739f38a4b30a
SSDEEP 384:xwXcYS2fp1jIj+T7hzjTm2uvbL2pcja+SChhtYyrptpLH+sNanIe3lAcMu:WMyLSuxlcjatybdH+sNgIzu
TLSH
T16272D01B48A5014AD362682915A906BF638FD34467467FB6927CB88FCF3F5F8C306938
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
Size 297KB
SHA256 9005d8e6286ae9107c79f4575bd45e4fbe0f8cf939fcd8c4da7ee5d02862e5ea
MD5 5a72c36faadf1a42231a00848b425b9d
SHA1 287959cd9e4fd2e00a5d47c6c9c8066cbb6ac8f9
SHA512 46d3407b37f29580f1c44b83094bdf9c7cfa9d48c51d63ae6ea2291b6a92d4d01e7370ab6479218ce7945462a9b3aac4baefe82df0baa0ef413f8071cd8f9102
SSDEEP 6144:u1tIFYmm9Q+iw732ZsuBoeSXnRwdBqx5ruzU9behyZfMl8Q77O:Q2Zm9nd72U3Rw2izgiyZfmJ77O
TLSH
T193542303C64D2A0FCB741E04A4417FBBAC5BA9E16FCF6966B814A2D9CA77C92C347914
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{977107FA-AE1F-423F-9EF5-F3ADBD86EF54}.2.ver0x0000000000000001.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{977107FA-AE1F-423F-9EF5-F3ADBD86EF54}.2.ver0x0000000000000001.db.WNCRY
Size 1KB
SHA256 e037b0f0e9c76196ee4377068c1a3d529e9a1c985093c5745cce7d8d6e08c4cf
MD5 01092e9d6eb3c974d5af15f2a16f0b92
SHA1 a232ac6bbc832f5779b3d20eb52c75ffba4d093d
SHA512 847d38a3ef83ea51cdfd153c0aff9e1cd99c93422a638685b5f9303840889a5cf4c416540ba6fba534803c755bf6a1a3fd796da6744cc43c3aa681d881c5ea72
TLSH
T1843129C751029F01E027929A9EDCB0A46B4618B23B8F5073A20E9C9D24FA6EFF460253
MD5 SHA1 SHA512 TLSH

Submit Download

{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
Size 639KB
SHA256 abfd6929ea9b76253e59f150f35549239e488de272202d28d96c03f659aa7975
MD5 4e1f0a475093229b62c671d8b58f47cd
SHA1 371b518d90de50b6d9596e6f86281145f7d4b318
SHA512 8c5eb20360ec6ab064e0d9500bf668d964a61b5145a33541953722f5bcc3913a77671cfe29be2f5571b6775870ca8dcffc9a9afebbae87624619654995af033d
SSDEEP 12288:xoq8bxPetOpu8odnXLqCSOfMM145IbBo8afPFHzcwghk5O:MbxPH3I7qCSclbBo8atzMCO
TLSH
T12ED423C21B12C0B754181E0F12B8F4E4B7F2DAFD5549258D41FE08A7BE38692B5E1B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ActivitiesCache.db.WNCRY

Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WNCRY
Size 1.0MB
SHA256 052bfb763045394639153cc122596ee21b1da6e6da1f130dae135800ee7e629a
MD5 ce1813740bffd32494f36a3c0f29d563
SHA1 75e369056f390b2e8ca95440941e3c4e5ec5e441
SHA512 fd637e30fb095516a1cf92e0b8d53d2279067c3b159b963aa729bb0f1870c237bd38b461811d323cbe00307edf0b09c0834b9d41ade182b72a37ec547762aaca
SSDEEP 24576:uP7X0/0EtvUj8QA4IewnLuUt1+izW5fKmNmCN1drc5lf6D:uP7X27t8j/Mt1l43mmFwfI
TLSH
T15D25332C64C43ADD21FAECFA565A3C22D076B0C4206257414771F3AD353A7AB6F60BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IconCache.db.WNCRY

Path C:\Users\Admin\AppData\Local\IconCache.db.WNCRY
Size 13KB
SHA256 cbd93c9369496e7ab123cdb5d335eea4a16b353b2a9e3ba8b501a9a61e7fd772
MD5 1a1876966797181d7a05665345419b26
SHA1 ebb6b20fc86b1c8451e20459f4a843900e467273
SHA512 d53a63ed2f82c39fa6212536df577933c9314d3034264ef7b724e46977d6c9206fa3127a723d8614f891932d3a9b65c4820d48033cf4e815c68e4edf979f75e0
SSDEEP 384:pk1CINCbPkObgCUenR6qqSDgMONM84a2am07:MBorngCUeR6qqSDgtNMR3A
TLSH
T11652D03F99AB84D069C93EE16C11E7D0DF7742A441E99FC678E8A620B1C039B959E34C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeEDropSQLite.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WNCRY
Size 32KB
SHA256 6f6f18387056a06e1f3aff5e795875e8180fd1aa8cbcce43b67012f3453e221b
MD5 077e44ae8b4b311ee898c7862571853b
SHA1 f1937ecec986a0be53a562b4f3f4e2f80e9ec4fb
SHA512 77f8eb8370d44359bafb0fe409a3e25de4652714f7ba551f9a9b522577ce622c6b816391345311a22de1dc78064fa29bef8424f2b32540a3f9d3d3d9c6ddc7a0
SSDEEP 768:vJocCTRkZUG9XmJK26FrLxw2IDqKr0Q89wdBNcEtg2L/6h:q1FXKjLW2IDq50BNvPLSh
TLSH
T14DE2F29529ECA675B1B8916ED7112E090B81F64EB6AEC484BBCDAF871853336F800751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeHubAppUsageSQLite.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WNCRY
Size 32KB
SHA256 ae28b0731698fcc29a37fa6c81405b7e05c0ae4f2e1c823f05cd5aa1264eca6a
MD5 9398818faa657bd60202e9ef7b8e7628
SHA1 65e6efa49b8385517509b92814fd2a4cccbe2c02
SHA512 74b1aa749822748da9475354f3610b44a6215e5553ab9b020dc94dcb44d90a086377782ebf1194311fef7e00aaf153b60b344077c716dd7f609368c4a8d42a9a
SSDEEP 768:CNU4SxPpTuiAsuVz/vr2Nlq6N3zZgZzJokS+T6JJh6:cU44xTutsI/vKNdN32ZzGwEh6
TLSH
T1ECE2F14338EDB023A7C5D04343B5E562298F7255E3554AF564A4CA333B85A2A9A08BBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WNCRY
Size 5KB
SHA256 a104388fe3136710024556ffc8ab289fad58b5f549a8e133fbef4388e4dab801
MD5 9baf2cdbf3e8692adc2887506c2747b0
SHA1 c5a1cce93c0e9704c1d0993651c52ae86c5153aa
SHA512 943e060cfc4fee4038a097a4b1bc58258f37379e8e57270212dae7cbc9e9bbd6a791677b7802cfc3d2a7c87344a8ee6d97ca1de6c2bb277905e952a44ba7738b
SSDEEP 96:oQGovVTi6DPzwkXZtqvwu7To0KoSLnftWYOTE5aHHM34:LGov9VDXptcHrGFoni4
TLSH
T1A1B17D02F8994525CF733A36A023B095F1D6788B5B2D201A4114AAD73B657C3AF4EE25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offscreendocument_main.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WNCRY
Size 130KB
SHA256 2b41a0dffec13f923fd72d94173e6d4bff72807f1da0de5d9883025681ac1d72
MD5 193737cf21e60debc708eb16fc987b38
SHA1 29d4fc11317d9b436f553e141f4eca9d8f3509fa
SHA512 f9fd84d28a72c0b962c6bd273fb88bca7adc3719c466980c3313d057e2d150bf296a87591f5f61f3bd471226e56b5d1dcdd77f85ff1e78ffcbcec8f13cd38004
SSDEEP 3072:ZGc757WCbAh31B86vdXeHLEk3nXq7eMMX3++M1wb:ZGOFWCMN1fdUAk3XIWX3is
TLSH
T161D312846E6ED9C67B86E5DFEC981065AF428FC28A21356740AB0FE8430D375C5B1EC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page_embed_script.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WNCRY
Size 632B
SHA256 73797d5c0627cb92dd7d376fa387112c635540354722ea5a98c70632b5361005
MD5 cd49dd1403c1a9949607c15876ecd2dd
SHA1 97edc4ceb247093b0821a166bcd83a14228909d5
SHA512 c8b0141444ebac8b0a91f9cabd38c88321d2434d729175f85cc156e1762f34312bd31e511b78e5ee45aab5883ce3c4af043a10e342a6beb772b4d06d0eed9958
TLSH
T1A9F0C8A4A00F6CF0E2B248B0D701308498AA2E1ED6DD028151C2FE6647D1F32CD00B41
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WNCRY
Size 136KB
SHA256 c83b4bf4c67991f1e65068a4780006c0c04d9e2f7607e8e2982e854236fb9018
MD5 b2029a4707549c7b3cba7279d46b541b
SHA1 6efe7254a7f9eb7e6d026431f1ccc864ef62f8e1
SHA512 6e159ad09dba8cb0c79b2763891038a37d3326f616799c7826435b40dec17603313389829ad91616d513a444f62ce9e15e830a37923920b0968d3398614e166a
SSDEEP 3072:4kWcyFUYMCRBGns9FONTqSJihbv35A7PWnRfEyHypoN:fdyF3GUFDEitfRJHypc
TLSH
T168D312082B28EAC923869F583527411F9797B11C92DDC55A8C8B3ECF2E93B5F78D0D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WNCRY
Size 664B
SHA256 a0c8d059ad35dbbe5862df926f47e3d9c06ce550ac313a39170774f35aabec09
MD5 f164b10748bfa149f4493a5ee994acc0
SHA1 c883794293d08e3c44ce657829f36816aa45b06e
SHA512 6d724b3443ea9412ed9bb241b410580a4ac87e475b1fc83cea5ca252413c6cf7a1acde047d868c437daf2844da90d0b667293d3676c3f93631dc08a2eae9cc61
TLSH
T1030123092DF76732D69C95BE756122DD029AB7045681FDA794D0B9C20E0536A420A4F2
MD5 SHA1 SHA512 TLSH

Submit Download

heavy_ad_intervention_opt_out.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
Size 16KB
SHA256 79aedf675bba4fefcd62527185aeef0fe23c1928c0eca433c26fdbf753c0041b
MD5 68a06f35c05812ca1df7236add922e6d
SHA1 f4a8c1e5544d4695af0eb504906659d8d3ff3302
SHA512 c82976116cfb0a1ee5f2efb5b9d3672a2279a0850f9a878434a215dda9ebcb5e201039d9cb3052a75395c0e7205150e638722614707ff8f61493bca8622d9858
SSDEEP 384:+VgMPaFLr7Wdo82c3fTs2thgQLrKbBB5V4QK2lc7T07H:+sFqd6ufIQgQ3MB78qc7g7H
TLSH
T13B72E1121207F1B0EE51AFA34E8655B3D581DA1BDBCEFDB29E49A8AA015487CCC80741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WNCRY
Size 84KB
SHA256 8ae9ee5a96362e67c4a65dc075420b3912dcdc8d473dc2b025effdf105889cd3
MD5 205692f993490a892e129af8d9299a60
SHA1 c2a1fa21148aead3a949bb65e1a6a544b469273c
SHA512 f4e117226aa9fe0ddaf2df297c1a91d2d13b6d93aa8f213a165f3fccdddea4b3b4706929d8c98687230f150fd1b1da8507fc012f53ebbbef54c355de30d5ccce
SSDEEP 1536:OdRkJo8Z31DnMZpHBdP9WBXdPAEK9kS3MDPhMjYW/TVCq6HC18bW2Jh0Mg19NpJv:aW7BtMHDP9AXdPdckSUSCq6Hz/Jh7mNb
TLSH
T13C83027F12D930F0DC064265108B82E894D7AD9AC7566DA4233DEBFA005E3FA4DE69F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WNCRY
Size 48KB
SHA256 9aafec4cc0f00688185cc1e8fa7ebd245c83c2b8e702b2126fb7be04f0c27671
MD5 f9d3fcfa6b101a88f21f078b7dee29c8
SHA1 1619e6af35403a1a67a2ed71b3ff93f4891d4960
SHA512 930c4fce9506e80e23dcdf274e5ef2479e812e71e170b76052eeccc4633558c008d437a0e4284b136319ba0367569cf4c02ba8ee9b241878d02ff1a7761e7cd2
SSDEEP 1536:o4vC4bWOwgz7NuxVq3OKaA8CrsGkRi9stuhou56j6aw:o4vB6OwiBuxVq+KhLrLkP6aw
TLSH
T1DF2301CE57E6B1BA15A6CC68F141F0E8C5E909CEED99087825F077A502F17DCF48A1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

brndlog.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.WNCRY
Size 6KB
SHA256 564c5b5ee7c97da713c6d4f870f90a396900c8915f63ef3a52e97a85f260ae1d
MD5 0928ecdcddd9d805273f2da322138250
SHA1 003b73202302842aeedbd7b245bbcac6fe58b84b
SHA512 f54b5848d9abfb8d2ef76572ac365d7068178202adf826acccca87277b48b0a75424d931c12cdca4152782b29e6bc2b7b948d1c394e18c20f8ec9f6fe0d5b34c
SSDEEP 96:oyPB9Tch2a0ekl0TY2TtjBUrC6fWd2bxfZYmnOjLbwhiN8juSbzDmbQOB5Z/pk:CFkl0TYcHZd2VfZuwK8jFzmbQOB5vk
TLSH
T177E19E7A82CD507E001F2DA6F222283E50A5DDA7873C649EF55987F13C06FC476D92AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mip.policies.sqlite3.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WNCRY
Size 36KB
SHA256 1524078bf0f78d3ea755865a58e21a0f680c6307a912a01fc4e40b870437ef61
MD5 5a75d8a63d1094bdcba89ae08f3135a7
SHA1 e31221f77696409d3820aa61507ec65eeeae3333
SHA512 bf5859918f2c4707880e877f63101c78110bdc80447fb575ef4731ce7b4308ae48925beec42be591e23df55272d7eb05000f9beeb335aea24c4a117376144008
SSDEEP 768:1ng+HQCnbz+2RNAExJAayHY3Fy06ey9wRzKqP01ehHCcOgR:G+HxbJNAtVYN61wVpc1ehHCcHR
TLSH
T13EF2F1052ECDF071E3A672E76304CD445E221EB2F456BF8722A0E692D490F93FCAB410
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

excel.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WNCRY
Size 60KB
SHA256 5a9394a2e287f661d6253a232a36de24b72ef34a24628c5bef69e9732612868a
MD5 c9bfd219ce6c957687fda1958826142c
SHA1 ea2ae41f635ca24dc917ced3845340576b94f505
SHA512 57f93a3f7f58fcaacfe24508dd6805e06b1718ed7e6c3915ea375043154fcdba5cafe7e0cfc9a352a2cfa750f19b47d2459b42f4ebd5f5554775ae3a925a1cf2
SSDEEP 1536:huQ0E8r6VlhNJsvvJEP3IWGpw+CYfUinPCwXQVA:oZH6bJsvvOP3spmYfacQe
TLSH
T10B53121A91E8CC9B931A41D116D3D741FD6DFF682A617BCA901F6EC4C932C30128AFD2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

officeclicktorun.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WNCRY
Size 24KB
SHA256 c3cc9a4414bce20b897156fe66978fc86fdef9774a7d48039d0fdb2a380e1c34
MD5 32ea4583a1d5c3bf4b50ee9597feeffd
SHA1 477a5d2d9c4a5da9e4185cf1b8157b26cde312fb
SHA512 8a9b892d7f6cf68dced9196d3b3ab19a6bffbc1a50b4eb88823bffc6a92c870c57f65018cad1857493fabf624c75626e11f86bd9ebaae50c27adf3f6515c1c22
SSDEEP 768:jqbZWvJh6LWri2SDm0XeEGlAU6hda6zvS9QFhHHgQZnOhOo:tJQLWJSDmo9GeXxzvPDPZW3
TLSH
T1A2B2F135FE0BB21BE57CA406E01D5E7554E03DF97B3B0597A1AB399B910D9F23983088
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

olicenseheartbeat.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\olicenseheartbeat.exe.db.WNCRY
Size 24KB
SHA256 4788b673ee9f1ae1b330d56c9ed51242e7337aa57fab068c7e9a4e50a66f5773
MD5 c8f9e2c4c08fe8ee5def5d67d3dd5470
SHA1 47732b63b532e41d206826cda0ce96637b88a4cc
SHA512 4db67a2d62eebe5aae84829244c27596a845ad6e7654628aae80c380caf56a8fe06e8013c4d6cae25fc1ef54b8a05aa0c005440e1270d039c71936ee467f2b98
SSDEEP 768:q8cOCtCUHURq+U1GyLEze8fRA4h4FpQ26NYvx:q2CtCUJ+U1NLEzPfqSsD6Nu
TLSH
T19EB2E1D190D37CC708D930D63C281EC34171A528ED442A1E7B51AADDEAB91ABFADE21C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onenote.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WNCRY
Size 4KB
SHA256 50f733130b9b5076c6325319e67b4d539b255f88fb7740bb3b8086969cffe074
MD5 f6ff40b66bc0cb18fc914e8d2b87aac3
SHA1 d8c5120f7d786d2e2fad195e1298f159737358df
SHA512 4ab5e6ea1c575331aa4f8a67434245f495ecd1fe770554c1108eba219d41c61c9dcc4e3979d1762771d32b64bdc09ced524f119de1253c12a4bb912394c76bdf
SSDEEP 96:o0lj/j2sDk3kUQhbUoHNcgadrjs7wpeQbMVOuvWeb7+MC4wru+6K:zb6ehFtss7w3xAWSjwru+6K
TLSH
T1EB918E7BF327DD81C65D78305C608DAE2E7D6FAC4C0844749FF5C8B28E61A44461137A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

outlook.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WNCRY
Size 4KB
SHA256 07720afdb9b4b767e9b1c25d9d54b65f9d0ddbbd23eb1c077c7bedd40ee103f2
MD5 0499dcc20f5cfca4521913c4091a05e6
SHA1 6c89b7ae52cd1eb3887010ff61ea07618db678ad
SHA512 afcec1a284af32ea51e9edc40310e9ef9a0080b38320c6990e1ede8c937e469b38d2c1814197177fd10d635d99807ce4bccadeda79bcff9b292fe89df44e9f2e
SSDEEP 96:oxH0FnONz10icTr7xFW/JYNT+E8Uq/Iuzj5oJuONPfLmcUvx:igO1WiwrqJYN6PUc5zVoJu278x
TLSH
T1CA917DDA6714677E23476DFF29522A47FA472336553708BA288691124FE09F0B81A8CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winword.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WNCRY
Size 112KB
SHA256 9a089715d176e2fe9c092bc7ef4ae7142b4db25761bc5bfc34420a281a6c764e
MD5 14b681c62fa818205069ad34b3595706
SHA1 1fecf6b8090e284624d664e7c877db8b361b5ec7
SHA512 df28a86fc7dc0abd246288c8baa8b0a98c250750d86676e05299b32238dcba738cb4ef97769c6cb4743406173f4462c7eac91b7410e1b26019a6975a9b3ef4ae
SSDEEP 3072:EljW5dPS4O7Wp767bjhofX5zzMdzSsRoZhrpy/iSDIbB:EljqI/76767bApnozchrpJS0bB
TLSH
T143B3025E7332AF6879072798866936E454CBB3411B062FF3F2728F0C7815D98A6F146E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WNCRY
Size 5KB
SHA256 2ba0a7f210b5f4aa681e06edf3b840e17fbcc441d0ac27222e61d7ec1e521a0d
MD5 763fbc130d67faff4924ec016615cc43
SHA1 ffb0f0f8f13c5d6679136b70596fd3549a634fe6
SHA512 4c68939e5475b2c2154a37c78dba2c6c1bedc8a81ca69359db77514f4abc8fa7659363d62a09bd050cc770939dee1ddba6eeb1fd594f1339429b8283cc90c2ba
SSDEEP 96:oMEJJQ5FqAgblQw/33NHYKtssemEGMIJMStVwzMOqWg9g0EstBkFVX+515mzXbS:LEJy5FqX/HNHYKtsseGVJMo4okL08XbS
TLSH
T131C19ECD77690419518AC9BE26078F3F1A5C3E1058D2E55CA2DAC2DE396283E5009FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WNCRY
Size 7KB
SHA256 0fa5401fe03818eaf7a2a0a593dcbff7d565bb017ce1001e752219a74beea88f
MD5 c2d617fe02db9889fb9b435c8c69bc2c
SHA1 183355b371183a221616307ed12859fdfd204c1b
SHA512 b414b46cf2a02d4c4e8e802ab1ca5d4183655b0c711df25e06e6c2ef93bebc915e9ef8b2626914b25f26468be52f920e5cf54e8ccd03ace820d6d15b49709f40
SSDEEP 192:/3u07+7uAfNNu9WGXVFJtbd82xblu+8dFzv5bysyP:/uA+fq9hVbtbe2xhx8dfO5P
TLSH
T1EAF1AE0227621ECD0A7BE0672FB9E8920A1F602077816DE9C3968AFF019C3557D1D7DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WNCRY
Size 8KB
SHA256 3004128f373d1ee1325c9caf40e0263d334243a45e4923ccb2be64004dfa0068
MD5 5ff2095cbe5281e62bd394bcff88fae7
SHA1 c39d031bc264c0d2a26b10969f22fd1e1caa713e
SHA512 75874ba65ca0510808273c2df6abccd4da96241a9e7f369a7770cfa3da9bb3f83a07620ea91b96bd5832f10271fd84da10d996da1cfb5eee0989755718c74d04
SSDEEP 192:1dv/h9BR1PqJl47WspH0hUx4eJlglcGsIfhI5nxIswGf:1dx9BRxlas6hUElpI5xI2
TLSH
T17802C094B6CC84B2BF1810948796C354D84BF4E71AD35D3D7B8517E2E0CD8097CAAB2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WNCRY
Size 3KB
SHA256 9b291139c3bf5274912df7978770feee96fc849407c13cf24010b8fb1385fa8f
MD5 0ccdffd3de95318bec5245c5f7dc6fdc
SHA1 52add667574e27b4a924a5d1fce145649f887997
SHA512 f9b220a5a47ea7c23cba49d30e3d4086bed94e528cf3c53e3be23e84da8c2e3ba792ec2d0f707dbce38769437dd5b4ab01abe22714e064e519e9dcba40481d7c
TLSH
T1C4617D02ABE2EDB0D3E6686A50CF692910064B477FA8633CFEA5F04C04D58112C1D0B9
MD5 SHA1 SHA512 TLSH

Submit Download

AutoPlayOptIn.gif.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WNCRY
Size 374KB
SHA256 b863f9cfc0a75406a6a7726aa17a43975066896ce9907176430e17db37ee812e
MD5 70bd11a30a6d19d238d6f0f23a45bdce
SHA1 81f92690123e3a2edeb40579587bcdc2cdd00d15
SHA512 191c762c28643968f130700e0deef0627062f80c1551d2bb3e3e3bace9611cecb1953c9244edee54dea0c89107c84a9c146a260e5bdca72241b2329ce53115b5
SSDEEP 6144:ykk7WkfBqJ2443sDQzrMTcNe7HkPRcu+RevOxve5t/j6/ZbL4U5Up4uxdjx4t6P6:E6kZKl4ckz4PCP+RIIk/O/dcUO/djxuj
TLSH
T1EE84234DDA00999E7E4A6D9FF579E078731188878BBB91E80C0BDBF89357E50E2D0712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoPlayOptIn.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WNCRY
Size 10KB
SHA256 24d9a7df84375ca78fc4bb65bd5ca095a26b2db2bc2b7b62605e4eac7726a2a0
MD5 71ebe0966568e8cae69007d2799747ed
SHA1 9f6d359bc438bdbf37826cda799d627f1b46d4d3
SHA512 71acc5cd5753599d8ee399d8e0e5ff7ea497d07d50fd3951b9557d3f5ea3f864ed97a306d5e9185c5f9e900007da39c1f189f40e8fafad37f8ae661972a72eaf
SSDEEP 192:AnBome23klNJwjn9zosvR0RgB1r37ilPjVmmYHbcFwHd:FmEn0n9zosvSHBVmmYLd
TLSH
T16522B0478225B5244EC5EB39B2F1F68064DE21DED440D1ABAFF0554E19744767FF106C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CollectSyncLogs.bat.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WNCRY
Size 6KB
SHA256 4f4718173ec3f4f90f4b01f8344de97314cd49ea4d88cfa132d4f6600eaa7da9
MD5 363c048c33e0df8d17c1d8260d75b1a3
SHA1 2a8dc64dcbb30471a2abb232cf8056b3448d1463
SHA512 6b2194de89df44f152f56ad38a21810b6e39734251c0cb4baad4fa5f0aabe58f940e1c492dcdd5ca0ceb1f1a8939fbc5f7e1416ac7ab7ec8a9a3d9e540259e18
SSDEEP 192:k4SQYRC9w9IaiPjfaQt89gNlX8DtFlaO2:k4SBRt9IVbfYp2
TLSH
T123D18E642A62CA16FE1653B34D15787580B1084D96AC5D41C9F1EF949FE704B3F2C713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WNCRY
Size 7KB
SHA256 272924193120e8a8d6ab85386473d3ef436fd79b739f1022a2dff08a8c462191
MD5 ae048db12bff1ff745ea3fb4554a450f
SHA1 cdd76e6e6ef5c7afd375c546445a62e2e20dd19e
SHA512 5a4d838be1d0721caedecb98b45b783a740aa61a31448cd4abffcb9890cd5c79e707a2f2d92815086db9d72dde680d4c55c844a52182c6afc54203a53524a620
SSDEEP 192:fuwwx0kzfzNIJd2Zg/kXC2Lq8i1UZwnqphDHZ0NWNCCt:XwRzNIJIgGC2L21UZwqpl50NOTt
TLSH
T174F18DDA726C2A63A115B822DF80211DFBF69362919184393431D0B60AE279A2F595FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WNCRY
Size 5KB
SHA256 74457a9d3d0f2c5e7e6fd875b8bc869026dafc30109d9074b042dd2a8287f6d6
MD5 3f319a21fa51d2bd94d47d1d59ee1835
SHA1 008eefa245565f7e7c7a1cfbe7cc11185c3bb3af
SHA512 ecff24b779f574fb072bc990100c68c2f1a72f5a637dfeaed9d28118c30d96d51bed356bbd52e597a81835fae1957edbcb4605ff146eb92341a7fc70fcaa800f
SSDEEP 96:oCyBzJsy+94aZMZW8MlvzIvqASKeS+aU71e9CIxfpBhse7w3zoBDGI:uScZWP+vq4C1eLJpBWNoRGI
TLSH
T19AB18DAF23C604BFE5A0871B48FD9541BD59277D4F487EC07E8AD8C3A376007A65600D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Error.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WNCRY
Size 7KB
SHA256 2560018459a3ca74424be108736ddaa32061f3680446fe64244358c8649ab8c2
MD5 e916c678af497240171fd00dc7c1df6d
SHA1 1021e6a48353234fc39100a6042b3a3bc4769465
SHA512 de85602ea9e97e47b91e10a0c1493ae0ffb2b5bc57ecb554c3c1d6672eb751f33691d1a05569ed11c715aff778b8e3b8ac43351ba3ec4950cec20ee6247c7d6c
SSDEEP 192:2N5Pw58yVBbeRqHn7yQ/ceW8ZL+oCTSceOrChk3JnedpzR5qTXYu:2NBO5ecH7yQFW85+dS38JerRSou
TLSH
T10EF1AEC6B8ABFE2799F2E07B068ED4CCA19294B92742DB347735D820CD11D7348BC568
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMHeroToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WNCRY
Size 15KB
SHA256 4f185139d487a2fc871b67dee843671b18ab58696ffa78e7d60c7b5463577634
MD5 fac1b749947fef8fe1da82575161a410
SHA1 fd5b93d159b7dd28a23af8a7e6a591c9955a8948
SHA512 b0af1042c6d02bb58b76c2f284438ee59eb387eb34e248d27784633763eb842edba4f6db61b2f5092d539fdaf3cb1d42a2ec8560c7348223086623d0c77423b6
SSDEEP 384:scY1bFTT7vQPEOxkUPGikq8gSzjyc9/fS:hmb5TLQPEOxNPG21SXT5S
TLSH
T1D662E159E909C0BD8F9C1102B65725098FB47DF33441FF0928A3197F4BA269624D8FAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMLockedFileToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WNCRY
Size 10KB
SHA256 5a74ba3a5571b0074fd369eb006a1fbb8b31d2decaa2f50d934e59cc969a7e79
MD5 621dd81c1b9f8fe5cb5d0ad62cf59dd6
SHA1 fc082caaf7d0a329b3bb47d545e50e79d90f12fd
SHA512 b560c5715537cfd98ab6db73bdf7c7b51c41b1e67f24dc280d5c34732f64f99956699cec5b80bf164f18d5794d70532c6396cd2cc241cb8e89ca6b9ab5b4633e
SSDEEP 192:1B9bIAgOoDgRUJiiSS+wnClDzCRuBa17Dhns+xCRY6PpCbpHd4NpwbD/jAxWvSR9:ydYRUMiSxiRuBS7ls+cYyWpGHovu9
TLSH
T1EE22BF11BC046E9628CAC695EEB840B21B91A7171F50FBAE4A051B4EA00F0ED5D4FE3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMScanExclusionToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WNCRY
Size 10KB
SHA256 30fe2f4c6105b6c8caabcadb6d5feee56c07eda4603eabd8c57b884f963144d1
MD5 7ab04eb17ffe5decc94e45707ce35d55
SHA1 3320aff4e24bd321eb1429edc79106f62f4f667c
SHA512 2c2666259ce6dd44cbb2d17d2a914d887960aec6581248d636da24665eb2591865a84a31e8b53366ca086d7b1a02ff1f315c7da67ab203d1fa20be0422081c37
SSDEEP 192:DLbhgl3dinEcwH8ZXiL2zWM66SpT7bhIFH2K8GOv5vMEB/sPhFOwPdSARBsuzm3p:3byl30nEcwH8xtV6npTvhQmGi5D+Z/Ps
TLSH
T1B822CF5B1B44BF9A0DC431EDB77CC1F2F2E0022A6C452E9E4BF278DAB0D6651A022D0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneDriveLogo.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WNCRY
Size 4KB
SHA256 29333c8a631025d030282c2388b7969e83148e2d39c9f860ac8477a886eee65a
MD5 b63cf837d1521d1d82da0bd42451d616
SHA1 b59c40908f3ffc2420f89c9e741df92d1c2dd09e
SHA512 72d19c697cf05947908253126e76b57cfa574a260152b48dcb8acbaa337d2eb95446f3533c8c47352ed0c64b0ef8dd3b4da15439951306106ce5662eb03c31a3
SSDEEP 96:o2Zq8UIv7RtRXipB5le7RH1tIQUXR4VDFy+mMPElWy5nZW2BTbo/Ot:LvdtC5sRVtIQUXKpFZmMS35gCg0
TLSH
T10EA14B047B76107853E5B29087FBAABCB94245E29E12B4FDDA1959EE83F184609DE200
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaCritical.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WNCRY
Size 8KB
SHA256 ab6a79ec88dba27af6cbae98f1bb9b4b6efa619fd4173bf37b5ed3fde8b4b121
MD5 a160803d1a1485125f0b7049f1604ce5
SHA1 5c27a2b4d6d5b71b1e4e4a4a4723e1b5dc33fb83
SHA512 2178be57f7b80f2b829add91b0506939d1e3c4a5973a25f2e3851a3be30c2bedab919c039c913538fcf9557a278cd3f9812e972e1b10d38a45f4d911927b3d9c
SSDEEP 192:JZ5I8PmpeoYGGfY31WbX8cEcgZ8d8Elr5MTodl7TF+CIvL:DVmwLv61WbX8cJgZw3N/I5L
TLSH
T1D912B016E46C3937B6218610F3B33807580F6EC2A41499ABE4A76713FF037E0711E947
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaError.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WNCRY
Size 9KB
SHA256 a6625db87288818c7afcf09d831a0bbf1240ed62cbe24bd6028b7e938554d85d
MD5 b3329a18a09ec73bc4f0ed39c3020564
SHA1 686fca1d59d1b537b23582f937b274a5e2e24d81
SHA512 522e1894f434a6375438b1409abc21ff18abdea717df7e41cbbb9ad5ad57e78026c83aa0c32df565bde0b6815f54632632b0902cfc72c59e88e657d4ce324005
SSDEEP 192:CV0wy+MrI3b/uXbxpBY5N1xLp6dFeAfTxdxqED36nH5Y0DnvkZPpA8Tj4:g/2IL/ur3B8ueG3x3DKncFpA8Tj4
TLSH
T1EB12BFAC1AF5C2DDB06704E22F560CEBE4B47DE06861C60C8A2B893D20DAE3DD81C70D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaNearing.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WNCRY
Size 7KB
SHA256 3c174becc70e56094a1cea239eecf431ade8b5399ab3d67f1ca6dd4a43623322
MD5 e9519559526ab254b0ddd851aafd9209
SHA1 c75a4e1d12cf725cedfd362456c239e78e3d83a4
SHA512 6c1f3f1d1bd09cf62e8544e9aa33dd98124998088848f22a2d52e5903df2ee6157a8928625d60ffdd0ea47f9199462eba69e40827d856c148bba5c888669f44b
SSDEEP 192:j1aVrDnHHMOGSHuVwu+FywW5qWKnacFrnLH:hW/M4CSbW5qWhKvH
TLSH
T1C8F19DC44B87384B7FA456FDEB1403D2A8966AC0245233B27492A4186667FCDB2B7511
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ScreenshotOptIn.gif.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WNCRY
Size 238KB
SHA256 e3eda6501d95e63c694856dcadb79b0f8c548e8698b82deea810e2d838133b37
MD5 9381a63ed6080b0a901cff3b043e7bb6
SHA1 8b7808d2774e2b9668f16eebc7cd5eda1a0d019d
SHA512 4720c989fd0423112e546ba16533adc4ec88d57a8943444390d0383814848fc5ed8da56392a0a5e42971e1bfcb1223e5f8117e94ce968d6a6256cb1e1d583e32
SSDEEP 6144:/CD5i27Pzq2fBeYWWprRnXVwZvXTuCJtZc30klil:KD5igdMRQ1lwZvXTc3DW
TLSH
T19834235CB890902E5D690C96A94F091C7BEC5E61BFEC5DD7272E2883727B06074E38E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ThirdPartyNotices.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WNCRY
Size 48KB
SHA256 d7a61101e130ff4e17be3b0fdd0acd9c9bf71a0d01f2ffc12e698633255c238d
MD5 61589ff921c70e036659d0851c5a2bd0
SHA1 2f3929bb771ae0baf1b296e52d3e6113875bb135
SHA512 a0e3c2f75bad414b9dde6d79d016b82976f03f7a48d1006eb72e256a29406667507ef04897865f654260d442edbd1a2ec88b4efe4b266682b9e15ede54ba687c
SSDEEP 1536:pIm0n2gKAgCF3p8Sm6z+Qemp5O1EVZyngQf:h02hYZ8h6aQe+OWZuf
TLSH
T16A23F138CC65FE0B97747366C90FBF1FD7826645360061B961F9799D08EB31A237181A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Warning.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WNCRY
Size 2KB
SHA256 e20a657fe19673f887755e1663bc4ee8f4a9d2139fb6e9f74b61968f9cd30bdb
MD5 247e3959710cec50c5da2f8958f2c599
SHA1 cce2cdaf5b8fefcdbea3ca25cf93bbb3894cacb0
SHA512 59d8d924072f950dde4cb0abe88c678db3812bc7f1d7816a500d997389b57e3bd084f92338c64f6dd22df18a0435b76b0a772754d052bbe75b79ea5878735946
TLSH
T19E514D551DCC7098EB595F9643C9206C9E89DADCB3601CCE78864A50CCC078E5215E96
MD5 SHA1 SHA512 TLSH

Submit Download

alertIcon.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WNCRY
Size 1000B
SHA256 34bffa75f1c2abe4d4d49d9dee5ee02f8c099b40cddda8dbfc6e544640dda2f8
MD5 11b30e734a576087a07e8d0c7f9a72ed
SHA1 9b17683a4211f52061857ac133b0845ac1f4f7b2
SHA512 8066046b72659aefe190515aa3920c7ec08715262ef3deef541c2bc43c1425fb3f6a566cd27c1f5f8963375245e9ebc1d2a6e3be9d3e25508d084e4a970546ec
TLSH
T183119CF4770ED505407E23B54C7D9CCB3849B82927DD11B414205D8966D2D1DF1AD532
MD5 SHA1 SHA512 TLSH

Submit Download

acmDismissIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WNCRY
Size 2KB
SHA256 3ff82e193c4364e3d349becdf6955085883b8059a9f5e31e6b9a1e68aafb8619
MD5 74a4aff8220366fc7276cd9f1e2bc19e
SHA1 66aa8810a2c480b3929cc313b3db8379eb1620aa
SHA512 c1147f7b3ef3cfaa677238b7bf283d7add2c20886f06994f3f05f150c6c3113e3ab3900e1b9724c71e319d84d452110725e0559242fc579b17738f091bb8b151
TLSH
T1E8513C745E0143562B4526D81BBEDF1A61EDE35D2ED096D38C2AB06A80E10AA3BDF6D0
MD5 SHA1 SHA512 TLSH

Submit Download

blurrect.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WNCRY
Size 1KB
SHA256 9e6e9dc5b8d20375a2f3eb3108802010df264ebdd91ca4e7ea03bd728b766d96
MD5 6cac22c9b0fbb57835e17002e21607e3
SHA1 8ea0c9505b00cb73c53f6cbc8f3090ace2336153
SHA512 0cec2706ce4ca5e62bf7737c342a423a4f5746c2c13459f4104e7dcd238d03672bb6beecf7e5325347ad4d1db98bd75ab437d52f5f648e15d67e7340190cb803
TLSH
T1D411E98134FFE534686AA6B91500AA762B39FCDD7E02A4EC3B1D1F043EC601EC350A19
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_finished.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WNCRY
Size 504B
SHA256 0e51f658be49e0e3b021320d7467d2366d7a270b721a06b652c8bc1492b1a0bd
MD5 db9be6b7823d806cbdb9acad2bbff0d3
SHA1 88f310aaba0a3c7d0db7032272a6fdb407300a90
SHA512 559c6e00f06193e8464fdd0fd11a80875a489473bb92cd9474ec2b58b1e774372c3e5cc1fa8691d983c06231a79c97ef9707a90839e0c2862fc3f8d387bec2fa
TLSH
T187F0C4A0EC3A2D87E0B33022C3EE04018BFCABA185CF6E44B4C4C2F7F4E4225099301A
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_hovered.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WNCRY
Size 680B
SHA256 f4344787b3ab583a07493d228c999a45401c6834baf2777d6dbf21a58fa2a2dc
MD5 8610aaed8fb14efdf3ba9693f7ab477b
SHA1 f9c83a902d0d9f07534434b9c8ab439e33c74340
SHA512 08117cff0012c054367540295995d38e9490626f99fa856c3f255fd7f3513baac4e1baf19f52d21f44a4ec3aaf8784ee21cd191ae06b95d27361d65041c09398
TLSH
T1D601889AC7A2500E9110023C639C9FE77B76133975BD964C074C3DC0C77C8D81620F00
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_in_progress.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WNCRY
Size 680B
SHA256 8e867aefb6959ce1517801246b1eccbeb612dde784352179007851ddb6b909fc
MD5 86ff456e5f5b3d3ecf997629ec826218
SHA1 fab92f3c7440aff060ecd9c2022b4e428312874b
SHA512 2fb90ea49884b57c51ccdf447489433f1efac7cbfeded3935e84ab288a8ebfde0215ac0452a2109d47f3a5509b384097f4ac74490f7ebc5ea91551dbd65e3ce9
TLSH
T11101447FB2D92470A5593655342C131594C99B03224154CA2FA221291D0B80F47602A5
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_selected.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WNCRY
Size 680B
SHA256 db118a1b27e1fc5a732e3e09c0a883258f3d4237f6af2b9d52441b1deef1d8d1
MD5 4f7ce749b1df3e286ab91f4e66e8ebd6
SHA1 35ead0330841883fb23f74a4e437984363ecaad2
SHA512 97cdeb52fb1ec9b3558c0e3047a704d7881227d1760816db2477356efe95242f66ef623a45dbbd84b9cf80ea4b0bf2b15dbd9fcdae5aa2162e9beaa442b32a61
TLSH
T1A701233278315C65873EE8AE7018E6E3A4179183AACADCC24F9EC8159516948352B07F
MD5 SHA1 SHA512 TLSH

Submit Download

chevron.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WNCRY
Size 584B
SHA256 9be6af828a75f25f7976c2e02524dabcbe3031cffcf12b7878c1a6912b8bd757
MD5 ac0e8b4a2ba1063d58246487b662a91e
SHA1 cdafb1c712367c23147cac26beb74c03aed1e1eb
SHA512 9bf6fb4aed27b10b678af321518c86d07271d01dd38b51862e7cf95a95805a933059042ffef272729ba839d117d9390b6fc241ff6c35b5bba51729007846e53c
TLSH
T19AF00C74C18177A3DA6A56F906940C83795E1FE51E1CC6D5509C4A1AC09C11EC53C2F2
MD5 SHA1 SHA512 TLSH

Submit Download

chevronUp.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WNCRY
Size 552B
SHA256 50318ae3c96c005115ef7e15173d70d43d5a59edbdcb1c6012073d297f61f861
MD5 8299ff50d4dbb4285d6bf890390276e2
SHA1 0e7812c03c40527512489c0401df606068398da8
SHA512 9989835464346e543683a34d2348ae01ff7126a190ee9fb5aabb7b7bf780b0672d49be4b98f117b542465d0002897edc39bc04a5590e1421ecd5626a83671ef2
TLSH
T177F0E18DFD009C47F9DF611468D02AD06143B7C993F4811F47D1A61305568C43A0E8D1
MD5 SHA1 SHA512 TLSH

Submit Download

cloud.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WNCRY
Size 1KB
SHA256 acb87f184b8abc3341ecaa22843349445d658dc0072531d54db965be075b04f4
MD5 1568c83b6370cbc39e0e6ce1ce5cfb41
SHA1 04a3eacd7bdd40b76ab6ba7317d3371f15bb2757
SHA512 bfcf8cc4a3bbf43df75991ae23c135bbd2b7e9aeae45604973243133abd62674079e729b9239ede4295fffd195fec841559de4a265b1b50f21cbd390c49214e0
TLSH
T1D0416E4515595713A9654C61F87A41FF3456163F63DE4E0C0379C6B424F0527800A6D7
MD5 SHA1 SHA512 TLSH

Submit Download

done_graphic.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WNCRY
Size 15KB
SHA256 c7cc7c6799195a63dbe2c012df789d55f357a9ed027fac7021f4b480c2cfae15
MD5 fa80bf888da20495ba735a2e7b11243a
SHA1 6adb1d03cbbff647836a3db1fc0193bac89348b1
SHA512 833088adb3b2b993c7ab72549824f489ea1e837f9b98e5628b5594f9165b0900103056510a01669072eef7b8c1eace80918001c89fab0d2f61c93996658d7299
SSDEEP 384:23+yPlJnuBxAtxrfOvM2/oj6s8idofw05d7GXDjVWW:23+yPfn/txrmvM2XidE7qThj
TLSH
T10B62CF8903C479A53C42E22A7E4AE129E539A857D4936F858F583712F263B06D7017A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

errorIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WNCRY
Size 1KB
SHA256 68bc27392634c1b793cea7437e5d0bc5d66cf13d567aba74c64d00b7af7eac98
MD5 95a4dab7f038e795a9e972a75bd56566
SHA1 502609684229f0d3c2281d2945953a60f46a81f9
SHA512 9f7ab2750f26abc0468fd2b1251d5713f37423c211e9923519f61ad3e78724eca5bf85e9862a7ff741e9304e956fe447cdab1ee4969ff7dbf1f3f71eb0775bc9
TLSH
T10511B69ECD4624119000F47A061F38B2AEDFC9D0BA50E7E58569B149BA61885505C302
MD5 SHA1 SHA512 TLSH

Submit Download

folderIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WNCRY
Size 1KB
SHA256 ac47b1c73f8d8c1019b3e3d46ae712345b5f7e999cf80795bfb1cf8e19508494
MD5 87d8a3c082dffb8a84b5c877bbd49e6d
SHA1 4c0d726809e141b6e9da0fc8245d9c044566b396
SHA512 84a20c41be91dd6e32709e47a15691e2d43b6c263970e076f47b428602b1da8f6bb2077f5852c25774a867cdf2a90327e5ad3546f0ce62251f3f2d9f699ad301
TLSH
T17A21F96939B8DC72A26DB0016DC4B61D440C6E8183EBD83ECACC926F28618438841CC5
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_desktop.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WNCRY
Size 2KB
SHA256 4c8617cd73a9652fb7f10418163e02c3a6643ee3e8c3d9dfb3a82cb7e69776ea
MD5 6e52f3ea4c278aab605db41983da99c5
SHA1 11e64f5399d5557929be858df6a0c0deea830cd3
SHA512 5e553fc5bb0efe3a9fc99c928d8e39cbee8d2e5374df2ba928a330809b73109877c178c21b519ae78b7444ef0052f44157fe411fda84c0224266e52e27472aea
TLSH
T1B6412B0A4632E47FE7821DFCCFC79387D5E95AD25DA1749E11C848A342A85BF07912CB
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_documents.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WNCRY
Size 10KB
SHA256 28536aeab97372ab1cc581e463247d56e5801e071d0178a952e156b259f2c436
MD5 bf32b0e2f0b09ed6ccc0b2f6e67e004e
SHA1 100b877adb40268276a28f1abc8a9ec07f7d8e1a
SHA512 7ac92d7f70ff48f34144f4c3b313e9f1b11022cbc436ea4a53d698d8f86d10386bc991db4410a246e1aa488e77962f5997882028afed896c75a430dff97c657a
SSDEEP 192:FTbuHaYatRI8sx8gYoh/9vSO2pWKdz76AHhIj6DadYmqB9WWdO6j:du61Y8gV1ZGz76ee6YqOWs6j
TLSH
T1D832AF70C246F756412AF70A82BC516A9BF2C42A2E86CDAB4129B513499F77813FED13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folder_image_pictures.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WNCRY
Size 7KB
SHA256 e989fa88d4584aead6ce6febf0728d2ff1a5982e7840ea0f5070f99231011348
MD5 136a27fc4f43096540ec18a48137f09c
SHA1 4d23e8642b48affccfc7edea46b561d2a79da29b
SHA512 030e2d9ff0c7032854b15b285e5810baf04f3e45482e8a54bf693cfa9f800454471f86c60df4af3c38ce7b8ad984a0cbe593a825732e43a14e582c96f476e82e
SSDEEP 192:5VtNeeQJyemjZ0Mg1gFKBShu4odHVBfzqL5PHqlazC:5R7QA3jZ01gFPhuhH32L+9
TLSH
T199E1AF8D598F8AD1C31EBE25CF4871873C5102F2E8307023BEBBEAC651D602D611258D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globeIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WNCRY
Size 2KB
SHA256 87ac1bf035c463af7f1e2b63acb8594bf3085d58eacbf89502b9fecb1709475f
MD5 11d3ccd2dcad399d97c6a1e9c0f64ffb
SHA1 c45029e0209ee4b3c8e6c1062cddbc0f212ba154
SHA512 486bc514b438fd2f2024a7fbe920ed04f4b9a8f7649f2de867a38b53dea1cd689817e5d48275c1be20f16dc964526497c841c59507b18e9fb15b82cd4915f7c4
TLSH
T15D514C841D160AEE421E086DA448C87D1C4AA7E7AA9507E4F209FF21574CCEC492EB42
MD5 SHA1 SHA512 TLSH

Submit Download

iceBucket.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WNCRY
Size 6KB
SHA256 21764851a4b09e574280860f44d5d4ee4e9f8f3f8299dd1cd41487172c0e760f
MD5 fb7048c5c496e1def70006ed88519acd
SHA1 fe6a60eea83665520bf83a8ab12fb4d90b46bd0f
SHA512 24ab708a2507b62e65c83ddbe630d180201f4401c907339cd542f583cee90d0f84129918bcc292e33d72fb326cdc0c7139736fdc6468321e2dc68742974a8701
SSDEEP 96:oJgegSedfZXqLdBwaqUsx3RyzNX7wj8NhBOj1VxD6GwsQ+HhNcHWZt5SjFRWOl2p:k1LMaXmqrN+bxdBgeQjFRWbACdNRs2Z
TLSH
T119D17E32CA549DCC4340617041E91C648EF2A46ECF0D56E2F00A5E5BAB9592FF4EB4BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infoIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WNCRY
Size 1KB
SHA256 71b0b88294fe353666f2c183514e9281d04810e1e97a7d942a5d301d17fa17e8
MD5 8f739a24871d4da106309c18072c61dc
SHA1 5d8484b5f69b4a4cd5c398ea4725faefcbdaba22
SHA512 966ffaaa2214e66795a1a32df9f7f9cd219bce760c621263594252f8a7e9d58449bf2ccb95ad90d6af2e2ed225a5db5a840a8f6550a1d3e17dac9e193b0afddc
TLSH
T17A21D70FE9B89D66C72808649DECECAC418305F52C880488002FDDE68D5C19C5877C5E
MD5 SHA1 SHA512 TLSH

Submit Download

kfm_folders_image.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WNCRY
Size 20KB
SHA256 ab5a12eb089f51ce4e3c688ea58ddb93be52ba691706765af38b951cf60643f3
MD5 71ffa9104ab91ea1f3d8fa54f01885a1
SHA1 c069bf33cb85001c632b38111a5f6cad60a0f7dd
SHA512 14a42051e556d06c9c689022ba6633b40ad2ed67c260ccf2a614e09522541c77bddeca857f367e3f4338acf3ce8209077c97254ada821ee2dc7e85f89ef0c059
SSDEEP 384:hhP00fa2fQaPvu5Hj2WV2NRGWPqEYR+mXmHmaXRUh1/Vsb/dj7PgBv:TrToavQ2NcaJRbW//mb/dj7PgBv
TLSH
T14192E14F94270E97252959D77A1F8B592092462F32646CA315F8902CDF32A3C50ECE7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loading.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WNCRY
Size 1000B
SHA256 5bd7813aaed1b1807c8a939d8258574ddda1fbfff2b26a55ac23d9cd2b015f97
MD5 ce8adbb865055e82654dc334b88c2e33
SHA1 3df8c6b22adc6a775c9a810727366e171277377f
SHA512 da55a8d7ef971f82aef6c81631265b74de13d296b963c8366195e614ba1105c32c0a81ac60b2c5a8c3b7eaed6538c84ec8f0f68069bcefb6a840fb23011662e7
TLSH
T1BC11CCAA19ED5DE2D4644CF7207959B4C1B1D276073D9C7611817513F404B2F61BFF82
MD5 SHA1 SHA512 TLSH

Submit Download

loading_spinner.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WNCRY
Size 712B
SHA256 68d2c16becb485091635579a5b39d862748ef400240553416c54186524ff02b2
MD5 66571d6545e6f52b8409c362af8ab059
SHA1 c11cb0bcf97b8d5d9d66864e13a3c068535f1cb5
SHA512 bc850ab5caaa6c9243a4637625d25c949252b1807115e2d0f796b5f971b042e8387e3911a9e4260edaa6d7e5b6906bf1e699471d9b2fea803e5ed3fc92367cf8
TLSH
T114014451AE1D9AC58C9743F5EEB996E974E74F825E2A085131F42527F820334E006D68
MD5 SHA1 SHA512 TLSH

Submit Download

onDemandFiles.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WNCRY
Size 7KB
SHA256 aa988ef2a0b76c5a1f7467dba075f7b3c7b6697ff0c7145f348f85f3eaba9b0d
MD5 cafd5b079cda624adca3bcef073e1173
SHA1 70f1e8b18c6d82e89fd6fbc90f8360ac1330ecc9
SHA512 701c6aee66fdf4a93e44fb10ed931de91d8ab2f26fb5a91451888f9dda29059ca73e03a47acf8dd55f2b93015d1a3bd6877c1ea4089b227ca174daa45b51e6e9
SSDEEP 192:x7TWkypvWhdtUJfvrZPYttwhEFB6zaM4u4GSyKRecK:lopuhwZZPLhEFoJt4PRecK
TLSH
T126F1AEDEAA98A76D18D9343FA928034411C763E1F79085091FEEB691AC1DD03A84DDEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandFilesDehydrate.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WNCRY
Size 9KB
SHA256 53aabb57ca645c5728e7c423d9e2494f8d95df2292043bae26767ac93a4b8b90
MD5 93059be2f0773b74301b4f45f8b4e110
SHA1 0d082150be0c33a57aacdb069b947d2f6cd8e1a1
SHA512 9091a04431e6903ce67d96a54e4b389b16213d3588a444b6a1c0edd80da76fe89bd0e949ed997f506b97797f6ffd692c79f3b14eb2cae183d69ec06a93ebe27e
SSDEEP 192:rWgZkvO9YWZgfmwtgVsZJ1MxTwGgw4LGRXxpK20p7bqjQ2v:rgWZgfm/V0nMx8BwSIhpK2ebqx
TLSH
T17822CF328DA01E9C6B280D798D1282F15E1617A8B2FEB3847DE1DCD7A784D9D19C8D86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandSelectiveSync.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WNCRY
Size 2KB
SHA256 c35c3f892eb01c7429fb43fcf5336dc53d8a3e497ee2f821d4f98e912c1fd0e8
MD5 f60c8b0440ac906e9c7ee4dcfa2a6183
SHA1 93ca034c6a0e3ae549adf6c7177ee9c233052403
SHA512 c91e7493ea7b36705548bf327d5f7d39620febb3b56a2bfbc69138c8c491d24b35d05c4d7749966f4f19da1131092a81b47e20cc15b616a13fa66c6755b7c3a1
TLSH
T1C0514D036BE89CCBB6E9CF2C985D4C907316B571B8D077909609D466A3F8405199FC35
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WNCRY
Size 1KB
SHA256 c2a53fe72fad3532c2d7af29e629bda76d04f94dd1b72db86be0702e9d12ec9d
MD5 3d43fdb7a4ffb0880b3e1235d542d4eb
SHA1 4b2ae900b4110a59d8312058f67febb8d3c953fb
SHA512 7df3e122a8b586176587ff52428cd2916e2086f8929406504c401b9a8ce7bc0566c9a65a8b8d8e5b64bbf1976dc078a0c593cbb52db01181529bd667f6195002
TLSH
T17421C5BAA0E34110CE44B0EC6E6217CECED72F4D80A2BD92C88063E0B1E534858641E8
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIconLarge.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WNCRY
Size 1KB
SHA256 a80b7a03ea1a019b53c10c4b12e8e1d03574849eb0bb2726416d1944f09aeedb
MD5 4fe9af28c709c2141a00d8258b35c0f9
SHA1 5255fec4563a553a3bf550b670fdd54fbb54fc9b
SHA512 58602d9ccc52fc82e119403630ed118c69943918ae87600c5c384ba82e2f5d5bda7b749d706f801fdbea6e62fa0a864399685ea163778967aa608031bd987580
TLSH
T12A210BC5232B77F1EB009D51AB79417FF5229761F8EE02D2F545787509232374438134
MD5 SHA1 SHA512 TLSH

Submit Download

partiallyFreezing.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WNCRY
Size 4KB
SHA256 8c8ea2cc17f8826a40b15c1c086e83a59f226fd1984ff175834bf6700b95611f
MD5 73e186f1ae8d7df3217d73e127f90698
SHA1 5ed216474af7b20bed7dd283e298fdd1777ca7c8
SHA512 f4df442b3cbab51ee32f3b93e2bb83c0875cff7904079e5fc636d071103812a24fdb4f03e57f62447290cf9da4030969d0618c83cf5aca34706f9bdfe188bb29
SSDEEP 96:oBK+TLmXmNghhFC475PecOeuTCES6OIo+NZ0x70KrLad+E2Z:EKyLmXSOFbnuTCES6FXZ0x7dr6+FZ
TLSH
T145A18D00B9B1E5454783130EA68069B937E02F2B967829D77C25FCCF00E5A9349B796C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

paused.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WNCRY
Size 600B
SHA256 7eedd9711b76e0d961c518c7146d9b5e425ec6ddd40e40758dd86e807d12bd29
MD5 f9cf9d61c8efba376321a50de9e2d9d0
SHA1 009954e93713091316dbe4991257440f3e3c5f8d
SHA512 57cc32983a55e369a0cbafc5edb25d372ca9723c330775c092df6f2e71847f6eb7db9d510258a308815f61ee772b3fb2d14b98f7a2918904bd4894c21a360afe
TLSH
T1E1F0E73740BC915FC954237534FD86CB637E08B95A5C8D657E115346381805678DB1FB
MD5 SHA1 SHA512 TLSH

Submit Download

premiumIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WNCRY
Size 664B
SHA256 cd1e8205c3bb46b010ca7242c3c04b397a73a9235989224e960df82055a056b5
MD5 d5122a52d16e5da93b4f9a47e17a8513
SHA1 4c50ba71060fa641516d6a5a3bc054b2cf3d9f93
SHA512 e75bfabf546b59cdbea38dab12efc5f4a297c9b9bd0d34fe1be7ee54705da6fc07eef262c643a99f5fd7b30f37eb882e833dea04a3e7a5d26ce1fd0b2ecfcc54
TLSH
T133018878F4E2D8D7B934113565D4E8408D24C853C64751C1A2700767619C142E01F70E
MD5 SHA1 SHA512 TLSH

Submit Download

recycleBin.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WNCRY
Size 3KB
SHA256 9535dd510310ba18d098544c9ed76013fa37334b8306fdf89b08f41431e4e3b6
MD5 639f95b83d2aaabf3f443e16e6a7d209
SHA1 aed9ee3ae9e38d2b49c07290964639c6544abadf
SHA512 5bad9e3a171dce7e459fe4634a61104b19607b6779910aafad1bdc62ab1bee7906f966887101d8bca9223e7588535c3e837372f9185a62a5d9dc3238125557b9
TLSH
T1B4719ED2321EF669468F006FAC64CB58E79694374CF73F288B0F64121A1E47200CC97B
MD5 SHA1 SHA512 TLSH

Submit Download

shield_icon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WNCRY
Size 1KB
SHA256 63695bc1dcbc8e5934f4578dfe22d45ef798972fa83e090e652b471c830301d4
MD5 a87f5798a0682bc9d17592110d8e3ac3
SHA1 2f0c0cde6ee3f3d979c164034615d851a6d9cb6e
SHA512 e2fc3388eae1a0cce8211168063ef239f23bc63cbc9a26aa513912f761296d411c478c61c911f4bcaeec456fc38a873e322911cc5416bb085a19b9c512e69b82
TLSH
T173313BD179AC0E6C4BD2E6DEFE6810D80B5B4B242765E00468AD0904B918C979F37007
MD5 SHA1 SHA512 TLSH

Submit Download

signIn.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WNCRY
Size 10KB
SHA256 14695ec7b2f36418440621254cac9f6b75efb0e33462861510d5732a41384d5d
MD5 fa9d728e2a32235025b58078ac397074
SHA1 2d01080713f7845c617e24317e7da32312b5f1dd
SHA512 8023af807cbc117219ad7187461f51c8bbe7493f09af3c6a6ddc85a6ea15b0f37d5d6f5e22b9206641c771e27d9ee500a361d37acbfae432134c397972339c99
SSDEEP 192:1NEs+qbMe8ijICk5XjxCM3Mfjb+eYmLept3vmZoJhFLSkDgwLv3lJSfTsbYNvRFH:/J3NUCkl0McLLYmLuJ+oJLSkDfLfmbs8
TLSH
T15B32C0C24E43987DFD238F5E399F659EABB6972047C5F21FA05150B5C092347C90B849
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stackedIceCubes.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WNCRY
Size 4KB
SHA256 61720b1a66a87570ae6203f21f19dcbd7339b58b6b22847399426afdc4cb8157
MD5 733b14fcaf4c88fa2d9bf18bec85dfa6
SHA1 2fe732fdc9a405b08218cd4a24b9f0b4da26b3ed
SHA512 e8bf307ee2da4302fdc76f1e281b70a3e1bd8f95858e5c5338eb9f2e3a9150cd2125d93ac24086665a84a924103aa65ee84e51bf8ddb9a8aad40b77467052cdd
SSDEEP 96:oLcNX9+KQAMye5niKOnskIyCTXnAXDbF4iEobp0tYbn6Lq47g:ScN9BQAMvC3Id+Sd7g
TLSH
T16EB1A0B46D97023E8271EBFDDC3115FF1E5603C0250F777E707419594845B4BA21AE28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

warning-symbol_grey.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WNCRY
Size 536B
SHA256 59571018c9564634b8c365bc6da2d194e2e3240dcb23cb24a916bfd3ebcbb590
MD5 103293bb03931ef7c1513c20638f04c3
SHA1 9c88f58711a3ac94b8a615fb058e7a021991a59d
SHA512 a81f614df9cddb2dbacca4e13ad8d917cb6e5ddcccaef8150dd515476508b314cf5831ca1f7ebdc2387023c43975596db827d1c28ce291a01c38f0193a6f0428
TLSH
T13DF0209C0320E3D7C42862F2A4535CC1CB6BC548E8BB7C18E0D778C901C00DE642A013
MD5 SHA1 SHA512 TLSH

Submit Download

waterGlass.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WNCRY
Size 2KB
SHA256 7898df23ca05ad26344a2323ccf407c7a31cdaea32e976a5d1d7eb6d5ee47ae8
MD5 8018fabb578f9722b49a73440a746d96
SHA1 e0f1ca562804eadee7f4a72d38985ae998d2c08e
SHA512 2bc1443ca7bc0d7863d80bdc4da646ff513c9f2d238ab88dd4fb7b65e6d0d00fe06993409d2ec6f580401192be74f0a9793ba56727ea9dcb7dce3416a8f4c925
TLSH
T178411AF1D64DBE98E2C992BCC9663E0024CDA0E9C00536773ED2CD99DF49917189ED54
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WNCRY
Size 936B
SHA256 c8ec9de7bfbb6363a13a8735cf87ed21fd55415a3521efa083131cfdf6f3d617
MD5 11269a3fbb6cd9372502188f2af4f4bc
SHA1 09f72b0889f8c2d9cb8f489a11b25bf74072603e
SHA512 dfe732b53c58ccf5eec16b74c7a4f34cd027efaa7a6b1689553df82285891e8ab8b0810a02c17d9e137279f40cc751029d1c065911dd76e912befb00aa3b200e
TLSH
T11611C402BE13BE3ADE201D7BCC4E23E1C9C210502C0BEF408C14BA53550C09F8F4AC98
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WNCRY
Size 1KB
SHA256 86dd9575f45a8d678d10b89079157faf0126a89fc49812c3f509971e691c3068
MD5 e9f82ed1a80d2373dbd0809c71c3f999
SHA1 f30f376939f275c8a4a9d2322f58e32d1af4ec45
SHA512 249fa95256312df4955a7c17d031f52b4dc0c130989a19ddb28f636c0cda2a03878363379be4acec5d11f43765e738ecf0f5d145a6952e4cee474ae4034103ad
TLSH
T14521F93EA0D0C2C2964F45F0AE23E164CB4FD19F07E084943AD102C4E8C12C75FD7054
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WNCRY
Size 1KB
SHA256 d78d68449c92f5d0922c29c00372208afb5905ac87b168e49ae67d6571cf88d7
MD5 0e62f467f6c2863e52e39466e3fdeb73
SHA1 391c055d84f5f18370243bfe5e1b33ac276d914a
SHA512 ab9fcb56118afa86e533defd43ae09f4b5956ea5423414b415f81b4b7d0b74d2f69af68e8c07f9e505435e5581af2ca87fcda766d5db4ea2f8c83f2719b3619e
TLSH
T15F21EA2DA56E4F0B421809F7E06E3985677B22C5C3B830CB54318DED6FE0925D87A07A
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WNCRY
Size 1KB
SHA256 a4acfc505e7f0f6cf1b4067bcc8b8b249deda7829f22f6ffbd90730a1aed9b0e
MD5 5872ab0e696043b59f00381592d6e045
SHA1 3efc6a7a3a70c6e6fc862773a925f91d08a9fa51
SHA512 1bd7b3c7217b38a8218b376eebe1635ce349f3eee31505dbe8f472f455edd178b911a63867a7de9f55fe86e36614cd32da0b8eda695e955522a88ca4f3765037
TLSH
T1C331F8029EB3528D8F68C73009DB4D3D9D1E0861B62CB624A589AC3FB915AAD68A8850
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WNCRY
Size 3KB
SHA256 e523093dba192840f6040d47d45b593ac828e923b851c70af37f1137d8dce674
MD5 f87a23f96755348de1204715ebd0a3b6
SHA1 5c6000699af67c3bfb8bd293c4df57df6ece5216
SHA512 028aa59193da343f25d72a8bab73f1691b3826e9c0fa7ba62c69e2561ac3af039398f691d5439ee8312264b0187d3db7c022905d9125f3bd0ec26381b0db7c70
TLSH
T1E8716D43A8DA5EF5A1D901CB0F161E662EB9CD938D782CD19CC8D1A48F37397A023CD8
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WNCRY
Size 952B
SHA256 f87a297fbe7bdfe818321c36f220b30f6c3595a634bbd16e9e5157e0b8ae6202
MD5 a859f6c751ca334b05aff1e906d62639
SHA1 15e6f910c90dacaaa8e21376d3246414a2eb54c5
SHA512 a7635d4aca28b55a7a986d065fe313c5b5dc5ed16ebef7e8da7ee35e54c93b48b24e7b36d1c802d7eb1184836e16da90cef97cae5fbd9da5c9dee8b36b3281ae
TLSH
T15B11C806362914E1BB4D4B6BD44650015D3ECF8C9DDE750A5A452D65FD22B0D742C3B4
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WNCRY
Size 1KB
SHA256 ceb3e0591fbc956996e67b0fc1bb0a48aebb4479d0ad03da404ef0004be8f27c
MD5 13b19e06d0a77be4175ab2d0c5efb1ce
SHA1 b9e4a938c1992ae0543426386dca8eb1135e8e5c
SHA512 37a85f01171aa62867ffbc7d7a80432c9e61a6ebaf8643413160c85eab90488fafa423656ed649534dc678491951fc7f323a55221d15dcdbf492f0ffad160816
TLSH
T184210A1124F0C2745F61F3F428EA53A88EED4719DB70F627E0D690AE48F1475F05D2A5
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WNCRY
Size 1KB
SHA256 3f5747c0866252e8c2fc06815ded123d17ac6824acec0db16ace24962ff59114
MD5 4cf86ad5fd69808a1665f3b6092b6778
SHA1 92686443fbf076db331af6852bc594a37b665719
SHA512 7daaa74a1e6ec84ac523bd1cf82ad288aff73ceadacfa4289888205c1875445fda0ed397e7f1b0adb087bc4998bca93f0f9b8558a20c51a870e7790f6650b420
TLSH
T1781186D046973678F5615D26C4925413209A635ACE92ACDBEA6404D83126EAABD380C3
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WNCRY
Size 1KB
SHA256 aa1efcc416f0f53695fee9cbc6c83e5d210bc5c02b2422a0d9c9728b8a00aef0
MD5 7b687df3868e9bb29251abe6b5f840d8
SHA1 1ba56e04556653c52dad77bffdde3f5e65c69675
SHA512 f3c3a820016fca54e339c90612bbb7a5a9b4081a806cedac6728ff8988c5ec31a7c67bcb9acba0de802f3bf903c8327c76e54877562b52d6e4d45db2e22d2c15
TLSH
T17431093D5784C82B6021E2210458DF9E42E4218FA508D7F272AAC1BFEDCEC1BDC8C262
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WNCRY
Size 3KB
SHA256 5f98414d178b95c8bdc47e31b2011ba1264a332d4d0b43ddc8b324b10240dbf9
MD5 2ab1ee7848e082f97f3bece0187a7431
SHA1 4fc7e2c24a6ed705692bd0d1a1c5e732c2918ada
SHA512 6c87cabcd20cab42acfc15270207d04353e3fe3a49e9dbfec2e99c5ccb13ab762cb3c2aec9f1a4aea6cdff4206f0c88d349de122e883d19108e698d653c0cdf5
TLSH
T1FC818DA21A8C80C17EFF9C3C59130A8DC02D90E59C9ACA885BC9CDE6363471BC183B83
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WNCRY
Size 936B
SHA256 89f50fac155cb28f63637522d49381d23bd7a8699b10a2eca8a4f2300e77502a
MD5 0d62ab80b4761485ff2224c768271840
SHA1 72462e4e35e3c6d164c81cc89efa28cb473ba8e9
SHA512 4f76ee2130d0b715f24dfbc751ee1bb28e00fcb0ae84ceb291e5dbd8206f103f6b13fc81cf588fd5121464ce08f053a15111cba96c04f5a3f4a6465ed62bc8a1
TLSH
T10711C8F8403485FB6A112B6F061D33B9035A5DB10805FF574EB19A4BCD1B6366516F62
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WNCRY
Size 1KB
SHA256 f86914b1f5f989c78e321caf0cc4623f3430c7edc6324e986d68e6e62e03ab2a
MD5 ef0d82e63f3ffe6a436175d0110d0f0f
SHA1 5e391ce3fe5a34b26c95d64ad8ef6b4cff69c1e8
SHA512 27f5fe8ca61800f601e53ca4c966a3951f2c0f925272538c625202ec176a3b9b3c7752212e399b5ce23bd77dfc34383c60a3ab24fcea0b075cc3913cacdd2c5f
TLSH
T13821C6EE4C8407B4B444BFAE9AB15D8B9092405C3A3D140879A9D67B648A308207A85D
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WNCRY
Size 1KB
SHA256 5da0020951075570f6b7fe24ef6c7e8166a80168d547cbeb07310d3719dfff39
MD5 da67f13522cc0bd3d88f744936b82d1f
SHA1 ef7e18f488fa5bbaf62db333c42625f36289e8e3
SHA512 b8dbd8a159c08480bd925681f20e11cedd459e075197257ede6ffcb053a96262521791aab487fcfc74bcba692b8a6742b91a965bb4a6cafbe488432eb6959863
TLSH
T1A221E72E76B00D48FE6897545E770B06E850A161A923854CECC803A337D51300AA72BA
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WNCRY
Size 1KB
SHA256 cc176ae75ee7a75580f992d46ea389ae8ed10a411c602354d590b4f1db93d438
MD5 146c7f3384b10314737d9fd99f0eb5e6
SHA1 adc5753f6c75ee791a33ee81601392ceaa8028fa
SHA512 4ad59a8d3dabbd3f6c277ed52c2921b9a66e740ff004c57f3dc53269c7f9762298a8b617c621d1e4996d41099ad0148f687c4844c020cde10f7a530c761c9d0b
TLSH
T19731F824C6814645AE8881475EA0452FFBC309B46BEC1F12D94577938A772591F26B46
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WNCRY
Size 3KB
SHA256 cf5bcbf88462f0dcd3f67bf243f04c9623cbb87afefb7394a0d6590433ea0fe8
MD5 89c4988feb5606e7b300af4087344018
SHA1 3515487d7fa4f4eb14b9b53b631eaa49a2319a9b
SHA512 0a093948b82cfd44f1cfd30a8d1110f27d5b3a1767820aba15a746be77763694be5a8c367d8e967fe78119dc093a178b3b084c6f3020fd5ef9c7e38b197f0186
TLSH
T120718EB096ECF453E91C82D174285BE83077E5DA3C8F690915A2ED4E9A015F768FC0A4
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
Size 696B
SHA256 70e01adb332262ef2bbbf1bfde28693849074642f4cf4a50cd7bfcd140aff774
MD5 de61e664301afc02321420eb0b13a568
SHA1 0302a74d4d6a2b0ed60e8a3bb717189939d2041f
SHA512 baaa94bcbf077d05e44e056035027cac03acc51fa3520b29a20e415847031a4eab6d29c5bbf98db900dc300b09e8ad5e1f22a22f7070be9ad73cb9042d511b73
TLSH
T17401448D4A2B13607CB00ADEAD2BA9B5BE314340178549A55A7E9E0F18D21508902E7E
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
Size 808B
SHA256 4e7c3fbefa49b37181a26c7467c7d7e59368fcd46d2437625341658096f305be
MD5 3e1b1fd1c84537b8967bb84b1bf0b70f
SHA1 72918b4b3b05c2e9663bbe066d35d0881f81bc83
SHA512 6f38169499934b8691a673439df2eeff69a516c1841452679ea5ada4a31db233479b2eaf2264b3fd20dfb7306e12e28cf8173e2fe7440fc51e241d4345ac42e5
TLSH
T19D01C5F0743347989EAD044E3EB456B0323A513DAF0BD56628C40277BAD441F204E33D
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
Size 872B
SHA256 feb5432513198bdf110b3e526384153987e3f7598d2405990aa470c726dd8c2d
MD5 b1af02f43d0f210c1da0b69412038245
SHA1 aa0b963e7aaa42dc8906da30057eee73c17a29e7
SHA512 325dbe41a9887a8ecb96e79e824192243d667f2752bef0b51dca1ac298480e07523e9c0e9df47e9d4f0ac6f4dee94f62984b90c4257c409a79153d8980ff935a
TLSH
T1711196A68E258AD0F37524EF6428974CC963073A60289631E88BF0C35F41396248A122
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
Size 1KB
SHA256 cee18dbb7a130e44898962d70d46cbf8b6bf7a396a01e1921238d28679132eb6
MD5 ed8ddc56ab90f8b4ea9117d5f0295ef7
SHA1 c45b5f3405c62c7733044631b23ac398915a3609
SHA512 eb0f92c02991d6947b317c345c1020dc6045edebb021f075ef69df3f2b2a65a225f9a26725cf27a30cd85c608a24f6a90c8ea25b1bdad73ac4eb18369953d833
TLSH
T1B7119652AE9C2675E92097320DF350260F349D9D827B4110F474D5D3217577A47A5521
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
Size 1KB
SHA256 e2a9700cb760bd8fd6321eccaf3e857f40c6c2dfbb59b45305a2f5d6b1d17416
MD5 301f23bfa731a5d6d23c3c7f73349d8a
SHA1 1cc60b40a3526769c85a9d146ef1b585a49a199b
SHA512 fc0f9a3e30609bce565a5c3e4165e41bb5f93291b501cf8cb71a59cb9eea30bff65c5f1ff7688ea8bcc0d1f441fc99121108a681cb48234a1b412d48378ba73b
TLSH
T112414E6F78C67D0C9655A5AF93F74AE87EF4982F1784C153409CF6F025B1A5C80324D1
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
Size 696B
SHA256 75ffada651517d540fbcdebe8b3c82eada4ec8bc0cb91bef6e6b81a10f3f8034
MD5 5ec3c8e9a2829d5cb8905d9555014ea3
SHA1 d4d90a4063f25f2f0b0ed54d92c01207c97508f2
SHA512 f977b1ba04cc4a2a10d6294c86598a4f64865e3c575d5cbd4d2b3a757caf0b35d46cd5e72a0fdecb10c2551c47f9785a2a44ec936d55d833b7c1e5b655f6bb18
TLSH
T1C20194054DD493D6350030B33FFBCA994E42B217E5B6AF1C6353202206600C84466075
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
Size 824B
SHA256 7d076bb519c19b5ad141eb55c7a8399b3dcc5dc4e0e8442de7b25e0b6f9c81ea
MD5 394ae879d15fb2445dbc93675874ef1c
SHA1 fdab31289b58d5b2a2dc6ef4f6f64be53ef9923a
SHA512 d5506f47a209c8dc1c28946c97981fc8603cd1d02e27fe7d0a05e1e646ca2cdff3e4d8b418eaf088ac239e4946486c5f60414e2404359c905bab44bb7e3e064c
TLSH
T11201D6C09E83AA68BD0610CC556024A1ED82B4874390B7C92D82BCEF1747317A4AF247
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
Size 888B
SHA256 76691decade57c450c5960d2765b54e8fe880ac4b838eb2d595de72a0a7ef27e
MD5 adf1188208a8ed9c973f67ca2b2258b5
SHA1 43b424fa22a107e2423512b4a754b77eea5dfbf3
SHA512 4246b448cefc4a44332848defbf76b1b07e0faf1c157ef3378d3278e533dd04f860178ca6b24facdd0139589bc886a3a3874b72f45c47372a4343be2c7fa33fb
TLSH
T17711671721549942ECBDA150255FFB08A8AD4299D5006D37D872DD034E519E79953642
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
Size 1KB
SHA256 3b314cb7fef9826da81e08eeed6df0c9bedf5a896593a81b0cae3cf5c6d55deb
MD5 ed42e064d72834418ca0e3759c4793cb
SHA1 a99ccbf9b9486a7819dd5b1e7c31d4b1ecdd0dac
SHA512 49df78c5c10d54e3a9182d026427bfe09168047c367268a593594af75510a018438c591b23860b8cf8e5c86bb1ccac254cd81d8270150a861e7e9ff58ea3d056
TLSH
T19511E9B73DF0099180DA07D774DCD5059DE6B2C1684F0CB2CB5174581790B53AA5D8E8
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
Size 2KB
SHA256 83518fa8d426744b4eb1d36825b723a6fe31c9b534870551dc2a4158a4f1879a
MD5 2eacdbb0c6ebaa622f4d9e704734fd09
SHA1 b8deac0a6724b389c8037cd3c46902a1100da69e
SHA512 22fc75f3de593baf8f53d1ddaa3fcd448592c132a3590477d16ae852048fde2fbe71771bd99f52ecd941168a31586991fc2d8906796665f7c6a95bdb09e95f68
TLSH
T18D414C812889E3F9E46FFCB3A829CA0560F3811447F42934B7AFA4C10FC0D258194D6C
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WNCRY
Size 696B
SHA256 6b8b6ee784e5f0eb8ae94ce4ae6645f22f77c58cba83355230ae45d4e0c27d86
MD5 a33ded817a3feab7693b007cb5e10ccd
SHA1 7f33090eabe89fae4f986a59626fcf10fbb2bedb
SHA512 d64b807227c72aac6bbcdd80fcbad8cb6b212791d3e28cfbd7c73277009ae1afdbc308e492e44c95c73bfd686e2767bd3f93b8408e3bbc634642aa26547b2c60
TLSH
T150018851411FC64AD76086654AFD337EE317787DC07C048DD985720CBDA198FC15AD69
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WNCRY
Size 808B
SHA256 23f0bf206d33da1fbf5e9af5507d95c0df49276640db89e318f058eade1aa72f
MD5 b595783e1235f2be880fa3e4330a1229
SHA1 e052256d18aa541447284616648b5bb090de517e
SHA512 7b39441e94afe1a991ea2d46388c4acb423ab336fc40c29e6b38d33d646593eb4105f240100b6eaf2017b35ff1d6cc2bdb93581a95fdd321deb8bdc1b127fa33
TLSH
T153018614AC130A0CE8A076AE3F2B2C604B00E194D2EF2E2577B5F48A49410076F002F8
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WNCRY
Size 872B
SHA256 7e5be181f4b6e9f18e486b5102ac144d8f67ac9b5b4889868f228e7bf029875a
MD5 1ff40e1959186ecc0d79678163319f05
SHA1 84faa1f128cbbb739cd5cce505246a4fb4ae5588
SHA512 28c30f9fe6961b584f7fe9d51c7e86a52c193e264207e99a241250775a76570f7341ce3042ba23b42a0b7178b6ac46cadb1a1461a11d9668dabd77a1e1e16ee9
TLSH
T1EB11961B8FA1CDCC55CBB3F03941CE723EA3F622B41014E036927070A8949D35997961
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WNCRY
Size 1KB
SHA256 5eb35f98b73319fa776d6eb9d21b70c6eb33bf5571f58f92c10095a5ec70d15a
MD5 4c928f87e1e95f9c3759f764d411ccbf
SHA1 4eb490b4236574ac63bee838cb7b4a98d9781424
SHA512 c4ba3643ddcd258fe5340a9923d5997375e1a35aafe5bf822a08b54221d85d2700cd330f5aec362131dcb31b79f82297577913f197dde689cf06ed8e4e43f475
TLSH
T14A11932480BAFF081323B12D1990232CB099F38417B46A58F0BB165C126FB17FC5AB96
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WNCRY
Size 1KB
SHA256 4e0acb1e17a5efb75df7a1dcd591348fc434170934a13a5570546c0a7bdb7d98
MD5 a6a421b2753141684cbaf89fea1066ba
SHA1 692be9ae720d4a66ae033ed6ec98c4fee2b01eaa
SHA512 a79b9edf5310684547a4e4cb5529f916a82c2dfbe1376105331b9d2febcd93e7b1023b9722f021bd18f57fb0a51cc8a6dee34eb88b6098a5dd6fee27160b6f46
TLSH
T188414CC91C0260E0AF3A9A4E3C8CAB8A1E42C0BF90C7C53BF5679105DD1230DE6B24D2
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.1.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WNCRY
Size 16KB
SHA256 d4f256a5b4be6fdf773234a4998331de49520abe59a74310d57e0bd1e1e6fca2
MD5 7e14699545c2254b9303c7c56249ad5f
SHA1 24b7a2b023c206435f4962e5da27f66f4c4b4dd8
SHA512 1ce6be5443c262259dce459d4a351049fa342ed7cbe0f395cd6545409b315088743e0990b009d72fa45936c383ca9cec8cd0de18ae035e382b51c23d0d8c7fd5
SSDEEP 384:Z34TepUBGdVSA0PjOI7Bqd8bn4i48xHj4YHU:LOIdYA0aWBqd8Mi4EpHU
TLSH
T1C472C09447A04A2FBD7832FC7D11B567904B2BDCAE44FA10309E9D8C51C9F3A8BE6166
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cversions.3.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WNCRY
Size 16KB
SHA256 a11227f912e5ecc05d860a79a88de330404fda7fd4b41143071b62b9503e356f
MD5 93805c53371b3648f18e33ef33516399
SHA1 09e803f2bec98a73dd64b417427f1a3ae57b4a25
SHA512 55338de9aa48fce5b37ffdbd6f9d672b03473b2c54d70b2992f42563f0729274498942bd916c93912d2f48133a6f65a6ab60c0ed4b58a5ec31b7642dc25a351e
SSDEEP 384:JDkK/jfFrksuqA+BcBp81g2BLtyE5DYyMltQ:J/5osuqjBcBpNK4g
TLSH
T1C372C03E38FE0447563AA1C1B2952865A951DC21CBB52E39FE243F24BDBB10C90A2477
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
Size 423KB
SHA256 d0c5918c28555c03990aba9a760baed17e009d87d8847822cddec3c8f64fe21b
MD5 b6a1cf70c0a6d9250a9d0ff8f19b8941
SHA1 9899a5e3eb8ed8ee61610117164c18eb88a7a9ac
SHA512 2add34df4c11a63a67f435789a72506bd8c9c01cc2007d95053c3bf19f130b3ea50b1a09bccfdbe1ac09147d18db376ad6703abcd3ea39095b0a845530a99f35
SSDEEP 12288:wmNjcn00q/hmoZFSx8jFBRIOoz3BxUFNL:n4Fq/hmgFNRuvu
TLSH
T17C94230AA591FCA799FB5B3F2A107081323B842AF56E51FE3B8377D27CA6D0655E1C01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001a.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001a.db.WNCRY
Size 90KB
SHA256 c051d827e5906ccb0ee071e143161fb7f23dbc1f56166b91c612922ac7a70580
MD5 0a355f7ae7992b8689481dd0e119095c
SHA1 949f359c2d46b343e2bfe237c013491a031b4de0
SHA512 367185321a87c4785900e550fd7d440c3eb5f09907eef3e36888763edec2d1039a1335aacf06388e8703e3e8197fa3c49672d9ea8b12a60354626a6d1b8b32eb
SSDEEP 1536:casZLb1ayF09GBuqzsnANkf1F6iDGTAUyjXNlEPyNBNGLFdr7mWdcwp85ctKoqmG:wLbUyFFBQnCkNF6OyajDT+FdrCa/85YG
TLSH
T1B493125CC39C6FCE0748284792D39A9CA0850A9499E5D1C3B084C5B87FE5B952FEF1DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db.WNCRY
Size 64KB
SHA256 6fcade328a629cff149cfe21a1a72600e5638e0f5f8f9bdcbe44a2cd08c5bea4
MD5 7935727643211be642ce229ef67a17d7
SHA1 eb01605fd1142d24c1a7656b3113fb95efbd1541
SHA512 9419e97ba9ead6f401737058746a115e24819ee043b26d90427f267349e17dddfaa1f474db076b99de489489caba6436f4ad750641137a1671d62ee71b424f15
SSDEEP 1536:DuuJYoWoa47EIaKffvGx+oS5GTMs0w/XQdJgZHYaahvRlbP4yOOjH:DrJnWoaBIaKPU+PMgs0sQJgZIFjbNH
TLSH
T17D5302764F5C2CFAFA091041EC84C6D847E79B78FD6C8D50C55835A3EE1E2AA650A0BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1280.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WNCRY
Size 312B
SHA256 99d8b47b6cac6f75cdddabaa764620b438b81dc9db52f86af99511fffe7d3e3c
MD5 806577f4d79505598fb4e7a2bbeb94a7
SHA1 9504e49623e5711847320709b1d63291d9fb99d5
SHA512 6a40d5a8826eb6c2c418f2be225a3b5a20f699e693b86645861d31ad02c6aad5d217daad53f6b8abed8803c5735cd408f93268aea0e826076dfb2c8a5f9be14a
TLSH
T105E0E771CF5E4E03C414817539B552AC1DE793C840D7C44034C886053A0D377875C496
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_16.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WNCRY
Size 1.0MB
SHA256 daf98efac01cc256a579def8054e7caf7fb17e50e19e5cbd831b69d638b17226
MD5 3f3ca0e829280099641cd7bf14e92bea
SHA1 6ab96e331685d4b6288bb9a52b63f584d17eafb1
SHA512 7fc7c7283526e1aeb88a3ee772e5fc70449f76b4fed4d77ae8f0b3402b1802544d856c51d8f29210e9f93adbb191d631067146c7d9ba80dc1d709756591f3b28
SSDEEP 24576:8+18yWxWDrq1CaGEmyY/NP3L8yP7Q8xNZyUpZ5yRL:8+6zsD21CTEjY/NvQyjQ8/bpCL
TLSH
T1A62533CC2FEFA37499629E06B778350FC12D698F14CA370B20E5EDDA9871309DE5A146
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1920.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WNCRY
Size 312B
SHA256 b59578095829124b3a0e4bac6c33d3fae071e9c4d125a7f993da816716f4bf97
MD5 636cb2115c2133535dcf3f44f2172929
SHA1 45763f8880ea8bae4a122c14ad51e90409f2f981
SHA512 278edf9e0e8498eae708842d27b3fb03f4b671479cfb63d8a872a3b44f041136e4de67d61e0a99d76c83bb4d7b74ed72a3c0720fddc83782d4b58ad0c7489ff8
TLSH
T1BFE07DF94C5B8003E449DFB5914C850CE8C042D87D7D1542B1F6642833A27556219906
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_256.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WNCRY
Size 1.0MB
SHA256 1490cd9ee57de49fbddff01f6be5b5c525d3e9e49e7401832f66f01e18c4182f
MD5 bffc55fcb15a5e63dbe0050c83c61224
SHA1 cce55bbacdf06b6826daf18420aad2a0223a6942
SHA512 a54380efb6a71bdc27de1ce58ee1c74c9c975edfd6bd732a6959a554b886493f24b5229eecf626bc987d65f0e8d5ffdda8c757be1573ee8f662b01871dc46bf4
SSDEEP 24576:9/MYkFfHi8Lr+ka02lrXc0aWDvv/6AaKT:WNPLLylrMHOvviAL
TLSH
T1702533DE07936DA482100601F2A31377E7B5ECAD1D819EA14CDAC45C4C63E79F2FA1AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_2560.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WNCRY
Size 312B
SHA256 5b2eb25a4bbd51c2157cbd5a08cdfcd827b04a655d8f1703744b7dba118bb168
MD5 44ab7fae715c23df78b1066acde60fe1
SHA1 e449f4d16f56e2c23a03f9b572f1fce04c03d832
SHA512 769cd2c2989408436d7a7e29f79432b48258a472cf23a87aec9a73813536b052a1ff5abcb03dfba34aebddd8dbcfd5b29c00301f51ea0ab9433848ceeded5fb4
TLSH
T1E1E07D145A20CE48B26E276860429609421BAFAADC5327A991993E092699F066C4D11C
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_32.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WNCRY
Size 1.0MB
SHA256 6ea3d3c3b98bb9d8fc5f552824522b50ba02311db24cadbb371b981685309972
MD5 8130e38e9fbf0ec6f4df02a969087f5c
SHA1 22a997b0394511cc907272830dea4787d9ad2a2a
SHA512 00a2786e66655a80769b780fa85788c18468c292f33452980bc3c155fbbbb7e29189f366de12421a89a4a0a7cee5fb3e59d9ee04f4f324be1275db237684775f
SSDEEP 24576:f6xfhZfbhc1FHi/wEoCBGE2GcIpx1jYEtixe5ypc:GJVy5EoCbcONtE4Oc
TLSH
T11A2533304FD125C500710B4BE979A80A7E25AF6C0BF27636C72BA95D35B31867935FB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_48.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WNCRY
Size 2.0MB
SHA256 584115711d7400555d30b7a571aa159ec95792a79dab3d0f5907efd70175a36f
MD5 aabcf030262fb726000ca935e1052bdd
SHA1 794720ed6b9fcd2c2d3fb7e8391f2cad45d11ed4
SHA512 f33ea712f2c4de8450a17de121b1547efd7439fc4ab39ce3ed281b169f7cd352fbd7a7be0ce0f8e3deaa2f9b75533247b6608da84eb4ab16dbfe39602c2d7043
SSDEEP 24576:b/nHaDj0MrlkI/pOtOU8Ea8vmRnyKaehWPdFa6K7OsqVvXGCIJMxA1NbbMFgF/LM:b/nHaf06kgopt0GhPXKqJ5IoFkTNMXn
TLSH
T170A533BCD6B57C4ED656053AC581251243A87FF48B505A1002FF92B26CE0BEB7BD3A63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_768.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WNCRY
Size 312B
SHA256 d28bce13b03ee2c21aef0b42b6df7c4b550c385f170982cac88c8db9d2cd409f
MD5 fd3fdb9d1d240929175e587a9f29f3f2
SHA1 fe6885b28dfa7003d762bff3f6a2b7eb6a21aca2
SHA512 649db0253d5d3da4c1c53f30eae5c8a8c0a8af7140b8db1e225de381884dee1d237cbf51947c4098a6385c73aba16e4df8a3ef1dbe8ceaeafb61492c52b07c20
TLSH
T194E0E747A64D9956C20407F930C2358482590E7FCD552D470DBE4C4B6C7E3C758DC763
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_96.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WNCRY
Size 312B
SHA256 52def4a08234398d9667a98453d3231c0ee03e34238d7e23268f67877bec5fa4
MD5 743851fd3b7ae197adfd93e028d110cd
SHA1 3debb8eea7dc4aad68d3295f27d7ed8e4a4ce491
SHA512 ec811c14c65ebae2f3f886560dc6085768ff6e7c309c903772a6c9f5288d722f7c42491c2ba5d7721052daf7b46bdc906dffc8c2f287101093829739bd1e8462
TLSH
T1EAE07DD1BA4878C4AA0C113C60B5820091186D540D9A125051145794C86D9099A9F00F
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_custom_stream.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WNCRY
Size 312B
SHA256 5baffb7b85cc2fee2daefbe77e5c12ad9dbc561a29917ce69a47bbb16810606a
MD5 bae97a78d1dfc45f0be703930ff7accd
SHA1 474d64ee6eb6fae0ea34c83609450bd4823cc850
SHA512 57a806c5ec6a474c63db6b6a4ed35d3d7d9af7d676d9faa4d3ceb05a29fa39ead1da6fdc517bf5a58fc2ea745bbecb545a0c8c8c7c65bfcbf47a29b370290273
TLSH
T16BE07D94D188CCC1C3258EF61855C47210213EF4CF5925003048F2ABBD1152B420737D
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_exif.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WNCRY
Size 312B
SHA256 c89dfba54459e011c35362b20d31f227ef3f5e5fae47f896ce0f2f64431207dc
MD5 801537b4a55f9b38d4dfafbc9b24fe66
SHA1 9f455fb00efcf3805824dfa0921b3eac7b87dad7
SHA512 d788c7eaac3a329ee66ea28c696abec3bf57c5e0dd9336d2b75c02175876055fd2c2b87bb63f93919c12a192b62ef586862fc40676f3b536fcadda876606408d
TLSH
T1DAE07D1AD95B1945DB84C634D66839A721012569AC08256AF96914A60F170B3384CC05
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_idx.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WNCRY
Size 28KB
SHA256 cc2f2b6e714a27e7be8a451ba28e4b9043b5beacf9d8364377c39d9da4759d26
MD5 8d25fa08f4a9f44ab32ae93d83cb52ef
SHA1 f778be574826ec65831a1d2473ea94a26b095fe7
SHA512 73ce1adbb919bed9520ce1b36fd3a5752ec3e4728b567fe46d69cf33c9ecd25670e13d061bb8ad3a6644a8cd8bd53d9348b672714f7c75b92d05716094c65625
SSDEEP 768:EFPg/uOPXwdLPbP7WHOLCYVR7GPgzcX1yf:K4/MrbP7mOLCY3+m
TLSH
T19FD2E01DCB472DC384531CB85209F2A0C596FF891EC45D238A05550E6FE2BA2DBF36AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_sr.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WNCRY
Size 312B
SHA256 8f8a69d3c76d7630749f460d7afa78edd02f0f4402ee15d82ad476e5cfca739e
MD5 b19a5d33f4ea6baaabedcaa9133781a7
SHA1 970896f068c89e3af57f2ce3747dac10d46b878e
SHA512 75aa362158b8307fca616123be1655766fea42a6ad74175b49fb8f670946845a31c0847773a8871ea69304c87a98beae5227d9d19267c055fdd4592f1f1d21ae
TLSH
T17EE07D080D659D02EB90B17D9633449DB80063D34D1D719D858F490B2095365522AB90
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WNCRY
Size 312B
SHA256 2c1ca5ce5875fb69aa1268d90c510bfbdbcd02cc95b3c4be63a7ddf9beb4c90d
MD5 72d89608058db29adc818708e1bcf1f8
SHA1 1332f6cb2f05102961c40887e775f0bd00c5318c
SHA512 546865d3c1299e590b318c7841d353002f45ac8e52fd1ef705ba1c8ad8ded81290c83002ce01c9973f54a5680b48a7c5fc51eeb1bbef1a45cc34eb1fe03b28dd
TLSH
T106E07D40FFA90884C86CC435D8C396B595E9970A54B38979E0C4623164866B9B40D10A
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide_alternate.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WNCRY
Size 312B
SHA256 b73abb118668557f3b8a6c2506f27984c3f81418f88997b36b8bd69051cc7eb9
MD5 398bf4ec2c2c14faf2849eb612a73882
SHA1 bd0f3a26bfdd9bc47834ab3b196068fe0973c8f5
SHA512 0925ebe596a14474b383a8a2f707e6e4cb0c22e2a0ee708a5fadbeeacf5dd34823f9a50918c42c19512ead42d207e2870b41f8bc7282734f7ef6849214a2eddc
TLSH
T10FE07D1ECA17233BC82A063D74E865568A36CB5A4895115C5F3702891D40B39866188D
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1280.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WNCRY
Size 312B
SHA256 fd3a050ddf6f4dbc9ef9091d72c4843777effbb470d11ca1c1eec43c519dd15d
MD5 b1c31399f4aea985da7d48a807488455
SHA1 a57fc5585edfb466ca6db8cc14d337279446cff7
SHA512 be0d7be43d7562e372e4cf5be0cdc2c3819cb6db19539568c6e4ec7af6fb6784562b312ad2bbdcb859e71c86eafecfdd0c7dde59cbee3e907cb25dca2ef65def
TLSH
T1B0E07DB4196D0A13D0056B79BE70CED52391C7E241B301E1C31083E5F6C6A47BFEA289
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_16.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WNCRY
Size 312B
SHA256 28557a96bfcf370c8fc648e33b88ac5e483cc6259287c114ceb6a6d4e2399719
MD5 5bf865933fecb889c9b51c152425e84e
SHA1 c9307987aa6d92147e22961cd7f34e6873d12a3d
SHA512 9588fcd0aa57f0c3cb2977e8a1c2655fc3667e0c26799ab0fcc6dfbf7dac911b3ec160fcd83b7fc93ceb6659b9ecce29caffe3683b96fe0d3c8a82d1a39e51ff
TLSH
T1D4E07D083CA519CDCC9A41E581DA059035D985F40B558F1417D6DC3605C64C4A728E82
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1920.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WNCRY
Size 312B
SHA256 93b3eae77adc0bcf7c0d71dbeb95ef222e0c7b7f860d71b12fcf6aca6432579c
MD5 059eb59b4afbde7ec4650bad25d17357
SHA1 128c52af14b25e2c0137e002b34e13c8c9339e0f
SHA512 99ee53bc143ddf2b4c4121c82453104e2d8e386a6e905d2f041d70fd89e855c62e503c3ae5ddd8dfbf63aae500b2dbf030d9f4ded863727e035e252729cd09ba
TLSH
T15FE07221BE048E20E18003384808CDA62957BA808A546A14A6E94B1C9CCBAF80D88AB0
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_256.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WNCRY
Size 1.0MB
SHA256 818a81086fbe2e1e624591d5138abbb4785394d3fe5c2f004dd2c071e3c7e7d1
MD5 5f1322ba6eda85d638c8e1cb0bbe3c86
SHA1 29a02b5297a8b536504521cd550ba460a7c49605
SHA512 47bb609a2723925354bb55c2ede93c4be915464f07e8122532971c21424b954e4d87dcf4f2caa5aeb2d80eb5fcacf7188073b433d30d5cae73a509a193099b04
SSDEEP 24576:Ma746mTjP2/Ng0HXsrDKLb6pzU7NSeOcFDH0fK3gHi77ic:MD6y0yUsXKL+SYeOJHi7H
TLSH
T17325337D5D580422E8B1B4D23E4E263E09D7A1A1437F17ABE2D831D68B01DEEF2494E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_2560.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WNCRY
Size 312B
SHA256 6c3dc5df57ed137d67aae13c264e668f7cfdbce3e96a15fd52f785540efbaa25
MD5 0b61f201c2d47680681fcad7cc5e8d94
SHA1 b4d0c92d4c28f91c1964259b5c87a1c78c81efc3
SHA512 84cfc0336f73f18c4497ef4134073b5c6ce5c0e171b37a9aec8d88cf8e5392cfec6a9e97f0ba1caad325ba3e428f5745d2cfafe9f84b253486bd6ebe9bb2f5b3
TLSH
T1A7E07D50454A0E44CC589F7225E9D1C2EF959740CD7D19CDC54847CCE3172F144CC607
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_32.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WNCRY
Size 1.0MB
SHA256 8041f21c829ed1e647df59d1e503426d0ca3aab3f9094fbcc8c77691ef010cf2
MD5 84b090f59e3658292ad0a3425b2e6543
SHA1 ce781381f76bbb732fba9952687c70cc13916b46
SHA512 227a9a096ac1599c9b0033f70c458850aaba606fb54de479bd395bc2f46268e3ccd8072cab2f91f60f01a0c0ee1cbc6d0b3a0a5035c44558cd1eeadf39201a9c
SSDEEP 24576:HHbVvWJQlami/PLMriK07cSItx4lb1qZEwGkrF:hvNanjiy7+x4lbWEwlrF
TLSH
T16D2523E7D3E82B74462F30A44C79ACD42D81A0CD4BC114F31A38895D25A59E9EB7A3DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_48.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WNCRY
Size 312B
SHA256 88c36cab804f798f258d36d3c45465ecb77e2e3cd26175d120ab67f4fdff49fa
MD5 c9ed5979267360b93d7c72f3500cae04
SHA1 df6db3a2dc074eb0bf22a0ab68c26b41bc84f268
SHA512 d9fecea1e0c1f67679553c483467922cc7b83ae2e42d4d39a0fb3a896ab8d7a2c221e703b839daa1328b5bc9f39b393bc6ca6eeeeb83466b143691c99c81b5de
TLSH
T1F3E07D486C1B6306DA5102FC2510A05A7A7105983DAE389640A9DD8BC78AA5452A7F14
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_768.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WNCRY
Size 312B
SHA256 b33af36e9898a851f8316bb092d71d31d7f134c2909b41ea0529eb049efd2204
MD5 15a35b5aac956de4c66b4088f1a62668
SHA1 0dde1e017849b82e968e30541c117ed4541b069b
SHA512 e3f6081762849a970670a82a4a147850aec8055a6836585361df00b9d2e050717078d12b70c99820dc5fdbc3104668eefcb2dbd42f9917697af5fd723a3de2b4
TLSH
T181E026084A05EEE9F65C17B2D68CF16988422F4C1DAC228AC063885AD65E15A301E230
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_96.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WNCRY
Size 312B
SHA256 d5a1c2c8b90b697f0c267922b9f36256082fe85d7fc34b7a0778d2222d19e4bc
MD5 73e710ab78ab8ccaaad0bad2ad418b93
SHA1 0babdd8d7a47f728b13676773a33c97bc0c3f20b
SHA512 e634a39c32a101158c82b65c2a0fa176862cd9bed898a9206ac3cae69b6f7d80486bb6382fc2520d3d356c887e21a109c71ea344972f54ded67c637d7d0c6f29
TLSH
T13EE0E71FFE970D49C364597264F5F0C9EE3386A7B91414681F11E4F850ED5056CE1C47
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_custom_stream.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WNCRY
Size 312B
SHA256 93f2c5f9e27d36a9c9a93fc7d9f72bedde88edaa3fe539c3f18961358431d908
MD5 4385fb5f3684dd23c18146c4a445ce4f
SHA1 467348c337c822a7bbf61b43dd6034de4dd606d8
SHA512 3587fea52eaa66a44f5905a4aa31f8445c86832575b7bacd0666328a06d09dfe576f92b13b6e0908e55a82cb24907ccf589409d98f1bdd653f9f95326d884745
TLSH
T10FE0E7753D895744D4017D21502D4370CB52E71C44045757B31C90C340EF1FF1E5C20B
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_exif.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WNCRY
Size 312B
SHA256 dad980a6bd6ed95922eef5210c5d6bc8ca621d98877457ba490e79268039c6dc
MD5 80324fe5c18167e0fa7569bb95656455
SHA1 7eabad57c0b0faab41f400e8ceea306f13e84d97
SHA512 b58c785834963788f2a039214156360f2158cba23508c11b27bde044cfda5bb86a0397ea646583641d3c48e839533d4754351e8ca0c1d7c55205b40717106eb2
TLSH
T176E07D58A808BEBAC21C7EFC147D99790B9F03BC187897B59E805045235D227518ED80
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_idx.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WNCRY
Size 7KB
SHA256 0eadb5c100edc8ca8a378b950c480b9f7165f60206e83ca54ad5081831580991
MD5 1fb1bcad496b9de7b8ec031109996def
SHA1 51c628eacc7fe1b6aeecec1ba9f80844dad0a1a6
SHA512 cb9e454d2280af0b7c70f516fcf40f0d2366364f0e4715406571413b22fb51e698bcabcdf0d51e22324014631fa483f77f12402f0a227ae6e674aed8eeadaf8c
SSDEEP 192:1sCgXsYStPeFHlzt1fxO8zMt9hOrgTQf8Na9J7M:GCgcYStP+tTCtHQfi6M
TLSH
T1DAF19F9345A54C61C60D93484C8662BCA380E9E77AD05EAD14E4D4BA47DA1E3A9146F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_sr.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WNCRY
Size 312B
SHA256 a6d454acf158a66e64b8e8d786857f07746d2d6002e4121ec88928a5925a411e
MD5 8080718abb2daaccb1feee35e9668908
SHA1 5ed8fe73819b47dc5841a623f9e51ffbbd6b4276
SHA512 d0ce5bda0c2d2fac4224797e358d0f0638577f5fadb7325607802b4c312f91422dd65364b895110012ee92be8d743dc423f93adfdb9e68f66bd24259bc7c47a3
TLSH
T1CEE0E7CE0C2B8F14F40D097590A09550CA3B0EAF6049F141B4C49A77C2700B8A45C3F5
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WNCRY
Size 312B
SHA256 9c6fb018d43186e476d99dad00fbe8f3a3f325376fc601e7583eb5b9179f6f99
MD5 e879563ce8dba5c6fb2700f29fd1d01d
SHA1 f7d882769925ab905b23bfa2a6313ed42fb6b027
SHA512 a5ad30ab87d791a5f19f6c262da9a62b0ed2a9da3a8b2fea4251c4042f1c009fb5f1796dcc9ea5e0b68514ecd1b748d24f4584aecbdc2f5977f1f49e3d320f7f
TLSH
T1F0E07D603E1F5016E52863BDE2F8C5D152779C3ACDEEB70BB46541680060263A50C0D6
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide_alternate.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WNCRY
Size 312B
SHA256 fb17ce583c21d4fe851c92e5d0518e19c2c9f1c29f620f79dc947cf21315cdbc
MD5 c7b0a225a0ee69b1a84e76d1ab7b3d3b
SHA1 9fd69b50e92aa4ca7130c0f79179a9a4cc5f1aeb
SHA512 40b023b227770bdcde3711dca733b177635bca9cc125b9d15ad26c59b4baeee4c9d2eba0325b64d2da2ffa9f4a3bbe975e64254c2633dbd6c20beee382de624e
TLSH
T18AE07D6278C510DCD3489C77804CDAD809C30B5674D67197D27AAE86190875AC26A3D8
MD5 SHA1 SHA512 TLSH

Submit Download

{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\WR34X31D\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
Size 6KB
SHA256 8fcd7ae170d8c5f23e400effb68272bd6332b033ba9ae1184c8bcda013375d19
MD5 cea948f7b9b1816934a54a4deb3a6694
SHA1 cd93612713faa84365f7692959b908d756854910
SHA512 de2eb3ddf5049640c02bf86d9901a0a14fcc9449020cf9f5b3ee2c64bb1fda4ce03bcb68f87ba79b4a9d1bce6f95459f0b42aaf64da5ed4d19e15417ded95cf5
SSDEEP 192:70SxnJ+7xO90ifEkGCvN1lZ5GhgXgdghTm:PJ+N0ZE6vP1Q2m
TLSH
T1B9E19E092805D3FD26544A59A56820EA468DFB1D22DE4DA9CD1170BC41E57A3B38FA72
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wpndatabase.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WNCRY
Size 1.0MB
SHA256 7fc36b6c16e0e2af3f1462143a69eef9896ea62864a2d6045ae979179c7deb9c
MD5 d2712b1d7f3dbb7f461381ea7cf60567
SHA1 e73df2f65fcc1ddb15624eba43b651b379a3ad47
SHA512 3dbf36b368a47de4ecd3b6ec5abf2f988ece1c49e00708394a07b13cd31516f1a3d1bb4477e89fe0e6645a1748771331f701f45f940bbb21d14f477452e7723c
SSDEEP 24576:rbFFQG3zVDGcBY59xp1cHJVUeHI7tZUwxJLSkj6Dmji:vFfycBYVzETHI7tZRBoMi
TLSH
T19925331F13879BD8C60A741EEBB4D02A34DB66D5E9BC352777F866A2A02763CC65C01C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\appsconversions.txt.WNCRY
Size 1.4MB
SHA256 bf701b1fc71851c36a77bc7ed37d8b16d9a29e5ee3f33c95e3e35f83d5d82b69
MD5 ab7257b76c384c74f1f9789969b50f1b
SHA1 2775ebe4203534d76c3e1fc479b88295c968f2bf
SHA512 93d662a1c9599dc7a8f10cad04a4c5f2f4d3aa4ea8164879934cf3cf092a271dc59571c92a7da7a6365b59a9fb63dc7a97d296fccc45f679c3261354be81b569
SSDEEP 24576:Yif729FKOupFE1QAiPrJhewl3YqEsVt7tfkiY6yzEu0ZWwe951cSdK/ATsLqZw49:Yq2XKOqi1QAiPDBxEoZ2wWBv1cUsLqZh
TLSH
T1206533A855FA99DF47FD0D910D240460248DD6638872784F28B7E0FAABB42E367B0779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\appsglobals.txt.WNCRY
Size 331KB
SHA256 3192ad864f6899a4d6c3a8350300da5b07f57e419ee5a87307025a1554a90db1
MD5 258c929203b4c186f9196bf32c0941b6
SHA1 0e4fd53611a5aa88c69f8fc7127ef806b98dd206
SHA512 2a79668dd91ad1f5ca212331eedc87d7c44a8deb9a50223ce93b2ea7234676ac335f855ec09a9c0be994344cc1111229f73baebaedf7dfbb5e50224f3703c912
SSDEEP 6144:7OWSBpxjpXsmjY8yQvilZZUWF+zH1UKh8e/NBPMou/nPiIK8MnuHZ:SpBppNsmk8MexVU48e/Lk/PHMeZ
TLSH
T1267423F75747DD0AF4CCC815A8D42D4B3E63BC934886621DBB284EDB9BDC684166B0AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\appssynonyms.txt.WNCRY
Size 374KB
SHA256 8484ffe6b031998961f5df2d65f6711e24fa68760f9594934a4e6c5978c8d530
MD5 35f70c30d0d10e0442d4ae023fd45988
SHA1 d64716247462b8c17854bc8d8548e6cd35b8829c
SHA512 99f9448b14e9eee53fd069d731f7d35bcbb5f88aed329429e9749ea9171a921905167e40c6f0e14dbf735e236d9e943e6a5a0cdca8b764f036c3bd9228931da8
SSDEEP 6144:S2AJJmVWLZH/kAeRh/LEgUuUdg4dXbvmsqJcE8RrBW+Ku+e0eAxe3oI/gh:SP5H/GQgUHgSXbvmsqJcE8v10eQnIIh
TLSH
T1A38423722FFC04C9A4CD1A9186A0E525C1DC4BFBDAA69E86E391B6233835F495FD30D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\settingsconversions.txt.WNCRY
Size 520KB
SHA256 eb3de9b12e2c1d69a0382ee6b8faf16756b62f1b6266a37284305f51f5c6604f
MD5 c24e710d41c6b7f39aa22fa45910c75f
SHA1 910b72ca482d937b6a91f38a3e7775d78f68b6c7
SHA512 d1d5ddf45e28cdf32d97855f772286ce81c945eda5cae286b6617680795625212e625247d40fac42a7bf830b07a12b2f3e6c9efd09c0e4a6d74e7dd41ebdc353
SSDEEP 12288:li/5MKYKM/PgGERJQAKbbayv8o+8IE3iHYG:li/5PY3Vl1a98I
TLSH
T14EB423BAC5AB331D7B480E51AC9EC4404206B3257F8D38A4A77D83C8DF74396CA6E9D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\settingsglobals.txt.WNCRY
Size 61KB
SHA256 f456271792a99c9caff8c32e886dcc3784289f7f4864c39088e3bdd4dd10914a
MD5 c91f82895f467c394007273e9d680440
SHA1 c91927d493c1972f87df5f29a483f08029d518d6
SHA512 71f79907b118d8e20875ba3be50bc1d82ba8aea763cd7e43453ebd80b3d3eb5e2999e37713f19f0ac68e22fd174d912ada7f1c32dc9a686a67fd34e04c98f75a
SSDEEP 1536:z4CCQmeboSc9gUupDhjlTKGaThutgM17Pz/b+DYJu+nlFIpGT:z4C7mebo9+dwuqM1TSvaIpGT
TLSH
T19F531223D27F5AC786122CC72E038183A5F5DBCD269AC5F4A07A78918970A976C47D2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{264a276c-69b7-4d34-bd76-c5b4edd6e5e9}\settingssynonyms.txt.WNCRY
Size 125KB
SHA256 c1e7ce6acae32e36452ecf451f60600add33c920c58ad470010932d2a6668ea5
MD5 47b4784ee604d51d27ceb83d44a0bf40
SHA1 d9dbc58d4fd39f4a891ce05023ecb819490febf0
SHA512 8e701f63f57ae50fcbc3ca230f6513ee844d8da899e2aa3d5b4d50ff4f528257ed1d4e200ef5309dc719c75e026335d53d3444b314981371b6b56fd93020eef8
SSDEEP 3072:kZbsDnHXqbihpgpL39yb98/Oj+1wGYMlHOuLbQZMfaFQvnj/06:sbs73qbihu/OOjlHLLbqMK+j/06
TLSH
T132C3128BA21547F92B9288F00D029BB1FE7E1FD85BAE4553C2251F0A7B1C4B8445F9B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\appsconversions.txt.WNCRY
Size 1.4MB
SHA256 b450533cc16f26ccb1b321eb57bb3efb5f35d0ebc14a49cb2fffd6cbce479db0
MD5 6f817d45ece0e18eb8ad398a05cb2015
SHA1 0dbb8417f4100b8ebdc978ed79f1d9ef11c5e302
SHA512 e38303006edda0a2f262556982c82f6c85200f9a33d746bb31a2d66a399e1707718ca90d4ac8377aa136cd7ffb431c3712f40735884fec8f9d46a37b97d78938
SSDEEP 24576:7FtqL2hPB7TEvCccky5uogZqhsZwX/F/35xWptxMjgtTnZ2KkNTexvVwBjl/LTRh:BYa3TECTyZqhsZemxMjgRpQTexvgZ
TLSH
T1FF6533FF99C7CA77818D771A4571BA0D881C54D5AB1FC9A4CA3880F69C2188BE7835AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\appsglobals.txt.WNCRY
Size 331KB
SHA256 b18bd620360bf7f4ec5eb03f813b951e1f674e272aaeef72b74619a89afbfce0
MD5 16a1d489479fce8ffb45b87a8f21802e
SHA1 6a1a083192acb3302ae7ffd6588c2d6bd997ec9b
SHA512 60a0269e528c1d4780337a5438613dc27468aa4bd248c0bef4e224820a50c87654fa3c4148f1d9c505e248d8ff26962481ed13d74f286d57fdd70cd3e85c1426
SSDEEP 6144:zk7ndo4Kd0/IrJXhqhSlqwQPe7M6S9KBm3+wMKFu614JWhnZs+royVoP:zk7nO4K+grihSlqwQkM6SQiMVJcnzrod
TLSH
T1117423DC19AFD17430369F266F32C1965CA70B03A87287876336ED22160D76E8978ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\appssynonyms.txt.WNCRY
Size 374KB
SHA256 dae4a1f9d592449779e07559dc3de03e6dd56e25f3da6126b6a3c2767548303b
MD5 0e2f5bf02c992406b88cc811edeac204
SHA1 550d3e1f578a4c7454614bd293ee23ad4d8178aa
SHA512 8a3e8f1118a5b2071aafab2579993421c6d2714272508804630df07e805b9d3efd6a060e3c6ad1571f2f4484993afe43016fc940dbb7de7bf73ab5334e5b6139
SSDEEP 6144:BIxV2xY6X/++vOXt+F/ONpa6UOSeSPkpbSWLyj27X/1vI0QvCSUVUV9nF6jCSTMA:gUxJX/++BFW3a6DSo8WVPy0QvwVU7wCi
TLSH
T1C184232A99B4B30FC9432112FB6D53A0F2AB490B952FDE43D5FEE394CF450578441AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\settingsconversions.txt.WNCRY
Size 520KB
SHA256 4db709724021954f3d37bf8cb245f7e5a60ba5c32085f1bd6a0280380b93aacf
MD5 ae1158df7bd3003f187a7719386de280
SHA1 ef0219b49264acc5b0cf774dc29fd4c96d367c52
SHA512 5cde0f42bf11422803751f01b3f38068cbc0030f564dcd3b32471416f0d88f6dc90df1b5d21cfbdb8f50f1c266831c36d7449acaca6870dd8dd4ffc1c53e8036
SSDEEP 12288:x/4JNJtjkj4EdIFQmv16LJkzXnk2I4P7xkW5tiSXgGUx4xlVWve:cnhk8Zv1GkzXnI6rriS/V/V1
TLSH
T12CB423160F5F76290356DA4F5A7F9BE9C00228363AC6C1BF170D6BA23E526067CA0DF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\settingsglobals.txt.WNCRY
Size 61KB
SHA256 77444549623a0472268a9de3f73333584ca70af6c13860e5ec70e4fc22295a7f
MD5 34b2dad51a1bcfd8e7708240e4905a8b
SHA1 4a8393a6fb7ac94f4c4f20935029dc0397f83ee9
SHA512 5e6a06759e5a12ba9eb7b12d50e102b6d7ee37c003e060812f09b0868c8da5b76ef0ea4892e4fb90f82423feb3f957210152f89d439dfc3259de870dc89279cb
SSDEEP 1536:j59HKyjlRJxpiUYBHq8SQNv5qw+Yi0rs6nW4ym9ZDyvuir9uWy:j59HKyjlbShYQjqw+aJdjyvVkWy
TLSH
T1A753F10387F6B75568CFA9AFAC1454A5D0AE707FAF982E40D2739C3A85121B7B4B9084
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{b9bef008-b180-4426-8304-ebc7443de273}\settingssynonyms.txt.WNCRY
Size 125KB
SHA256 1fad8ec4d439f0996c0facc9fe6896068b00a76ca5e418f9319c54a4994bcc43
MD5 423f7af98cf18ffc952d192b5ab6789d
SHA1 e853562bf53649aed9101a5b57d593c552639311
SHA512 597d3ab41e058851d3769144462278e0eff6f10d329f0bf0e58f0e6ff2ca78c030abe7136b17c6b4ed0ac16f4cc9a55cdb4d507479642b887a7f6bbf22c418ad
SSDEEP 3072:Gh0U9ZEzbW1jV5pO05ouhKQDZjKGkS/i31alktFi1m9:BU9ZEPW1j3Y4oUKQDVKPb4lMA1c
TLSH
T1A6C312456B843B7ED1A37593FE867CD4C438527AD8A896632E728430BB1D0DCC7E9D82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppsIndex.db.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db.WNCRY
Size 1.0MB
SHA256 172ae15d7baf49d831bdecd2b62acd68cd6d7b41c20a8d6190682e7e80503136
MD5 7d1647fb2048558fa97f64dace76ad50
SHA1 b2c287cf30a2513b6b105443674c91d6bb7beae0
SHA512 4b45e2020ce999d2e0809029b809a5156e08fcfc0853f0d79b134ce901486fcdf248721d7c36173b472212b14df5f793bd35f2ac38837040a28bd95e4afe37ab
SSDEEP 24576:W86pxdfVpP3RC6lnJ9dTW/mEGC5I7DBenI1Vontn:W867dP3bFBTW/HCwaGN
TLSH
T1733533A8CB4716685C4054205DA636C7819F09F6ACE913BB8FF488F8354A13C7FD57E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.db.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db.WNCRY
Size 1.2MB
SHA256 0978780f6f9450e2ae9d32ec6e41c7d85723eb44ef36589f539176b22d3f44d4
MD5 be31f95da899d94bca9011a217df05da
SHA1 b9deae8b48a7654623432cb3bddc256e3a6a415e
SHA512 03ba4763e3ac72101d20bd4b9e0227f1eedb2a17d63bf4d1a0aaf00abfc955683341883d60929d3789d93fbcf049823edf554cd2303cfef7250a3f2dab0d032c
SSDEEP 24576:kEhY+Tgvd7NFc7S/+CbNIXxEceGmhtiZ1Rk83L0ZhN7U8UX:FbEF/+DEcedjiZ1Rx7eU8O
TLSH
T18455339E75EBEB86C88103CFF706CB71DAB5438160CAC312ADD6964D92394C468EE571
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SettingsCache.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt.WNCRY
Size 575KB
SHA256 7d57874bd30426d409523e96d61a66da8b9ab522df621c933fbd3597d653b3ea
MD5 8d93150ceddec849f57adb0eecfd460f
SHA1 634b39f0e1105778184cc5042fb170440cc5c1af
SHA512 5f84e9211c94109b54e2965f8bfcd3cef26443b2240510ef39d5b5063c898a99fa9577e4c0d0b3a2df0b3c3a3b850ba7965bba88726fb12248635d7fd0a38381
SSDEEP 12288:iYdHlmFBu4753VgfXw1QmCj2l/nFp27HdVlLrLVg2ufmPs:lljM53iY1QmKsFpG9VlRru+Ps
TLSH
T157C433B69BD7585D53B8F60618C8AB010B2DB3B5D2041E078E68EF364CAB94935DFF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000.res

Path C:\Users\Admin\AppData\Local\Temp\00000000.res
Size 136B
SHA256 95b2ab45dcf04a9191124515b86344cffa941736b34efd549f831e65f101560b
MD5 3e774565caca73708656cf26509de4fb
SHA1 4b3c6a11e7a43e4b6f7c5702f898fc90cc9b768d
SHA512 35945f5dfcd1dbe8b944705e4af1ec2b1c03b4899e8d4a59166516038ef94b08c1c29abf43860feb4da88ef28450915696d59ca9d99c650490d625222a03a1c0
TLSH
T1DEC004757457F434D5110D33D0314C0D140011443105C115C00F4C1C000F0C54CCC437
MD5 SHA1 SHA512 TLSH

Submit Download

48991793812002.bat

Path C:\Users\Admin\AppData\Local\Temp\48991793812002.bat
Size 340B
SHA256 4e25c23aa5babc853889d3e1e79bb01ca7650837b250314a8d50f2e2c4b6730f
MD5 3867f2ec82a7d77c9ffefb1aac8b7903
SHA1 06fccf19b9c498b5afa2b35da00e3ab28d56f785
SHA512 b413994e5b9f0ecb956055c7befff14845b56bb658fd8280d3213fdfa175ff76bc56e082174f2475fdf2d1f9eff618ebfd80ee2b67c091eaf1fd9c94697da5aa
TLSH
T11AE0262BF88EC26A07410247083B81FCC4B10859278BAE14C733D90828412DD7B5A003
MD5 SHA1 SHA512 TLSH

Submit Download

@[email protected]

Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
Size 933B
SHA256 4a25d98c121bb3bd5b54e0b6a5348f7b09966bffeec30776e5a731813f05d49e
MD5 7e6b6da7c61fcb66f3f30166871def5b
SHA1 00f699cf9bbc0308f6e101283eca15a7c566d4f9
SHA512 e5a56137f325904e0c7de1d0df38745f733652214f0cdb6ef173fa0743a334f95bed274df79469e270c9208e6bdc2e6251ef0cdd81af20fa1897929663e2c7d3
TLSH
T1C311106EAE2972505BF284623939E497E602412F125A02A379878274237C17F1AEB0D8
MD5 SHA1 SHA512 TLSH

Submit Download

@[email protected]

Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
Size 1KB
SHA256 9219be4714f0182da0f49ae7c6de46e08db9eb79ae0088ebd9cafadb9d853d01
MD5 556cbb350f794996b0fa9348fb304073
SHA1 acfb2bf3b43f6f12b00a15e1ee184548da31d152
SHA512 fa5c05e5ac2b95a527a542a08b9e913bac4b4d80e6aa2ef12f292fab5b6fcef9677ae41decb045a00394991ffd052566d30bc06e08df3c95a530cc9f6e976846
TLSH
T15611EF000FCB2B37CAEA93BF1AF76319CA65785D13078F09029292055837B536A58A2E
MD5 SHA1 SHA512 TLSH

Submit Download

LIBEAY32.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\LIBEAY32.dll
Size 3.0MB
SHA256 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19
MD5 6ed47014c3bb259874d673fb3eaedc85
SHA1 c9b29ba7e8a97729c46143cc59332d7a7e9c1ad8
SHA512 3bc462d21bc762f6eec3d23bb57e2baf532807ab8b46fab1fe38a841e5fde81ed446e5305a78ad0d513d85419e6ec8c4b54985da1d6b198acb793230aeecd93e
SSDEEP 98304:W5FYc9YouOquJVqrR1LlZRUT83DlJrqd+kq:WrjYouOquJgrlZ283xFqdq
TLSH
T17CE5B712E4930DAADD576F7086C9B33F19A9E9044A32CF7FDA10A71BED076C9060D729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSLEAY32.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\SSLEAY32.dll
Size 694KB
SHA256 bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1
MD5 a12c2040f6fddd34e7acb42f18dd6bdc
SHA1 d7db49f1a9870a4f52e1f31812938fdea89e9444
SHA512 fbe0970bcdfaa23af624daad9917a030d8f0b10d38d3e9c7808a9fbc02912ee9daed293dbdea87aa90dc74470bc9b89cb6f2fe002393ecda7b565307ffb7ec00
SSDEEP 12288:hXhKnXI0Fkw80VEJtzwIA6Ouah6ESyrWlp36Z:thKnnkw80VEJtzwIAiazSxlFw
TLSH
T132E4D650E5D74DF6ED425ABD85CBFB1E213CB6400A36CFA3EB10963AAE13AC13644719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libevent-2-0-5.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libevent-2-0-5.dll
Size 702KB
SHA256 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f
MD5 90f50a285efa5dd9c7fddce786bdef25
SHA1 54213da21542e11d656bb65db724105afe8be688
SHA512 746422be51031cfa44dd9a6f3569306c34bbe8abf9d2bd1df139d9c938d0cba095c0e05222fd08c8b6deaebef5d3f87569b08fb3261a2d123d983517fb9f43ae
SSDEEP 6144:Ir2r5rFriGKbgai112Yq/5hcQTcGzAHzSHeqoftOEEdD4B2pihSpKOKm:naiV25uQTcGzAHOEW+Pzm
TLSH
T1CCE4D860D1D38D6FCC8326BA868EAA49A1B8F6444B22DF0F4F504A35DF77BC09765316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgcc_s_sjlj-1.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libgcc_s_sjlj-1.dll
Size 510KB
SHA256 9aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b
MD5 73d4823075762ee2837950726baa2af9
SHA1 ebce3532ed94ad1df43696632ab8cf8da8b9e221
SHA512 8f4a65bd35ed69f331769aaf7505f76dd3c64f3fa05cf01d83431ec93a7b1331f3c818ac7008e65b6f1278d7e365ed5940c8c6b8502e77595e112f1faca558b5
SSDEEP 6144:+ymz8Jq1p95avGpuO+/jUE8ADu2kNBMY8KHNygoB0+6tMqSsVwvN:+ylSZ+/jU7ynIK5Bb6Y
TLSH
T114B45CC6BBC6DDE7E80202754DFA531A0738E55052C6CB9BBF04AB3D98433629FA5784
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssp-0.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libssp-0.dll
Size 90KB
SHA256 f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f
MD5 78581e243e2b41b17452da8d0b5b2a48
SHA1 eaefb59c31cf07e60a98af48c5348759586a61bb
SHA512 332098113ce3f75cb20dc6e09f0d7ba03f13f5e26512d9f3bee3042c51fbb01a5e4426c5e9a5308f7f805b084efc94c28fc9426ce73ab8dfee16ab39b3efe02a
SSDEEP 1536:pEiL38qIuOFcErNX5d0tRCZiBP2DrbjgpfM2ydbv:aiLsqIHFPpdiU2q
TLSH
T1669318D6BBE6ADA3E911133F46E68319073CF6D04BC38B072E31A93A47572917F85606
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskhsvc.exe

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
Size 3.0MB
SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
MD5 fe7eb54691ad6e6af77f8a9a0b6de26d
SHA1 53912d33bec3375153b7e4e68b78d66dab62671a
SHA512 8ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f
SSDEEP 49152:5m9/gUvHrLaQ4Dt4PC+3xhae2cQX7E5zNvQIJZW/1h4+o4:MiuLSDt2C+3baAQX7ETQIr+h4+o
TLSH
T179E5E53C8747D0B7CC8137B15606A4EE27A07BB0D4B28D1EDA6C1C48E737E66C66A356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\zlib1.dll
Size 105KB
SHA256 66d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383
MD5 fb072e9f69afdb57179f59b512f828a4
SHA1 fe71b70173e46ee4e3796db9139f77dc32d2f846
SHA512 9d157fece0dc18afe30097d9c4178ae147cc9d465a6f1d35778e1bff1efca4734dd096e95d35faea32da8d8b4560382338ba9c6c40f29047f1cc0954b27c64f8
SSDEEP 1536:NlN3sTKU7xniaO9ADje81EQ3aL8WNdUCqfRnToIfBoIONIOqbW+xCvETe:DpsmU7xaiDjeJL5qf5TBfgHqbdxCv6e
TLSH
T154B35DC1F68746F2CB770B7540C7A73FCA20A5028C34CEE7D28C974AD52B9626A197D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b.wnry

Path C:\Users\Admin\AppData\Local\Temp\b.wnry
Size 1.4MB
SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
MD5 c17170262312f3be7027bc2ca825bf0c
SHA1 f19eceda82973239a1fdc5826bce7691e5dcb4fb
SHA512 c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c
SSDEEP 384:zYzuP4tiuOub2WuzvqOFgjexqO5XgYWTIWv/+:sbL+
TLSH
T1D4655707E03F2FFDE2BE33F708C56DD9E111887A0B669933A769E299C505C50B412B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c.wnry

Path C:\Users\Admin\AppData\Local\Temp\c.wnry
Size 780B
SHA256 ef0ed0b717d1b956eb6c42ba1f4fd2283cf7c8416bed0afd1e8805ee0502f2b4
MD5 93f33b83f1f263e2419006d6026e7bc1
SHA1 1a4b36c56430a56af2e0ecabd754bf00067ce488
SHA512 45bdd1a9a3118ee4d3469ee65a7a8fdb0f9315ca417821db058028ffb0ed145209f975232a9e64aba1c02b9664c854232221eb041d09231c330ae510f638afac
TLSH
T1E101975030257C52D3B474B20201ECCCE372073899C2BAC7C0A2C820CF506729BE541C
MD5 SHA1 SHA512 TLSH

Submit Download

m.vbs

Path C:\Users\Admin\AppData\Local\Temp\m.vbs
Size 219B
SHA256 7fbdc49f4b4ba21949eca0b16c534b4882da97e94e5ca131cec1629e60439dfa
MD5 82a1fc4089755cb0b5a498ffdd52f20f
SHA1 0a8c0da8ef0354f37241e2901cf82ec9ce6474aa
SHA512 1573a0c7333accef2695efefe1b57cba8f8d66a0061c24420ee0a183343a9a319995267d306ee85084c95580f9855bcdf9dee559b28a200b27fc3cc353315e78
TLSH
T110D0A706D9CAC3AB474711431033D50CC8B10C283689AF204B51CE0C395250D5A7A142
MD5 SHA1 SHA512 TLSH

Submit Download

m_bulgarian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_bulgarian.wnry
Size 46KB
SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
MD5 95673b0f968c0f55b32204361940d184
SHA1 81e427d15a1a826b93e91c3d2fa65221c8ca9cff
SHA512 7601f1883edbb4150a9dc17084012323b3bfa66f6d19d3d0355cf82b6a1c9dce475d758da18b6d17a8b321bf6fca20915224dbaedcb3f4d16abfaf7a5fc21b92
SSDEEP 768:Shef3jHdCG28Eb1tyci8crbEw6/5+3xFkbP0vyzbZrS14e:SheU5De
TLSH
T1C42399664803B245C2631398FB1BF40A662AF42D86FC5494619BC2B76FBF87EB173417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_chinese (simplified).wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (simplified).wnry
Size 53KB
SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
MD5 0252d45ca21c8e43c9742285c48e91ad
SHA1 5c14551d2736eef3a1c1970cc492206e531703c1
SHA512 1bfcf6c0e7c977d777f12bd20ac347630999c4d99bd706b40de7ff8f2f52e02560d68093142cc93722095657807a1480ce3fb6a2e000c488550548c497998755
SSDEEP 768:SWjkSFwwlUdcUG2HAmDTzpXtgmDNQ8qD7DHDqMtgDdLDMaDoKMGzD0DWJQ8/QoZ4:SWcwiqDB
TLSH
T1283300E85C12579AC29312BDAE25F0883E2BF60AD4F5C4D970AFC2BB453EDBCD251512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_chinese (traditional).wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (traditional).wnry
Size 77KB
SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
MD5 2efc3690d67cd073a9406a25005f7cea
SHA1 52c07f98870eabace6ec370b7eb562751e8067e9
SHA512 0766c58e64d9cda5328e00b86f8482316e944aa2c26523a3c37289e22c34be4b70937033bebdb217f675e40db9fecdce0a0d516f9065a170e28286c2d218487c
SSDEEP 768:SDwtkzjHdLG2xN1fyvnywUKB5lylYlzlJpsbuEWeM/yDRu9uCuwyInIwDOHEhm/v:SDnz5Rt4D4
TLSH
T19973CDF80C066784D6B193A8AE19F4EA1C75F00161F49598B23BC1FB9A3FE65C359F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_croatian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_croatian.wnry
Size 38KB
SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
MD5 17194003fa70ce477326ce2f6deeb270
SHA1 e325988f68d327743926ea317abb9882f347fa73
SHA512 dcf4ccf0b352a8b271827b3b8e181f7d6502ca0f8c9dda3dc6e53441bb4ae6e77b49c9c947cc3ede0bf323f09140a0c068a907f3c23ea2a8495d1ad96820051c
SSDEEP 384:SheftipUENLFsPzy3EFHjHdb2YG2+d18Scgn8c8/868H1F8E8/8Z3m8VdAm86a8n:Shef3jHd3G2n+p/mZrS14A
TLSH
T110031FA804426359D39323D4EB19F0493F2BF51955E894D431EBC3BA62BFDADF132922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_czech.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_czech.wnry
Size 39KB
SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
MD5 537efeecdfa94cc421e58fd82a58ba9e
SHA1 3609456e16bc16ba447979f3aa69221290ec17d0
SHA512 e007786ffa09ccd5a24e5c6504c8de444929a2faaafad3712367c05615b7e1b0fbf7fbfff7028ed3f832ce226957390d8bf54308870e9ed597948a838da1137b
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2yG2gv8n8+8zfB8k8F8i8k1Z8M8I818E838C8A8s:Shef3jHd2G26nyMZrS14g
TLSH
T17A030FA90043A259D29313D9EB19F4492E2BF41D16FC84D432DBC2B963BF9ADF133952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_danish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_danish.wnry
Size 36KB
SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
MD5 2c5a3b81d5c4715b7bea01033367fcb5
SHA1 b548b45da8463e17199daafd34c23591f94e82cd
SHA512 490c5a892fac801b853c348477b1140755d4c53ca05726ac19d3649af4285c93523393a3667e209c71c80ac06ffd809f62dd69ae65012dcb00445d032f1277b3
SSDEEP 384:SheftipUENLFsPzy3EFHjHd02wG2roqni2Jeo75Y3kmA31dv61QyU:Shef3jHd4G2M5bZrS14Q
TLSH
T164F243A800421359D39313D4FB1AF4483B2BF91955E484E871EBC7BE667FDACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_dutch.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_dutch.wnry
Size 36KB
SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
MD5 7a8d499407c6a647c03c4471a67eaad7
SHA1 d573b6ac8e7e04a05cbbd6b7f6a9842f371d343b
SHA512 608ef3ff0a517fe1e70ff41aeb277821565c5a9bee5103aa5e45c68d4763fce507c2a34d810f4cd242d163181f8341d9a69e93fe32aded6fbc7f544c55743f12
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdp2oG2/CzhReo75Y3kmA31dv61Qyz:Sw3BHSWjHdBG2/UhsZrS14f
TLSH
T16DF234A80041175AD29312D8FF19F0483B2BF91969F484D871EFC3BD657FDACE622962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_english.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_english.wnry
Size 36KB
SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
MD5 fe68c2dc0d2419b38f44d83f2fcf232e
SHA1 6c6e49949957215aa2f3dfb72207d249adf36283
SHA512 941fa0a1f6a5756ed54260994db6158a7ebeb9e18b5c8ca2f6530c579bc4455918df0b38c609f501ca466b3cc067b40e4b861ad6513373b483b36338ae20a810
SSDEEP 384:S93BHSj2cguALeT+sPzy3EFHjHdM2EG2YLC7O3eo75Y3kmA31dv61QyW:S93BHSTjHd0G2YLCZrS14y
TLSH
T1A5F224A80045175AD29322D4FF19F0093B2BF91969F484D875EFC3BE617FDACE612922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_filipino.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_filipino.wnry
Size 36KB
SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
MD5 08b9e69b57e4c9b966664f8e1c27ab09
SHA1 2da1025bbbfb3cd308070765fc0893a48e5a85fa
SHA512 966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdi2MG2AGsi6p07i/eo75Y3kmA31dv61QyR:Sw3BHSWjHdGG2Axa7iGZrS14N
TLSH
T105F247A81041175AD29313D5FF19F0083B2BF91969E084D876EFC7BE657FDACE222912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_finnish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_finnish.wnry
Size 37KB
SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
MD5 35c2f97eea8819b1caebd23fee732d8f
SHA1 e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA512 908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2oG2l1glOmeo75Y3kmA31dv61QyB:Shef3jHdMG2l1AO3ZrS14l
TLSH
T1D50355A800421799D2A313D4EF1AF0483B2BF51955E494E471EBC7BA63BFDACF123952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_french.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_french.wnry
Size 37KB
SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
MD5 4e57113a6bf6b88fdd32782a4a381274
SHA1 0fccbc91f0f94453d91670c6794f71348711061d
SHA512 4f1918a12269c654d44e9d394bc209ef0bc32242be8833a2fba437b879125177e149f56f2fb0c302330dec328139b34982c04b3fefb045612b6cc9f83ec85aa9
SSDEEP 384:SheftipUENLFsPzy3EFHjHdtW2IG2sjqMeo75Y3kmA31dv61Qyg:Shef3jHd0G2smJZrS14M
TLSH
T12B0331A800421359D2E323D4EF1AF0483B2BF51955E484E875EFC7BA677F9ACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_german.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_german.wnry
Size 36KB
SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
MD5 3d59bbb5553fe03a89f817819540f469
SHA1 26781d4b06ff704800b463d0f1fca3afd923a9fe
SHA512 95719ae80589f71209bb3cb953276538040e7111b994d757b0a24283aefe27aadbbe9eef3f1f823ce4cabc1090946d4a2a558607ac6cac6faca5971529b34dac
SSDEEP 384:SheftipUENLFsPzy3EFHjHdN26G2VSA1Ieo75Y3kmA31dv61QyU:Shef3jHdfG2oe1ZrS14w
TLSH
T1D6F255A804461359D39323D4FB1AF0483B2BF51955E484E871EFC3BE667FDACE522922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_greek.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_greek.wnry
Size 47KB
SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
MD5 fb4e8718fea95bb7479727fde80cb424
SHA1 1088c7653cba385fe994e9ae34a6595898f20aeb
SHA512 24db377af1569e4e2b2ebccec42564cea95a30f1ff43bcaf25a692f99567e027bcef4aacef008ec5f64ea2eef0c04be88d2b30bcadabb3919b5f45a6633940cb
SSDEEP 384:SheftipUENLFsPzy3EFHjHdc2oG2WWDFFG5BwKeo75Y3kmA31dv61QyM:Shef3jHdoG2NHG5BwLZrS14Q
TLSH
T10823776408031646C15223FD9B96F4892A26F40D07FC50D5669BC3BBA7BF9BAF163863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_indonesian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_indonesian.wnry
Size 36KB
SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
MD5 3788f91c694dfc48e12417ce93356b0f
SHA1 eb3b87f7f654b604daf3484da9e02ca6c4ea98b7
SHA512 b7dd9e6dc7c2d023ff958caf132f0544c76fae3b2d8e49753257676cc541735807b4befdf483bcae94c2dcde3c878c783b4a89dca0fecbc78f5bbf7c356f35cd
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdY2oG2pq32eo75Y3kmA31dv61Qys:Sw3BHSWjHdUG2pq3nZrS14I
TLSH
T1ADF255A80045175AD29322D9FF19F0083B2BF91969F484D875EFC3BD617FDACE512922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_italian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_italian.wnry
Size 36KB
SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
MD5 30a200f78498990095b36f574b6e8690
SHA1 c4b1b3c087bd12b063e98bca464cd05f3f7b7882
SHA512 c0da2aae82c397f6943a0a7b838f60eeef8f57192c5f498f2ecf05db824cfeb6d6ca830bf3715da7ee400aa8362bd64dc835298f3f0085ae7a744e6e6c690511
SSDEEP 384:SheftipUENLFsPzy3EFHjHdR2AG2c/EnByeo75Y3kmA31dv61Qy9:Shef3jHdJG2cQZrS14R
TLSH
T1E0F254A800425359D29323D4FB1AF0083B2BF51955E484E875EFC3BE667FDACF522962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_japanese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_japanese.wnry
Size 79KB
SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
MD5 b77e1221f7ecd0b5d696cb66cda1609e
SHA1 51eb7a254a33d05edf188ded653005dc82de8a46
SHA512 f435fd67954787e6b87460db026759410fbd25b2f6ea758118749c113a50192446861a114358443a129be817020b50f21d27b1ebd3d22c7be62082e8b45223fc
SSDEEP 384:SXZ0j2cKKwd1lksPzy3EFHjHdI2MG275rQeo75Y3kmA31dv61Qyr:SXZ0qbjHd4G2RNZrS14P
TLSH
T12583B0A908122255D2A553BCBA12F08C5E6BF006B5F88556B17BC1BFC3BEC79C365F81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_korean.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_korean.wnry
Size 89KB
SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
MD5 6735cb43fe44832b061eeb3f5956b099
SHA1 d636daf64d524f81367ea92fdafa3726c909bee1
SHA512 60272801909dbba21578b22c49f6b0ba8cd0070f116476ff35b3ac8347b987790e4cc0334724244c4b13415a246e77a577230029e4561ae6f04a598c3f536c7e
SSDEEP 768:Shef3jHdUG2NQcbxfSVZiG9jvi3//ZVrMQr7pEKCHSI2DsY78piTDtTa6BxzBwdY:SheiaDq
TLSH
T1A19355AC48238391E2A2A7CCD966F4CC6E27F04071FC0A9466A7D27B537FC0DF166995
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_latvian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_latvian.wnry
Size 40KB
SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
MD5 c33afb4ecc04ee1bcc6975bea49abe40
SHA1 fbea4f170507cde02b839527ef50b7ec74b4821f
SHA512 0d435f0836f61a5ff55b78c02fa47b191e5807a79d8a6e991f3115743df2141b3db42ba8bdad9ad259e12f5800828e9e72d7c94a6a5259312a447d669b03ec44
SSDEEP 384:SheftipUENLFsPzy3EFHjHdcqH24G2ZN1EDCv3Apb0WD5gYV/S4L3rnzdeo75Y3f:Shef3jHdcMG2NpZrS14F
TLSH
T1A50330A842431395D2931B9CEB19F4087A2BF50816FC94D472DFC2B9637F9ADF12391A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_norwegian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_norwegian.wnry
Size 36KB
SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
MD5 ff70cc7c00951084175d12128ce02399
SHA1 75ad3b1ad4fb14813882d88e952208c648f1fd18
SHA512 f01df3256d49325e5ec49fd265aa3f176020c8ffec60eb1d828c75a3fa18ff8634e1de824d77dfdd833768acff1f547303104620c70066a2708654a07ef22e19
SSDEEP 384:SheftipUENLFsPzy3EFHjHdy2MG2D7mgwroXeo75Y3kmA31dv61Qy5:Shef3jHdGG23KrDZrS14N
TLSH
T114F223A800421359D39323D5EF1AF0483B2BF91955E484E871EBC7BE667FDACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_polish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_polish.wnry
Size 38KB
SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
MD5 e79d7f2833a9c2e2553c7fe04a1b63f4
SHA1 3d9f56d2381b8fe16042aa7c4feb1b33f2baebff
SHA512 e0159c753491cac7606a7250f332e87bc6b14876bc7a1cf5625fa56ab4f09c485f7b231dd52e4ff0f5f3c29862afb1124c0efd0741613eb97a83cbe2668af5de
SSDEEP 384:SheftipUENLFsPzy3EFHjHdD2SG2gA8w8OJ6868jy8/8w8m8T848f8y858l8j8yv:Shef3jHdxG2KhuZrS14G
TLSH
T1FF031EA90042A255D29313D4EB19F40A3E2BF50C56FD84D871EFC2B963BF9ADF132952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_portuguese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_portuguese.wnry
Size 37KB
SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
MD5 fa948f7d8dfb21ceddd6794f2d56b44f
SHA1 ca915fbe020caa88dd776d89632d7866f660fc7a
SHA512 0d211bfb0ae953081dca00cd07f8c908c174fd6c47a8001fadc614203f0e55d9fbb7fa9b87c735d57101341ab36af443918ee00737ed4c19ace0a2b85497f41a
SSDEEP 384:SheftipUENLFsPzy3EFHjHdy2QG2xgk5eo75Y3kmA31dv61QyV:Shef3jHdCG2EZrS14p
TLSH
T1A10342A804421359D29323D4EF1AF0483B2BF51955E884E871EFC7B963BFDACF522952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_romanian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_romanian.wnry
Size 50KB
SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
MD5 313e0ececd24f4fa1504118a11bc7986
SHA1 e1b9ae804c7fb1d27f39db18dc0647bb04e75e9d
SHA512 c7500363c61baf8b77fce796d750f8f5e6886ff0a10f81c3240ea3ad4e5f101b597490dea8ab6bd9193457d35d8fd579fce1b88a1c8d85ebe96c66d909630730
SSDEEP 768:Shef3jHdXG2Cz2/vBAOZsQO0cLfnF/Zhcz7sDsYZBB/0gBjL+IU/hbhMVDtsR49P:ShehlrGR1m4dx9mjVyAvg7ouDT
TLSH
T1D53326ED08036344E3A253D9EE25F09AAD2AF45852FD44D171ABC1BA237FD6DF072852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_russian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_russian.wnry
Size 46KB
SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
MD5 452615db2336d60af7e2057481e4cab5
SHA1 442e31f6556b3d7de6eb85fbac3d2957b7f5eac6
SHA512 7613dc329abe7a3f32164c9a6b660f209a84b774ab9c008bf6503c76255b30ea9a743a6dc49a8de8df0bcb9aea5a33f7408ba27848d9562583ff51991910911f
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2qG2aUGs0K6lyZqmfGGHRblldORZeo75Y3kmA31L:Shef3jHdeG2lGsDOcZxbP7ZrS14K
TLSH
T1A923BB654812B245C25313A8FB1BF40A662AF41D86FC5084719BC3BB6BBF97EB173427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_slovak.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_slovak.wnry
Size 40KB
SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
MD5 c911aba4ab1da6c28cf86338ab2ab6cc
SHA1 fee0fd58b8efe76077620d8abc7500dbfef7c5b0
SHA512 3491ed285a091a123a1a6d61aafbb8d5621ccc9e045a237a2f9c2cf6049e7420eb96ef30fdcea856b50454436e2ec468770f8d585752d73fafd676c4ef5e800a
SSDEEP 384:SheftipUENLFsPzy3EFHjHd4Yb2YG2gNZ8a8zV/8j8U8l8x838Z8Q808m8d8T8hw:Shef3jHdZvG23AZrS14f
TLSH
T13D030FA90043A259D29313D8AF19F4092E1AF50C16FC94D472DFC2BA67BF9ADF133952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_spanish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_spanish.wnry
Size 36KB
SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
MD5 8d61648d34cba8ae9d1e2a219019add1
SHA1 2091e42fc17a0cc2f235650f7aad87abf8ba22c2
SHA512 68489c33ba89edfe2e3aebaacf8ef848d2ea88dcbef9609c258662605e02d12cfa4ffdc1d266fc5878488e296d2848b2cb0bbd45f1e86ef959bab6162d284079
SSDEEP 384:SheftipUENLFsPzy3EFHjHdf24G2/ezV6YQUdZYlujeMQ9RXmhRweo75Y3kmA31S:Shef3jHdrG2fuhZrS14T
TLSH
T1C8F253B804421759D39313D8EB1AF0483B2BF51955E4C4E871EFC7BA627FDACE122962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_swedish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_swedish.wnry
Size 37KB
SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
MD5 c7a19984eb9f37198652eaf2fd1ee25c
SHA1 06eafed025cf8c4d76966bf382ab0c5e1bd6a0ae
SHA512 43dd159f9c2eac147cbff1dda83f6a83dd0c59d2d7acac35ba8b407a04ec9a1110a6a8737535d060d100ede1cb75078cf742c383948c9d4037ef459d150f6020
SSDEEP 384:SheftipUENLFsPzy3EFHjHdb24G2ZKLVdDeo75Y3kmA31dv61QyE:Shef3jHd/G2w6ZrS14w
TLSH
T12F0343A800421359D2E323D4EF1AF0483B2BF51955E884E875DBC7B967BF9ACF123952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_turkish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_turkish.wnry
Size 41KB
SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
MD5 531ba6b1a5460fc9446946f91cc8c94b
SHA1 cc56978681bd546fd82d87926b5d9905c92a5803
SHA512 ef25c3cf4343df85954114f59933c7cc8107266c8bcac3b5ea7718eb74dbee8ca8a02da39057e6ef26b64f1dfccd720dd3bf473f5ae340ba56941e87d6b796c9
SSDEEP 384:SheftipUENLFsPzy3EFHjHds42WG2mzGu/eo75Y3kmA31dv61QyZ:Shef3jHdsiG2moZrS149
TLSH
T1831300A8004B125DD253139CEB1AF448661BF5C816FC94E432DBC2B963BF9EEF623552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_vietnamese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_vietnamese.wnry
Size 91KB
SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
MD5 8419be28a0dcec3f55823620922b00fa
SHA1 2e4791f9cdfca8abf345d606f313d22b36c46b92
SHA512 8fca77e54480aea3c0c7a705263ed8fb83c58974f5f0f62f12cc97c8e0506ba2cdb59b70e59e9a6c44dd7cde6adeeec35b494d31a6a146ff5ba7006136ab9386
SSDEEP 384:SheftipUENLFsPzy3EFHjHdW2YG22cViQj3KiG8dpcH8iEriG8E8O83Jz52sxG8h:Shef3jHdWG2+oPZrS14i
TLSH
T189932AAD46031385E2D5A7CDD97AF0EC9D15E48831FE46D125ABC4BA436FC1AF0B2E81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

r.wnry

Path C:\Users\Admin\AppData\Local\Temp\r.wnry
Size 864B
SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
MD5 3e0020fc529b1c2a061016dd2469ba96
SHA1 c3a91c22b63f6fe709e7c29cafb29a2ee83e6ade
SHA512 5ca3c134201ed39d96d72911c0498bae6f98701513fd7f1dc8512819b673f0ea580510fa94ed9413ccc73da18b39903772a7cbfa3478176181cee68c896e14cf
TLSH
T1D111EF6EAE1D32506BF24462397DE55BE602415F236A02B2B9978274137C1BF16EB0E8
MD5 SHA1 SHA512 TLSH

Submit Download

s.wnry

Path C:\Users\Admin\AppData\Local\Temp\s.wnry
Size 2.9MB
SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
MD5 ad4c9de7c8c40813f200ba1c2fa33083
SHA1 d1af27518d455d432b62d73c6a1497d032f6120e
SHA512 115733d08e5f1a514808a20b070db7ff453fd149865f49c04365a8c6502fa1e5c3a31da3e21f688ab040f583cf1224a544aea9708ffab21405dde1c57f98e617
SSDEEP 49152:zUx4db9A1iRdHAHZXaTnCshuTnSQYUB/UZfCg2clOQin2h37l2Jh9iiRKpbXUSH:z/b96AdHA5XaTJvQYUBBgRlJi+rlliRy
TLSH
T1EDE5336A3718BCA0BF2652311BA232CB2C3D166DE65CC311B795E598AF93F4DD5201B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t.wnry

Path C:\Users\Admin\AppData\Local\Temp\t.wnry
Size 64KB
SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
MD5 5dcaac857e695a65f5c3ef1441a73a8f
SHA1 7b10aaeee05e7a1efb43d9f837e9356ad55c07dd
SHA512 06eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2
SSDEEP 1536:am+vLII5ygV8/tuH+P9zxqDKvARpmKiRMkTERU:a9LAg4tXPTEKvADmFgRU
TLSH
T1DF5302930E80FC8E175E42E3F65084BC2561CDD23AEDA69587254C15F73A2EC754CE78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskdl.exe

Path C:\Users\Admin\AppData\Local\Temp\taskdl.exe
Size 20KB
SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
MD5 4fef5e34143e646dbf9907c4374276f5
SHA1 47a9ad4125b6bd7c55e4e7da251e23f089407b8f
SHA512 4550dd1787deb353ebd28363dd2cdccca861f6a5d9358120fa6aa23baa478b2a9eb43cef5e3f6426f708a0753491710ac05483fac4a046c26bec4234122434d5
SSDEEP 96:Udocv5e0e1wWtaLYjJN0yDGgI2u9+w5eOIMviS0jPtboyn15EWBwwWwT:6oL0edtJN7qvAZM6S0jP1oynkWBwwWg
TLSH
T1C1927F0E2E6701A3F6541EB087D652E99FBD6C233AE7B2BFDB62900005E010D54E1EF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskse.exe

Path C:\Users\Admin\AppData\Local\Temp\taskse.exe
Size 20KB
SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
MD5 8495400f199ac77853c53b5a3f278f3e
SHA1 be5d6279874da315e3080b06083757aad9b32c23
SHA512 0669c524a295a049fa4629b26f89788b2a74e1840bcdc50e093a0bd40830dd1279c9597937301c0072db6ece70adee4ace67c3c8a4fb2db6deafd8f1e887abe4
SSDEEP 96:UjpvOHheaCDCNIOgTegoddPtboyX7cvp0EWy1HlWwr:UjVWEam7ofP1oyX7olWUHlW0
TLSH
T12792050E1E6B05A3F2950D32D7E212C65FFCAC2776A3A5BFCF12460814E150E94E4EB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

u.wnry

Path C:\Users\Admin\AppData\Local\Temp\u.wnry
Size 240KB
SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
MD5 7bf2b57f2a205768755c07f238fb32cc
SHA1 45356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA512 91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9
SSDEEP 3072:Rmrhd5U1eigWcR+uiUg6p4FLlG4tlL8z+mmCeHFZjoHEo3m:REd5+IZiZhLlG4AimmCo
TLSH
T19534D5669DD3912DF3DB25788000DB7CB8A76E1095321F7BB684F8EC28367E4CA6511E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertShow.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\AssertShow.docm.WNCRY
Size 736KB
SHA256 816c09d3eae155dffb8b7cfcf1e3349c397246f4c9702962866b7b17e2d04458
MD5 643c7db62d44e2964ac4fb7c649dd242
SHA1 305847bdac150a99832370e16798420c5bbfb101
SHA512 c1abd48bbe4e17a64a0b9bef0a3944eb008f0977ad997059c6fc7bc55c0b7f53223602cf234c805f7cb1707140ca0c0ff7d05419e67f8b4c567722823dc18c16
SSDEEP 12288:iDeTDWkBAz1eE0CBDq45nxh12by+adyVul0yQXLOgZZKfNas27N3kbTjfsMuE:pWks0iq2xh12bNiyVu2LlZZaRcV6sMuE
TLSH
T17CF4330E10CEDF0656DDDA168C3B1D73D53821786AF06A976B9A8436C3F8E25BE4244F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompareOut.raw.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\CompareOut.raw.WNCRY
Size 354KB
SHA256 746ea14c213e8447c3915c98f0d0a51872863095713075667145a157d6006672
MD5 12df8d4e73fe140f85c8de2dcc54501f
SHA1 10cb65280372419b8d6a767495ecb2a427b2f287
SHA512 16a8a5eb1859a5be86341e0442aeb447b8fe355c0c4bea0369ff823bdb5ed2acec98d5568235ad8baa3235adce0c47c93beda8336f0c1a93211ac40168f0b9ee
SSDEEP 6144:B0lO7alZFS7VYYL3Fwzm5y2wlt0QBL0pQt5rkfmPac8Ci0gt4HcbJsjRlG+epyxg:BGOmlIaSojtveeDrkUac8L0X8bJcepyC
TLSH
T12A742320442DB4E9BC14255BE7068AF0EF26974F6D2A7081B3AD1A2771772F80CDD66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmFormat.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\ConfirmFormat.ps1.WNCRY
Size 463KB
SHA256 362b0e2c01f37f67d0e4424f39e290be4be5b2ecc5e746668fb8106fb5d12cf7
MD5 80d8d1a16f8705d2cbe6bb8b4f8d1c01
SHA1 e114e9ed090731a17bd7f4ac57ed4febe4e8e6b6
SHA512 00d02c96e00227131486c4b9f6c83ca2d85cc0b83ba6e6857facf15cf468ee93ab69b5728a2c1550d20751f6b2ea3a20e4752930e2614932ca9adc69e27275a3
SSDEEP 12288:02zxmP66JzQURA7kjC7XVlxK285ckjYmvDIRex8:J9yTdAu2LUlvDIh
TLSH
T14BA423DEA38C10145CDACDBACD884D1E81017913FB9E5870A7437A396CF459BB8EB92D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditPush.cmd.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\EditPush.cmd.WNCRY
Size 600KB
SHA256 c3acae9bfa4fadb946311bba45c5a088cd5c965f59e357f0a41de5d935535788
MD5 0788773bdc600688d2931e4b317062ba
SHA1 8b6d6df0eef5a365aab5e235e9396ab7912d5a3d
SHA512 9c4f1906bab66ee3cc8e158f5d1b66a5e0b27f38390df0749709ab940b623daa4c233de99217ceb8e1589a754442372df7d3beac65f31161d38f18186eac0a66
SSDEEP 12288:HfgJdA5de7IopuzEKp/aGnlol9AVXByDP44DKbHgUdH3Ght:/UU4MNp/iqByDP44DKrgUJ3E
TLSH
T177D433F2C1CB5BC6F228E52392663C9E2F15785A70F3310765C5A902713A1B56B8B0BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportTest.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\ExportTest.zip.WNCRY
Size 791KB
SHA256 0e9c135bc58857abe6860ff8b4668657e65a7d00c00a3c6b5d2aa15198964e7a
MD5 aaa8aad19ed31b38819ab8cc5ad9d13d
SHA1 8bd6219cbcc14bb8c05b4372a5a65b5c8c61115d
SHA512 bc3c5fe27b3c1ead4b194cf701149ff3d91434ea8433a179959dc3b2d2ac67bb332f40a1c711f03f63fdf669c0dbee8da3cf4b81628d3280b363999810e52492
SSDEEP 12288:Ippst7sgxdGOa3uZJciYAiHXIsaNApjELLhpADtnF0aCJM6wwjQdNV62nH/lpk85:XrGNGJVA3IsXediwsNQ6lpk8jVhRMCA4
TLSH
T1E40533016041E35E349FABC05FA98E9E88E4358FC77442A72D5713E61AFC3A217F4DA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinCompare.xls.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\JoinCompare.xls.WNCRY
Size 818KB
SHA256 fc5d08a44c063d45b1cfe4926b2488fe06452852e7777b68561d207a8cbf7828
MD5 3ac6999c8a11d0f962ea35899e212a0b
SHA1 6ec238b9424e13e776f9186003cf817965db4e5c
SHA512 5e40deec2ea9d3036c802ea3edbdec0ec3a1a96919d4530cdab1863edc6159d14957ff9f12cea3e81c97e9bcb1811597c66721859c1381c4f47188482c050539
SSDEEP 12288:aTNMntXHvcIBvnaO0jrCo+EhFh7MrHcnbPLGrA6SCtok5S9G3rLxmfCa3NAKbFBP:aRMtX0IBvv05h7SaOM6SedSywmwP
TLSH
T10005237FA12C0FA3E7720C4956E163ECBBB17F20E96DC64523A49D2901E2D879B674C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenDismount.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\OpenDismount.mpg.WNCRY
Size 572KB
SHA256 72a82f20539961dfdb463ef026b46162a239172f930a1c4a9fd0dfebed1f60fc
MD5 b4876ffa757fe3827e411e3a38cd431a
SHA1 46b05c6446df6d47d35d751d2b13e4ab40f258c5
SHA512 aca9a0c597e2dabc9755d3db75513b5195dfbde845a42c0ad154dde6e5d2f725578daa0215c9d91b51160aac7b4ceb2964e936cd853b4604abb34fbf6cbb01f8
SSDEEP 12288:pkDPtovpM9f1sg9E5wQevRwMGNmNyquD5pwErYts6jYEWbITfI4Xffe:pKtouJ1sgyCQyRwycR9qFt7jhsITQOu
TLSH
T1EDC423D783DC1ABCBBE1898517AC7557EC432A43C37A40B69307613FEEB9A6A11C614C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestoreEnable.asf.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\RestoreEnable.asf.WNCRY
Size 927KB
SHA256 8338d7802bfdc9d071543237abfc318f6575c257b1c18996e6299ebfad508185
MD5 e32a82406fa0982bf32e5fde0e95b43e
SHA1 29079371f9cac6c20d5a6968d80e9c42763c7a3c
SHA512 f16d899619a7ed85f46d2b843cbba10493f7b217a4c5315b07999779ba6a69303d3a5d65a5543cfa160bb10967252196bcb81c8fb4e4969a7621a72a3d7a9633
SSDEEP 24576:sjKM21qnX1jiCTHDfl75Q9bGtVuDRsxHtDH4ksGYYUNR0V:wxMqnXACjzlHVuGNFYYSR0V
TLSH
T1B01533821404589A3AAFF8A81DCDCE2239B624CF65CBC57C46AFD07F6D50A511BDA0F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendResume.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\SendResume.mp3.WNCRY
Size 627KB
SHA256 6783a31e17d16d2392af0d3a57410c5e6ceeb99beeb579b854372c5828992940
MD5 46983d5ba863fd068004790366ded4ef
SHA1 724af7c53c95a43776df4cba6233da62c46d0605
SHA512 8fc21e5c18fe7c8efc1f460566767f1a0528a2f514af4a87ccb14d96a13345dc6ef9e08688fa4790f28eb3db472a65562b169567e1b08aabf8fe60b6730bb41e
SSDEEP 12288:e3ugHG/EBWhWFDE2dhgTS57utUr+diRcdNzuvb1dC2qh2ZYHy:e3uIbBW4DXdf5itS+dXQXBqh2ZYHy
TLSH
T11BD423245F4705F71A230FED8B2391832BD2E4EDB1D7056A90AF69F326EC3AD8057859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowRename.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRegister\ShowRename.tif.WNCRY
Size 1009KB
SHA256 78e380b07d3195889dcc783d81953a7699243d08355ffb104fe274442a293572
MD5 3944d8cc4f3051d8fef45e15828403b8
SHA1 7a8702796f612acc5b405c4774d397e775dceefd
SHA512 4b3622db5db22fa6851c4099691cb492e3494c75824b5063d0c68fd99dc8d00fd5d85cc1978d38e1e72e93d75609ee7669b7d3dbf50f6df2d45ce4ae5964b444
SSDEEP 24576:Wfo/rtgI6yztScHiQEBlx0fgjQzsINd5r8:Ww/rmtKCXE6QoINvr8
TLSH
T13E2533430C957A39BAB8F39E541FF9349AB15805AD8E7AFC6D51E262E3347884347CC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableSplit.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\DisableSplit.tif.WNCRY
Size 752KB
SHA256 55aed949963b17b921a9434bdc6ecd2dac96c467e970862c08ec366b5db0ae02
MD5 8e1953dfd99c497aed4aceb224e9ea89
SHA1 fcc99a930c5732ed52c37343a936917e9af00173
SHA512 0d901a226cbfaf16b268c1a91b75de969b5a40292044030d8bfd2ef98f914f68690978446df7430f349ce8bcd208b2dd159763fd2d9035cfd08395dc857589d2
SSDEEP 12288:5n1qtB5mCjvurcKq2D23HfQFc6dsqahhK4PmXOC7glWK+1ygCQfxBp1B9u:5nEcr1dD23fQXPahgpOQ4XgHzp1Bc
TLSH
T1F1F423547DD296E887C7432F8C9602D1ABE8A29109474746D0F218B7EA77B24D8CBF9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromGroup.mid.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\ConvertFromGroup.mid.WNCRY
Size 242KB
SHA256 3e0d8425a1b52c23a2d46d36b3d66a9290ac9d5ba7b48406a1b5c214f3a6acdf
MD5 9591230e3a2546bc60e9164d47f48985
SHA1 8fafa868655c6ffa08efe7c207110084027d955b
SHA512 ed81623780c975cc48fc996e25fea2367b1f4f410f4cde7022ddd5f4cf5c66e3d3780450f6d56b3247cae38dc064b426da0377ffe6d2f922f12eaaf75947ab7f
SSDEEP 6144:waidlhqhdi5ZXgiis5O1yFpSf0xUQ3eldSoXHVDkhUW:yrhodIRiEIsVOaoVkhUW
TLSH
T1C334122ADF103CEC8C18E62D885D4563358B8159D2EC8565D6A6F7C3063CEEF23B07A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyUnpublish.potx.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\CopyUnpublish.potx.WNCRY
Size 176KB
SHA256 4d85cc4fddd5313097731d82a0b79212b9d5a2efc9116f631c7d06469e164cc2
MD5 45527d312290e4fe08b117662d09262c
SHA1 fc95820c3b14aef6f5b3a1ab2b105e246c3b458a
SHA512 e37d736bc0367c5c1475d25f75cf2f5b55bfd32753434975ec924a303922af3cb06d224c8a8e0081df496d794e5fc7d301db57fecb18b26352e6be2f7b90c960
SSDEEP 3072:xly4sfLBcM2+FSAjN/kXlS1PVzh1QhiZIjVHAQ7bf9B+fd9b1J/TB2u9lTWDC/mJ:by4uLBTFSSVkXlSFIjVgQ7bf9B49b1JY
TLSH
T1F804133D0F7E9B4E3845CFB2726259DAF352C08100BBB15189BF91434B695A9BE4846E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyConfirm.ods.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\DenyConfirm.ods.WNCRY
Size 418KB
SHA256 b82d030e44cbc613c4956d53836061f20247eac590182f612d3fcb78d1b4a618
MD5 13634cfb4f621bd40dfe2db2f3be0b56
SHA1 da375228c758ecf653dc6d6541d8ca7adb2aebc4
SHA512 a58afcd4b3c3bf6a1454515bf5658a66961d503c82fde37ec9352118da7d9107ce54f824bcc9b1e27d11f471b6b3684f4ab4818b5d2beb932fcfe934d1970e70
SSDEEP 6144:wtvCq8ruevlRILoBDlCusTbZjGnmEJdI8oS7bCxk91jZQH3tpk16XDV4/fwlRC2:eCvj7ILoJlCV9SmEJ280k91ZQH3LV4r2
TLSH
T1F6943369B0F92E139A9E9E10CCFCB34137751E4C1CB11666EC9417B62ACE70705A86FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableCheckpoint.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\DisableCheckpoint.mp4.WNCRY
Size 506KB
SHA256 8c9f0dbab23d2811a1d3e360007d7d4c31b7617d05f5e2991cdbde2454f46e89
MD5 d6af6eb90a2943339152b7468d9b75c5
SHA1 2bb34e01bc5ea7704befab6517c41059bec0bdc1
SHA512 19e5b3b91e0a7c1b353f8238a3ce7a093bc5636a242e20a841f6fdfec62e044d412deb1a11b40e5f0733db058f1e5996ad5ca731e0e9ebc36a2cfebb037bff0a
SSDEEP 6144:UhD11Kp+FkTesnztqj3R+sDEIILVRvTISebnoNNfL4x9sPtpknMYwT2cnbEtYwKS:Uh8STMF5R0SebnYpLaSvAM/nnba49M
TLSH
T153B423F4D79EC53D446A7F852D6316731C9693E8CA8BC70670680A2E3BC1AE50A1DB1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableMerge.potx.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\EnableMerge.potx.WNCRY
Size 187KB
SHA256 125db77ccf4aa3096d98b551768cd0b7931d971d55f6c17d54463d0937b3c05f
MD5 509b68e2ab5a3e38f881856b386f4fcb
SHA1 ce98ed2214d692073a9ed33f3ef853acb7a48517
SHA512 a6d04da86bf9742f41d72aa5dd1a737d27d17edf598b3cb6155b27ac9633f0118df43d49e6087f157a3521b9f74c997b70541091dfa25c8e19d7ed6325269f52
SSDEEP 3072:LpVhw97zlbdqRHtsoup92nlLXOewDPRDWZTrA59prFfrKrdH4Zgt64vQLUGm:5fRNApIXONDZ6P2nFjAYWbvGvm
TLSH
T1FC1412D40C8D379FDEDD77509B4A282B1A0A54C9EF8D48A0C40B6ADD61BBC11BDE162F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatConvert.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\FormatConvert.mp4.WNCRY
Size 484KB
SHA256 15c38de90cac9d788a60aba6f90ed4356ab002b1d31bb676dbd9092c3194289a
MD5 469313b6212546581221eb5e8b90f105
SHA1 611f6e1d1190bd6380c647b8f2ffc2f8765008be
SHA512 c7b6962aa63153b81c04b7661c048ddb6427705f665212796fbd7274dcbeaf7f5a82b1c494e46d9e3ddbb96e1f703fb88dfacc43caedfcd59f511a084b1e96f3
SSDEEP 12288:R4Ad39w4BNwTokkxC87QJ1orOHPXvp+rLTAibQuIFIkgS6Ht:CY3m3V7HgOHPXvp+zb8FFgLHt
TLSH
T154B4232DECDFB2B6DA5BEA2CF6C6ECB920073FD1972673B8818D0102445718D6A47917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantSend.dot.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\GrantSend.dot.WNCRY
Size 253KB
SHA256 198309828c62ab750f34b287fda438b8c9a86b581e0e2d847711ac54eaf53233
MD5 e2ec5c0d4dcf10ed272efed9bc998852
SHA1 0029d77940329ae13ec323f37afa1e7a6b9b95dd
SHA512 927d2eb68378b284ac82af567defea5f57af99f98bd06215ff22bba61e5de12fa646fc52ab361f8e8e9ac6f3054ac5f69eccfec4dbf10e0fcdd9c889d1faa81a
SSDEEP 6144:eJzWOcVwiKZUBVf3uYdgTn023BDE5Wz/b/lzF5ooWOuayvEIj:WZUBHMRD/5WOulEs
TLSH
T141441362566786C78CCC2AC27F0DEA0572B6E363BF47CD6557A61C16E7821806D7F80C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeUnprotect.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\InitializeUnprotect.vbs.WNCRY
Size 396KB
SHA256 335bf5aff3dd210e163ea39e0173ca9539d189efdf587107a835f6e0e698dbc0
MD5 6285c7b91f3c7bd0c149a9c5cde4c2f8
SHA1 01af7f27dfc8c67884e3820a8312471b89c58e51
SHA512 e3652c2dd34c14f971e80542a64bb03a61bfe5b3c9c0f10055f1e340c292dc0b18474e8e9184be508c47eabd2c52e4b52801f9d32d29251d5bf3b4ba29a8bec2
SSDEEP 6144:VsmlcIr87l+xGd0k8hoXjRWCxl04qhKquI1uUqChaO3opaKXHoF5eFYXneaYMVAC:G0Rrg2Gg+1L+KqOChaaoukYOaHATtEM+
TLSH
T10084239FB026E7C5871C5F406AC718D7B250F39A9CDB6BA8AD11732F40CD64D9A463C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MoveWait.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\MoveWait.zip.WNCRY
Size 297KB
SHA256 6c3ad9b8e892a9cafabffec551d0c21b9a5e4a042551886cff2966458790c68e
MD5 bc58a4e82f6d4826e25ecfe9b0d90fe3
SHA1 699db7e21c3e4146852581ad0d2dc01e279bdd8c
SHA512 79021946f88c2b4b4df27f5262cbf9d74df0bb5987cb33d38106686d0e37743a955e2bca4b0cba8018f4d70339ebbb9d0b396cfbead953a483db6dd766b3b50b
SSDEEP 6144:CGhVFCR3GQ5y5cn6VKkZ9xBRMtxCcvhmPzN8y8uTV4AQqofSOowroDu7i:xVFCZGQOczScwPB87eODfbLroD0i
TLSH
T1AF5423C49ACDA3708D5299149EC6FAADDE4CA4E4070210351F8F24FF2DA77E3676C582
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadRestart.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\ReadRestart.docx.WNCRY
Size 319KB
SHA256 50b0a80b1dcdb0a7a38bad56b736b1a22f0a5f0a019b9aeaf2a31ea44f6a86ad
MD5 00c46f16d46d8fc2dee96ece91f2cb11
SHA1 b6c001c10986fe1b9b2fb0d6553c2e85e756a4b9
SHA512 f05346575f90b8d39e4ed7697bd0ab69411a1e237b2d5e4cc4f42cfde625074d1be457220fa474257c3639f7a0f05baf55fa3dfb2b04d29e161bcfe12ceea14b
SSDEEP 6144:uC7bf8P7xTafI5kQ5E7ugQpQzLexSmVHR8il1r/t8OD2A81jo9EOOfKfhKBE:uoW9TmIT5/gN3nmB6il1r/qI2DjotoKn
TLSH
T181642320897F65F7C9D76190A421C29E1C7A2DE4D4F0B7D22AF3737BA4C718988D4C9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoUse.xlsb.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\UndoUse.xlsb.WNCRY
Size 198KB
SHA256 ade701bef50e43435f4fb763cc56bc651b98c00b98aa08ee32cf77a0581c6757
MD5 be61d98c2b65219ee2bd802582b7e167
SHA1 24c314ef5ee61a03084e9348efc6bf4209e39d6b
SHA512 c5d02f71d85a2597b372f8bd10034c97e91d0483bd6e46009f087ada75a02cf9e6c39991fae505fad7c3bf8dc152be938fd54ebbe7344dcda9a26f68d5a3c680
SSDEEP 6144:w0eSsaoXpvGS5NoyINzG/gU3ZrvlqDL6RFu3jvB:EXXph/oyKi/gQrNoL6Lu3V
TLSH
T1D61412723323BF4D805B5E32A89F4CC562A50D25F76C2A95E2FDD9179B0862E347B10D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallUnlock.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\UninstallUnlock.ps1.WNCRY
Size 330KB
SHA256 6e81335592733c5a8b88fe1423f41eddbcd666f175bb260f1eb2b95a99dfaf0d
MD5 8ffe6e447a206c703aac3b878d75cc87
SHA1 0c89fb6746584e5017b220dca06831ed28f0dd3b
SHA512 e089e609ad52ca068d8bf51d4c8bd0bea73d487a3398f83591e307f862c94b3ca8d1f1ae6e4c2cf882ce34a2da269c429c852f657e9a07152bac0e431b71103c
SSDEEP 6144:SBofb8z0wFEjh655uquYy2utZ8w7+h6SysF/J6sIRxKlJZXDwbVkmZzm4Q6UZ8A:8wbqE65lFy/F7+L/TI6bXDBLZ8A
TLSH
T12F742358848281491382A6E851B4F5F18B502B3DFEBC98E591CFDECF231EB496E44DDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectRestore.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\UnprotectRestore.rtf.WNCRY
Size 352KB
SHA256 63e4d55a69847deb0dddb7bfef02d681eacfd4ddbed7d4f0006416def3c3ee6f
MD5 8fb4e5a16ad88eeae0b3c209c55d37ac
SHA1 bb946550042340c31b6aabab2513ca625a7d5aa5
SHA512 0dc205057698049cec670823242debe2804da1143c384533429d846220fb206ebbcbad4528d3e90bfd040ecf1f71275ff843dbcbae7040f0654f53b7cd605dad
SSDEEP 6144:hCJwnnV0wEhhXPWl1KGESFN0rDztCXWlLKKrgeriaGUzvz5EA/U1FlqP55D:hIGV5uhXPWrFN0rV7lWKrzrnvdl/U1G3
TLSH
T12B742361FAAA4FE108ABB85F9B859724DC7960423ED08F250F58F7D5E78D0D40C8E476
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitLimit.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\DismountRead\WaitLimit.rtf.WNCRY
Size 385KB
SHA256 fec32ddb9a093fa7e27023ced45133a112e6edd3a5f6dc095d6b09dd50a76273
MD5 b608b4a791238d9b5a928b8e63c1d47c
SHA1 c8fec7ea538d4872747fdb51630a3fffa19e84ad
SHA512 4f6171d9ca2dac676c398625db7d76dd9377c2c1cc9df56f31fcd696ad6569decbd44fedfeff42ecf14b869e148dd99c8977286df3f853351b17394704615d7b
SSDEEP 6144:LZ/g60wEXr/n0KQdh443WT4iQvLo/5D8PTMmht6sKSPNNLRjonNcF63Q:VYmEXL0Veb+s54TM8VVzjoOb
TLSH
T1368423A8B3800A7D7ACBEAE401E4B0F726BC39994F67631DC318A96C891613CDC597D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountReceive.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\DismountReceive.bmp.WNCRY
Size 1.2MB
SHA256 3ad8c2c4a3bf82383f9e0f7a2a2011c283b5ac6b51cc3a01ff28d01d46cd2bde
MD5 633848f45c270b0b6b24524e70befcc0
SHA1 dcd6acb53ff49ccc51ceb28580fc92c1a88d6c36
SHA512 8bcb1b412e50e89998d9b75bfa92ba5f4c18f3501aaeaf81400596fa0070f2e4de150ba47f9c544ff4ef8c73b77e34d1523e91ec87ed9f7a20135d6024bc241b
SSDEEP 24576:z4EhMsQAa5HGGT5jI9hGRgtfBK81dakRGJ5OWwiqmOV6isNOkwD3LPRJ7:z4EhMs8HG+1ICRgxBK0dJG6W5Vn8hJJ7
TLSH
T12F45332C394BBDCE990CD691588FE78CE21F45095EFB478D8204A4A1F0DAA5D165FC3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatShow.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\FormatShow.jpeg.WNCRY
Size 419KB
SHA256 f59314a9349dba1212797785154791c0f886e1805ce8f57793a2df60b732439a
MD5 cf7a2f6848a11b31ca54e48358edb221
SHA1 9bc9bc1d1a011493d6217ed1b5805c611182c571
SHA512 f15c20d05bb6a60435b74a2a22033ed59c79f265936fd852c398559a61fb6cea9295f4824e84b91f3600cdb2fd43c27048eb82892c1b4069fa0b292d13380297
SSDEEP 12288:usxYmkrVs2PDYXI+0/7+l4AqYzcuVuZrgXoQ:uYgJcXrayvjVubQ
TLSH
T1C29423C374F9EE990F2B29B40F1C1409A0AD9105455F8A076FC1B609A7EDB609EDBDD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportComplete.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\ImportComplete.doc.WNCRY
Size 647KB
SHA256 52041dcc6f666d7cdff1bfef6cdaf892e81751a54e0fe2b52f90f71a3b3d0bad
MD5 02958b8324a967341b60933710dcef11
SHA1 09ad94b10eda948e61025fce87f67045204d4344
SHA512 5a26e020fbb0ad95f26b5e3c6ee9465894067fbb08fc5ec8312e7b59b7dac41d69bfd7fad5df4b9e0f233492567435030fc0bd3dd44a83614d1570d029f4ab47
SSDEEP 12288:nPWlBiuUcXZMeVpc+8KQrjQTdnL3Hp8KvDpGRUM2rCRGsRYPtHGfCBEZpcCy6Po5:cBa2hVzQrqnL3OKL2ACIKXqBgpcmg5
TLSH
T130E42357DC734DF309803B26ACD679A90526E668A7932EC83C83285318F7525753BBF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureUnlock.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\MeasureUnlock.mpeg.WNCRY
Size 495KB
SHA256 af3b80d3b95bbd95c88cf332e47c3c150afa297a39fa6d3b709568915964136e
MD5 5998f0d50e49b66efa3fb96db251599f
SHA1 6cf572235c7cb6676f0b779b053c2c4778a03025
SHA512 a56a97e1c41f779ade6f61f18b64f980ce189b5636fe4a93ef32854c272256080506fa6202cc8aa841a03c82d66107029906cdccad75b9e99aee44a4b8ed5547
SSDEEP 12288:PrKzuMREWUfQELcasPARPv96NSV4t4a7HXbTTqOtucoPYU/+ipowyK:uzuczoFsPAt96w4LTTNu5GMyK
TLSH
T14AB4239B5004E528A9AD8D757BD71124C2CF4A043CADD4E483F2CFA48D38BA5B674BF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountApprove.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\MountApprove.mpg.WNCRY
Size 609KB
SHA256 544af20e646069bb4899f96ed203a52af813afb5987ce4f4ac49c587258f136b
MD5 5641e01e0e446bb3dcd3b49995fbc7af
SHA1 3229cecc986507a35d64e9dabf92f4c80f783ed9
SHA512 2f7c692c6d128fdf4b0172747a19e4579ee01e9a00568cdc333aebb5bfd2c0c92e579edd0a8e7cdc8f6ef05554a78f80abd8430a18f0e01ed3a6a8297dfbcd5c
SSDEEP 12288:/QocE0FZffBqXPFVTldhs1t+Mc0Kf0S8eQQ6vVCTUqReJTwa3WXy8b8mpcOwn:/LYF9BIPFNl01drXeQ8TxOWXy28n
TLSH
T1C0D423CEE5CBE02641AE06AB41F5A4B043CAA56066F41FDFC052453C748E6B78FE5CA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushRevoke.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\PushRevoke.mp3.WNCRY
Size 723KB
SHA256 0882add72501ea369589fcab7b71f598734048429315997e8b9292bb2788e0b6
MD5 1c15c2fdf442aac46a487f663be790cf
SHA1 a1358d107cbd85256dec0b730725fbaf85063767
SHA512 6170f473e4463f65ff1e6078ce933231f82af6d68ae0944c84a81d597dd136111af397fc03b448676eec079e2e3265c88fee2d9b28495fb815a69be752ef2430
SSDEEP 12288:A6AzyHkMyZIo02apTcOYVhpBqP67xhpm+mY5xy7yO2gmWfrFHLKdk3Mt7dQpIHMa:dAzyHkMYIojaxcOY1N7zcUM7rffZHLKf
TLSH
T1CDF433CD76B41D1E323DDCDF1DC27B6CCC6DD28A310B6E8A1F1F9209502964E6B4A649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairClose.ods.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\RepairClose.ods.WNCRY
Size 1.1MB
SHA256 055a1b897687bdd075fdd23877e72cc22049a9d2c7138fe7f0a82f99aa642942
MD5 5f25a9123d33fca047eeeffda1642161
SHA1 e5aea83c4ed02e8bb530f3e53248834e6797faac
SHA512 97ee56428aa58b7eb79d70c709b86ab3f966993b839868b44e429a7ba19cb63dbc2a6b52fe073d9b222da438f7571251cd4ee912d5cde513541da81324636277
SSDEEP 24576:tS+5tnxHWZuC2FxD6I2x5GDgSSDCNlHVIWZs8R/5:tj5vHWZSd6Hx51YHO0sqR
TLSH
T196353393C774368018310E27E3F7C9CA6156D9CFB9754E9A061C731A1EB473A8E48FA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokePublish.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\RevokePublish.vbs.WNCRY
Size 1.0MB
SHA256 2ba0d8683f8bbd12a18e13c705eb2ffde786f3829fec825a93d2306065a22d2d
MD5 21448cce79a56c9b45e518521e2ac7b5
SHA1 846a665a2d208c6fe33e8cf337a4f1eea3692aa8
SHA512 8a2597ed2d47a9b5030e2e0c6c761bbf09eab42138f742373c114b569314ac1c1a7805b081a23043c9fe83f5c573dc3b40fb292a93ca55c8ca5489c596eddbbb
SSDEEP 24576:K2W0wrqAZtsRYTW3qUwAzFK+hnaGy7YYcJW1Jg/7:i0wrqALzOqzADLy7OJW1+7
TLSH
T1362533172F9C125FE1AD8584A62FBD9B43094BE042172375FBDE3E0DF560AEB2A104D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitClose.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExpandResolve\SplitClose.avi.WNCRY
Size 1.1MB
SHA256 bc498668442cd070eab3a1593a156a1ec5d40ce72957383806e4a9ec08d71efd
MD5 3dacf421541df70e06233396e00340ec
SHA1 60def1b5d3325d6dd4625dde2498bd655dca9901
SHA512 896ccedf3e7f366d0c9551614a2808443bd3eae40015f8ecf8e1b4a807a581a27411476f8a915d071690e8be16dfad08d5ad002ef3bc5d4b58e9a9b618b0b4d1
SSDEEP 24576:wT14aSarqKTuXrV46AitOHdwr7TRvkjZHQTn7s1iKkc+XMUPQNbWBHj:wT1VSa4XZdA5aRvGZwTn7giK3OVj
TLSH
T12B4533CC5C4025CE540A405C2DD6F933FAF860B3B25E97A95AFFA288DCA43771DD0A29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddHide.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\AddHide.wma.WNCRY
Size 524KB
SHA256 76feae82e302842d60de09a18eb3c0a272baaf1a03188bb6455182240b2d3609
MD5 01ff16e84d4f89b7fc52c6f2a94172c4
SHA1 12b37937f7e358f9d67ef379cb8cd3a9c3eb1f97
SHA512 2b5667cca3d2995b9e131e0b140c2be46c37b56a439f45639ae3279b0d7a7958bb2fde4f23b90ecce62149195e27be00f29b1d03af7080be44c662d4c1859ee4
SSDEEP 12288:CBVGxZrpk0OAC3WaF/zR+OLblUm0FdSQBI:eVGxZlbOZ3r/zjLZZ
TLSH
T11BB423D1B41CCBF2662EFB76FC0753E234580645D60A99A64440FED4B56B2EDB10E3AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointDismount.xltx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\CheckpointDismount.xltx.WNCRY
Size 241KB
SHA256 3bfec71ae6b1c211a7b071cdaaf4b330a451ecc319b206c1c4f5ee6cea0fbaf5
MD5 0645c27ed07055f29917180b6d148a93
SHA1 66067d194cbc48c8f4d947edc6111feaf6bb7811
SHA512 916fbd35ff3e82081a8cb7bc296e03e7575421bd69e44c1a0ff6bb6c622d65fff06a71ec88070feecca1d6b0811d763c13e48cec36536db59fcd1623ef10c177
SSDEEP 6144:S6ncaXJkogU1VKZnnyfKSTfGOvPjFau2z7Mc:v0UGZyi1nz1
TLSH
T1443423EA4A0F4D872E6FDF49AD9443CFE0DD0346A41241B17ED81BAE12796CC720BE55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointRegister.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\CheckpointRegister.jpeg.WNCRY
Size 482KB
SHA256 80296779178675e7bbb9112ec1304cf48070fe2b1e77a3e347bdf39dded7d7ea
MD5 62de218bf13cce349abdc26b8725ac90
SHA1 154cc3aa3884a435a2d699b0ba06a11b7e84cf5a
SHA512 51e4b547e7efbec84872673f0d93963a095e96c304ccc72c219b4168604eda0a94cd3877243ca3a828fef921442b1c55b5c7b443474693585dd6e3c465af66f0
SSDEEP 6144:hjlUpSrVIY7jwAkEUeSa/nMeUezouVVwmhsn2W1iE5cEMF9dTnHGnJTnwqa9tZGb:EQ0EZM6VOmy2W1iEK/dTn2TR2Xyb
TLSH
T136B423721F73B1C6359F54AEB84EB1E61310EA83C0708B3E4919ABD0E0CB765D5676AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandEnter.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\ExpandEnter.odp.WNCRY
Size 666KB
SHA256 581ca79c8ec9edb3c3099d5d80d1541361b0902fb0046d17861c3eef8d21cb9d
MD5 c3a59008e4a57518beb6040ca0803d13
SHA1 75fad6358f32e931c7b61d30dc4d581c95c3f007
SHA512 7ded372daa4e06b1642a73c70b3b4628002aaaccf2cfa206fdf8ea3fc1bb4bc36e4e1a839a759516263c84515f752082445f7fef311301525ffae69f099f7f0b
SSDEEP 12288:+8wxMr94q8sXU346IxvXayC7JQmZQvbV3PyGNlJBEDoK2Aj9rB6xo:+PxMr9h8+vxX7zhlJBEDPJBz
TLSH
T16FE4235D0823579FF20EFC3F65B446C453989C407C7AB6E0E789B0C9C93BA169A64F1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportSkip.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\ExportSkip.mpg.WNCRY
Size 312KB
SHA256 d83dfe2f5ed40b4b4558561ff165e30a06f031da846d2193e2e1de7f5b823acc
MD5 e8229e38a93794d72a0fa6a506e7d40f
SHA1 4028a35a1dc4f443310b52507fee7d4c1c3f2d35
SHA512 15194cfa89f776a099fdae592cb2c19c868e72d7fbf27a1b9d3f65ca46151eebd28bc15fe3c2856004f23874bee665c94266ec82d4626705db4a27938b6a9819
SSDEEP 6144:XfL4fa6qkhlhS41F95+8AqWprdQlOZ+wEXn910YLotT0K21o8:XfMfaJkrcJRrqik910Lzv8
TLSH
T14464231B681C3F0AD2AABE5EC2465E8B5D48C5E41F1D2D75ABD273C187633F70C14A8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetEnable.pot.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\GetEnable.pot.WNCRY
Size 326KB
SHA256 993a06f801eb8d24c419628292b768d713c30fcc7ccde0d4a094779e8e659191
MD5 8be6a6d588ff8ae7c1a599ed8e8cdcc3
SHA1 1bd7f981db65e8c14ddf98ce7fca627c22e24a9d
SHA512 7e7415812a764ae3c3b71bb7600ea343f90ec07cfbee20079f798af032bb1cf6b5495125add2963331363951a525458f55963d9352419c2760b027688996f58e
SSDEEP 6144:psu03PcGRWWFLGj00bxgOUYwKtR8/7wyMCiMKL5BliDWtmG5IA8NWXh:Gu0/xLz+gOOKvinMvV5TKAim
TLSH
T1A46423CADB61E7CCE10132796074EE1B4EAE65624C2A555B5BA32CE00EC414ED34EF8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeFind.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\MergeFind.jpeg.WNCRY
Size 354KB
SHA256 7150f9555ec242c7045c7eab9df5c806a4dc65cd5738c61edbdeb57a57061ebf
MD5 71fded765618d8b5259efdb3f3ef2c24
SHA1 062197bfd4ad06c23028026a3c506cb3419fb739
SHA512 3830984c60e757beab5b4025b8be7928349afeb253898f6d67a2dc915b3ec20be5afaf992bde72095b6e6db312c150cb52e43813d54b418a9a2400358c7d732b
SSDEEP 6144:C2pFx1AdEphbNd2RuV6GNbZJiqqVL1bZXcI09FPPY01ahBdBFrFxTkjo98a8y72Q:EEXAukCV8VbSPg3DFFxwpanj6Oae
TLSH
T1C9742398D7EC4626D6FBE9923C3904ABC7853881E52230FEFB5485EE398F84420575B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectPush.raw.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\ProtectPush.raw.WNCRY
Size 510KB
SHA256 f8e56c8f62fd85a8f20eaf409abb8e62330e65acb9a0b75bbeb15357ee9a56ac
MD5 3cf84f48c3268c02ed0e259687993fcc
SHA1 1eca03c5448a35a62745879671d8f294d6e34d1f
SHA512 74535935dd9b0c2510dffaae6ea66bce42ee7854d8568a45565eda137f426235a75c1a495e77cb986b17ea0d815bc9a1ba5cd674340084958a99ec2c5a40eb5a
SSDEEP 12288:L7RlAHV6JYtRWYYm2tXKFfqW7dsEcqtEEfw:pl4V6JYtvoUVJIqZfw
TLSH
T18BB423BBD4E49C4D538CF44E78803FBDFC41264A92AF565B6D0EEA93B6D01E5018798C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushInvoke.7z.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\PushInvoke.7z.WNCRY
Size 680KB
SHA256 4c91c5249cd70bac8e44b684559113bd10c2edfbae73996f899ffaffb9f2e58f
MD5 3c78a9b7df5713a83d3d61a08ef477a1
SHA1 801dd42b334c8203daeaa88a87545cb7a3187c66
SHA512 745a500aa0a175ac149113f5e8c03b69e63cd116173abb571685fbddc36c9f4ebf610b8fa16efb1c8a44b87d3171319f18a8ae0d8edc30ae84209a971cbb454d
SSDEEP 12288:w3LUDcs/xRWBDopCxOIOot/LbwJBKsFf+DqwQ7f6VL+DayjXm7glm5:w7Ug+iuhfALsnKs8mXm7go5
TLSH
T1FEE4233E4C2116780E747839D868063866A53FD66E6C7B74AFD884C1D0ECA4F64A9FC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadEnter.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\ReadEnter.bmp.WNCRY
Size 595KB
SHA256 2d17e8d18db0b60640d8ea61588510de95994cd9a3bd634a67ad775afba315dd
MD5 d55e2fca10ad56e0ff56f5747cfd4c4f
SHA1 569ca48580c20340d3a6aef0a6f0e6d2293d4acb
SHA512 80797ffc4b12d05a6346354771742d43f35b8d04a52dd6a9c4f695a49fee15d89c3235eea2ff0023784e9730ac54a6649c9c7afd67a1b03bcac88331b4d74a9f
SSDEEP 12288:4n8JI8+BquXZC9Ezpp6GdFrrgepeGsD32/+6MYnhR1virv+AgnfuL:KEd+BXXZzWkFrhpRs32W6MY0GA22
TLSH
T1C9D4237989BE6067D6BB1A710EDB0CF437D850C17A20F49907B346A7700BF8E672970A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeUpdate.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\RevokeUpdate.tif.WNCRY
Size 269KB
SHA256 635c3cdcc5eb3f612ad5e84203c64740bf7c28e31dacfe9b4b29a291f0399feb
MD5 5bf5f9ac9eb35743289331c892b710b1
SHA1 83a4cc8f78dab0b8e7e5050d286cb04d8af5f06f
SHA512 4dc91bf3a7ffab4204ebfaf9fa58a814b885e168bb261a0b96e35ca36d28ae6184081be227d06fd8459e551369bb8d07dee79ccfc8a4bc266a4df3497c42cb2e
SSDEEP 6144:8V6gS4CkKHzXu2wYAREUhy03CiTLpomFHABveRF1dOo9T5BGvXUL:O6gShVUVL6mmMRFG2Sw
TLSH
T1B64423BBF5AD6D554E10A7A209B8130A848497BEFE90A4096C48C0FC47DF6FB5C7D2B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveRestart.potx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\SaveRestart.potx.WNCRY
Size 283KB
SHA256 04dc76031ce6c6d6fc5603297698bfc1c1c747118e35326cc37e10af627b9ef6
MD5 ce8ac75d0b2b92dd90b455ff0199b926
SHA1 d06ea54afd3e7313db536ad8787335f3cdc2c2e2
SHA512 f161b47383e7ebf3ccb825d7e9df3fdb3574637ca646b5fd324b1e9137e5a79940429ca0a5ca5c9019210b9a3f09853a5e973320b7a62fedc4f7bfb9e7bdfb8e
SSDEEP 6144:Rj28ErQ9t2gZQqt4+sZgzXLyrMSEUAYVqNBk/Ec5am:RjUgwCtz+g357UF+GcCam
TLSH
T1915423CE082AA18DCCC2F8872855D8DCC962AF284257C543C1F8F1A7189F7A4969EFD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendBlock.asp.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\SendBlock.asp.WNCRY
Size 553KB
SHA256 612a50e731b46e6911095f92da8c2559eb33a9152584dcd25fb63fb29f68e3c7
MD5 844b6a922895011a42feb63e0a03389d
SHA1 e6390ecac2e94244b25e47ac09a83aff5c80ca84
SHA512 21907c59168267130733a8eb8861c65f9d3bc12c74d16657adf06b54d4ab940e4db9515f02c70ebf6666f4204e6367cc1778b1f72ac64c7a861e1b82916a9d6d
SSDEEP 12288:Fiv4vrvYQnqhqg3ftnDjPnJ3IzMMdf/EByQ+n2xtLnYRG9Wl:Fi0sQYLjflAMMdnEQQtcRll
TLSH
T18CC42301EB3B27966007C0DD7A3A259EF68D90D7FF557CB66F5808230D480E679E2B19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepConvert.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportCompress\StepConvert.tiff.WNCRY
Size 453KB
SHA256 8d98c50b69573ca6d1ff1ad10b68b1200f2dd114d3f74c1e81e36b0c54257465
MD5 a3802f96f037211a62d864b8e2987789
SHA1 c5d58d7eba65b2f3284744186b4942b25fead3e0
SHA512 ef3993b03516475447d84be5451719548b9e09ff80ed4424018276e64bf97a176b9b6af819f612fa58c544948df5eed12ef00a09dd7c244f46e0d665545474fe
SSDEEP 12288:9+lfjz1t/RUfqGIct8TSt+JrSGZHmVyjTAfVA7ube+z:9+djz1ziqLctKJ2KHmIjuDeC
TLSH
T1A6A42370076A8E47B324B20C5FC899FB4C543D29BFA7617462B4A8E16397D7DC918C39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeUndo.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\FindCompare\MergeUndo.mp4.WNCRY
Size 474KB
SHA256 6552d58ca6cdfaeb9bf183a9623c7eb0144bd165f5d95f43c1a761d65bd8fcdf
MD5 4734e9ae6f69ed8584df0e1672fce7fb
SHA1 d56de9a0566e84f65b3caf13ba0a73d50a3f4140
SHA512 18b8c8d01d7a107d6c91ef31ccd10b7d7865f577f059465e2c7a537fd287c0b5831a2e5d6ee2a5fd3d499d1157c4636875b64ceb1e6ee41746ce71f8d9804f58
SSDEEP 12288:DbINa9WslcvxY3WbXBwi+HyB6I7wVHPx/dR64rTfe:OaV0JkHyB97wnFc4Xe
TLSH
T16EA4233D664FE54F0079FA2E26A0A29DD1E601213D06935C7D90F3567BC97E8902E3E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestoreApprove.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\FindCompare\RestoreApprove.mov.WNCRY
Size 669KB
SHA256 9c30d527d536ee670fdc466e2b97a67496d4090eacec5f683e7c42348d8c9392
MD5 7f5459b2d17b234fe0aced3229795fa8
SHA1 4cb177f1f8f451374c838884a85f7f5c0e35ffb1
SHA512 5b507271e69b44a61e7b08708e16ddf47cca900a1417c37977fa2381b6f5f599ebd293fdc499113b92c1773c24c6f056cfa4cfc4d403407e67d449af10ad8df3
SSDEEP 12288:SN/n5y12nzmQ+aZB82TjL0htZm6V984133WYzutwxKa9wOid+vR+DOmjCSXRw:SN/n5koyQOYcPZm6V971rutNa9/AG/gm
TLSH
T14CE4339790E0DE15B87412219D028107EA0BCACF77E58498EAD2FE199BF5C4F8AD07DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendOut.csv.WNCRY

Path C:\Users\Admin\AppData\Roaming\FindCompare\SendOut.csv.WNCRY
Size 459KB
SHA256 263986712f7f2bdccc93ad685b4fb2fa98fc1a9566d3fb35be18ef44e4133a20
MD5 3f981369a6e3fe41fed2dcc0d63e2e5c
SHA1 078cdfcb568975a1c04b41ffdd9044eb59e3708a
SHA512 99aa850cb055782d5a214438ba79df09bd57166faf0f96100ad058d0f38300c2fd2258315c133ca75e9bc8f61265feab4d7a0b9271804391e9f71c727d3274cc
SSDEEP 12288:MO5cC4iRL4odOdvedPlBQnQ1JuwCyfQhGLr:j5QiRL4QOdhQTX8kLr
TLSH
T163A423C77CD1FCDB8B4855A87EA9CDDB525A2A210A90E084F9C402D46D3B543D35FF22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipApprove.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\FindCompare\SkipApprove.ps1.WNCRY
Size 715KB
SHA256 75c5b4ddfd01661fbc0ce2c49ad1cfb2ddc8045698607ae74a5893a004580d36
MD5 13fb1b5bb4e136d20c804ea25f79fc3f
SHA1 11b466ef1b5f260586480bb758c8732cff63ac77
SHA512 721c3c88d349ba6498b4318a489f8ee119cef3d6a33b5eeccb2ae8814082ecc818ca82152e86ddb46df69cdc718a40bb63a8a0de389f8d329235b504ae51ad5c
SSDEEP 12288:rVAItMxo1pNS8aLLW21LAqfaSj0VqhL5Ztuv8Et8IzurN26Z9WbB72gdr8:hA0MxcS8aLLW2vlo06ptTarjZ9J0r8
TLSH
T118F423F2BCA049952AFE3E777BD257FCA0C96DB8019733A2905B12FCD310A183446B65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipRestart.php.WNCRY

Path C:\Users\Admin\AppData\Roaming\FindCompare\SkipRestart.php.WNCRY
Size 504KB
SHA256 fddd1b70bd63b37e61d464e060e102a831f0b028b5bcfa63c8158b425e27e1fc
MD5 8707c78567e019a5d88541cb7ac12f06
SHA1 f960aa86782904205e0e8af37c0a04eb9fde53be
SHA512 b40bba9acb1be30317b3139cc95457b7c3e29bb2341f064d4194ecffa8331614ec4299f1725da088c1a89eedecd903a7af3578cb838538c748c5578a6020c4c8
SSDEEP 12288:z6178KStg+9CbzWHFXq6BmaENRrBH9Oh3zTH7nDrYnBgnMuAFm:NKSypuXqbNRrBHg5LzYBgnwFm
TLSH
T1DBB433AF73925575D9B2CB001661E816993572AF6FF21BD932EC01CCB4E1C6C0BF6624
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockExport.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\FindCompare\UnlockExport.docx.WNCRY
Size 263KB
SHA256 d72a41718a0807ad299fca617fa187605616be09e2bfa5a42f3c65061fcd4349
MD5 00fc8a8e0dfb14b1772d037b66e0b3e0
SHA1 5f035da2f62e46dae63f348397c5c384ac2a576c
SHA512 b55f7c95e7def5aae64db4937c5a6a7728c1f7b20a0890e2c1a13542e69afb5c5499b1f3ebd86bcba38dd5d1c1b6ca80a4d9b50a45a94dcf0324252d1fbc5781
SSDEEP 6144:ObhyQ0X+Az+QFJuYqAjkXVpxsDX3AjYR7UNDRD:Ob0QJACQ2pAIeKw7UNDB
TLSH
T1A4441309032558B99C4C40B58A8CB951839E6176EE7CC9DBE3A8732B9B9B7CF4109CA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupEnable.3gp.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\BackupEnable.3gp.WNCRY
Size 185KB
SHA256 834f4b7ecca62246d70813dd962065025d9239f85466de71756e0cf78cf51821
MD5 a9a532808da0ea11687f54f73dc09877
SHA1 e44eb52313fb4cba60ac1ed66717419c8edc0345
SHA512 e6a45b58931635b1a52a9a480f04d580c28d1bc3a7f0433d0400ce496782a832e69b3f7674f0ea7d2f9416bd6b889c865f31e8acc8f36f78b7d6ed3cbfc19888
SSDEEP 3072:YbwIaMQuGPpgJFC8B5vpTG+IVg6fZfj6pE/r3IpbcJvvAtw4dAURY0Cz2yeaagJI:YbmsGiJFZPTG+I26fZupEw2vvAtw4aFw
TLSH
T191041322569AD402E9D3CDE517BC4A347F0E30C8FC68C1BB176C79C72CC69E96586EA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectReceive.ppsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\ConnectReceive.ppsm.WNCRY
Size 503KB
SHA256 faa68e252335ceb847d34e917c2869f694d84a04dcec00080d9b15f465d1a618
MD5 42f83fd6c5fab54683b877fbe900c845
SHA1 1554ca738097db6ee21d9bbc1792fdc2abc29f37
SHA512 d8d3d5a63f50744fd509a7577fb6832dec4a3650a08e4b85f04b2de1dc6ed0efe28eb11b7f94278222afab22c7a6a1b4f518bed727569aa6de0fbcf0fae075a9
SSDEEP 6144:wmeDKyQcSoFvSNLZOBIqfqqyyu80HNI4atyaARUhZ7HUOL7YcOd6hkIh0KzSjFA2:wjvRSoFK9kBpfq3g0HnavS0tvW0fhGA2
TLSH
T12EB423E362EA3A1F594DF062D4B5BFA64531D0F7897BF49102E4E8053796330B68E18B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectRequest.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\ConnectRequest.docm.WNCRY
Size 236KB
SHA256 31e8d15b22b43da807d9be864beb7de6fde93744b3f1ecfd51e81be0eada2754
MD5 c40a569b45dd97dd8b96bf0c0ebe127c
SHA1 957dbcddc39852886939c2d9f6159ddb693715f0
SHA512 479f6d6cafc4e33c18b2703d8e42eba0c7cf32a0cf6cdbfddd82ea3f91529a994f195a3ed2214720acb7e99ffc6e678f1bed1dca0cbfa384e32608f37efb51a1
SSDEEP 6144:tSrb9hAWSWDqgTxwxKRqCsWYtTmaFEr19VjUyURG3YEz/0PmB:6+ZYxw8RqBWYhjFU1JcGoEDx
TLSH
T1A73423C3EB6FC7195A3F5464FF9CAA8825EC8430D49B6B623750B7084B1E6A5A503B0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugBackup.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\DebugBackup.png.WNCRY
Size 205KB
SHA256 2d8859a2b62f5d0131f3edc84387eeaab9c502673a73907e7116f7e3023b198f
MD5 5a1daf59b6c9717c2528abbe61daa3d4
SHA1 d668ecd061c70c26398312db0e68e99d235dddc4
SHA512 ec96c9d507ca1907cc075fe26bc1e83326e7f116d221baeeee11badb86a79bffae2b1c0fa92ec4eaeba5cf9da5b84dfdfffd104508e33d270440c626d0590366
SSDEEP 6144:USlL7rlPK9ABSGFNdKfEGKobaQ65INiIK/zHqnA:Hg9Ac2aEGLaQiIvWKA
TLSH
T13724222E3557BD2C50469C62912F1DE6BCE77244B18A60D06458F887FCB8F7CDE9E842
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountMount.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\DismountMount.wma.WNCRY
Size 400KB
SHA256 87d8a986273189f189912241abb491f5b1c971c1a33993104209960620a8664a
MD5 2e267083295d8ae2b7b99e384a70fe06
SHA1 e67deb8dcc70da19cf6bcae5916b4757a77426ff
SHA512 30501bed86661d9eec70bd471f3d899d7f93c5290203a5dc9f51772f4effeefa440f0225231f4d829cc247cd655eeb196c40153fe14e6bb7d39fc28c4f7d4b5f
SSDEEP 12288:1oLQTk4BKnLAHvo4JnFyTSzeKXYIbJbemyI:1oLkkcGMLYGKBuxemyI
TLSH
T1519423638341F20255ED4F8793893E0CAD8F085F9C9D2A65B7E22DC5C970897AE66337
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditCompress.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\EditCompress.tiff.WNCRY
Size 534KB
SHA256 e835ed4e08244473d6e46911c53c24c1fae60560b133c635ab632d1c182c3f25
MD5 d434863e349aa9f206ff8f47bcf85882
SHA1 4a186dbffa2a367c7ce6b19d0eb638b8bfba8047
SHA512 92ec3c9a7a9f0e471b82bc1123ef2933df25e6ae9da47fff6e2d06665a7fe094c35a664c50f2ccde1272d28742cfdb33b367a95861cc8226ec63479af5eded19
SSDEEP 12288:8LRgX2boCcYPsPMNQ3wxDkkhF+pfxW2IZiB5fL:8NgGk2kwxDkQiWZCD
TLSH
T1A2C4233D640C2ACA309AF3FB66962C7D386E575CEFF5052634D3DBE0455EA36A1A3840
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitSwitch.dotx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\ExitSwitch.dotx.WNCRY
Size 277KB
SHA256 802fdf1547cbea9f3b094b6e6e1ca30c41399b0bde99942da705342a3ac45bd0
MD5 48bc59c952667464dd14b77e9eb8822c
SHA1 dde8b5505b5429dc0248737a17465b1492789e1a
SHA512 4abdb4fbb7403320b6665ed8f6a600003432f8939567f323a1acab69f7fed927b780b5c91305c9855a7e975ffe10f0e8603b42d452bed8ae41d510b4100932a2
SSDEEP 6144:aT3xvZyVK9icdmxiKZtOkSsFKHTDYuY3eI0THVUELslacDIYysMAZ6CH9ThqH:aTB8VKxKZtOkpwHy3eIMHVLCbULA5E
TLSH
T1FF5423EE8DE84814C669FFEF845D01B89023A7471669B08D8329EDF50C5B39467FEE42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallConfirm.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\InstallConfirm.docx.WNCRY
Size 452KB
SHA256 d6aa73b97ff9637ed70911c489820a51eddcf246e4734e80500cb4ba5014f232
MD5 4ac46f1a67e6c96e1124af379ec35963
SHA1 a899a95add8a95061f30db7a116af14456c49f21
SHA512 cc98d39075026cfee92643a9aa5b860ab7760427f90df59b5608c415f9b1c7192cae896b52af76e52fed2c6c3d3dc759849ca45c1c620303e9634dd1117f9e35
SSDEEP 12288:FSnKxXwF7I0rJmQsCDKZpBipdSAiXySza6eDH00:FUSM7NrQQ2BSsAYywDeDZ
TLSH
T143A4230FAA59CD3D47401C9828999F30BB595E3CFB5D25299BE827BA0C00C6C7A075F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeImport.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\ResizeImport.avi.WNCRY
Size 380KB
SHA256 1b3828607a633b95e4461ece8283c5e0ff7cdae153394c309b25ae8d015c1767
MD5 6996833dbbd2a3dfa2d98c269c6a94b5
SHA1 b579a65940e9751f7c7c2e75b23ff219653455a3
SHA512 105d18b6866845a81704e7784241f5e3f2e2ab56a1def28c453b1b6a9ace37e7764f21950639427e7f6bd55d821e36f17f55a9031488e762864cb1b307c01929
SSDEEP 6144:dQ3GU9eHWakfTX31Z4yn71iPuXN+9NlyJqESkgqiyJtcgcIwoYMKZcGiUcfw+fK3:LU9eYX4ynoPuXN+9NlykutcgciNK1i6p
TLSH
T17684232E30BB4B1370BAC0213956AB238252C86F03E3A55DD6352DD9D59ACDD41CEF8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeSend.xltm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\ResumeSend.xltm.WNCRY
Size 431KB
SHA256 c8f41cd747e812b7b53ce21065bcb0793e862b9f2217eb346251a53973cdac87
MD5 4502aaaf5d585cd5d26ea65456868fd1
SHA1 fbe477679f1baaa165ff4e7d63a972f7bde351e4
SHA512 d2a3a91b03fda6ee8e4bad17fdc3f9e000bd5d68d5757bcb7ee46d5a6af003b6ea3e570265d71d83ed9ff45ea8d436cb8dbc61b0759867e4e5d4dc4d09701a46
SSDEEP 12288:cktBPhLcDS/vi3RoxQSMS8qdfDdBNkElM1SLyh:NPvCyQSMSFJkE0
TLSH
T171942377D26FB1A1B584CCE1382A6AB7D9BB5DD6019CDC623D624520CC0267FBB6D00E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncUnregister.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\SyncUnregister.docx.WNCRY
Size 421KB
SHA256 288c02926efaf9724c1d0b4c04982d7eca429854e8a551c8b59d3bd8b410c800
MD5 a5b065c87c34226b9c2163260f428e5e
SHA1 851e89c61e0d0fdccacf8c50b476190b9e9d3f0b
SHA512 a01fa340882468396d1eed56124b06c7e91d71139563e5bb732faacda30ef64b32ae33328dfe3cd0423b89c509482f0eb5debba8eb589aaf2281fec67205a3cd
SSDEEP 12288:TmF7lLY4yEQ6eTVof6GzhlayaSS3kgS6OxilPyBu:ULoX6eTVCbza3oL0l6Bu
TLSH
T1A79423573A168EDFE5305B28951F3786D94694AAC20C0F623805FE31943B8AB0DF497F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockBackup.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\UnblockBackup.jpeg.WNCRY
Size 267KB
SHA256 ac7e897fe64a172f093e425267defc96961f9175fc5d79d11741c81e7d703359
MD5 8830f3c21c6819a787679de198725b22
SHA1 011238704a88e39a3cbf8ee9ea9ded3af9a3e5e5
SHA512 382cbe447e5d0904c4e7a09e4519b9fa41477061d154abada01b4c83179a46284c00d303c744ba677e7c993598ffa77109d25ccc14ca04e2370b359f5063d470
SSDEEP 6144:GH+PtsjBo1dXtl8jaHdxEMJshgG8k6ULGo/ogjZhHVphpZRc:GePIOXryE/E0shg2k0tZtvZRc
TLSH
T1FC44239FCCA66C49EDFBB3CCB70C251518350A3E73B92A6C0622D5A9226287353DC9C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterUnblock.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\UnregisterUnblock.vbs.WNCRY
Size 246KB
SHA256 250cdffffddff240e7fd0daf0d290ea733e1e682312e98ca0d319d0790f71357
MD5 1baa5fdd93393672fb2bad4441982952
SHA1 cb17290ba0377101dfacfcd292fbfa706609a116
SHA512 b9c19cc67b48dd424c475cdbeec06d126f23c0bb0dbc7a81ffc48cf49cd3839497a7c845647da98ab1421ef1867dedd70e485a41f60a5de8fc548ae9a228046f
SSDEEP 3072:iDdcAVaxzf1dukdb7kNONpZ3tLd76APta7oZLs5OYwiTha1k2mdb5TtMbYpeoeAN:kaxzfrtVOO1tfJ2OjiTM1H4btn86YC
TLSH
T1323423BEA99751A46C42F29E3243C8C599C86C724A63F299DDB08209FD05D2BEE1F11D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteUnregister.xlsb.WNCRY

Path C:\Users\Admin\AppData\Roaming\ImportClose\WriteUnregister.xlsb.WNCRY
Size 493KB
SHA256 ea303a1ddfdceb79799a60b99e1677e1479a60e5e802c3635076f4e19f819d18
MD5 5a8f296451ee61b1ff350a9dcb7ff844
SHA1 edfdcade390db19bddf285b39d5726c619e43b0b
SHA512 5f351b7d9b455bd6eb6ab3914641f5fde2c7c84e700822d890765b791456f86c72a9bbf5534c2da6f772d97bd15fdd168e949fb5374d07d90e8f39eaece04b09
SSDEEP 12288:Mh/ykr/hv37JbPJqBdWVILuJ9XaJQn85/qaP+D/gzJ:VuxVWLqaGA/TLd
TLSH
T163B4237181C0ED98928BCB3969B0B7B4AD291FBD277E3145984B0579780321F36BB1F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeGroup.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallConvertTo\OptimizeGroup.gif.WNCRY
Size 391KB
SHA256 816f6f06058fe6836cac187736be280ce149d6902d36d21ebd3be8f77aec716c
MD5 eb3dc5a719649da094b262f35208a63b
SHA1 c96601119bd217ed918e0cdf9c666140bd26a244
SHA512 09bb168db3e3bf18216425e4152399a54dbabbd24bfddb62645f426764d892240e8fd5e194b235735090747dc31f34582be16b53d283e316d9e2f5ee9b072c1f
SSDEEP 6144:m5O/jF+iJHOtWaXwDtU/Co9D+UTIX/7jUyxd+CqQU8mrX29bLXD2I/s9Jt42C:9WtXXwDu9lyzquvb2I/svHC
TLSH
T17184235503FF58C6A40AA7A2D032B2C60C9310B6F791515B13878FFA868B0B8B6D74F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoLock.php.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallConvertTo\RedoLock.php.WNCRY
Size 569KB
SHA256 29ff97ff02602ec6c5a2e7d29e027a073e86c03e291b178c70d0dc6cfe618dff
MD5 bab3aff810de77ca022ed063a50f2461
SHA1 08250b7687dca543d91321dc7c47c121f3da72bd
SHA512 0d762eeda961ae57c445f607ecc45f40d8b18c654b524bdf6b2bb59bae7d0c1187f30f31601f78ea51f7c3fdeba4c06122dc186448ddf9a5ea15115f7d95e583
SSDEEP 12288:Z+txciEnPlKJs1k1VXByekfWVUA+feTJqTT9HskEBd6e/3avlVJiMW7z:Z+3UnPpiVRye5OLfe9qX9Hsfd6e/Kvlk
TLSH
T1C9C4233337CF723C5D2B01F211F5EEA4695FA91332631C9D3889A2562ED5B2DC6688B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectCompare.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallConvertTo\SelectCompare.ps1.WNCRY
Size 249KB
SHA256 cc20ddf476b872f8b2ae0978ea5aa81f604cdfd89dc23d53102932d08bb16cf6
MD5 ddbe0cad16505ad525ccdb278e61dc00
SHA1 55f136a41455df54b1ad479e3720ceec89d5d1c4
SHA512 971ceed0eb5f094eee896508a3b4ffa251fd968d7e0b097a86ea1e26640a3e5dc669bee8c15046e9f95c0daf4d13e94d0d031b50eefccdb385535004e8164327
SSDEEP 6144:WscosTBBJeOLqmQySuZNuw3ChxiPFimB83:W2sTvJeOLgqCxpmBs
TLSH
T1B44423C3A86CE5C2FF68C1161536E1B00A581C5DAA331CB67B97987F655B8CC4EDE03A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceRedo.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallConvertTo\TraceRedo.gif.WNCRY
Size 284KB
SHA256 a6973cb68f6850bfeefdca904f6a94fc120f5707b380d8130570f3c443beeb09
MD5 b8907c4b8ad98bb4fa0d5ce667a20bb7
SHA1 4b7c0a96d5ac31435269ec94579c79eacb76fc65
SHA512 6674e740bac1caf808b01d059622365227cc0fbdb369e3323465119906e23623123255a03e16799b382b3ea7c0bac47413f7402b5f59f5f650b1beba4b36df15
SSDEEP 6144:U0OPyplSIFy6XBs6yXrliGQfpjb7NokCvY1tkuxoh/x:EPeoI8ksjbl+b7akxMT
TLSH
T128542330587933237C657BDB648B2F00B5D6E7443AF163527821CB929A94DC9FE1EC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectEnter.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallConvertTo\UnprotectEnter.zip.WNCRY
Size 818KB
SHA256 637e3377c39bed1874beec1a78f03d9aa9d2bf8a2dea06826dc959e39c880f33
MD5 e53e317a42f5cc72e066b91281c7792b
SHA1 64381a79f91357451dcd0ffbc0fa0b9649b29052
SHA512 d06924482305c7a0ca3034d76a03804a5f1e46ba5227f50ae1a26ed4c4874b066b9de04b6841c712476ac56796ca0a0dd842c78c3c5498449d352776e36f9ee7
SSDEEP 12288:c9GMu5dwpM8cl/APDDjKv8t/j3dB4Ijl5VzwhaFm1OeQoDe0EHanhE:c9GTWieHK6zdX2aFKO/HIhE
TLSH
T1C305233A0E186EC37D0A0E59D4A3AF59851872427DF172E335BEC8C97B1DC698937D60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseMove.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\InstallConvertTo\UseMove.zip.WNCRY
Size 498KB
SHA256 c1661df05c4fba9724b6280893655cf70b754a73163008845ffdf9305d20e19c
MD5 02c13fbc68dca158c2135dfca0bbc9a6
SHA1 1cadc9294a0a576e4d358bceeeb040d3132e28d9
SHA512 9906652dfe698a25972ac4802113ec20a7e15214833505cf75a394a7e90df3d8c1c83198f5977df0210c7645ecf0f1dd5615c7d5a697574cc275a18d76d00552
SSDEEP 12288:7621ENsZm7z8AH2zlVfOSYA0V5h0cdABIBWOiXgDYW/2/:G2sJXz2qJPV3QhOib/
TLSH
T1AEB42344E893DCBACFBA61E9C4ABE86B994907C03B18856D541C1410DB8F7FC8F559BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddApprove.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\AddApprove.png.WNCRY
Size 989KB
SHA256 c32a44c80966f5f6cd5e7036e75651ceece993d5fc76179a2f94162253804f17
MD5 3d0b7b3e5c6240004c404848ee6bb511
SHA1 b4bed3023f94b65f8ef04bbc2e1b6527c5c747ba
SHA512 e1847672fec1ad1a9fc2fe08c494f4ba21add016f5219a1163d68c52c73a816506a9f5ca4250570ce6f815969722a7e6612cb3de20fa148822b0141a80cfce08
SSDEEP 24576:d+56C9PooBmfnN+acx16vXCIbz5xanrA93J2YLWD:d+h1oog3hXCIjanrK3JZA
TLSH
T186253315BA0E6C3AC83B6E2BD41769EF463C0390762D4F3A777799453FA9C29C94C442
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinWatch.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\JoinWatch.mp4.WNCRY
Size 933KB
SHA256 20b2ab1a56d458345fe2f2cc2f399796dd1d8d9470294efe832170800bc145eb
MD5 ed6df3b63e8d89f5413e2dd32442cc13
SHA1 d4a00834169adb209904a3e3e8751f23e1a09fbd
SHA512 388f27cf3630ad2e9851fb76259efbdad5288f7902573fcccb5cb435e01999a9e744b8dcc0da07ab03a137aa83e2e22cba780776004eb4b02c825761c2f08ee3
SSDEEP 24576:wkkJyo4muKD3Z9bf/ROoXLQR9moUSoUW6g:wkkJyWuKl1/RFcR97USI
TLSH
T1A61533C7E36F545DF68FA367C46BE965CA8B3EB3E3185DC8B0026453278089C15AF864
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountConfirm.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\MountConfirm.odp.WNCRY
Size 905KB
SHA256 d5475243c0b97e8d7f66ff970d330d3ec6542f2b2358552e545e498609827dd2
MD5 17aefcf98a60c243266ab606b2324071
SHA1 8622ee79e245cf452a5bf985ffdf5af3c8c09ce6
SHA512 1f3c23b78c7ef2029b33853a138e69d8f8c4463fb56b3f8404f2d65935567a73dd6b9ed402a61441d2fb9126c2df3613bf6e076f9153ad0e04fcd13e3ee2aeff
SSDEEP 24576:L68kZKDSTpAlPbRrppBMa8jZbVh4AVdf6yMW33OSU:LNkZKDSmlTR9pBs7LpWW3DU
TLSH
T189153394858CAF0A9CF59464AAE3329B29BFBDD15FF3582A7F564BC034AC7504390D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveInitialize.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\ReceiveInitialize.zip.WNCRY
Size 654KB
SHA256 40fdf6ea850be2acf6fb8ffbb75235ce59fb7736ffa317fbbbc7702ef7621638
MD5 896559a538fbefab11539e759d0bdbc0
SHA1 7d457d650787420fa9444652cdbe792aa7e047ce
SHA512 62700c097e70d872789fbcbae1ca1273fb104a8d8bf8561fb3096fe2b00d3d6c65314f13b934143027738c8545c697c0f0c41e4d3bed956435441c60e37f5f65
SSDEEP 12288:XEQlKmFVlk1AOFEnXAqt2+zoNOpyOrV4ou3V0pW3q+7o27CY4HC8OVg9aY2RRMot:tKsSNOpGeQ7Z4kqaP6Pg
TLSH
T1E1E4233BC7292FD0FA0747C062DC1DBA0543AAE9F5A92B855D652E53CFE73486C42B08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetSave.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\ResetSave.iso.WNCRY
Size 404KB
SHA256 a9dbb8354dbbd6a5fb54f85c587dbc3164261ffc9c9e8ee737cd9d9525483144
MD5 fbd022fac0659e1d61d35acda8108ca9
SHA1 772097815b61f5eb639e03ec23dd9785a98c4641
SHA512 89e314f138f5c5bc90996ac2f6be4525eafd5a8bf95e8cda5618916d3481f887a66a994ddfe70a8b49ce0151624895d2dfd1b6838f29783d3128859e1eae42f2
SSDEEP 6144:CHBarAOODaw0oAOJb2eK1BkJIzGHMMQ3kJ6upUR2M7OPOGMx5Ca/2fSd0UItB:qgBcaw0ohJbGCIXuCR2eO2GMxzaRnB
TLSH
T116942381A247202B04C0EA77F7ED5CF481A08B5A14BBDBA69E2C14F7FC3E6368D5654C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeRedo.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\RevokeRedo.mp3.WNCRY
Size 431KB
SHA256 9fd84f5a8f239ea71105beb90cf73042e229828cd185a7f4592b082b51ba85d8
MD5 83a39f4bae2984e5d29c951842acbbbd
SHA1 aa284a67c11ca3466b8debfed2dc29fa2889de05
SHA512 d41b3b4122bd79f4119b19e5a2c4bfdacb750945cb16cb2e1d9ab0468182464aa134cd7e8bb16909f76a5572a272e898feed912af72b8d7533b1b43895f5c5b1
SSDEEP 12288:wHD0w9grz8MhPDn2bD0utV2jZUrNXYvlfHB:wHD6r4MhPDn2rtVVR8l/B
TLSH
T1C99423635298E478F0E9F839BF410A1E56F5ACE09DD07CA7E6D4D046B8E2A12CE37147
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendComplete.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\SuspendComplete.rtf.WNCRY
Size 1.3MB
SHA256 03b01c7e13cf0fd7c8d31226b3e0184d1d91b00a5d5f607f5f17780e6ddb8552
MD5 5df733cf2343357f2c31587062e639e9
SHA1 792ac3655c17fdeedb4a143a1ec746f7f8f0de0d
SHA512 7d8f901ec72e3a6008477019ca01c77b18283925eb26518e1b645747f780572313d1bbf7ae1d71804c0623cc70219193260f8962f833ba93fc05e228a3dd4812
SSDEEP 24576:mZAFwx2pFe4Uo+d2RRu+h7lW+qG1WtP5jeTk4qTCMroiNOKCLOtjvhyN2YSGMuXK:mZAFpFZ8d8Yy1OPBVNMFKFtj5CjMx
TLSH
T1275533F70ECBE70BB2D153F138083F595427A7AEDB6E831924554B19A2CDE65E804D43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestLimit.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\TestLimit.txt.WNCRY
Size 738KB
SHA256 93da2ced780ec86af635810480ad559776d7297f2cc41378d81f231c681230fe
MD5 fafa2b9dbae325c961dfc91902369b1b
SHA1 33b6cdb49975246f8292bade68d312f8cc4776e8
SHA512 d76669ac4b1b504d916ab056ec00c1b6af5759edbd3d2568c9229619409d24ac82981168a8f5aa22558b35555d89c94695a3534ddf04d8c497a7dbda6b064816
SSDEEP 12288:rzhbpbvpfJzpeRE36w+8Dn0S2TFesaMByzOdLyL3OBqsScnIUS4gCOsWHox:rVFjlPeeK9AT2BRFB+OdGjO8KInz5k
TLSH
T1A4F42331A15C2123E3EF518E675DCE3525669B4216E882BEFE8C98B3F70F5F2C498164
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateJoin.asp.WNCRY

Path C:\Users\Admin\AppData\Roaming\MeasureResolve\UpdateJoin.asp.WNCRY
Size 794KB
SHA256 617109620ff8846c01853fbf7079c4430dce7972ec5165bbd0129e7f07a53476
MD5 9e4d4e7095244d170a4d01f02cc3fac3
SHA1 e058ceba54758036f1528adc86479d5a4d9d0d76
SHA512 16547b84a2bcb95b45bce2c4e4c60944abdc1bcfe80b87c66d47cef12e252a3f5c6785b400214bb1d1f97d53f43be67a4e0c24e4e4a027c6733103b683d546ff
SSDEEP 24576:um2pc0en75FHwtiJYqPCQxDaXRaJ5YF2moiu:um2pcdVRwsrq8D2RaJqM
TLSH
T118052313DB1A5E42D2E0D433E6FB9C6EC79903FE24A010ABD01AD46DBE599378941F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Normal.dotm.WNCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WNCRY
Size 18KB
SHA256 95b2da53dcb893bcf13c4b25061097b25b0d3156147884f090070f96fa6977ca
MD5 0447bd46171f835942db820e640702de
SHA1 f224776e88701006ebe7f9078c5aab95a4fa777a
SHA512 c63786225e2ffb43ecdd289a91c8dee580f4daf6699014e629c9cb6b586ea75605a9c38d771b913a57209033181e80f0c46e958931925bdbe906c53936771e35
SSDEEP 384:gXhXExcBHHqCeng6pzm0FW1b9EJnkh+KEq4PCiYcJuQEJvZddBAoOnM:49vnqs6pzVIilY52FM3pvOnM
TLSH
T1CC82D1D20F2E32668942F76FBC75A2D8B3411B6416B7DF332D8601168E6BC77C346480
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\uuwx1qmb.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WNCRY
Size 776B
SHA256 3cba3ea423fde2788088b27a08da85d84b98cd8a499ad2835471d082860ab976
MD5 9a204e8d9cfb9cc446234a5cbc115a06
SHA1 ed52057201370b5341d8adc8209e34a8c2af8f16
SHA512 85e15e24f6053c146481ed520742630e86bda420e0a9b24433bf9afe5ef0d0fd4732c45c3b01099b2266ccba082e7354a217b51f2749e6cdef34f327d0f83a0f
TLSH
T1AA01C5832E8B80FBA0E1BBA833BF055624CC7B4AC0C1696993CC00D440A8634268B974
MD5 SHA1 SHA512 TLSH

Submit Download

user.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmz31tbh.Admin\user.js.WNCRY
Size 536B
SHA256 ff9f4641b10d31d396f686603392b03ec7037a98f3fa917a68c2eafd17037813
MD5 788e1fd4c41082d57b97e72e896728b4
SHA1 3f13c1d5ebd333829c5da86cda9fed1058835af6
SHA512 7b8f718358cf6f815acf027492edb3827833a84640009b8cd84ce17601db2cb0312a363bab7793c6eb68c09bf44302ae94d206d862cc3c83676fb1d8f2aa89bb
TLSH
T1E8F020410352A1F2E8573FF2CC4281533F8E495DFE1E9C65034398591008C1E6353A97
MD5 SHA1 SHA512 TLSH

Submit Download

cert9.db.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\cert9.db.WNCRY
Size 224KB
SHA256 da3f1a0acdba77aa610fa7a251c1ec08213eece5b468666d94c3177cb283e68c
MD5 85b1d1224db15236cd298ff33c15ab51
SHA1 cf9b6bc6d8f9b4a42415c3f6a04af936b861445a
SHA512 aa15b33377a18b6aa7913d8689cb414902d433a611dfe3dc3e5c9496625da01a0e171994723480eba3f03cb06072621e21c4165d845b2e3c5fc2f933c38bef26
SSDEEP 6144:ayfLPOtKjnFp9QgAHw3ZL/q5lDep8hltO:ain2HesdepYltO
TLSH
T1CF24227E4F5079752DA41B3CCB128969DB9452A9D8B23940103BBE8E8FE5148438F9FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

key4.db.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\key4.db.WNCRY
Size 288KB
SHA256 abaaa7ccc7f6d7214851124f03fb220977e9d724de5edc83f83128696a1ed3ea
MD5 3b4ac88abf27c68581f4d90fc4854ca4
SHA1 4f1cd018fb55ffc9cce426f5914be3f631f585ec
SHA512 f47678b54eb4c885ba4b7d26dc549391bd343f5d74f0a814d3a4105f861bab03391c3c58e0a437737e8c4fdedc18c2d3216aa247b8dbabfb22930e404a8d889d
SSDEEP 6144:o7Kl8aoUkw5642LMJpYKxyT3ZVJFxvwv0FFsA1RKl9o7HBbOcnZGWgfjtz:o88aoRw8NLMlybfJAv0TsAW9ozBbOCLw
TLSH
T1F4542224DF19D25CB8BF636D9485D0DB3D9B8BD0F81AA9C72B591B0EBF0536D04132A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkcs11.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\pkcs11.txt.WNCRY
Size 808B
SHA256 6e16b59de26a3556954c62e792e2d5443d576b73da88035ef537c667a1135435
MD5 e754e5778381bc58250dd795a557c4a9
SHA1 dcb3ee94853da6533753895ba0cf36e5bdac11a2
SHA512 7fbf009fb3b07fe650f335274b88120ed359175d13d4461fc8f8cdeed524026049fb7b5ddd96cf9e08504c5aa1c158b5a789e42c3996438190e9ead6f0a35a19
TLSH
T1A701CA994F4D995DA050B778F81DB5AB32D37B79C4128125B455033B2E86315D0753F4
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\q70bjwr6.default-release\prefs.js.WNCRY
Size 7KB
SHA256 e869c28dbeddb27465eb9cb94ea88f45e0371df331a16245ec6908f735e270eb
MD5 59fc81769e434cf1e875d51e0fbd0c56
SHA1 29b9cdbcfebd39597f26c63e6dd593b1bc2f843c
SHA512 d87415a4dd25d671165eccdf113d8db893f13ee64f9e7df0f306658319f3e4a9c35ade04afeb4bad52b4688f8a4fe38271ec3e66096ac26360753bfeb3a01403
SSDEEP 192:n7HStU0PhaV0gMg0XRnu7+01vbnw/YTxuKiaGU3TIEwA:7yCyxduRbUYVuKuUjIg
TLSH
T14FE19FBAA4615167708E11A773FF0CC816449B034A47CF6DBE4F168B3CAD2E9AC2381D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyPush.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\DenyPush.odp.WNCRY
Size 426KB
SHA256 068d8cb7a0bcfc136398da7ff3ac899a5341f57ea44c47ab29cc9bec6f03b137
MD5 9826c2b0653ab6665871b24183bdb46e
SHA1 251f80ab33c21e25682ec1f3d3a2c51ff64f0334
SHA512 c419cea9154cdc9e7edc8ecaecaa7fb7c720ad2594e3e2049a143a933da80900956122995a14e0b194ee99025284ef812bde3b85cf6ad4154ae4d623bfe5a6cb
SSDEEP 6144:RWoEcVEDba/GmH5qOFapxXE5+MXOtfsYOkhizynVqdYrJYO9DdGdEf66BRiglMa:koXkaO+4OFoU5jXR2nkwhMqoxa
TLSH
T1689423278435CE6C90FDE0B24915B5899B89A8E7453215BE1FAB3763077D4F0EE826B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideSelect.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\HideSelect.tif.WNCRY
Size 666KB
SHA256 1299a138ed60a28d555aa8c0cf7e0e8f8f2e3c21b1527496f64abd27db15572c
MD5 5214d5f29e0550b24762995f01a4e482
SHA1 6a1693bdc9dd2cb9800c6112cb223d64071dc541
SHA512 d7a96d0a75f175e96c84f9fe13323027c7adea3bad223bec023cb509203b5001b71d79341475257ec5ae31b9882756cdf7653b6062e527c8c55560511eaf16e8
SSDEEP 12288:CdZSrJ/CwL20JcvjzrTYa1uBr3K85R61wg4XLZVJfWH/2dsT2w1D2Ecx01AJ:CdAV682G6jzrTzuBUP9HSsT2w1DLccAJ
TLSH
T151E42319303E208DD83D3307FAC692E2D642466F596ECC508D8EA7653FE71F299D25AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitSwitch.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\LimitSwitch.txt.WNCRY
Size 373KB
SHA256 8bf997b7a0d2e5476122797fd67be42dcae819c0fe93a4f25aebec524ee3d253
MD5 bca537ee22d0a0be9b083345de82d804
SHA1 41cddcf7422457184616b54b982b0aaf30cc5cb7
SHA512 e958fd31d253faa6602a0550a17c9c2de1208bfcf921eb9bb0be3c137569461878bdd20410395a6034a0fd7f613b332345ed6f978bd2e88d44b1a82c9af4decd
SSDEEP 6144:Bk3OhLeSMRL/XzArKFR5My3cacDbHdia4dhnq3QkVulkAIkGQBQDOCPFe:6EaRL/X0AR5MpDbExf6LulBGyg9PFe
TLSH
T1FB842323CDF99663536B95A343706E8D0ED8C7BAC70194044BAC3DDE51648BF5BE688C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MoveAdd.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\MoveAdd.wma.WNCRY
Size 880KB
SHA256 6e1061d45422667b1b00fb10284d363c734808359ccfd14359c1a6af6e366f09
MD5 c006d319c29a998282977d6bf2bb7ee1
SHA1 f2a8114239dd682138a069b5f4ed22aed4e32bbe
SHA512 627db49d5727c965dfa34bacd5c38e19b2623bd8708575ca7d08deede1a578b6588499844ac6cfda579caf69190279c3d04e465e0039fded727bae9eb3a39e9c
SSDEEP 24576:zqPcXIefqHM1qxuRgyuEKutVw7vpGUM4njDVuyhB:z2c4eOCcEa7vpE4njk0
TLSH
T104153312246EC144E913EC3C57C4026728A7ADBFF2D9F4F5E4384B925E3AAC3DD62654
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewSuspend.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\NewSuspend.ps1.WNCRY
Size 533KB
SHA256 905ab4587114ed1ddf249de00f96f626acf0e47c29afa04e1688b1b46d665b43
MD5 0a439dc9e6dad4e221cf158bee23a801
SHA1 e5b8ef526915273e5f4f341c6378331fbe07ada1
SHA512 3cf174c5b6fb4ce5b3040a9575458633656b8349f84a771bebf5475008fd63e87ef5a1bf1e3f521eaa64d960c8ba182443a1943cfe67ed7e46b336e9168dce3b
SSDEEP 12288:Ol/4pv5FXoKCtGOr7Kfe41Cs5ZOxram7mTeRb:Ol/4dOZrGG41LwgmS6Rb
TLSH
T18BC423076EC4AE32DF625621D3E4F7B86836D83109A3E6DE8405D7D9CB2F81DC625B06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutTrace.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\OutTrace.docx.WNCRY
Size 586KB
SHA256 4db3df78411d816e78f32b30b54cf581b285ba115bc0592fa4d0b3ecf438e65e
MD5 d18fbc32fafdaa053c8dc9fc2f394695
SHA1 7144f7a36ef9b2eadebbfb7c00df15ee259a5ab9
SHA512 d5fa8e799bf8396dc57c47bcb0b751dcb83390375778e118f7fe7b3052dca6179b33aa964101f4bfcbc23e1bc6ad3ca85e7abf5dd073aa6487fb5ec64f81d2d3
SSDEEP 12288:LwX3gwRtSdH9oRtX/mBfQFxv4EhXmhr105lwtR6hMkpYr7HRyXuR:LwX3gwTA9k/mo4EM05lSSMkpYr7xyXuR
TLSH
T1F6D4231661FAFC8842F06213C4B7FA142C15A52F95448E1ECDED6E677BFA35312E824A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopConvertFrom.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\PopConvertFrom.docm.WNCRY
Size 773KB
SHA256 80276459a179152f42e277d44a428983b5c12b139a818d6402fd37b7cda33e60
MD5 716684ebec875cee00dfddabc2ea9275
SHA1 63040ad8bbb5ffa213f7b693c3e9f7bea78821f0
SHA512 6b9fdd9756866a93b3b832912e0cac0ff0a3b5923b54a8f30231c859164cb856e59ae7f95124aaa993a4e242b9e9f145651c7dfaf109e3e487c2e7a1a00aa246
SSDEEP 12288:PwA46X3cxFt3fxQ+KUt7/GHTf71N+B0c9A3ipxaJamVp4UjpJVNDA0yt:m6ncxF9x8UZGzf71W0cqogJaoJVtA0w
TLSH
T1F9F433369407FDB1AE943A29B7CC66BA526666249D4448A007CE71A77237F31B1C0F3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectHide.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\ProtectHide.gif.WNCRY
Size 800KB
SHA256 751d9e8acd42035f86f3096b6351b54fb5ed378bed8a545396f436ed894c2c7b
MD5 e26d4a041f9cb6253fa2b5fa350f6882
SHA1 bc9b68b0499923b50fb96958905240d9c9a6b89d
SHA512 9a9b1573e627bf9bd4d2418cfb9b983dd68c74d1332282d8875c60e1df507070ff20279c2aa226882b4fc495d004fdab8e5ca901e9f86bc4e819af500ae18603
SSDEEP 12288:e4wfg2RZsYGAktYOPNHzSLBqgosnELFOaqHbyNAnJgZGursr/0d5i59:XwftjM8LYF5qONAnyZGuYq5i
TLSH
T11605334073E83B399576EC75BB92303E5DBCAF4683891C859ED3D0F268A9B480BCD506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoSplit.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\RedoSplit.tiff.WNCRY
Size 346KB
SHA256 a37f35ad7212442c98ef4606a7117c4af67bb725385f98b68e060719d1c1794a
MD5 76292ca4aecc2962ca9dcfc3ad2bdbbc
SHA1 20509cd816e320313f39439ab87d4bbd2808127c
SHA512 950f4b7e710d34e19f2de300244f3e0b6580197733c1d36b9d3c43ddf86ab441362f732b59d670393b9b43bf4696d7f0f2cce91d52829ed2b0022fbd8506b816
SSDEEP 6144:dtXsvK2tzcTUycmbdPNxkNr0cmpPiCd4nxF29QG3nADhd0MYLaVyNBja7Wd4N:dt8SCoTU8dlxE0cmpvynInihddg6vMM
TLSH
T1457423DDE0417F1949E1C3D8D6321A8A4CC4C7F7DC2FD60E5AC19600A0989ADECEFA66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectWrite.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\SelectWrite.xlsx.WNCRY
Size 453KB
SHA256 5da20ddf57d88d9d38ecb6b281f748ea2636bd31758da333494ec1d49443b1f1
MD5 dd7ba1a85d27bf9e13c48d7ca7f62d10
SHA1 cfc4e88ad25b3f671cebf97adca54db5da4ef7d6
SHA512 021f88f5314431d899d064074b4b9f2488ab1e5d0bf8fbe4690819e884c7680cc995e45f06d01cbb49566b56184dcf1d2dd4c909dfee06403df419b434234d7f
SSDEEP 12288:yNT9Zua138TIr0GrSqX4Fao/1OA3aatcQ3JXVr9x2E+5v:g9Z313FiqX4FeAH3Jlp+Z
TLSH
T13BA423CE1B62A666D3D799D56AFCD8F5913D0A60BF8C562FAF0C81434A00AF714789F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipConvertFrom.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\SkipConvertFrom.docx.WNCRY
Size 320KB
SHA256 888bfbc37356e9d63ce4278fdaa39e2a98d059610770c9ae893505052f0eb787
MD5 8789ee8c425ae38fe4db1d5d723798f0
SHA1 1a94d64bd0e95ea7ef4819066f11ae20cd7c693d
SHA512 f0d8b24f2d3ee92286957a75006e009f4957eb6471888b978524a45e0f523fb1eef37fd96f307a7f913f956d9b973441926e6f22565568745652837ddf8909fc
SSDEEP 6144:9Vcca14t4y/C5V18lsEW1fXSPyr0WwAjqd+wpQtwepKG0r2nQJO+WkDGQpr6Sk64:Tc1L5et+XSqVNjm+wMwepKGo2Qa6Fpe3
TLSH
T16164230D05AC1727F353F460E506A6930974582F2C2732D6BA6EFE62F4B3897C9B58D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitRepair.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\SplitRepair.doc.WNCRY
Size 826KB
SHA256 6c3e095af5cd6928847e4c8bf828426297fcc0730d05bd9eaf489251a06dc8c2
MD5 82e517bcff13a7167f832131ad2e4d34
SHA1 623c64592832b3975a8d0b3423b3810e9da727ca
SHA512 082f93b400d8d7637c57be862afe8d65b6d6cae771e860baa9cad85e5106f2caa4f13bdebea0650d126064cf44240d3e5bfa69a01108441ff8075eb80c3debf2
SSDEEP 24576:k+9HX9aKmpQjmwrm3Fc28qAJvRiHRcXxIiE3Ih9mT2jS:kYNaK6Qj7rm1o0BJKmTWS
TLSH
T1550523CCFA51C9C1E644992527AC471427239C81FF9FE891D8609C7CBC56013AEDEBBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallConfirm.php.WNCRY

Path C:\Users\Admin\AppData\Roaming\OutEnter\UninstallConfirm.php.WNCRY
Size 560KB
SHA256 6ce216d4c2f3b539173adf17d0eec3808add0a83aecd3f29f0da4ceb326a5366
MD5 cbc3ac88a2724b42645c8272ba74cfa8
SHA1 fd1b3731bc465cf16e5c9905993eefdf680b031a
SHA512 47b3ff8568e697d7f5254f3ef98761bef8b522ef291c89476bce94551f732852a5821a3be847ae99c6ac097cfd7e076777b241464a6001609313ff2098e43a8b
SSDEEP 12288:jIJZQPJS114Gaz3ADzkwmj5Fnpm5wwP4pxcPRkTQoZZuAbztKzb:0JeQ114hEzkwmPpmLzZ+H3bzAH
TLSH
T109C4238B4163BEACE28647C6C4A42F7CA87CC9919177DDDE8EE1E301409DDA269D1FC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairSkip.7z.WNCRY

Path C:\Users\Admin\AppData\Roaming\RepairSkip.7z.WNCRY
Size 1.2MB
SHA256 a7ffe7bfebe6b8673be1c6cbe83530c7cc306a886c66d8e3fb3bf510a2a200ed
MD5 aa69c727d0f6df46f489a608f592dfca
SHA1 470d42a4e7b5388655609fe3edc16ab01e1943bf
SHA512 6acf7f837017d0bfe596f50b60b7e2a33d7aecd2feebdb3682846fa3301d51ee68fc668bf7b0562311134e5bf2839ca82b5c044d38dffea995e4920e653f449b
SSDEEP 24576:/QgoeGcNDC8G5raqcIAcgZhCi0W53L1NClidtSXDy6O6jign9x+oy:/JoeRNE7NKCiDbAiTSXr7Ggn9E
TLSH
T1A34533B4E49225BB1B7408FD1144E76605BBD429E203E1C70ACCFA7BBD6B9875398363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompleteExpand.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreCompare\CompleteExpand.mov.WNCRY
Size 721KB
SHA256 9992426ab19f401bc111677fdbb41c3b8d0ee256703a3cd4d84bf9f0060793a5
MD5 6a70e3fe23a154498708a4b80b22d8ec
SHA1 348c7d6e027e98b3016133df3ef2b761b4a7ea3b
SHA512 3e2892d7735e8850ff99e8e9c98ad0ea7f9246923751ce8d0069fd28d9da3d11185b92877f1f69c858a0dda20e2eb49c7d325af4982cb5b58de3d58084b0c0cc
SSDEEP 12288:7Ex0VGo734RsTzxzaFypDH0zpJ0Oey+Z7a9mQHBa/xbTB+0vtAhypZ0rBG:7ESVGo7msTBaWL01J0OeZZO9RhOxbTBr
TLSH
T1A5F4238740A049A1CFDABE920BA8C879555B7440CFCEFBD7BC54F3B6C4466663B28760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableRestore.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreCompare\DisableRestore.mpeg.WNCRY
Size 1.0MB
SHA256 ce80252599112ba59b4b25242bf47e566936a672f7fe99fbdabef91be006c046
MD5 9ac526f0b7a072cfc58ff7564dd2e1b4
SHA1 7ccad3b64655ae17291d83d12be259cb1d673e19
SHA512 186647386ce33091dd1edaf2115b91585895e429ffbc5a4185aabf65ce12b59804e39afa502c77929e620715b585815e07d899e517911c885a97cd23416589cf
SSDEEP 24576:Ztjw1QmOvAEQ7MzpQULS+NlpeM5hBNTF1tuwEyQRnm7bnoY3jZY:ZllmO/AmQqJ5Fh14wEyQR+nJzZY
TLSH
T141353345F44ECC07466831E11CA7438B768A4CA427D199B7C22BDBAFB1788F1964774F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveResume.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreCompare\ReceiveResume.avi.WNCRY
Size 975KB
SHA256 440f6e71af04e5894972ce899a4a94b6ae99f15a64aedf1dd99b7d837c0c4c81
MD5 55cda920529503df215f33ff3b38a1ec
SHA1 7c96b75eb3380652dcb4822a78ebbe01a8eb2a58
SHA512 f7a4388cfab486285d9489452a1cd885a03d32523dfe5560b90658dad5a9d0cf9ac7a67f91e666ef37bf5dd591b1182cc192666ed69343a41ceadb3883802f5e
SSDEEP 24576:yQljFR6kdq+QoIkchtC+QNDFHy/Mt8rx8WjZBrErA2tjNXltWQKX:yYZhnAkc2+QNDFHCM6Opj3iX
TLSH
T192253382ED0B974F5597C25B38607F45FB7237D50ADE281C2A1DA3C4F36217808BAB69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterExport.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreCompare\RegisterExport.docx.WNCRY
Size 1.1MB
SHA256 cfd6ccce9048774c253c2b9be31160fef98c8164984f9819123e6a7ceaa1651f
MD5 06b84c821e2fdfdbb3cf3f718256ed95
SHA1 bb31fe59634a6d7f00236c47442a8daa72605a70
SHA512 5009d48fe4179f4cf578af156f709917176e88c729773410aa896916905777daebe736a1f6106a623f8a5bc3a08ffc148a25b61860483e9b358933521a9082d0
SSDEEP 24576:aZpR9SQHMKM+4mihSVWUw/jL3Ub+VJ8QQwR8iy81Mv6odl:abvHnre2WUcj2+VJ8PwFhKpdl
TLSH
T1664533AF24F0B128EA42C3E1CEB53E971745640B0806AF33AB7C6519E745DE752B189F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestDisable.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\RestoreCompare\RequestDisable.wmv.WNCRY
Size 2.1MB
SHA256 924eb96751526561387407fe0011f6e8038cef3674589a5e780d7124d7ae74b6
MD5 925b9a38446f2b3b7a359f4cbbfd8586
SHA1 38ee336350a6e9e9dd361780de673c32e751b718
SHA512 d00b0f8bebb907712adc83ddfb78946ad120c29ca57a57b54f2f51fc7ee7cb6923e30797501353a8dde58d3943139caca18a939dadd82630486734e9bae94ce3
SSDEEP 49152:y1wE1tpvWBKBUCKlYIUYnSkZi3QAxPDqLgIHcDybYvsbx:yfNsEYrax7OX8eCQ
TLSH
T17DA533E25B645C66F09F34E4BC89EDE7F8895410F809E7B9542819E3B07038897EFE61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeRename.csv.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeRename.csv.WNCRY
Size 689KB
SHA256 557c9ce5135fbc95fe2d78c0b0797cd3882bd72c260bbcafa39bbd1e51a8df80
MD5 50db26222e5851849eb702d6c1b09bc3
SHA1 13b8749a876aa687dc1d0d99c6f084cb41fcc9d2
SHA512 b952001b4c7a144d2d63885994b0d8e0cd89093ffbf95c9e02ea6de5acd15a0d9e35c1d4fe0655cd494f26035a616b9f37269a4c59fdee5470ee38c07d2191ab
SSDEEP 12288:07InGnNVwGTjxj1kSvVdBf/wBgd7WfGo0tpZ+xg/EWjFBYWL5qXSaAzEE0:WnNOGfxj2Az2gJW+omZLEmOWjaAzEE0
TLSH
T16FE43331545B082B84FA33BE0427E31FEA611492120E8EDE7E2449C6505FD85CAFEAB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveRead.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\SaveRead.zip.WNCRY
Size 501KB
SHA256 6ca20c0b7a951effbd1467dc70dcfb5bb2cc6e94dae6366a6f5c514bde1d6905
MD5 c5558f3839a072b4aa0a2e5a6b5347a7
SHA1 257bed334e25270b436b33ac1d6688312f606d5f
SHA512 0e73e1e639d1516d889923e998acad0c92b1b8233d5acdc0e785e4bd7468f8fe6b1d40bb845e716314445683fb6891bfc56553cbb0a550a2d2800902ac274e84
SSDEEP 12288:Z+7UbFuAvLy59YAiD2o0t9mzcgM6fBAulJNC1R0:UwbFJ+5OAa2kc8fBzFC1a
TLSH
T1B8B423B78D5A078E150D17B5D89A16A4FA943273E84FF9A52B309F7238F26F8478901C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseHide.svg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SelectTest\CloseHide.svg.WNCRY
Size 889KB
SHA256 86fcfc269c283ce950c43dc9f3a90fdf163e56dbd88d8492134088d1fc48f3aa
MD5 7d6ef6de7573558738775aaa5bb1c4ce
SHA1 9389f9f2f219c327cc2c5676b151b01011551c23
SHA512 59202fb4492c7a55450e311b3fd978f9789a94b25d912969de7dd39c6ae0cc5fd182e87e770fe0e8154962e97f658fe489bee22ae4d7c919e4729da4b2b1c0c1
SSDEEP 24576:Uoos1XIPfQ/PL2icLwm6BsGSbZOhZ+4feDNokY:Uoos9ggC9LwZBsGWO/leWR
TLSH
T17115233EBCCC0429DA21186B67DAF6F6A58F4738BE8B40DDEB606483660000B775DA5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromUnprotect.vsdx.WNCRY

Path C:\Users\Admin\AppData\Roaming\SelectTest\ConvertFromUnprotect.vsdx.WNCRY
Size 943KB
SHA256 d56f0fc2289302f280b54897f65fe34fb61a719c7092f7f5117d9a3f9cda76d1
MD5 0fa16f8ccd7dbdc2139f0c251ec9577f
SHA1 4cba4be6b66c35c3b833292eb6e1f2a1a6397681
SHA512 df2614c4c341ec7650b92ca805f091cbc4f08580f72d8e8f3c70b0905ff67fea21987d1644a9b5373b3784c44720ea8c208b2799a36c45d8eae67d1c9ae401c3
SSDEEP 24576:jcL4xjZGuDfiZPwBLIm6rkMbiBcJqOk0xyy0u:jcL4JePwZnqJqOlxB0u
TLSH
T1BF25333188E97535BCAB7EE085C767280E8EE3F13F7319A971D0287EB8C9952E909451
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportDisable.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\SelectTest\ImportDisable.vbs.WNCRY
Size 1.9MB
SHA256 5e6deddb6f7c5948e97c095349336dbce5dfe2cad4cab71c7739c702acfbddeb
MD5 991cb748b22b89dc6dd990e4279092bb
SHA1 ab2258a4e711fe01034bb0c037e415b9f9e47119
SHA512 183fd2b612f1fef13d7a8f6ccf0e7cf7045adb298d0a8800a51b0c6ce31e415030fa81a9c903d44216673f1f61ec934e8c1ca2c911301b448117b137478b6459
SSDEEP 49152:tGMO3bXJ/ys82kyqXU2hK8Up4vNnPeik55QB3DTztK:tGMStg6oU2m4vh+cB3DXtK
TLSH
T1FD95336B822AF37D75D0303C80AEDF51DAB6A8929C5F374F07820D69D426469FD0A79C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinUnpublish.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SelectTest\JoinUnpublish.txt.WNCRY
Size 1.1MB
SHA256 2661275a5ca453700078bbcb9fc6eae2cf63169342eaea7106c97016823fa81b
MD5 12acb72003b0c2fb34a1c81372573cf7
SHA1 aa02578201bcb2fb3c03d516791c91245dcd5c2f
SHA512 ed9144312a2a45ce7e867293404b0ce75d91ce46fbb33a2405a473711bf4634d4ff58ea88022c6bbecd54f8695f2d8350fc939d6b8c67ac5d123afd9818b8432
SSDEEP 12288:HfjuyvlXJ1scMIubHFoiwHQhxYQTzHvSZQEcfvUCyXO2bkYjo8yoWwhEYv4gLRgh:/jKacHFoPwM8zPSZ2Ux7bpBpU+mkIlgy
TLSH
T1B835333A28AA56A911A4C58F2AD3C531F8DDB08FD67D948DCBCE053D843F7032596FA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeUnlock.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SelectTest\RevokeUnlock.odt.WNCRY
Size 1.3MB
SHA256 fd35433314090ee32fc42d2995608df31bee084a462db66eaab7594170932079
MD5 199974f1198b281004ffc0cc802dcb1b
SHA1 223264040547d4590d6a256e686478a89290680b
SHA512 3145d311cf63046b6f20b5d4e13092b6edfafe9c9cb231b967211fd0383b719f291c16f6f1375e22cf556faf3b98f7805cecf398b52b0483256ddb3341898f15
SSDEEP 24576:yb9Wen8xGiOYpXWe/QJUyiH/84GZQqxkuf/VpvhD6Oel48XfHaQkG8MU34zyI5iT:UAemGiOYdWeNf84pqOunXa5XvOepzyLN
TLSH
T150553302E0E0D8C6857695F9699A82C3607DA15CBC900A13986D4FEBC3FBB67CDC5E4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitRename.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\SelectTest\WaitRename.avi.WNCRY
Size 835KB
SHA256 042c68ab5c85ada5f4251fdc2d4aeda494d9c1b21b970a36ad9ae3e62165f5a6
MD5 24da4792999f669cf8d678a6b1c0bc20
SHA1 3d760125c3f28003933f9ba1ff562893f8a81276
SHA512 4a489e4c1d4cb61a7beae4a1528f5d8313f771bf97b5c6157e2054becbc778125e89d02fe0b33c50cf6374380251acb1dcd61f953fd04867d99f552ccf5cb7c3
SSDEEP 12288:7Uj6j3hFuBelh4PpSgKzghTHN9nGaN2dOdfbnOXUoFDBwj5wnLPy1HDNwWZhyN:gM3qElh69KQTt9nGuxCkCiOLQvHs
TLSH
T1550533001724D3397973F515ACB59FE2F6D539EBB89C2E4842F82166EBA3219CC0872D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendSelect.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SendSelect.ppt.WNCRY
Size 439KB
SHA256 a5ea9bd2cbbd0eb7c174f5008f0f95a7a82373cdea87b2181f7656847e9b977f
MD5 6f0215b8c13ebb9c375ac47c5497d669
SHA1 e6c190ba2e8b77e4709366a805a75763bfb2b652
SHA512 4857315ec347d9055b95ffcdd73c5842f0fa452510656ad3391b633ba45e12a764b0c1d66ab1d4b9d29384575d236cb149f42473310785a47fc1caf9063a2633
SSDEEP 12288:iLYwWCMtjBkhKbmzdDprgacym4C0qaSpsd+moRV/Mbs2K:iMC0jGhKbuDprRmoqagjmoRV/Mbs2K
TLSH
T180A423D057AB9485A0CF80E5A7364E26EC0BEFF3025786287F16B7CA1C3C158E1A5576
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToConfirm.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\ConvertToConfirm.odt.WNCRY
Size 411KB
SHA256 95ee66ffc02035d1f91b5d00f92d03c804a0a3b6a3c91dfc7243eb9402b5c011
MD5 a9dc7907986f32b6bc619101dc52771f
SHA1 0187f797c9b268eab90cbf284b23623033efbe5e
SHA512 f5e6ef44acb885451ea981e2d0afba193dfac57361f20b6bd334550608490836b08d1be07c78d9a5e4997fdc29b9913aaa06b7f241721f506561dcfc9779bec8
SSDEEP 12288:BEPoQrud8hEPjNA+xZgt8XuwYnxxvXPixQ:UoQrLh0BjPgt8pYnxxN
TLSH
T11894235DC90EE4DA47FC1B6AAF2C52114D8F48B8C5D0394075416F8B38FE36B6FA6861
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenySearch.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\DenySearch.mov.WNCRY
Size 301KB
SHA256 fe3efbdbdd3a192c039598fad0f9eb78de3a9a4a22330bedbcd7d609584f8649
MD5 1484bac822c36e6ea157c8593c478ed8
SHA1 fc675cfe5d6dc54cc0feb2a011ad59dea25821cd
SHA512 e7b743fcbe5228099ef72d6fa8aaf8709b19bfb826f9cd3c6a813c7e322d53bbc69f3feb73fdef37012e90cda1c6d8335578ead0f300315bd2f7d57da5cfb5ad
SSDEEP 6144:904whZWb3AZsugoICBcs41ooiLUI0kAKBM1wwoLXm/UC2H9N/mlGo7:e4oWb3A3ICBch1uUoPVC2HjO8o7
TLSH
T1E664237EF9A6C17506B7066687B1543CE141C7018D83CB772A1382C594E32FE7A349FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallMerge.pot.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\InstallMerge.pot.WNCRY
Size 625KB
SHA256 618f1b63b03b16764a223dc205d8cc7bedc1e027d1ba8c4447f3214b44e4b6d7
MD5 5fce0ea7bb650dae5dd4cb0afb9e31d1
SHA1 72d4cc96745b071e204a2ba1ae08d6c844ced2b1
SHA512 d0c8f6fdae532761cda521a73070c3da76d200a2ad32b5d26da81b50431123f06d2ada80a47e390f784c9caaffdf944682de8b7914fb6e6049f3b1a4f3ce52e4
SSDEEP 12288:5T0yxA+qA1lbe1EWJD0vlAe8BhF9m7YZ+fekDDN7SIQUINL7mm/WzhqfU/uZ+Fx:5TPGlAXOZZGuD9DZ+fvn/bIhmO6qfUQM
TLSH
T1BCD423AFB54CFD1A7B9855E891F26740E5CCB7A0B039A51EE30B50C1A214C0ED32E5FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MovePublish.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\MovePublish.rtf.WNCRY
Size 246KB
SHA256 65a9919f92ee2b844abccd0ddfdf4fe527734ff0a29150d9c59a2f64c033494d
MD5 6610e93f60c30fef30a7d7baa4433117
SHA1 a7d88b1c79371ead08cd08b9361f32adcb8ab972
SHA512 572a365d90ac0af5660c18d74122b8771d95662b434c4115d3bc895e6758a9afa42513c3ff00f839979354d07446fbd3481512aacbb37cd50f881433597edf49
SSDEEP 6144:4Gcg5/nM6HPsAoPMTrQ26udtjFMUzFV4sixx:4k15HPsAo0HQnKj3zFVE
TLSH
T1393423FE0842B66F8F4050AF8E274974FA9ADC536043AAAFF343694677E7142E5F4501
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenUnblock.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\OpenUnblock.vbs.WNCRY
Size 356KB
SHA256 a73d96628adaeec7a04c7aafdcba7ffc72a262a0eeebc3811b1a279385ed9615
MD5 80755e6cb2ce0bbecb1ba34f77c1488d
SHA1 7e1b457ed6095b55c91468780bcf1da8f3b5a495
SHA512 72be6ff84b29ae29a1ddeab71c37a750299b5ec03f56ea49a244609544613e5cdddc4cfce4174a96f238b86024cc6e4fca874569173671e01c5631d5b682f0bb
SSDEEP 6144:CGStxQCO23bzUr/Wjeo4L4OpkUKh0BIu6+DxhZlllY5sFTBtjQORumw:CGmO23bzSWKdxkUd6+DrZlL2sFTnlRm
TLSH
T16E74231E3D9A89A641643CB06A5647AC74AC22EB37DE7432F4A34DF1116FF054F22E52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameUnprotect.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\RenameUnprotect.png.WNCRY
Size 367KB
SHA256 ae6cc91ea56a653202002a6eb1d2cfd2551552840cbbf972750d418cb391fe84
MD5 da303a4b42233a50ec0365781d77c3d6
SHA1 adf70606a649eeea16704cb612f91829a48b6109
SHA512 84ab3c64af8ed0dc4ec40c2d6e13413af86138b4c4c1b90cdfee09e28297e4e774ede0240501dc73984badcb24f56b4f72da29b1792e55bff2decf0b4c3f78f6
SSDEEP 6144:+CIxrf1uVV8IFxrQ4o1dgBT7yHRGtW0jbaMXLXXeeLOYb+V2sd:+/rfyVRrQ4WE7yejbj7vOYbmld
TLSH
T1BD84238D11EE859FAC6CD63427BE566F248B3283B1B825127A3053237E8457B209DF17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartConvertTo.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\StartConvertTo.iso.WNCRY
Size 235KB
SHA256 0323ee237d569c616f7a99a52f03baabed547522194053e6ee1cc9f8a461d3cb
MD5 3cf4b15936db865ac9f5cf1685f48fe0
SHA1 1a945c883bbd967828c0e61e7fbf1523ed973a08
SHA512 ae0da56aad45198f4b7b5851bb0af5a22c56298cc585d43ab25a5fdadd433d7de98e6f5ee19692e2dbede21912242b31559b00633e506836522517199755d573
SSDEEP 6144:3T+ljb1fttW/btR9AruXxNAcMA/HdefN5L103zLsRwdv:0SDqA/9e15L10v1dv
TLSH
T1DD34239690ECCF99A7CE48BE72D51EDD24B887452243B74B5A710E162790B0A34DFC39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectSearch.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipAssert\UnprotectSearch.doc.WNCRY
Size 334KB
SHA256 9b976b3a33d8b5ecf6b2e0df79bc7760bc5adba89c9c4007481610c97087a5de
MD5 fc948f1054b43085113dc52183c4aeb8
SHA1 c845c3c1951ae5cef055bf4c12368b49508958c4
SHA512 ee8234da094224c8c0f026ae1381c3edc06dc923c2e12d20a5ed45327332f8b861edef16e5284dd97fd09946a4a31365eec54040d73a317b3c11c7919ac64601
SSDEEP 6144:j13QVxWfaFXLfL5/LNNaec9QrR63vXo4dsntFJ7Yrr6ZFJlexwkc7CHqfyUxraz:p+xWfaFXLfLBTuQrRMBdkvarrIeFc7Cl
TLSH
T10874231DF46F4CF9C5890AC111A57B5F4FD9FAD26C9C08946252FAE2CECE88277A0385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableSearch.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\EnableSearch.wmv.WNCRY
Size 795KB
SHA256 f438ab6e59512d8c9db22a8d3b70800befc6d28b7ae1ee4f983867e4f127d7be
MD5 02bdd676295229ab4d23522d8488271e
SHA1 0bc98f974739eafb270d59b9ffc71d39beed497f
SHA512 b6ddc5e635ce0e44b250b283be23f278485478d25054462c98745f5c8b97112831c2163551e5e7e19cb03d108e68bb8f142f0c3b80d1c13e0293d44f11a61f57
SSDEEP 24576:d/Icr4oL0YesR0tj5ObephLpEoZ/FrswDZHBJNslP:d/IcQYeG0tj5OGhTfAgZhJNCP
TLSH
T10A052349FB66D932291DD06056089DACC59B19BD77C2A6FC87B5DBBE5F2C09C0820CF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureEnter.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\MeasureEnter.wmv.WNCRY
Size 296KB
SHA256 658c5ae76f2ee02100b9d5a780a4bbdf93b0dbcb38844cdd662e13d1cf38fad9
MD5 1f8ebe86c142aa86f50ad643239a4289
SHA1 81d571bf36295d7c95a40b3fd907e61cce78dd6b
SHA512 fbd39e673485758f7391544531b7148d6d673f715e0275107698e9de677450a364ef04d3264876a7d1a9987ef85f1291dbe29582b5b7745fd98aa408af05e45b
SSDEEP 6144:LUw//CbcIofxEQ0qe4DftKOCxTHcAIzPVp27SA7H9k3qNB1l:d/ScRfn0qvtRbW1l
TLSH
T1BB542333B6CDFE2AACE66CA05B7BBE2B7A8C57049E6C3D34F55C4EA89341D40805C245
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeStep.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\MergeStep.mov.WNCRY
Size 546KB
SHA256 194c3b836534414bdd98a7cbcb3bf850eb1535d695f8affd2ec58a035429c691
MD5 2cb00cbb5ce411619985c119455a608b
SHA1 355dd8b2dc05d3cde53451b5831cc90c21d9106b
SHA512 bb13e9ddc2275f295a37abe6199a0f39f8d0184b5b398c4a2d2a89296804d5c6f35f6f70aa09c6ae1558a4e2667e0fab6cc9b014494e5b69b103bd3da01c3e41
SSDEEP 12288:JnygRzKgU/uEksXmKi1cNESwn3RkNeQwEXRMDhLtFg74GEfhzIk8Kb:gg38ksdWqSnBkbuYWzIu
TLSH
T127C423C7B4BAFC68A1134685AE1DB630F4E4D2F5825EC2555F3E06BC36BE31942C6A43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenRemove.asf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\OpenRemove.asf.WNCRY
Size 452KB
SHA256 b4742742402b87153e28840554e6a687706644921585d2fbfa87c0fcb9b01a91
MD5 79c097f31c0e518e20b76aa8a1d73625
SHA1 29f410fee6cbc2b2b3e2bf8ed398e67fc200641d
SHA512 5d9d88a574231110b7ba0d92ab0f0907cab1118ac8b2a3e90d6aa38bbedfc3c45b114db34c68ccb0edb92c59f692b3699a0f17d2fcf4b8df0c0d828ca346e684
SSDEEP 12288:uUIerL7bk+S3F48x1G0lfcSuFus9zjB+b9ctF:uIv3m3W89cSsukR+OtF
TLSH
T147A4231BA5B3B2FE38C2A229D54165583E11B0142091B90665BFEF0F5B8CCFD999F53C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopConvertTo.xls.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\PopConvertTo.xls.WNCRY
Size 421KB
SHA256 49321263a33060a267824faf16bfb53f32563541a183e911641b966483b3abcd
MD5 b4bf01c9cc5be47e3408688aef5e6cf2
SHA1 c7ece24634d78fd5a892db1aa2463b3a64774186
SHA512 a912618c57811a1c389f1d207ed1581dbf7b2ae9287bcf49dca853c629e530a4f7147dd4e7bd645402e376274e134d7dc0307ed28b67944c27747db035ac732d
SSDEEP 12288:aReQ14WFu5okMMhUwVshu5UcBOhkAaw8HQ4Ck1:wtu5o4heWUcBOhk6r4N
TLSH
T1439423858F3A9A0546006E7797328E20269E7BBC9445AD33CFA70C975FCE276F791B04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestoreClose.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\RestoreClose.rtf.WNCRY
Size 359KB
SHA256 4d8a432f29861bd654c5c1c171d034bf176406d08053e8bda44528253e156ff3
MD5 e31e491d2922dd63bf4939542f53b151
SHA1 f863bff58710fd7d7a0dcba595fd424a882635ed
SHA512 b1e2160007fdeb0fa1fe1de372bcbba00907d56a11c8bab7a6f1b6666c5d64bfafab9930e53bd273eed17afbfc45c35f29405f02321e3e1d5134713894d028cc
SSDEEP 6144:7B79FnHbG2bPXMfVyIdh0ikoogVV9qX29lOGtCviE/1vw9iSaMyRy63mSV/KftzG:t7LHb/LXuVh49onBqX29lcvwfbyk6NV3
TLSH
T16B7423F6089AA628AF4191D7B923FF6D2C4F1E44E9D5B250FE219CDA7E2308571030DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchImport.jpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\SearchImport.jpg.WNCRY
Size 1.1MB
SHA256 fa0a98a49c38876ed23d3fd871ce50b58312c26c134820705b8c73c697f54b00
MD5 eecfc65490b3d0547b2ac88d43b5fbe5
SHA1 2044163f8d29d0cf9e417d40d03e70721d055780
SHA512 9887c93c50b9779337ff41ef1bf87b76e235ac21fb9eb86f3470b94bd1c12530404ac93b7486d5ba8a2ceab6655dec7c304bee68fbfe5a51b382234bfb75e29f
SSDEEP 24576:dea3rho50YLtuvQ79VnJvFK1URfGhFGFnuYOCw6EOUlXGnI9HB/Rgu/:deKhdGtLP1sU5GaZO6EOGXBd7l/
TLSH
T1434533D041777CDAAF27B49A1C4B9DB59A5629722A49FCEE54F188833301C8FC73224E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartSet.php.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\StartSet.php.WNCRY
Size 577KB
SHA256 08c7d3d14f598e633aad0b4e12c9c715c8f59568e37600482493efcd811e3a5c
MD5 b5a3c11374d98ff1363a2be6cf1da145
SHA1 e1f051dbf167d7b1e4c84ea6959ebb5e9927afdd
SHA512 eebafc577938d35e3b46356168f57ae17031e9c40d4c84c95fe18c2e5bdb44c0008cdb3a8cce11e45fdd73c6216564ec9a2deef846a0d22bbfd3189e3f713d6d
SSDEEP 12288:WojdZK83iORwfqv6QE1oDAIzAayk3pYl0L9ierYv9qBC6fSxpZv:bZSqiQaoDdAa3ekhrS6C6fSRv
TLSH
T136C4232157627C4B605828F3C94F7E4703EC83B8AC2D526FDA5B87877926A5246A73F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitStop.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitDismount\SubmitStop.bmp.WNCRY
Size 702KB
SHA256 66dbeaafa7df682128a0c57b0fabc34f304509538d10781d1bc13b393c2d7963
MD5 1cb990a3ab579aeabd321dcda554a4a7
SHA1 1e8caa40f1fac0c3e97c613a60d3946a9cf329a5
SHA512 9b33a708a9953dce1eb07465a2fe2a70702115d6e42c999951f0e41566145333e94274e55a6bdd2add1c82956f2ac6343b12392ea7dcced3a8419915e1c24ec4
SSDEEP 12288:8K0sybjxoQj/J6FHZj4et+OM8XYzhqTKaZWuXKRqlaY+98HEmIG:mfH6Qj0He4vIzhqXZWhIn+WEmV
TLSH
T1AEE423F02F15FA2CF2BE4EA32B7D43DD1861305ABA5B4677AB70504A11D5FB6123282D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableSwitch.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\DisableSwitch.zip.WNCRY
Size 663KB
SHA256 47892fe84d3d29dccf7293dd88b16622c9270f465b98a95b86c5c68370aaadaf
MD5 a3cb910dc7ff4e859a7571adc69ea4ea
SHA1 86524791e0498d33a8c1f5056748425a791d3f62
SHA512 db81a9ba2deff64dad811e18653fba3248ef158a68008286b5dae1d005e584c131df2081e5331d65f44355faa4105d4a42333a38941d31dafff2aa20cda5951f
SSDEEP 12288:SthOqX4IAFVR5HDbu0MzZ/K+cSfcY74CMLUh6JVF88r6+:5FVTbqzNBd74DIs/X
TLSH
T141E42320A27295249DE53CB6484DFA008F5D7A54713A8F85AFBED2BC3C4DA51F1B13A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandSelect.7z.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\ExpandSelect.7z.WNCRY
Size 790KB
SHA256 d635045e513976f7820f9de9a1f2f994f7437b90ce51a1450986a2312e7a8b35
MD5 ecb797b1f3cd5b8d0aae00a4ded41037
SHA1 d265a6be10587cc8871c24861c4faeb5f784ca5d
SHA512 dd273ebf3e7b6f924c5059746402a321747a9937d0b28baa89a57a592c46ea842b9e5799bce939fbe2cfea56b452baa8e3f773b3a75e5c997bc207c50430ece2
SSDEEP 24576:snyn3qC2+imMGyZxXYEBP+r3nyueeMAoSdilBWph8A:y613wJZ83nt/xdiC38A
TLSH
T1F00533614053DEBD6220F983E60E35C86F5B6C7435F6EB4C83A4017B53C792CA29E6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveInstall.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\RemoveInstall.bat.WNCRY
Size 758KB
SHA256 fac8dd9fb00ada308d69299a1d154187e757f8be1c5ae91f14dc10ed882f22eb
MD5 50a871965e54fbadd475f83925d0ab9a
SHA1 5cb29cff4ce4997ea8f1d0ac71b668ba673f278e
SHA512 50601d87c97ba5f8475723d3272aa2c067059a2ec23c1cf28737dbf790cc01ddbab6672674dd7eabb4dd74494d2570ec7f029f4245d9c20b3fdd80a4f4e74526
SSDEEP 12288:pIKSiJo/P2JpzzP7U8jmNqI99HEg//HYDF0OabJDU9NIP4lYyL2BelRq9ttlVvNX:BoI5Tpcl0A4h0UeSpL3e9tlvN
TLSH
T143F423AE8E4E9E65D9A1EA48035C86C3DEF8813130F141769392F6151BE079F790BA3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeUnprotect.rar.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\ResizeUnprotect.rar.WNCRY
Size 569KB
SHA256 caf3069599c287ec3437024950f8cc70be68e8908b154ee2290dcc629fb8a40d
MD5 6e29059b2f2c32e2802ec57ce0402449
SHA1 7733570f688084bc94081bfdaf858053bf1f08db
SHA512 b76eaae491fb7cdb0aceada1e1d2d81ce18f5a9b5bc9b5f8d6d3033242dbfa62fd4e83d6b294772c0f911a58f042a7594c7d101cd462eea6655946883c8ea7c2
SSDEEP 12288:uAnSfoNYWkUm5gxVxpevpmK5UYNTMuEwV4IOAWfT9bEy6FM:Fn+oNYpUwQ/YvpmpYNTMuEY5nMNEVC
TLSH
T177C42312F1E0D8A35A726F09C3FBB8DA39BCB92981261D49C513E61407477E3BE25F91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendCheckpoint.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\SendCheckpoint.mov.WNCRY
Size 727KB
SHA256 fc9e194b8a3c3e361d72d65287590b39a773437af706ca4fb7fbbe2fb85b6471
MD5 d2328adcc780c3e559683c023f3cf9cb
SHA1 e9b59acfbf1fcbd3d18f8599b1530fbb0341c4b5
SHA512 59c02b59579140b3a666e88dbb75ee041330ae159baf18c5d7143390a2c9ec97d350e71b6f21c8af48246813b27f1fce9c6f03ebb73d0490bc77268044de0c55
SSDEEP 12288:WzoHtq67H67EP9KKiH+GGV7evZfHyvcMgJxrkwQjvA4i1BQpWV3q1fEpoCQ:W+bb6LKc+GWKFHVMgJxrkErQ+acy
TLSH
T1F5F42357C6E1ED1E9E4897E612025C74FC9F5A31CD3C19178E7ACB8BAF290C3270A54A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipTest.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\SkipTest.txt.WNCRY
Size 1.1MB
SHA256 b882b06016755e6720d211041729327c38f15eaeb33105ceec83855de02fdb85
MD5 681eed86fd6d4f848d8c9bf156d88c83
SHA1 ab94d97c9feb951c3c76d3b2084c2c000cd0f608
SHA512 2cea11adbf6acbb1acb1b439afe318a3788ba53ed3162cbcfcbc93fbceae30dd3a5d44db21d2befc9ea8e294c734527084ce34b7296fae39d54d8eac33138b44
SSDEEP 24576:m/SxihrkTe8gpuK8hx0eEyflUkTM+VWSn6Z3nztdl482xQ9MMB:YKih4Te1uYebflUqtWiC35H9N
TLSH
T1653533EBDB41A6A74E8C4E7973A19A276133D72F66C52D90798F4264F2C5FC301E8270
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoWatch.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\UndoWatch.mpeg.WNCRY
Size 316KB
SHA256 4831b770fee04e2105ee5924ca7d61e3ed136410fb6e31e18664411867b7b5a5
MD5 347640376095b39f4244f6292d20bc32
SHA1 d4b8459de6a2459e56a52084bc418150b31fe8b7
SHA512 2986f36bc32a3dbb78c79a18a4f1ce42aca142c001cec57e18dfa57c97a613d6b19ca5f79488c01bf1295c2ececb48799625c9c3bb3175a6b4b49bab4887a22f
SSDEEP 6144:NKzQQTtEGymFF/wQq7b2WTfo4y859XJ0AOQGNQn4RRq9fikOdYHH//vS:MzQhmFFYQqqWTfo493WQn4Rw9teYXvS
TLSH
T186642345B0D11D61673AB0B217CED65FF5388126EB2EDA293D420D2264AE234F4EF778
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallPush.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\UninstallPush.odp.WNCRY
Size 284KB
SHA256 cfd52b4169a00c265b99f51348261ad3363dc1bef01fb8e29a8f568bdf46f966
MD5 7b35ec02c1dac2cb97edb2eb95bea63d
SHA1 b1e10bc723f953f5ced581eb74f601926d318601
SHA512 0737bf6adc09e2171eb68aceddda77f12f2f1f35740b1bc7bd0fe6db05f474694af075b5f476f7a5ddb5bda18ac279f3e4db5f22d25d8cd9f385eefe7e91c6e5
SSDEEP 6144:4wGWTbkm7XuWbaxjBrsfxCs+qiZYAwLmQP2k+Nhw2lCZfv3:nGykmTcTrzuAwLbPVsO2oR3
TLSH
T1425423BF148EAF139A1D0215372ADE9EFD70BEAE5802E7931CB4E5901C3735031A56A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockSkip.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\SplitProtect\UnlockSkip.mov.WNCRY
Size 474KB
SHA256 e1ce20f75bd4d3e05e7b41cfb72d889ee228d379c703bf76bd4f508a61d88890
MD5 33789a0126e799b8339111ab32594984
SHA1 3858c58c42237496f98c7a635032d2f4b011fb4c
SHA512 d6165e2c909e761ff1751fed0f9cdefe9bb801c55b40aaf953d899625b9bbef0556253ac2c6ce45c58e8cab5d98a17fb8ed64c899562cf02fe35bfb1b3577692
SSDEEP 12288:uTGYKXSGac5wzVY7qOrL+8qSTwk/pVtf0Hysdk:uPK3acOzVYrrqOFsdk
TLSH
T186A4239AC980F76A35C2A69D0E96460BFE5B6EBB70CF452996FDAD003D706C1E4083D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddReset.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\AddReset.odp.WNCRY
Size 307KB
SHA256 cd731430dccf4c6e85e382dfbae35784f0765f38ca1da3aa278035af88c457e0
MD5 3df15c7e8294b05fc53645aed9eedfa6
SHA1 9e5dc4e4da4b5d3472980b5da74c99d29c3e13c0
SHA512 3b6cc5bf1bef5be4ffe1bb97b044ab51ea9b2c74d8c843f8ff4619dc4a25d9bc967df9cf9ee100f787afd3d5952699b08a0b6b3c3ff426b4c214ca98a089148d
SSDEEP 6144:0bgpOdixMRgWDJJvL7nLSsjepLzB4vdM/DTHxgPSlPS41/pv+ai:I/sqDHLvjQXB4vC6SlPVzv+ai
TLSH
T128642337C107C97F93A1F17687DA93F589033711A11182EA1E8C15AE4D28DF9A6E83B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseInvoke.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\CloseInvoke.iso.WNCRY
Size 151KB
SHA256 1655ee6dc9376b93bf4a90ad3cfe9c1f4b2e3427453280e79d91b61f65430fc5
MD5 19b3fdf72311c81fd993b801b5a861a2
SHA1 bfd222c3f52e94a822e9ea23d1b4cfb815772a49
SHA512 3738ebc30a7f812dbb1aff45b6949fc1ac68476ed7e6ab65308e1675576b51b4b3fdeb7262f54be0c2d397ec8567fbca1c657f3be0f43dfd88ad0955f3dfe071
SSDEEP 3072:vfj/OvVvIxbGoRZXg/dvHukeGqBj//LIMXryX++kj:j/1jXg/dfuGGMMb+++kj
TLSH
T115E31208BFBD0627E1D320BFE8F52D6FD1B05AC445C9C6426801926B5913EEE314EBDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromResume.vsdx.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\ConvertFromResume.vsdx.WNCRY
Size 336KB
SHA256 74ea5bc373d59d16b51f5133048e192840f92d68fa91e26ba5ede184558df183
MD5 3bca24cb480021b6c18693d6787e14c9
SHA1 93f8a352179e9adca47bbbc0aa22ab86f44b8342
SHA512 6e08fc57b94b6ac19ad18c51b0756f50895ee0162ee4951b944459bcf5043bafa7a5718c8165e3b7e5d68430b1283be85b5341b8c0867e6d96b3779f74498140
SSDEEP 6144:IsGl0hUSgnYgnDCkB0wCJAexxrN6WsfzqEft+v5cNyrjQSPnLvzWJFLjrkff2J:IsVgnLDCkDCJAed6VBchcmQSPLvqT+fI
TLSH
T1207423E206C131EA63972F33974965220E42EC5E8D94451F77EA4EC89F1D7EB4B234E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountMeasure.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\DismountMeasure.tiff.WNCRY
Size 355KB
SHA256 158adba93f71cef913bad6cb6e43bd14e1cf030ecf760ca5874d00a420e8785e
MD5 c000dbaa78a0404bd5701e5ba8468d64
SHA1 0b2f277b3c7f16a8158f81ba935f75b82d932da3
SHA512 1541f2281ed542aea4d1d6d61beac69cc0db0fc3e3c051ab427c15a84299a686b8bd69afddad32eac2d909c577c341a9adaa24dd32405d0d2c6c4b16c858dac1
SSDEEP 6144:hUmNc72GdVCg+MelEf0qO2BpDl66G7ofXxt61rBA72H/vJeoPEXuCb8zcVOXLHiP:COc7bNolEf0qOYpDl66G7+XC1C72/he/
TLSH
T10C74238E25379E1670E0842AFCE334BEA05158B7D55C572685F0E2EEE26B8F903E17D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeRestore.docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\InvokeRestore.docx.WNCRY
Size 326KB
SHA256 ae2778bd53ccbbf370d825bedba1b7828b3c70b74b83efc2fe14b8101f8bff15
MD5 d6823c09c207c97e0872a0a902c1453a
SHA1 7f2f6b0c42470ce3f2a95bc8b6d5d79d03a31681
SHA512 349e951f94c183c5e4d77d056b8fa24adee80a6885810fe4fbd5fb3381d6709f8b0e5908b454b6e9ce5bee4a8e16b04330d26a47881469258e8539b2d3353c11
SSDEEP 6144:7yIZFTuvpts7TFGv/3dkrzh6Sa23Jb9SN3dH9WFjbFgh2ycIpy/DHsWxFXPA2Ote:eIZsts7TMvdkrwSnOddCjbFhtIpeHsWb
TLSH
T1526423DFEB41725789C38CA05EC01D8DD6441EAE53708E674ACC6A78DDC5A4E3D83BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountClose.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\MountClose.wma.WNCRY
Size 170KB
SHA256 36697be7967de253755ffea7d2c67317e33c85d9070d49755cf879d943d308a7
MD5 8b6475912afddb13a4ed29821584b56f
SHA1 e447dcb5b33d78a206974e60b7637ba1ad28ab74
SHA512 b9459205a9bc42f11b3745e0e13dd5d3eebdcf539f3757e7317d025b04c622a7f2414f292275b5c72ade58701ea11ddd085ba20bcf48d6551c25161d2be0a3b9
SSDEEP 3072:gNy7erChganRNzwUNKyhRP4mHEcuR1LvLlFBwAxO/OlohYLXWlKhgI9CfAa+:gqDJNcUDHp6hlFBhBLXWAj9Cd+
TLSH
T1E00423EB203585C9DE6F1722F058947CBD6F434505A6E727602A92F860FA538AFF6630
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewSwitch.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\NewSwitch.mp3.WNCRY
Size 238KB
SHA256 b0b268dd2a91d020b18e93cf4af95b56d166bbb81241de6d79cad17906981d3b
MD5 2244b913b196081228157d6c72028bff
SHA1 b323a4e494728fb667c44b7f504efa22eb835eeb
SHA512 8892dd7e3690bfb4d6696a245973e68a29f7ecc0499aad1210fc73ad1b560c7f671e702d9d297bac7555cb23a54435e42632aadd906c9609d883f027e675f208
SSDEEP 6144:yC3vmW01xKSmZIT5xWevoavYeitk5Ckrxo5KJJzop/3kVVPl:yCfmW01xK25Qega5i65CYiKJUiVFl
TLSH
T10834122370F654A64E18A559FFE801A2DB035A53482D0BE76A0806DCCCA5F8B16FF7F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterMerge.csv.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\RegisterMerge.csv.WNCRY
Size 297KB
SHA256 37ddf74b99e31d605b49972f2c628b5f827cbcec1c4f24a1b782a3a06cac9019
MD5 1fddbabd653f65acedd196aacf74f294
SHA1 17eb4aa67653e463ebd67edb8f31531a0763434e
SHA512 9fd01d97f9db3a722bcbd8cdeec49c5606885e9aa5f3ece137a307ff3b539e6a130722acfcf1004f04aedeb694d073d01e26723f8012084120c10b77f6c68bd6
SSDEEP 6144:SwC9BqPu+4odpR947Em0wwEL74TNdxGWo85gVPkZSjMldx:SwCHqP8odD9IEm0en4TP4oiPe7
TLSH
T1BA54236EF8430B64D96CA2F695B13E84F355708DD00B9401E5286C6C3874AFD6FAE1EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestCompress.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\RequestCompress.ps1.WNCRY
Size 180KB
SHA256 c7672004c5936efcd031c0d57abf8ab75cdce3b705672dee2b8854647a33fa61
MD5 3e0104ef8d9ef6eb6e5957f6dc3b3147
SHA1 ca869877be3fddaefdfef2165a0aa36ee5c0bb00
SHA512 375b338aa84b218608a665ffed20a23a34dcd96709634ccb9fdb2d0278de09d2474b5769a1d865100a6f46bcfa3bb79f5f849d5aca9972283e0d8d4f9b169113
SSDEEP 3072:O2fEzhzBOVDnqyMux/27JOtYbrgirNDHNc7OthhzoZnAGnxARbHFSOnO1n:O2fEzh0VqypxWOtQrgi59thhzo1AGx6o
TLSH
T14104121AE2EB3CEE569C6B48C0365BF96253BF6B388500C517D73C0D89A115530EC6AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveExit.vsd.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\ResolveExit.vsd.WNCRY
Size 219KB
SHA256 875f43ecacd7c741d5a935519d33eb6a463a2b1c7b4824c29b6b2c1ee2d46f7e
MD5 550201e39551f2c22c1aa681179dc6c5
SHA1 543604ba3d3ce0e4d623b379aa7b112197406bb2
SHA512 aff0271ac894cb05bc10099a41be6ebdfb6a57958218a66c0e69fe63a46307ad14232c62261ca5ac64ef6504b7c55572e5fdd867ce56438a5c3c43f7b386019c
SSDEEP 6144:qOHphS1NBONLnDTYSAML6rFEDbsUOYdsl:qCphSYDTYW+JSjA
TLSH
T1B32422F30808758CB13A4ECF8D452DB266D99B6A759A8F9902D05C3CEB7384F346E85D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeLimit.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\ResumeLimit.js.WNCRY
Size 277KB
SHA256 60a93a5bd5aaf330532d702e96bd350f9abc66b168e8a09e976676a0c017d122
MD5 869f4c1a017b31db6459240124c758a6
SHA1 2709ef7cc3ac3734244839db3fcb60e4d21145f1
SHA512 55e8c9e2e003fe433c85b03671807d32638b75f309766078aeb135f6c7fe8e5a19e160c47454833826ed784b05b0d780c9322fb1ee839d29223a4fad3ab65327
SSDEEP 6144:9zZBaQhadiFh4m0Vw7LhDtj2wNRZAq8lTUfejn4OK7:jBB5h4mmw7xtj2oRl82ej4X7
TLSH
T17154236701AA6ACD2601690CBDFBD7FDE24CDED815CD46F80AC971FB8032D2CA061866
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartExit.potm.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\StartExit.potm.WNCRY
Size 161KB
SHA256 dfdb305243a7e8e1fdb6f09b5f84aa9f39bc8f2559fa3a712fc33003cb90225c
MD5 f6a718e81c1171e1de650348a322327b
SHA1 9e3ebbdd8deb1b522e3c4ca8c452d13eacc3f92e
SHA512 242ac6b7168270773dcd749917a61057d218b68916a00267c40b8b062df7728ac9d638f44eb0e63f658715cf24373c6839998d1762108ff34d6afa51945a7b9b
SSDEEP 3072:etDjKRc+91IEwABAUr0pyWltTw6Gz+ow04/vd6uzrP4O/3Zly/tU5L:GDjKRZvtJBFr0p3XozQtd6uzseUtG
TLSH
T1B3F3123AC7E2DC810FEB2BC5472E87A9D01C86854F8B00B746D19E8EE49406E562BFD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitImport.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\SubmitImport.png.WNCRY
Size 316KB
SHA256 60966936709163c8ee9a3183c09a8bcb36cbcd14e1a48ffa772ad070c0c3f2d6
MD5 f3c9263e00c8e6f8d66b2d18c6db9c4b
SHA1 de581ce36df7c7c91bd87ec21be65708eaba8b40
SHA512 7e3670ad2090d4f9f9c3b8625a418013518c050e98f8146446b274443dd32eddb4cbc8be0cad9eae751cfc0258939b24767885dd666f792ad30da2f292224398
SSDEEP 6144:Gi8a5brj/05+xU5Z3nvl5Uh/OUjemqI7L1p434TvoP0VKRnsGTR:Ga5brw5+xUHfjUh/XqYw4zmmKlsw
TLSH
T1676423A3997B4993453516A53DA9D3730D82F93E8A90C0FF398E87680515DFFEC38452
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitSend.ppsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\StepConfirm\WaitSend.ppsm.WNCRY
Size 346KB
SHA256 1b973fa84672bd444c78a980cb9c6305229c26173ae9fc579f279f145ccb96ca
MD5 142eb2acc3dd064797c7563cb3a715cb
SHA1 e8273f410ab9b598c6b265a6adb1c8ba5ed16f96
SHA512 ac88bbdbab8689d3a4b882207d625873e3eff436f7235446705394bb63a4a148b9e4368280c10280b0dc079318bf198f23378bf4ae01c03ac56cb6a2c6d40421
SSDEEP 6144:j98KU+13M1N1etamwWJp5B1x9TSfgwkuAGWFvbU7b9++UI3jHyrB6ryq:h5zwWJpv9TSfcFv4++PzSryyq
TLSH
T12A7423C9EE199831D4BC079B604627905BDDA754258B03D3F0CF7EB264EEAE12C65B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupUninstall.jpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\BackupUninstall.jpg.WNCRY
Size 150KB
SHA256 6438d194c59af0aa890f1958e49184f13941958d0fec04a7ea5103352fd0ab1c
MD5 a94d08f49a42209e381562df5b44f9e2
SHA1 ee2346961e2750fe18b0e5d2efaa33fd43307395
SHA512 a786e389e0498242172fa0c658f83b1f6e621bc27f306d22def47049a240da43f5c7574874c24451ad4f4a0258e0995506f1e24f613b0a602621fb2952409011
SSDEEP 3072:MOvbED2ZhdayAao8WAuyu2+GXoxb6Jz9EIOJi1N0ov4g9mfKX+:M2ED2Zh5gAwGXosxaPSNxAB/
TLSH
T168E3138C518AE346F87F08BF884628AEEEA6B5554DC1FD101CBBF4ED1A3550C8725F82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseFormat.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\CloseFormat.tif.WNCRY
Size 266KB
SHA256 3c860259446ceef62f39f01d737fa6333a81b9ec82965ebee9a4d8884d42f219
MD5 3c44f45ffd2b789cd17f3bed203044b7
SHA1 760a6310c8d0708f7d8d9365ff6325b21528e90e
SHA512 c5ae4e18be221cd3193ce3ea2eff7cafec0050df84f72936484e0f788280c50a58c53af383cae6bd0b1d365b90c04adec900c33033446ca9ad7dffc63743b6db
SSDEEP 6144:JyBjj/rfGBySohtzC3M2LG1j03ilzM32FW9x/Q:4hj/rfPSctOLG1joCa2FW0
TLSH
T11B4423A6C3355EFE00B1303261192ECF8A7596AF215685F4BDB53A36CB6041EDA734CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupWrite.svg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\GroupWrite.svg.WNCRY
Size 295KB
SHA256 12b247fe365f9e0346e9def77611b01aea5e07126c431c5a9cd42dd83ecff4a5
MD5 4609867350fd3679c00d3b74a43a0d0d
SHA1 2a73f903d96849f5f94f31c88f1bfe5f068306b0
SHA512 6209543e2d20245e951042697dcbf9425b305889a6825c79b16d9e3f69dafb010b9ae06a695e981f59256d3cb8fa04564f9dc7473533e6e524815b960e672a19
SSDEEP 6144:/oPKxjsY4FwulIed1kLhSDDjKYp/GywGMAz2g5ltnKIHgt0:wKaqS1/Dpp/GlWpnt6S
TLSH
T13D54235D29B23DE0EE63CC8582DD4609058CF5C65F71574FBEE900878867F8B02AF9A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideRegister.potm.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\HideRegister.potm.WNCRY
Size 208KB
SHA256 7e6f78f051413a69bcdb127827ae946d03dd0b48aee07f5b875ac619eff06453
MD5 bf03a8c1e95b563f267ea5925d3f524f
SHA1 50d8590042842cda711dc757ddfd505f19b91648
SHA512 1273c862c4a4f0954dd949900ae524bb63faacd7d2b7c8ca67f5df3f37564f233b306f25ff549664909fbb15443a92c25a810741e5cac54f277072fa934ebbdd
SSDEEP 6144:3Hz2hujnHVPqTrg5BSrtq/bSlR4eT3P4W0:3Hz2wpA5/P4W0
TLSH
T1E724125CBAC706F1340541E160BC964964F6CDCABA9605E770E3BFAB8A43CD1AD3D16C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewResume.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\NewResume.js.WNCRY
Size 305KB
SHA256 55b8d40e40acf3ffa5b896499fbcfd40fc041bcc339026fbbbe91e3d1c42e224
MD5 95e622fdef867d97cc74dfd08fb29438
SHA1 89a84285b36a59e84c814807480cad30a8cc84a5
SHA512 a71999cf6f75d4930765665ceebbdd32788ee17f76048f2f16ab55b781f762a856cc239aea0c078a905b949a1b70887e7e0e38b84023c9a826ec725519f0d2ec
SSDEEP 6144:Jo9KxTUgjN5emRAJxJF6DJTV+vS8BqDIjqGFrTiYOBY9avA6PgEQJ34:JuK9janJxKNTVnOq4Fni9G9gAJEQJo
TLSH
T1C86423059ECF9FAA1B9199943772DBBB04C9649AB403C40C8DBDDFB2759CF4604C88B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushUnlock.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\PushUnlock.png.WNCRY
Size 140KB
SHA256 434f4b58a36e55d8b8c2a1fe180cacec63bd39279b6d488c29518777c4011b9e
MD5 7ab3b1d26a8750c9ec524f8d30b90ad2
SHA1 7108a7989aacbed50d83308952f8edc0405034b0
SHA512 e0ec9820eae8f2430157d5b909a02e3b9d900b68038cb1d77c959050c98c6289f0471a876ddafbae333d0e1fe87fee09ca8f5d57908002a1cdc245d2cb9a915a
SSDEEP 3072:Zae0+7RKV3YEYOiiI4lJrurKtmqQfEBKSxup81vvz8fz/:EejNS3f+KrVT5Q6881D8f7
TLSH
T158E3235428C6305F1F5C44886BCE751CAAFCE225D86DD2B6D1E03DA9D8F308B4EB4A8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterEdit.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\RegisterEdit.png.WNCRY
Size 237KB
SHA256 f4fc0af694c35367a8107859cd87f7e94d6ff0b751cebad40c0dffd616796495
MD5 ef8ec91886a8d12e9a164a74e35b1608
SHA1 f33d1ef649e5e3b3bf3744edde07da19540f60c7
SHA512 315f9057d99fab484f41fd1811f7a0e7483201de827d4e582988fb873983bad740e7616124e5d55a354e7495141302a3ed6fdb5a0f3c54b56c01efae9637bd73
SSDEEP 6144:W5Y2JTSE25i/a49BSvQKBC0VypuRqKTQhXUb3pr3afQ:W5xSZ5hNlUUQFI3pr3ao
TLSH
T1F33423592AB1E1F32DB0A03B30BE4EF38A5927358516D36133D294DE3919654BC90FFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetConvert.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\ResetConvert.ps1.WNCRY
Size 111KB
SHA256 02c1df83290d978549d7399eb039fa643e09ac96c6c30191f82434fbaabe38d3
MD5 de7b8f648d397fe95e3b5cd189710077
SHA1 bf80b72c86555840ca716a777d5b957d1b9fe84a
SHA512 b8129910b0d934877d2a40e5a70558513d50caf6d241af2525bb64fa3bc258a585c3c6ec83f684a4973edb1f09b7152ebe3e8116355a657eb480e3b2c51036e2
SSDEEP 3072:8MOEiZavlGtRPy8usGyhafTWtJ9JWwQo2wklX:0eA0u6WHi2Ve
TLSH
T1B8B31263412E715DB02B229942D1DD236676D279180EF340DCBA0C9DCFFB7AA96D086B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchStart.docm.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\SwitchStart.docm.WNCRY
Size 179KB
SHA256 635a5fc0cbe9d0964501d75cee1097f9fb7ce4607270d6dda88d6e9a7122c7c4
MD5 df5e10f1c2f3d835620cde911618d804
SHA1 2be2f97607cd8dbba837513090a247a02f8f1b94
SHA512 1a42b6fb763d6f892355de54dbb6d81127252df2588f665bd6a0c6d5d7d8ff22b0541361560320ff906ca09fe50179cd803072450e88d543e14f939dc68512d6
SSDEEP 3072:oBYRmEAE/p666zaT22CMD56ZAuEnwdxIuVmM2bNP+A+M2TKvUkBbO0kuShGLk:oB3EBOdMZnwz3U9mKM4bTkwk
TLSH
T1F004220647B36E76ABBCDACB8FD0B510B7E375603F4282A537496843936406F806BD86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceShow.pps.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\TraceShow.pps.WNCRY
Size 159KB
SHA256 68b18cd4daee6d877aff839f783d72c4250a81a7042f8d4394950d10ee0f83a2
MD5 e0d1476d42135bb286f6154022b16220
SHA1 e3040846a61dbc1b2d52e605b63f5c69320a9192
SHA512 1cb4bcf1f9b0a38dab95a70cdfc919507627c8ef96a599df9b0e3a28cb7a9808ce1dca0b6966a5f408f479f594d74f6047945ae59af9e8ec7c89be3830241a50
SSDEEP 3072:lxpX16EM/5o3IaODsv4bJ4JtaJcxLtYrYH+ANdytu94La5DAUybZcDFAMEE8V:lxplY/5o3OsGAxLWuN4nLpUBDFAME3
TLSH
T1B3F3134020687A6ADBD650CFC2AB7F270C9956E51A0F99E8803E15C7CFFC2655DA32CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitOpen.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitRead\WaitOpen.tiff.WNCRY
Size 285KB
SHA256 1b832400b3b580d31aa80badeca2251b9c1bcefd8f311abb957c0b4b3df9840d
MD5 b6c7e6b91d7f3566756875a9a04cada0
SHA1 20a72a5907733e303326c9faf5d139468ed90a2b
SHA512 1f4461c9b998464a632606cdbc7c6000361c422c26ab8b97f71e75d933e7a52d3fee6bfeec31d136d96a07ad18daa269362910bd495902199a79890b55049107
SSDEEP 6144:Egr+B9HBMeCzUt3tcILF9J6c8HQJicyl/lWFFQG5SZs:hr+BrMfYt+ILF9JF8HQQdCy+b
TLSH
T167542347A05A8180DF7804DC49B9044DDA88DCFECDFABE718756DA86CC6B290DB79B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddStop.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\AddStop.bmp.WNCRY
Size 824KB
SHA256 bf6e150d289a5561c1d76d6d65884b36272a8ef6c3d5ae6454fdfce0cdbfe4fd
MD5 faddb748c2ca91027e6f9e839ce86816
SHA1 f354c7cfc64a9db138ae23061ff2c91983884e83
SHA512 ce3da437f2f4ce6c983164b99cbbf11852bc4545f0e19bf5457946052d8dbf103c7a7cae8c859f44b9a1468e767e1998321ea070c2f58519194d9129d73725a7
SSDEEP 12288:oriyKu1H3VwOcy8qzjbqftzF+dl2wuxo45cNrkeqF2ZHREyxCZItVzimXzsyW:oO6Vd8qznqlJQ29C45ryCItxYj
TLSH
T1400523BB628C784ADD05782539E275B8FF01AFAB24F2A4D851EB64D768B4015E0037F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugExpand.tif.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\DebugExpand.tif.WNCRY
Size 538KB
SHA256 4e5e40981dec84681c3a4cf018b4d5acde350a7697caf619f1d53e1bebb4c751
MD5 4c379b2a982f4569c4945c7ebbf5a9dd
SHA1 4dd49edc1915def8e2b97ee49c4f41a54dcdd20f
SHA512 7e5e82ee8950a9a5130b2a79c940cef5e9589c0e00dc70008cf45d25d317c27832341d252f20cd143804e07cec3be17f7ce0d8220f98a7e6ecbd71f5694617c4
SSDEEP 6144:KiUGnnB66WS6PLuejSbGHmc7GaQnFW6z8G/YjUzAKE5rJ71jyXGGRgg8STbhygOa:G8E60jued72s6zuUJSrp1jsRgaTVyg/b
TLSH
T1E5C4236A18C605F9C809B1FC37D39A9A7BCE917963B019089CD68171EC347BA14F7B2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandRequest.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\ExpandRequest.jpeg.WNCRY
Size 488KB
SHA256 d8b6984354a5f7d5310e0777d3b94455ea13d3ecbb7cacccf7c1ac3cfbb0a647
MD5 cbd5b635e6cee0c764098ba009fec505
SHA1 73f95a1329e1b2388253b7c1fcb094b4032bc423
SHA512 41bac877a3dae416e51831d5b1e49e948257850707234eabe2064c9fb47a0db0229968100c026d288ea6ed25d83a8f70319d72716d1391d005d39a10f6894793
SSDEEP 12288:uI0kt3I44jpHpfEdKhsORSxSD03GpR/n8Pw7xr:uctMpJfas0K3R
TLSH
T191B4235C9BA70C9DE2DCD1DAD304BC832B166C6C46742D45BE7E476325AC3A86F2603E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideReset.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\HideReset.zip.WNCRY
Size 320KB
SHA256 b90ab70345fd514fffd613969d1592e85f63c30213a25fc84e552b35445fa912
MD5 841b7de06e7b298c2f5daef73992b8d6
SHA1 2a9999c3f7e8fafc73082c1ae6e3583f6c21a082
SHA512 2485be4557ba3637d26c1a936b226d208fa24d85ce20e29cd79718f8881a3b92d42de573f4373a2703df81616f885289b0fe817a6c1993c29798f9eb03b80adf
SSDEEP 6144:1vypusCywV69VPzMWEPtlU9V1P17L6g0Kd7n0tl7V4UBHA6TL5o9NMP:hgNZwk4WEllI31Ppbd7nKnBHPTloLMP
TLSH
T1516423A06D83E47A211FC68FD9A3FAA98F8ED1463815AD012DD83D03161A034E5DB6FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeDisable.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\InitializeDisable.avi.WNCRY
Size 404KB
SHA256 d20475a12f68bd21d618452cf838cd9dbbc3272b6d3a7bbb8d0ea67bfeb3f8eb
MD5 8a947df3e74025454b9e708f8736785e
SHA1 2644212d1f85ba82736cd2419d2ce21d57533d80
SHA512 9c5fa020946d85e1076c03497148f54d4c77e503ed56a8f9abf23c2e6d4d2ba43604c8e600086cc2241de021ae79566b2d8c6d58dd91cf68db37487de634495c
SSDEEP 12288:aJBiOdx44ubUAW1C3xzbvEk5DUWWYcGiOU22QBIylKor:aJBiO3ubUA06vt3cd22QBdlBr
TLSH
T13F9423DE06A05E1554C8B269D0CA87D293FFD991F9C31738AF423BF24601C979AD032B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewEdit.cmd.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\NewEdit.cmd.WNCRY
Size 572KB
SHA256 7e9aca1eb1db877354afec1cb505614774ff5cacb9baf04bd379a7e9813484af
MD5 01b0263620e262ae7e60419de9de7efe
SHA1 23a8d8451041d2a6114c1a425314ebae69941321
SHA512 956cc661fb6176053f1a7deef434797e642e3327754b55d25c988cc5dbf4b279f0196b9652c57eb4441e2fa5fc2b25cabbc967aee84aea9752c206c36421131b
SSDEEP 12288:DskQOdDzgSomv630iUICGcb+BL6ZjE+xHtPAD8iEfkOSVOa:Dhddvv630yBL6BEsHtm8PkpN
TLSH
T111C423F99BD55233F013C98B8ADC075A7E2CBD3C822A4D525D6D563AA0DC73092CE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveCompare.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\ReceiveCompare.wmv.WNCRY
Size 286KB
SHA256 f73473b61bb6eaa6a1ac0db45e9cf8bc3f4db632964c20e63c563cfe869958ce
MD5 6c3e8ddb5e69cce98fe3659d86d7d7b8
SHA1 2d655285f8bacaeae0f71a26c3fda286993990ab
SHA512 aa76046c3dac7354cc45c4073f1992345e023571e6ecd3829642c6a6ee9a62c86b2d6ea6721e5b06017c0a6e2abd7ecf00e26eb6b4f9b7e84f105bd50e9a0fa0
SSDEEP 6144:tOKlVndtaDu/qClDiyICBkkXIG085e6Jl6X83/GTOwPo/s:tOKlBdfiCQykaeAlD/oOoOs
TLSH
T16B5423E48DE1DE2981E13C4083010A5C2D897A4795CA874A4AB71DD9BEEBEF3F47E174
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterExport.svg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\RegisterExport.svg.WNCRY
Size 421KB
SHA256 bbcc28ce1fce796e22565a5b73333a8855cc087110c8a6949235da01c917d11d
MD5 cc2535329cac41179f648c19141f42ff
SHA1 819a768afb9afc7c8990996a2efe3ac79c4e7681
SHA512 ef07a487ffc7815251d598128f4a7f8d9054756e868f8a6202694cc1383151b164f267e69837e7a0017271e18a1cae1faebf101c22905a5378bff50c34b17204
SSDEEP 12288:vmeSAwXfGfqSn8Jj1ITN2M3Z4sJPsWHmsISYa:DSAwXt42jE2M32+PsaYa
TLSH
T1A69423067351EAC8D9C83A00584FC7157AD39C2AA3A180A6357703295DEEDBDCDCADA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveClear.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\SaveClear.bat.WNCRY
Size 336KB
SHA256 a37270fc9edc844f937e2e24068d8222e4d4b19d4b171774b655840d6f7b633b
MD5 f07fb6f1ac64b54fbd1c82d8c65a8e64
SHA1 d580fd046e2856e8bc78d96a79699882bbab404d
SHA512 82dd32d854b8c0e31d7d50996e40ed127204ba6d2cb3e07654efbf161d5ffb48f3d0af22c33a64819710764e8395ba741d1860efa744b391bc7d7713a63ae8f7
SSDEEP 6144:EXTBe2oAdRv/n+h2WhZ3bQIWhRwv/nY0Dekov6NWlvqTZHLt5sZGu/rCSYDu/6:EXlHHn+fGIWYv/nok/uqt5eXjCRDuC
TLSH
T1387423E31E1F60FA91B09215688DD1344B0E0F5E0697ADA307AB70E5E39B9B7F178235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveSkip.dwg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\SaveSkip.dwg.WNCRY
Size 1.1MB
SHA256 0c3e3d9cc8fbe3b31bd6e015035ee3342cea1eeeae8deb73ca1e50d95975c601
MD5 36f748e74d01febaa184fe06285953d1
SHA1 228e9dd7cdf2de7d7410709bfe88cf6b2a3ae7a9
SHA512 e78bd7c6fde2737d681b7210b16340018e7d44f48e29972e4d694d8c264fb6325b2a0ed9553327557145b2e17bfd08dbeb8edb2ae9c9ce4bd7650376ffe8a75e
SSDEEP 24576:uqOFlatg8Sdhc/sQf8j1NsjDlvNGLY80Qg0FC58Asn38Wf2xpBlf:uBFl0gjysQf61NsV47gmC5fsn38WcpBx
TLSH
T16F35332E98F5334CF562B99E2F00E22891DA93275895721DCF9636E63D2CC8E21CC5F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishClose.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\UnpublishClose.rtf.WNCRY
Size 454KB
SHA256 2722dfe653212d293d5f5e28490ddaa3b7db4f55fbe694f1a1c62f71c1820003
MD5 95d75f47cbe75c13476e16eb427704ca
SHA1 118555778b8ba4b744581c8ce6220ed718ee5f4d
SHA512 79a4ee9db888de0263b538728947c0dde3ba8bac0ad0643b3958e9b440b2bfc0d0a529d034f1f30a53e7f5b6e8e0041651be276119280a93b59313eef8e8e67b
SSDEEP 12288:0s4imcmW6rFT88mTA3l+yH8JvK81r7PeigD:+7E6xbVzHuy8F7PTgD
TLSH
T158A423233CA15212D668A1CFBF9E4D3FC7146220EC4687FA7D3F028A72558AB58F8C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseLock.xlsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\SuspendAssert\UseLock.xlsm.WNCRY
Size 555KB
SHA256 a7150e2e40253e918aceb421cb8e3a568b0ec9a107690ed3c7de3291a4af9999
MD5 9422c655b8e71c383f13aac50f69b49a
SHA1 8974b1142628bda3295d40e88394c327e4616a19
SHA512 d4b617af6e0d0314018ed9412fc6e4a58d1eb6c971a87c9f4ce499ac76e9d03f6f3845a958d909323aec21bbfaec4538649033515eeb87a53116850a80776c4a
SSDEEP 12288:mDmtTomMl+F5FAay8ro9No34QvI20oedsbNT+uOaTD791dvLnYdcFyCipTq:Sm8aAaRx4Qh0oOKdZOaTF1Xzipe
TLSH
T17EC42356F6ABD717E13670F072DA76D969C07A22036844E4B206E7723E3409FCCB0B69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupUnprotect.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\BackupUnprotect.zip.WNCRY
Size 610KB
SHA256 3e72c6c7a25e53198f7a3418f0b40fba8588f661941ebb59883cbecea6e64a3c
MD5 8c1a44076f335df14ea1f1996d4b242a
SHA1 d9a3c83e84d64ecf33473edc0cfd4e322d69e609
SHA512 b1d22b2f4908556a02233106ba7603a5c77ab19f5a2c18b63226f4304cb2c9dcd5eda34293a2a846407f822b8829a3ae09b4aa94c2264db3e55be517b9c8b833
SSDEEP 12288:xQySGZV3OrIZT8Q8yU4sTxHGQ7tzNSYyCq+EsNkXm:xQJGZV3ZT8QVU4sTxHNFUDCzmW
TLSH
T1C0D42336780051EAF15FD1129601AA50A9838DE3F0ABDFE93B14D27C9D23FC55F29BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearAdd.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\ClearAdd.mp4.WNCRY
Size 433KB
SHA256 d0938d5687ca156a01a6deb97822b189e74eaa31c4480195ab57c929b0324549
MD5 07f864078b72067c5b5c0b9db92522c4
SHA1 884fc4b1a2b943c419ef4e78ea5d25c797395e08
SHA512 6fb192af1a14938ebebfe8b3bfefb68b871d1bbac926ad0ed88e95c8c3c059087fe99263bdac2884feb89f8c10fb19ea51107357d3aa76d45ce66e598bf7101e
SSDEEP 12288:LUEk3Pcgu1u1unlJ7dtqX5qRf7/ho+b3/2ITSM:LUEaP+tL7dMX5qRf7/ho2HJ
TLSH
T1619423565B207E261E94152B10BE58F1FEB2CE75D8BCEF7D146284DBE4C9A402CA0F52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressImport.jpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\CompressImport.jpg.WNCRY
Size 650KB
SHA256 25f019586a1de7cec4568fd07c5e5283d4bcfe86b9b1d60ef06189598ebe00b3
MD5 ca4a0d9169ab3ad4ce8448fd42a09d12
SHA1 629498efe08cd20f3f4b6d508697524c670d0412
SHA512 edde19aab884ba3522bf6560b03081f0c356c44b69292de6583daeae3e5643703284913fe3e4c5e9b66c9487a28c69570fd98716a85e5d9da51f86cf9b4ccc0f
SSDEEP 12288:pmHl0uGea9Z4LzO2iOVSwVsxXLPHHz75zkaUIM3JDIiLhbhw:gusiOn0bHP5ga8iShNw
TLSH
T1AFE423456C83394BFB5083E3C1BE4A5DC10A3AA7E129989AD6CF242A7976F5710C7BC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromSend.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\ConvertFromSend.ps1.WNCRY
Size 335KB
SHA256 0a84983b13dffd2e7acf36155043a4d433b5972cf76372ed34a6cb965d494cbf
MD5 7e2c88269e1bd75d2d900292ff54c420
SHA1 c473fc15dcd25321b591f7d2b2c21ea19c651b35
SHA512 292737fe5f97d5b0cbdc03e68b2f5d1f7254dad37b01cced5d6ec4ddd4d2497e1119ff1619a394721d5199797f9f911e9247e0bff4226d8f545a5ed1ffd9b052
SSDEEP 6144:EAknbtdAcrDrjbmid1n0Gou3/QTHoPDsvetYPnQh9O3aSQILT5zG2udKUnXfnGHD:gbtd5JCGqrIQv3nQjs/5CwqPGHxJ
TLSH
T1CE7423844EB17AA3FE4FFA5205A7C487CF06C18124D2F68B27FE596EAC5C0D86D51683
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToEnter.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\ConvertToEnter.wma.WNCRY
Size 354KB
SHA256 91aa03687645a36860bf1103af4e8f654b48a90178db8ce7b2da5b1fb3f20e56
MD5 d466fe22a617b1289e2fc0631006f92c
SHA1 14f8f978291712640faf10e3e5ff01571d42aea2
SHA512 3aa27a86ee30cc0ad5b368f0aa79f8ef610e5d04c6c6d93e46ce88deba6cc90d91d6f23e6e4dc850fc9d400309ad0329d7dc15e97dd32d4f3627fab1f05cb8c3
SSDEEP 6144:W4TLMhNQgBlyiOr8EZtxmGPOLcwaEmgBtuzkUttqKRFFx9R+cW4s/4Nnhnjh/G+K:WQEqgDyiOnZtxmG2gwdCzJK2xxW4sYxo
TLSH
T1957423F7D5EA634DB12AEF2533AE3537F5754099F98C25ED0239C065A8A2332A1F4E01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantUnprotect.potm.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\GrantUnprotect.potm.WNCRY
Size 1004KB
SHA256 ad5c399584f74c426f78372a66679ffe1fa35d3754d60ef7ea09a8305db11c37
MD5 ed6e658851dbedda14e02b931af5f8d4
SHA1 9d04a156af30504d2bf35243fd92b6b1d689a688
SHA512 a60409dfde7dbc42bfd07caf2cf77d7ae6d6ba7042f1cb299338d83cb535b67c43684e5e1a04e08cd6b1da7d164d1296681ae2880fc4693442cce44665016777
SSDEEP 24576:D99ptFGxXwtJqaKzoH9tQZ8oFcjR1pCiJE0aoY7w:D99pDnLfKE9mZ8bjR1AiWTs
TLSH
T1B125335D46BFF4F89F49213AA9055201BBD9FFCCAA4066D8F2903A56614835F0D29F3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LockEnter.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\LockEnter.vbs.WNCRY
Size 256KB
SHA256 7e8be7ab031ac71674f2034a8df48cc1ca790bc436aa50ad0927e05fb5a786f9
MD5 ce7c1796c90863cb6969e1696424966e
SHA1 e9642da5f684b209a429dcfa7345510fca8f7f29
SHA512 dc45855c87de9b0890ee4451bb5be6eabe04b99d4029f8efc3124472c3cb3a5121dbc9ea6de6f8ce351ad0043c1e3843b0068fd584a3dd84295d57c65c2b2739
SSDEEP 6144:Q1ML9D9uQghQSkS10BHjnIq2NOO9yXgnu5g8kgz:UML9DeOSkS1eh09+zfz
TLSH
T1C4442319179D8A0B45503909670C19E290BDC6BBC26C8B93BFE521FDB9FD83707C26DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingSave.asf.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\PingSave.asf.WNCRY
Size 394KB
SHA256 144dec3750a2b299cf7ae0f5a49678fcba40071b84552985eea2edfecda251cd
MD5 a03c5d74f2f770cc67b1840884cfb88a
SHA1 35026a5fdbe33c5b82c8710377805205615b0740
SHA512 7be6f514860aec1092a290864345771b2fd8df181dadd0bd90adb77dbd48649a0b6322914c44b6c6eabd6f4465a12eff3820a9dda222830c8a1e4b45783e3ad1
SSDEEP 6144:qkCPx8eJR2SHGs/W0wo9n8kL8gmbbuWco9IIJjQM02bal8XQ5Sxc65QLf8IxFd+w:/GxhX+01q1gmfhcoOaq2b49S+jFkw
TLSH
T1FF842365CEFCDC40891B02EB5DB211EDDFE1936A4D0D5381042DACBA4A983C2D5AE3DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingWatch.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\PingWatch.avi.WNCRY
Size 275KB
SHA256 1dfd99352b3aa2a5074e97517d96a0a6a3cb01a6ed10f3e77a35bf02d0d03076
MD5 076f46d1714080bcd28003a52c6c758e
SHA1 75c0970255175154cd1ed84f0ddb309a13b60696
SHA512 7bcf15818437c43c3756ae7095f1e1b3180994aa79e0ac149890444c71000d6e84f561300e4bc0c69684f3d0dd6ffba8a20a4e95d77daa383a4ceded3533f27d
SSDEEP 6144:wDCEeZe+LiDdyJt15rREvCmt40uNfSiRQleDl0RDxbLf:ECXZe+LkcJBREvft45SiuQ0RD9Lf
TLSH
T17B542345CC78E3955150E04720AA5B1DD826F3A3A3505981398C38EFAEA77FA741F3F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairUnblock.ppsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\RepairUnblock.ppsx.WNCRY
Size 413KB
SHA256 64fc408026869ba05a6df493f7d2ad65dafc5e95a20894b486e0dccf7dd3f738
MD5 6e84d3fbf88693a9ce857a4f776774ad
SHA1 7d895d66ea7bb926f9cb6031245427d4693d527c
SHA512 a61b21d903c579b275ff004bc3006af613aef188b64ba0f7f6b576d36d91c07b7f94c24230e322d6dbde3e1c0fe2fe5023886897bf7f85fc36b106941d543c14
SSDEEP 12288:PJeemvSLk9jRKryJUztSh8EhQ+CJL5mczy5:xenSLyRKryJUztShnW+CJ112
TLSH
T1C994238B523F8B3BC5686556A80EEC853DCAE41F9FC25900EB9127D5F3E98B01B22574
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeRemove.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\RevokeRemove.mpg.WNCRY
Size 689KB
SHA256 5c8ee61bd79aaac59043170df15e4c69ba61efcd4f1297126bd7f3b91003ebe6
MD5 f4e2d5848cf830ab7e4ce3b43f8b478e
SHA1 8833d788355c60c042c3ac74fe7644c18f2f5848
SHA512 7297465b665e19c629f964284ddd7d7e7d2045b191408367ea26a87a3807de8d696b15ca6a9a55f3f35118abf846a17b89966f129565b81162f378bc6351aeb8
SSDEEP 12288:TlQSObSwtwiXKihe7+o08qLIKzjclyx5bqAQfyC8N31H2NFI8ofEWvg+S0Kuj5Ag:TlybSwCiBhe7+b8jKzjcEQfS1bU4VAWp
TLSH
T190E423F4381F3D291816E195056EDF2E447F82D4A99EFBC37D0B028E6186F85A7B2171
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowRestore.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\ShowRestore.rtf.WNCRY
Size 669KB
SHA256 f70186ced99f528b5c9a5868ae859b2364620e89a095ba4b6540ddecaadd6976
MD5 d193f37e70acceb330a09186c4dd1f85
SHA1 9ab3e7afda0ec81caafa4954a4f1ac552c921c8b
SHA512 f7e9c8fa2fb89d2d4b82b96fe5eff699e8e68147b78781e91ac4a7c8d4c17cacb2fd27c5d8ec10bb303eabf90f35fe44a57365fcc59f5b850749fafd7d159f8a
SSDEEP 12288:MHcnS20Lv/oHMeE79C2gZ1mBuGcnMW36yj7iVl1bUgr8R5WX1ySrOd5pvRdou42r:E2S2pO9C2gZUBuGcF3DjmVl1b18O1HOd
TLSH
T159E43352FEA7117383B3BB74224032AB26A4B199205E435F491DF378FB4C9958CA85F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartUninstall.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\StartUninstall.wmv.WNCRY
Size 551KB
SHA256 e290318bcf23211a0d3a9af2afae38ec265aa4f71a0647250550475931a844e3
MD5 07ef62c2c7c75f53d15d20f03d399227
SHA1 27e0c806f89c430ea5080d8d263ca4e3550ba59b
SHA512 1e0675d3fb3658df9e938e8c60fc5a5c7984c3508cd3cca8d918a18b59d449bfe22422e0e9283626476040ba114b641e0598d25f0778a487d2e8486002d08d52
SSDEEP 12288:ephQ9J5Tfm+rwH5wPybowYUFhukDdKzUqq1uzdjYP:euJTwH5wPyklUFLxqqABjYP
TLSH
T1A4C42379C882829CE3FBC9A3186A657EFB05415DA0BFD10045F2EDC790D851B3B6B94D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockSearch.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\UnpublishSkip\UnlockSearch.mpg.WNCRY
Size 728KB
SHA256 b62da3d6b9ae80a1a73eefc1b12824428ea0030866867290e69d2dee43511676
MD5 a9baf7b5d205e2ca046c850d80397cc4
SHA1 629f02356769ffab56b728033b34d7a7af44d117
SHA512 dd6c4732b4f6a11acb51ef3897527c0b85f5d8229867af0f95976857ca02c9e3633c0b84030f61b55f1802ba4e6744b77b639822ecb8d2c9911976011f4a2b0d
SSDEEP 12288:HtTTnIX0mEY3qnULJqVtYBc/a5vYZBLh9YwWFLwBs8772hF:HtQEvY6nOJqIBc/a5wZJYn0so7UF
TLSH
T13DF4336F5C65D57AE4F4922B72628E1799000A8266A97FF30DCF4C71E02AF2727872D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteConvertTo.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\WriteConvertTo.bat.WNCRY
Size 564KB
SHA256 f2e53b16e27cf2b12826dc11b797ac030b8c427762712aafaeef8767f0f94e7d
MD5 33b94e4a1b4b9a453c536f7456870018
SHA1 887a75de07ac3eadc28dfa30b2985af0cbb70e3d
SHA512 3711d0e5be0ebe7dabad4b2a843f39729088aed82708e66072eda62005ae4b3d2a04c59cbc7ae208f61613bb86fe9c2f8734c45bc65d1e95a41aee521c11fc51
SSDEEP 12288:r/uzKDSeRez6/6fzjq6eJHpgRiwJ9GBOqUFwHAJvEVl2br+qXsCoBp:r/uQVez6K1qH2x95lrnXsCkp
TLSH
T195C42334D9DA8FC61F7E4710F8C07794E728B06E4DA655AA230B60CCA2C15E78A94F7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveShow.mpeg.WNCRY

Path C:\Users\Admin\Desktop\ApproveShow.mpeg.WNCRY
Size 740KB
SHA256 9c492db69361c32c4c7ce8e02244976e132ecab982359e8a1d62788868c6f713
MD5 a960c62be7b9d5a9e5d357da3fac177a
SHA1 2d2bb83d5178098e3fe32e807f70e6b28a63f4f0
SHA512 f826310c53251821ce9b7942497a4728d8403ce46e46966787dff852f21af316831e83ae6cff2ea451f962455311fe38fa61b0c85bbcb54ff8f2a9ff6aa6042f
SSDEEP 12288:xNwfj/8u+JucAdM1UNAEjbvW2RzfhdursQ4aKrB6VEQIqQCaRN0S0ni6g:zwTyuLusAEPp5IL4ZrB62bpNEi6g
TLSH
T1E3F43372C3DF1AC360E3BC091323B81CE6FE6ABDF1C4655837047D78678628A1931A96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompareImport.xlsx.WNCRY

Path C:\Users\Admin\Desktop\CompareImport.xlsx.WNCRY
Size 12KB
SHA256 25b3bfcffc0db093c1d57d3b050c6f8dbbb004b781d0e756f734f79d4741f212
MD5 a5092705b6056f611b46b7a9791ce75a
SHA1 c03100d8d44875fec5f9ab59fe322c69d3ed2041
SHA512 926109cd8519af52b5b309d53fdffd17f41c15dcafff4feb73dfe2ce350741256c4cd0f4e7aa14d9cd7522fa18f201040d5dff59e060cba18f476733049ef093
SSDEEP 192:KjIIXpOgrOyyja2IvbTp8tJTQEqNz7PHD5JJFImnwZqmcwbR/QEIuqs3pPLZwuI2:KUsp6m2OuJQEqN1FIgw1/KuqSPLZwu3p
TLSH
T1C542C0C9E2188868857D3E4EE45FC1B7387EAEE0D6591E12B9128580BCD8377451A2D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToMeasure.iso.WNCRY

Path C:\Users\Admin\Desktop\ConvertToMeasure.iso.WNCRY
Size 918KB
SHA256 dcc580aeb888203d2fadde422af044986509fe59bd0975d6ae58dbef19bed013
MD5 564c7191a12a898431ca95300ece2c4b
SHA1 26b707ec389bb453b5988c093567fac3cb599e89
SHA512 1d0e202d422f9ecfdad6756c34a5892e1a870754045745921d6ad836f423d2457b29f933df5d5bbd50386ad172c7352be67b1b99526f51827f1f4a8a9c4c3f52
SSDEEP 24576:b73TOtkBalRJUEf6jp5a1oNM/Lb7rz9XW4+4eV:bzTOtflRmdoqALb7rz9N+4k
TLSH
T1F5152378D40B2A1EFE47591D4993AD73E9A5C71958C9F4328FCD8942AB2A0737B83036
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugBlock.asf.WNCRY

Path C:\Users\Admin\Desktop\DebugBlock.asf.WNCRY
Size 385KB
SHA256 556c37b3939b3b87b34c3229d54d12b49c38fac106b768b4716e22be5f3d4929
MD5 57827e75b293bb57f86bdb412b552297
SHA1 806609cc130a34ebfc954d4c87b55eb2c0c4355c
SHA512 df0a94dfa8f63a8e377289988fe67d5b2bce795dadbed2bdb3ff0350125643f0e00ef17993ab4b4a2689313e63dba0078fb2363c77054b64f74400a9de557b9b
SSDEEP 12288:dLGVbjf7wcQcLmuLn14olZHh2CN4zM3kR7fD:dKVjB1tH7NgMGP
TLSH
T180842383A4E08D995BCC58F6C08C6F12B112AED6FFA70B65877854402CE43ADA177DB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyEnable.mpg.WNCRY

Path C:\Users\Admin\Desktop\DenyEnable.mpg.WNCRY
Size 444KB
SHA256 4937a8a77b54fcee86705df9cfe579f49bc760c5f4d13181ae73ee7c00c14d8f
MD5 421d81f4cc28e97c68cb39cad7d59ab7
SHA1 79780330ad0ccb4901a9b7df05643fb2ffebfc5a
SHA512 60ad7d0ed1bdb70425ebf7d74471cd33ab3770e894e9f8101d010250cb2b39b79f6c692e491a7ae42f17e27700549c94286d9764a17745399e107efb79a16771
SSDEEP 12288:mQNwV80oD3Z62wxrSLELpc1BwK8d+S9VSo:2Mj4rSLEtMwK8A6So
TLSH
T190A42355BCC1209C6C6E94B667C4BE0B4375AC419AA62D2EE3FE2C5D9803CC09CE57A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitBackup.7z.WNCRY

Path C:\Users\Admin\Desktop\ExitBackup.7z.WNCRY
Size 592KB
SHA256 79f8c9e7681027bf14e7bd58074a8b0b698cc4e6216a002c8dabc233f9f50907
MD5 41dbedf0313e6d93c8e9bedf12292449
SHA1 868dd91c8bd441f825111c0ab2ec2014bcaede89
SHA512 684a5e2ae618c2f1c69edb18df15552d242b450abf838ddaa4fed4f185738c987e17746a29c0f78bb0856efa4f0c20dbadc80c416a7d10cb797984f2c54992d2
SSDEEP 12288:WNMzeJ3lfNeOKzzWJ2S4xF14Hn0QHZroBqY9f:aJ1OzzbSCy0IZroo+f
TLSH
T153D423F50FA3123B55020B38FA57A47246977363B278FA190D34395EE89D86A4D317AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantCompare.vsdx.WNCRY

Path C:\Users\Admin\Desktop\GrantCompare.vsdx.WNCRY
Size 533KB
SHA256 60ec1e941ae33ac81d9d2679bf929e21dd829776eb5396f1999b59cc544cf6f6
MD5 e2162c02f00eebd9c1445af77ba16659
SHA1 3245e15c6166481168fdf2f792f65c75feca4224
SHA512 04cb5972729b37e8c0c0aeaf1de9c8d9089c525cf7b54293fb50c5f510dc30ebc04f36be134cc81ece11689855143c1e864c8497c66cf6bdda1b726fced8a013
SSDEEP 12288:Ybri3T9hHYJMT7L0Z3A8TDTSJkMHhk/t/dRuPAZJtMSfvJPPLKv2:M6nn0m8YTHu/No8tbfVs2
TLSH
T124C423E388CCD88173A27AEE89E167CA44D5C549CF2E50453867A2DF80D4DEB31697E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantRedo.dotx.WNCRY

Path C:\Users\Admin\Desktop\GrantRedo.dotx.WNCRY
Size 770KB
SHA256 cc203787d9f55cc5d8c1535dc96a74fcff1e318821c28ca0ff4d9cbb3d5ad8cf
MD5 cd31c6c16f143bdde55af5abb97aae10
SHA1 80531784d63caf6a42431a7017309e9dc27bda99
SHA512 3205b985e9c4652caf4feb1def4343a1c0ba1e85976bd5f26e4175ddba9a285d0ca10410e5c2a6b530800b8c5dec5926e06761c4bd7039c7d418fb09812893da
SSDEEP 12288:1bYJCcqu9qjQa4yKCvkWH7aFj9tKPYmO34VH4YwmjsDCyzZ02gaoiM8Y5P9UDvCr:1bkquHa4PCvhkowm8cBjsDrzZ/Ib5Tbf
TLSH
T155F433F7357217E5044FCA1EBFAC999A120CDA996FF37172AB00565D0CA5344BBC0A1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeReceive.csv.WNCRY

Path C:\Users\Admin\Desktop\MergeReceive.csv.WNCRY
Size 651KB
SHA256 7da7ca369484a46783fab7300c3796b54265ca5b347d26555c5a0b8f632979fc
MD5 3eff55581204bc6bf3ed39bd42d3f62c
SHA1 5fbae20d1888eae16d2153c2e131f62697f411f4
SHA512 58f68be79ef3fa160426b8718ed9bffabeb28b2e400fada64d560c696fbba56d10f22c961365b47e20d62bd564b69526f03faaf722dec34fcca2bcfc8c22fe63
SSDEEP 12288:oumkXfiEMkE+DoTDVdt0TC4IdLeCr42tIFj02q+lN2dDapA5Mgiem7vDA:ofgfiEMkE+DoVLsC4qLen2tIdE+lKDrF
TLSH
T1E2E43394ECFF06B7732A817046880AD97F53E977E1D8C3536A8C21F3E52060D64EE999
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopCopy.xlsx.WNCRY

Path C:\Users\Admin\Desktop\PopCopy.xlsx.WNCRY
Size 14KB
SHA256 17794c945d8d5b25c0e9ae71547def9089665aab6e9d6dcc61ff1d451057f5e3
MD5 bbc6617b41c284f0bf1f0eec03168276
SHA1 5dfd5622b784de44649e3d470cf032f78f5c59ea
SHA512 93e0af3e9dd3d7d72761eef621e72b2fe34546c5d51b15eff73b4d54e7f25f15f66c0c800fdaba80626ae9c4654174fdd713bf4554dbd3399430d74926a5eafe
SSDEEP 384:B1l09hsk6f8HbqkJ+vpeMR7PUPkcJkLgPC9:B169X2CY7okcJkJ
TLSH
T10862E1BC375832C837B3C1259D3C9D7E10DA4FA358AE1E541E3486296D433532E2D69B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishRemove.7z.WNCRY

Path C:\Users\Admin\Desktop\PublishRemove.7z.WNCRY
Size 829KB
SHA256 43b20965e71a480bdff16e2f8303c9965ec7606a51176527cf7b62d868d81c38
MD5 bc5ff1e19aa9e73fa21d9ce2f85424ee
SHA1 44baa527b60d39e5171b767183ed363ce993949f
SHA512 5849a61689860a17f3ba23d4e76fbf119dfb6f50d1eaa6dc5f24fc68332a8ae83824c3491279d9abbb16155b299bf8fb09dbfe6cb3c16954092a0a03654ccd1a
SSDEEP 24576:bonqIk16iBHhTOHX50ODyS55z+5ow68bhAi7RayOi:RIkogHhTIJLJioyhAWV
TLSH
T15705330781FE4CFF84DABD3924AAD2E776DA071DAF910BFB1012BBD928050DC55A9174
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterExpand.tiff.WNCRY

Path C:\Users\Admin\Desktop\RegisterExpand.tiff.WNCRY
Size 355KB
SHA256 0defb70cba27745481eca159b91cc8fb677d980744ca73f4ef60cfbd7b300169
MD5 126f45977b48e785e169940e3b98d8db
SHA1 05f7d9408bbb0ceae2582233cceef80cc05a8783
SHA512 e59636bdb8c8efe2ca52b9b252cc51979185b8a93611d23a899e40ef59ffcd34e176de41fdc6b25e470e1def8d0d04eaf74a44ba3f4e387ba9e315baef8390c9
SSDEEP 6144:U6xa2nVzpxNxa5QcwpZtvAO4iWAGSvhv7772XZ5amkbWYW++JeYXX1PTn+VJ7YpQ:Vxtn/x+StvAO4iWJAhHipsCYFseYXX1s
TLSH
T1B474232EEDC0AD7A19F3943CAB17D7E8A517C7F884D0CAD9CA963F1C61C2A60960C091
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestoreEnter.xlsx.WNCRY

Path C:\Users\Admin\Desktop\RestoreEnter.xlsx.WNCRY
Size 10KB
SHA256 e3793a7fdab9d36a4a175ae280cc60f0415963f152fafbb0873dadf41e24edff
MD5 9bd5db419531271d3b900cecf0d0818c
SHA1 55c6f89d9887234bf95aa3fc8c27b1f7c43c13d3
SHA512 c7f57eb83fc52fd83ae18e339a17137d3bc32e1934ac3130a79847b0998334d720a975ca20d1f6781338042b86b1c7f34ddacdfc9aab84ebcacb98c824461116
SSDEEP 192:U2N595F9LTCjngl5KBkgsI7QGW5jXDQADbzPNrKB/l44NiZpP2OS:U2rF9Xqns5nZIkXhzhDbTIlCHOOS
TLSH
T16022BF3CB485040B5FD27BA19C0F8429617C19F294AA2D9EE0C47797F0CEB5126A2F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncExit.mov.WNCRY

Path C:\Users\Admin\Desktop\SyncExit.mov.WNCRY
Size 503KB
SHA256 360f75a6551bed4200bb8ca6025e784f46019c4bd14fd184f7a137e5018160f8
MD5 b56833f7dbca0ff6bc2ce60f953aa954
SHA1 465897227c277c7b1b0bcfcff48b64a83978030e
SHA512 797512d50e13d63150c68d9707263278e0fb8856dea8eb024ea014632fb03e88b28b39e2832d99b8a2ab572544694ba08e9f2e738c949905c99ab032dc44b1d1
SSDEEP 12288:kf/QFTlcsxXqVTgs2l+md/AyJVKsiZ17YlCUUpyk10:g0msxegB+k/A0VOZ1eCjP0
TLSH
T1DBB4237F5131B39E42FA6E2A7F021B84A61F2793F9DCE463C9909F15B709C02A9261D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestCopy.avi.WNCRY

Path C:\Users\Admin\Desktop\TestCopy.avi.WNCRY
Size 681KB
SHA256 b94221d9b88b3b598f9c07a5b799df7ed718531e68ab4d6a9de9c83e77c22b90
MD5 e1ba019b13588cfa35cabb28bba9bd22
SHA1 0f524f4f21358e7fe9970b47e9b78f907b5b1184
SHA512 4e4d39bc08385dfff7a81b92300f319871c49a337fb5a3e2fc4770e0126eadf9052a2476b17005a09cd338a262eb429498d1e7c46635c9241ff1be208c36bf76
SSDEEP 12288:KPOOsIB6352ptWKw45qYlDUk1XY9saIeSF8SYVzAd9Qj5fOgptMa0brmA:KPO2BbrWw5qcDTopIXYVknQ0gpK0A
TLSH
T16EE42348DFDFE8998468E25715BE89778153F88DE03CD4AB341644A3637AF0897A807F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockAssert.mpeg.WNCRY

Path C:\Users\Admin\Desktop\UnlockAssert.mpeg.WNCRY
Size 800KB
SHA256 31922dcc084d5ba0e15b13836e0dd5aa43cc30382333dc91f641ac04b53b6796
MD5 27e474533ab788f981d93e64e16adb30
SHA1 4ba91a49fc18b16428bcd965e5e66458d5ca65dc
SHA512 1a626eaa00f6aaf5dc5e06bd2f7a25d57666ea340789cddc8859ed6e2b15202ff1d9afbda9e2bafd622ac4e019973f6c0f31d8263137be0261cc1a64f814b989
SSDEEP 24576:dC2Oog5t//TVsCbT8jM99Yfy0Cbqz4nrLGteU6/q:8BoM/7VhACsycarLGteXi
TLSH
T18805330C614729F6D75D831AE9F0E1F99454B9A5F02FE8B90E6BEE005ABD487133E0D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchConvert.docx.WNCRY

Path C:\Users\Admin\Desktop\WatchConvert.docx.WNCRY
Size 13KB
SHA256 08e6405d02201d3ce371de208add67e0cd83c40bb9f3193a67bc99c37f17a0d2
MD5 e1b001bc7e92fe4a43bb9737fcaba63d
SHA1 bf9fceedb0bf4c7a877c4f07c09b16cb18d0eb7a
SHA512 e4c03e566fcc63e1b5102af7a92bd9c9bc43e754153ce4affc1d98a8a6ba4a592eea2847b07430952cf51e9d71f2824c153d847541db999c59fdab1e3db0070c
SSDEEP 192:VhZaIic58zMfRq5xl1unfWfENNlos6dVg1sEJDyIqwcuoH1qh1odIZdK/s2ZWqsJ:D1if4fsTcfWN0sQuIqwm1qF88v
TLSH
T1F352D1A9C82DC5C16C24ADD79BF2A077100AED25B998DF12B19284FAF4CD41E2B1DD2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteAdd.gif.WNCRY

Path C:\Users\Admin\Desktop\WriteAdd.gif.WNCRY
Size 414KB
SHA256 d9ec2b5136416f92bdf91fe20482a41ba83e89195ade7f3368e0df5b7fe81f73
MD5 901bf78214f1b5146f1aa7d9c03c6199
SHA1 8789b1b3acb377fbd582129740d1e721fde82907
SHA512 5206859cfd40e15c1566e8b172b8da04fa3d4530a1c61d4d6be3152a0440e791549a68446bb1dcda8134ddf1e3e42ca330a585d9ad8ca65e56c469fb8df7a7a0
SSDEEP 12288:IukTxzJ5CUAukXRgcu8jm1y5w7PDlPngT2Plh6hxSHiFO:IuaQUb2LjJGPnF6jI
TLSH
T1A4942390AD0D508DE841A5B6E9ACE35EBDEA9802AD334153FEF5989CDBF0C8D00CD718
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompleteDebug.xls.WNCRY

Path C:\Users\Admin\Documents\CompleteDebug.xls.WNCRY
Size 464KB
SHA256 98b5fe39e00a8580897cb003006b4630868af8509a6a6f4c6272f036b1cd04ee
MD5 5ea4f2745aa3f094133dcb5e22002dd5
SHA1 97f4b16ba788c18ae97a744ef3e96a682b72699f
SHA512 cb9768f101393e02af6f90c07fab65824daebe1f644fdb7eafc91b1a45624be37d16ef6c84608e11d21abd360920d5c40e4f5e84fcf58190cd14136b352d5285
SSDEEP 12288:q1ooIDO32HNGBd/9cdUqnN9R9NQFzCPtKlUkgHp8Z/92XsfjyvfW:QIs2ulON9REYlKlmHC8sfjyW
TLSH
T10BA423D0A0FD13FB9426B7047A2AE5BCD397100DA406AA54BC8D9F29D071C1B677D23D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToConnect.pot.WNCRY

Path C:\Users\Admin\Documents\ConvertToConnect.pot.WNCRY
Size 542KB
SHA256 107665fae23af1ce5e35a5439940958859d6ce75eb20826817fd3a9f454df446
MD5 77c76c2cec1014bf113d5920a695614d
SHA1 70866cacc4cce8157dd22472d85785afa93599fa
SHA512 92e9f05751211edac4ccd2803631735a112c1419e146dc54d3911d2ee0938c2ca7133ec6975fa2a96a2a9b58a8b2f84d8ef082a58997e81bb028f6d30857797d
SSDEEP 12288:Gi3MferHhGRF1wXWp6ZOh+niBHEh11pt8VD7XNNA2tqZt8ZNZrpq:WRF1w1Z1n2S1MDDAk22Tnq
TLSH
T160C4234D08F5ABC7F7CE951214FC73992A5C5E0E352A7ABB4A2521491D8C47E00EA7CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatSet.ppsm.WNCRY

Path C:\Users\Admin\Documents\FormatSet.ppsm.WNCRY
Size 332KB
SHA256 dc427823649457f12ab853c1ed5db84baa49aed2fc9bd44078ce3cfadbb88654
MD5 945d6e5f553da76a352393f2a3abb6c3
SHA1 164802fc53406de9a28a8215922af658116e9ec0
SHA512 84ea5ad04f713798ed046664c951011ccb69233e37cfeae265eafc71940fc7fdc3225d86decc1ccb32f9e4eccf4622b459ea5f69da948ce27628b531983fb72c
SSDEEP 6144:vEdx7LnV8z/IWwx254dJhIAEN/Lkn6AEqXSWjcLweQTAlJMgf9/0Th+v:vEdx7LnVQIWwx254v0/LkjjCG7TAlB9/
TLSH
T1E274233AED1BDFAD462813A782BFFD665A001A44C785EB1130E0C6520BBEC65F0D41BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantOut.pptx.WNCRY

Path C:\Users\Admin\Documents\GrantOut.pptx.WNCRY
Size 442KB
SHA256 5f963548a3733e1f5514b7b68b430fd16ae7ec53e6a1958eb99ce242e999cdb1
MD5 cd2b8a8479f8fc0ab389dc9f2a5fcac1
SHA1 afdc62bd8877568ab13d179446178aecfae6acab
SHA512 c38f759c2e01a16858fc4d3f1d6e5f1ac57253072fac090ec56e9f00826fa7b9db5ec7fac1e084e8e1c7f92a2ed8a95e253d009655cbcfa0896bc539adb5988d
SSDEEP 12288:3epT4faBzvaGK9yDg0EoDoXW5dfzpl1jO:O4iPY0+X0Rr1jO
TLSH
T1A6A4237896F9076BF972A9DBE27BC121F7DC58602C7D75C1281E60389C5DB999F08230
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupRequest.vsdx.WNCRY

Path C:\Users\Admin\Documents\GroupRequest.vsdx.WNCRY
Size 409KB
SHA256 675da51ddb5495fcb6a22de804c54df2f75fc586f6b6ec1236ce0664983a3f93
MD5 f56e73cdca1693bbb2c66aa3c9a82bed
SHA1 36dd52fe910755428d3da783fe2596ab4e32ce86
SHA512 fcf2798e8b07243a17a2e813ab46d6d0ea2616e9e697441f6b81db934e7c7db4bd2e8254975f9d2a71157ef1d2ba3b49349cb1159680343f10b9028214277554
SSDEEP 12288:8AkqZgJ+d0UjIZNucTe+NGnrnAABZU0RdbcgW:8A5Z/d0UjILHK+g7ApuF9W
TLSH
T1849423B8E290F2C16C8B95D1E66AA7CFAC87F24C51A04846BAD535E33C4593F48C44FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideResize.ppsm.WNCRY

Path C:\Users\Admin\Documents\HideResize.ppsm.WNCRY
Size 498KB
SHA256 676018f93308de4605a4a1f221f3c50bfa16b4b9af14b96105712b7d3f04659f
MD5 f3045c9c4e8e3ef72e110a69390eeec7
SHA1 46f4b7476f0dba11050d9751fd16ea43c91e1387
SHA512 b36a483d77acc81615d3d514b827b51e990a4539d50cfaf6becd8dcda6fec2cdd7bfaa80f95ecd3bfa54388887f8849593f15c3e450c6ee10f726ba96fe6bd6c
SSDEEP 12288:mcnKzDnCKGEK5ltVJPIKOQXdar9UySCVjHa1sRSR7U9wLxoonb97bdr:mZztg5ltVJwK9Yr9U+161sGPyKldr
TLSH
T166B423865ECAA44A2F8803D3747E8BFA84E371B85A555563F1227CB37F8F60BD891D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeExit.ppsx.WNCRY

Path C:\Users\Admin\Documents\InitializeExit.ppsx.WNCRY
Size 376KB
SHA256 6a7a94eee4bf5250c16e2f9dff58e6d3ad2ff3ad60900c4ffcff43d504e1a0b8
MD5 891754409fc0946f945de24f3bd60086
SHA1 e34f2adcab2bce6a138ad738c4a72ff442c83d2f
SHA512 a92187f8e8df3f47d47dfb3656c46d436c8eae41e9f9ee6874091df83e7eb4c3f43cce6d099f88020323eac58904a9213e165e1df357f07250a4786bcd81cd10
SSDEEP 6144:nDxh6aelmNVSZNZbiq0B2R8HVCqf+Y+tOizzZxhX242R80yqLeV7/zywoxzMDzw4:naHAVSDH8gUVClYoO4tml7dLSrzLdDNj
TLSH
T1008423DCF355548729CED970982D8B7CDDE0E27BD1C75AD8029038883CB396A51EB1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinRead.xlsx.WNCRY

Path C:\Users\Admin\Documents\JoinRead.xlsx.WNCRY
Size 11KB
SHA256 d17d18b9bb4a6c3523a68ff0c4542c1f623ed846a4b90801e0c78c3dc640b886
MD5 a148dbadb44e50e3481c755117bc1f55
SHA1 ec8bf814e717252f3669de5a62f83a470a1beb06
SHA512 5d60274b23372bf8c123b5a7eab88f10b2acdff348917401e015e971621ea2907ccc63c2adc3162cb41ae233baf21529b5b3a4235ac49b5f8e9c425eb158e5bb
SSDEEP 192:n/VJP+pxLa1nwWuMOLrNnyhmaNfhHwxCTc8ecmjS23dgyVZhhp1pkf3RDsSgoHPX:9pILQwrLBngJNfFwsTc4mZNgyVX1C/Rn
TLSH
T19C42CF63F205E5C4E35EEBBC528238011C66CB7A54646BBC12151B4F987E28238E63BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureProtect.vsdx.WNCRY

Path C:\Users\Admin\Documents\MeasureProtect.vsdx.WNCRY
Size 243KB
SHA256 f591a3a40b0bd06a256a4824f4b0904bad7a8a529118c5f5c5ed2f7b09392387
MD5 0b81b4fd12930e894a76e85f5400f6f9
SHA1 29086ffefd4a49c44c69ff7927decab0ee197733
SHA512 212176996c01082683f1fcd86fba4a45e7e8ad10378fd9b87c3e3fd9a722a14b456f29dbb622b244c6e1a0fa72ca2784bf888773aac35443f669d23360490318
SSDEEP 6144:VBuD24ZvwQmhygDeWHP0deRJLZ0p1D+1Ne:VBeYxUueneRJ81Da8
TLSH
T13E3423B3334FBFE90179E09C7165B820042637E50076465F292986A767999FE22BF783
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeUpdate.txt.WNCRY

Path C:\Users\Admin\Documents\MergeUpdate.txt.WNCRY
Size 509KB
SHA256 e9c142e61933f0645207905afba09a9fac70f7f07ccbbc554fe0a8171a2286f7
MD5 5d5ac9a8b9e1cd044e98a5c1af9b0916
SHA1 2a55d2fd66a24420af8301479252d6b3c8d302fa
SHA512 71af7a7567af9a5c26809479051239183558cce1dd3ed1e6a293f90654e660a962c2e7110da67198d4405ce81a188071a7b8d8cbb1b61814ddef300b70234d21
SSDEEP 12288:0hBLqTAYxZ872yqirt3RcLpv387MkQ+Z9iVttYsXhJa:0hBLQZ87579yL538AIiVtT3a
TLSH
T1E2B42375FCB359B55C6C412E36D8ED0B01ABF2D749E0CC8C82758ADA96F79AC842139C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Open Notebook.onetoc2.WNCRY

Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WNCRY
Size 6KB
SHA256 3b44937e119571b36f24284d156f3cb88d1414539dd8357aa42526e336e84367
MD5 140d9a12730edc359f33d055f0df3f53
SHA1 f9808f46e18833ba8c44e8e5e2411796322045b9
SHA512 c12f591c3ded2927c23e8fb806abece91380b51b1753d8d70bafb9151f18b796d5b8bd39f65de219a1e556d1596fc6422391e4e747a1e8485a08be1952477123
SSDEEP 192:zREJHDvX4aNIf2khb8xwdTfXXfDrTStLdjJRc/zzZ:VEjP4aNIeobv9PrXStE
TLSH
T14DD1AFB635A2CCE1BD6D36B3A87293941E166ECB46C56F237019B80813473C993733B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Outlook Data File - slipfujydb.pst.WNCRY

Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - slipfujydb.pst.WNCRY
Size 265KB
SHA256 c7bc90015c6923e358497b7234e6e89300dc129c9ea187c8ec32c1fbf7eaeed5
MD5 b431beed513c150bbfdc619677dc2294
SHA1 a947ed7743ec949876b1380ce4cd5a8e347302a1
SHA512 44b5ebbb8aa66fdd2277aff6337e74d291a7c9e0a4b79533690c0726e68df741f63bf0b4cbe9e6efe3717ba160c44b31943dc5b2191d46c92178309daa348b47
SSDEEP 6144:NQCco5YBI1TAe3SvaNH3Jo1k8LGCI8kt6ATpzqvGvMd:NQfoiBOTAeCuJeLfY6YpzxG
TLSH
T19F44238BE928E3437561F5C44AC6A838D4F83EA5C79F57BA97B5988B834EC357C01B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopEnter.potx.WNCRY

Path C:\Users\Admin\Documents\PopEnter.potx.WNCRY
Size 531KB
SHA256 58f9a3af1e4cb91c200f961f9d50faee0c40f1e101d5ae4a6c8a938d9eb90c59
MD5 376cb53733e038843913baa770bc85ad
SHA1 67b35975113969f605b536392f61597def7bf575
SHA512 91e2d16e1bb9a87ef0c0c767ce0e160f4b70e635b8175e87081d3f9505e80bcb0dd38d499da20405144a8f8f66a11d13f26b7df8dc646440ba038dc6bf6baddb
SSDEEP 12288:fGghx3NG0730Ojwvv38n50OwGWtGlrGIvz2yCPgGUDNQ:fGw5k2njI38m+WtWX2dPgXpQ
TLSH
T113C42364F226157EC7CF5F45DD0BE0C6A00F97E14C7B7D8E99036D2266F298C026E86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameBlock.xlsx.WNCRY

Path C:\Users\Admin\Documents\RenameBlock.xlsx.WNCRY
Size 254KB
SHA256 9a105a26e785c9909f2b4508c7d1ee0ad07f1487ad3d4fdd432d40fa4c82fac0
MD5 fc5afa2c57501a27c97a76ded696451a
SHA1 e3fc96c5ab9f47942c7a3365500a135e679c58b1
SHA512 3eef5ebe7a5c998dd9ff5517d557cad9a838432c0a30f91dac5b096294979ca2cdef3e6b133e48f75554a8069cbe8629e452eac7d05a5f5488cc59fcfbdfef67
SSDEEP 3072:ymjDgI4mae+Z4VU1KaZSoHCQuRrPLO98tYX6fby0GpBWuktj3NNXEIYTBmE8f/ba:BjcCC4Tc+O9CNbHGpBfkJ7iBmE8nFL6/
TLSH
T14544239B5C32CBCDEB22CF9AC0888032DDDD3523E14D69516C5CC49B09F658EAA1BB71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumePing.docx.WNCRY

Path C:\Users\Admin\Documents\ResumePing.docx.WNCRY
Size 13KB
SHA256 a7605c7e934538b92c685908ea31b023d9be1f936ab90bb11cfe1f6ad746d82b
MD5 89d46b6a7971d7db4efe73e9a22ce7fb
SHA1 ab82a40cc5701b7ffd57db522d422a67a3ed56f5
SHA512 886c5c6affc8c11120a014dcb085e9e7169b6a3b8d5cbef45f8217504bbb415f27967d0ea4083cf9822c4118bd51d0621a7a3e445854cd0010a5af8abde3aec6
SSDEEP 384:0sbHn29mJQyZuZuBp6O2HzeDthne+jQY/VbM9IG:0oyxydP2Hzct4kQY/VImG
TLSH
T19252CF429B32470C833516FEFDD79864E9C41F007A9C00EA4ED7D7A9E616B4C88CE934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchRedo.xlsx.WNCRY

Path C:\Users\Admin\Documents\SearchRedo.xlsx.WNCRY
Size 12KB
SHA256 cb6eb8f9efd89e241700e21909451aad4a15f58888316557a30f733eba28e104
MD5 5830952c3d1da462fb3a9b1ad8253336
SHA1 8c30065be9b550666d14e974c29f1e70565aa549
SHA512 33115034c1323b3109b77ee2e95875dde56ba71d236e1aa9f5d3be25215a6d2db72b1b963122592d1e22a4d41a764f11a5ef239cc979490a7d08f4383723538e
SSDEEP 384:qa1+0/X4X7ZYH3rg8a5I/k14NUbSHAyZKKwaba3rh:qaM0/o7m38EDUSgOK9ag9
TLSH
T12142CFBA0423167E065E2F96E2B9D18830A2B710C48E0472683FECE745A9BCE3794F45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectAdd.docx.WNCRY

Path C:\Users\Admin\Documents\SelectAdd.docx.WNCRY
Size 18KB
SHA256 0413853cc1f6b2aeb1df1c19596278f5f8f71ceb4016c9e66946f080d12f6e8c
MD5 63cba29a4e03ebacf0acc1ae41a1c200
SHA1 d4d47b7389ad4c4458e75cf2f5ab4419d8ce92c4
SHA512 beee094ec14e9e12cb5ebf5d759f32866fc69cc3b74ba51d15236f938b8b9e2035780d76888aa9345d4df0e065143a3bb0348c654cd4fe8672ed055582a2600d
SSDEEP 384:KXDCV1INXNWumevGxHafNfmHE69Qo1eFNov0/GSduH+X4Z37:KzYIOnoGZRH99QWeU5U4ZL
TLSH
T18882D002203E75911F6D53DAE6B1BE09477D124BC090A2732BA26EDF9B5E15B21C9B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendMove.vsdx.WNCRY

Path C:\Users\Admin\Documents\SendMove.vsdx.WNCRY
Size 276KB
SHA256 7b313b20a261f39d489dc8066bbfb60d51d48c79a31e97e98b8b749361895342
MD5 a6a9de5b1edbe5831557aa563760dfa6
SHA1 70f16da68ed977416c20f87c861d37d7215a03df
SHA512 0b274999f10826ddcc319f255bbe93d457d10ea60ba5da21c01d74adbe46041c58b6c287c3e42b23c314d58e93627b0cfd01f36c78ca164ea5a74243fc3b6abb
SSDEEP 6144:T5bHRachRnlXX4pKoht2DxHjn0p6e9wssoyY514r90YoamGNj3:T5cchRPoht2tHj0Me9ZFyY51eLf/b
TLSH
T124542366C61707F930EEA3FAC8611386EDFD590571876896CF39A70F28D31A818B439D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowRepair.csv.WNCRY

Path C:\Users\Admin\Documents\ShowRepair.csv.WNCRY
Size 420KB
SHA256 6740c776084e0900a930be7ad8190986087c6c1f457a5c46f962915b2ff83bc4
MD5 323b70637e7d32d08cecb66fb3ee2faa
SHA1 64fa5f423927d12da4819386c84a44b75469388a
SHA512 d9c846df55cd5a91fcfc7537b941622c774030451f72aa6036da52a71f434ab8b6e6a5f990487744b1ad67c98c7d138fe2206c365a7e5f2d7847a4ca15a0aa1b
SSDEEP 12288:icDcFPQ82jWJ5T2Z9NZu9lAkbV63gSdxmdl1N6:iuc8WHiZ9K9A3gSdgX1w
TLSH
T1CC94238AF5EB6B02364404CEDDEDB9719496C035DEE5B92CDF8185F48403ABC5827B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipInstall.xlsm.WNCRY

Path C:\Users\Admin\Documents\SkipInstall.xlsm.WNCRY
Size 520KB
SHA256 44419dcdd6aa50c5bfd25aa32bc8145397b1414bffb5fd6b13b80ec5337b59dd
MD5 a30282cdd54ed7dd556fda06a8f3f961
SHA1 68b034d05eebb3a94e274d94c9482546296026ed
SHA512 6867ac5135d5bfa10acc71068ad1b216d9bffc87c58436e350f4ac9547e128ac4503015d12104f25eb5bb977b6845f142a61a66e68ef270917c005d31d5038a5
SSDEEP 12288:9+ZFiVO+EF39yqiGspu/93lkscYmkcapH8R2f1ln:6iVO++39KuIO5H8R29B
TLSH
T1B6B4234E5340CF9D7E3696D6F463E9767490E2E00CC31E039B695A78737D2BAC9608B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceEdit.odp.WNCRY

Path C:\Users\Admin\Documents\TraceEdit.odp.WNCRY
Size 398KB
SHA256 1dd1ebe2caf2f3fa4505d2e7cffd4ac74787f8f21a94ffe0a6192537e471f9d8
MD5 560e9c72e203cd94414eca6cd0cf651b
SHA1 20e64afda8f9649c63ea1d5758bf353665d73a56
SHA512 f31ec06e5f699316a91ae0f767e27599affaed00f9a28173140f2a72de697864b17fde51e5ab625431369cba06fd40c84ded98afcbd4e26446d713fd73032e8d
SSDEEP 12288:DwT+Z8eWwV6zIcsnOmXKYgtnOsBrUS1M4M:UvwVMIcsnVK1rUSq4M
TLSH
T1CE9423A5BE51C09C82961D42830FE3BA33F65B8D20425F33F369AC50ABF65922F4D52D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockFormat.odp.WNCRY

Path C:\Users\Admin\Documents\UnlockFormat.odp.WNCRY
Size 553KB
SHA256 c8e9e3c2f3a7b36ff91bee5fcb3fd2a749fe23461ed2535ba3738dd56f139807
MD5 c8ec5e417b30f5471477bc9db27b9310
SHA1 f7ba6d261b9df859482d6e0f3b8f7e423251f200
SHA512 5d0d378a98faa6c5bf416eb90d5d5c377778a9084531dc74a570908ff06fa0f3fcb98db73af4be242369f9fe16b37dcb3dce14059693a9d1abe1827f33d48364
SSDEEP 12288:zTXDuS8E7TPpe3ed53Gg1opSMkCf7zRQQZmeo/BhncMck:z6E7TPceH3GIZnSzRpZIZ+i
TLSH
T19DC423C9979C5196B693A142F10E374F9CD1830443BCB7200D4B67BCA59D7E2F6AF82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteSet.txt.WNCRY

Path C:\Users\Admin\Documents\WriteSet.txt.WNCRY
Size 265KB
SHA256 a615dba14a206c091682afe88c758db1d74c31a066116d18076494d6a10c55e1
MD5 b199612df1f24c72f7be310ae4f06dfe
SHA1 408f8562f618ca8c2920bc95cdc4f0da1c3d7339
SHA512 08bfce4e5c23809f04f32f5751e953ffaf47861b1d69056db9bf1914b102decce1461524405721d3270b9b4989c1e8dc0ca3533ba1e19bc94626cd910e7d49b6
SSDEEP 6144:lgMJG4Iu4maNfrawAxkACcW/78q5cK8YjmqptalPS7Qdey9qIytqXV4g:25luOLAx0cWj8qqqyGQYIyElr
TLSH
T19344128CD00633D5C59B07C76B8FF15376825DF1B78BA60C42B838EE96599321921FAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockResume.pptx.WNCRYT

Path C:\Users\Admin\Downloads\BlockResume.pptx.WNCRYT
Size 913KB
SHA256 deb31b38f8341f2b732ea966166abb9e3fffb232ba43b67d588320cfe00b0e4b
MD5 387ebde9c3d1862975cf95d96a67980d
SHA1 bf2fb4bbb8eff36f8121917c8ee95df24f628d04
SHA512 9bf28e83ecc6c3d7cf5df5586a5c5babc989e4a49619004b067f795e173f308c17be1a9fd8fa136b5990a303ce87458529ff2127bd3a7c92f2605ecae15426d8
SSDEEP 12288:w0Zu48Prlav7ujsFsCrpM0mPtawv38N7K/FRCaRlQPyam3RbALPj4liTrPWT++ak:PMPMv7ugCIpMZF99OPAR8vT6T+12l3
TLSH
T14B1533E51F25C3282618311315B448AEB5F49DB59551CE3E90CCF680E7A2ABCEEDC2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenLimit.csv.WNCRYT

Path C:\Users\Admin\Downloads\OpenLimit.csv.WNCRYT
Size 351KB
SHA256 7933b1a905ce7a28bea07e4941fec56d7a123dd6b5b793142e9459241544ac52
MD5 990f8f94a02b8e81811a84adb5a548ce
SHA1 5699884d862544047a62927ff908a1ecdaf4bca3
SHA512 c282fdab6c016e9888f03b9f59b6a1a6d0cdda840fda955ec1c98a18aac18eb7048c8a4f4336a1242e3fc25b3973d75d8c6186812a9f1840bc229497bea10ca4
SSDEEP 6144:LAIwvOE8faG1CkNdwc8RXyoNn65+zw+SS6zIfnXWTtybUDF+ZW3:LzA8iWCk3w5II65+z3b6kfnXyymFsW3
TLSH
T1F9742364F25F0D8B48CF360F3AB47B9555EB4E0DB2887A946C98079251222BD6CD37CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetInvoke.xls.WNCRY

Path C:\Users\Admin\Downloads\ResetInvoke.xls.WNCRY
Size 652KB
SHA256 fab32eb65f28a84752eeb2adbf15882f20077b7d0a9a72a22d247ee8a630366e
MD5 5fe50daa3b2b3714fc182633442b69ac
SHA1 6000c7d5221a8cd9d421f093f7128a07187b9919
SHA512 b6d0aa8f192dd2326bcb0c885c4d83cfc29187c9764c1b6a5aa62cca055f9c3e6137a4d5b646bdbf085154550f1247ca5637aa59b13559f8842591a66352488b
SSDEEP 12288:Kvet9oqficx9CzNzsMuU/NvcQ+5WStpnbBOFfbxEgMASzjJC4qH:cu9oeikKxIQ+5WgnwFjKNddo
TLSH
T1F4E423D853412B1CCDA793F452DA54DF6CA1BB4B00AC02FB68D3132EA8BA3CB616D755
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupGrant.xltm.WNCRY

Path C:\Users\Admin\Music\BackupGrant.xltm.WNCRY
Size 1.1MB
SHA256 d7ad56e968e4da944756ecdafb36d81654779db7273a085edc10bbd2dae6ffcc
MD5 60bdc3adf80edf0e958683e1f67d5997
SHA1 60ad0327f4cca1b36ff210659418a8b5847522dc
SHA512 0c12ba876fd7eb54cbe39806e717710c2c2e054c1709640741dcfec27a6dd2b35ac4e90d3e78ecbee20502fb2ea97b50ab5d04fa802fbd8b568c417ddd0a280c
SSDEEP 24576:hXx73YPUut3ob4BWAtqgcdHQ1BXpHRof2qR17mG+nf0ZHItq5Tv2eE7S9F3FN/:1xkPt4cRIgcdeBPofV7an2ItqgeE7OF9
TLSH
T10E3533CF1C759C75D6BC7EC1177EFAE019957A8CF50C694D1820B2220DF6212A5BA3E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitRemove.docm.WNCRY

Path C:\Users\Admin\Music\ExitRemove.docm.WNCRY
Size 873KB
SHA256 9ea0258a652916d8b6180a563db5aedf6a8a53f93dd6b7f759d82fc8ee0aa7a1
MD5 9827c81e99c529e9205db9211edfc432
SHA1 c95d95d22cb4ed185f457c6b6088e12ba28df67b
SHA512 60966041a4442791e710afeb01308b94ed17bfdd44b244f68980c216cc5684ebd75cf6a646fed7c94cfea60a788a44a6d6a86b220f17f5adcb28af6817719b80
SSDEEP 24576:Xm8jqfmOZGpPwgC2ltR80WXbgLb7iSsNxiACEmaMjeDa6i:XmJspbCQI0W837i5NxiACNVeDa6i
TLSH
T1FA1533A20429CBC65F229688E5506F0B05210FFE365FE5719C6D2A28B3BFD751E37E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportRequest.ppsm.WNCRY

Path C:\Users\Admin\Music\ExportRequest.ppsm.WNCRY
Size 724KB
SHA256 5a389a8751a6afb4443a25a94a137c3bdf1b90c3dc6b87e811258651c53303be
MD5 834c588d651db453a1bb4e80f6c0ee64
SHA1 20d045dbab9d9cc5a0a1ab60d4ccd855fcc592b9
SHA512 e8fac1dc6226ab2b3aefe24aaa86ba7a528e4c41189cf8f61b98a4a144935d1f6b1edfc40b37efc9471e6bba1439b3e9b7d512d69f83938ad3827993177581a0
SSDEEP 12288:WwxFxB7iCiVdZx/hcRd9nZI3imjk9tIgcQ5ME4mr6jA7eg4AlBtYTSC7aFGhFjF+:Wwx17iCiVDx/hcn9ZXmGtIgT5mmr6Dgj
TLSH
T1F6F433480D4FB2FC927EE24409E48D17AD5AB82670C411E054F78B8C5B1E62BEE7F935
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideSync.vbs.WNCRY

Path C:\Users\Admin\Music\HideSync.vbs.WNCRY
Size 576KB
SHA256 71a6178ae1ca94dcdb97677d6920d0a125f9de3c06af21ac0cf22859d78a47fa
MD5 68a093d16aac32b8fd3314d50d1a5760
SHA1 131398866a5de1f8bdc1b8f581a6caeb6ae2aa2e
SHA512 2b8af7b4c7c33e9bce1d56b08398bb4da2f4601b6497acdbfa5ad13d97d801eb285cdcaf8d78c08ef05813add2484cbe7ba397ceb7079abc6f3d0f9c89fa9886
SSDEEP 12288:lRX8IFk6uzpKHg3OEoyc/20pBXVjnlHoVuBU377XSTdMrdn/fNT:HLZEYH+3o9/20pBVjlHxU3STEX
TLSH
T1B3C423AB542993A5404772AD41904B2CDDEE84BC44E9FED08C7B9758E36D70DCBC76E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishInitialize.mid.WNCRY

Path C:\Users\Admin\Music\PublishInitialize.mid.WNCRY
Size 687KB
SHA256 b242aaa25c7fc0e9779a94d3e99c24ae13ea296b4bc9684bc9323e97e8f8f881
MD5 6b9250b3de085ad2f8f7b9a198dab8c1
SHA1 83a7caac604850369254ebf49311390729f8e6c1
SHA512 3186708f7e7cf6ce08e1ddd6f9b931a54813ed9c0b3e61597adaa86a5471f2f3c99b1e3e0d63637fad0d97d23799bccd76788a610e2728ad64ad703f69f5b90e
SSDEEP 12288:JcNXkuBZmJMERkly/3eTJ/I3ZDQejE8NX85BKija/4udd3Ai5/Ow+jyK:JCUuBZCM3y/3bFQejELsJddrGwG9
TLSH
T13DE433891DE5F46C95252ED8AC6D71B139A2B510D0C29FA2FF51C2DCBB7077C0093A9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveOptimize.odt.WNCRY

Path C:\Users\Admin\Music\ReceiveOptimize.odt.WNCRY
Size 799KB
SHA256 3d462581e4af1a6355b5b84a405824b59a90a380d95c939af5f8549f80590822
MD5 1a3e5cc047f968d99f5b9e75408ac43e
SHA1 a3fbd2b380da8b5895b8683509d2ae52d2ac0ca4
SHA512 c2bc581633827344cfeb02da2c017d36f75dcf843d5834e5ffe08ff0635d8fddb7f651986a0ef4c682f8a3335dc3985efe92150ee53b9bd8c9cb2ff05330ff75
SSDEEP 24576:QSovlRcHwWMzIYrjv083Q0D43rEdbiDI0vL:jovlR7XkOvD432bic0D
TLSH
T1AE053369DD19B73CC9B02CCB8C6B687AF244F80F8EDE45A8557C7C8329B563DA923141
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeConfirm.xltx.WNCRY

Path C:\Users\Admin\Music\ResumeConfirm.xltx.WNCRY
Size 390KB
SHA256 4afa65149e68ebbdf6fe9cf4ebdbfeab8cf3fdb6823de929a1cc83c5d169fb83
MD5 27e270f41312c89cddfbdfcc9931eb7c
SHA1 302ba095a32c9b22eda4e38c3bcb923d46e53ead
SHA512 8a09b44879383a79424c758ea06f6bb96ad86675e5dbf241d0b415b7a3e552aab66859557b40b288b3caf296f5030675e437097761ea231b520348bc538159bb
SSDEEP 12288:0WYI6+tgXxhLduDO4gTPuNuPYbSaRMGvbBG0g3z:MIxtgXxH4gTWs5VGvbo0Wz
TLSH
T1C1842356E73FE55E854387B30270831A7AFD082D1A5EB1ADC6837B2E8B411FD711A8D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitUnpublish.jpg.WNCRY

Path C:\Users\Admin\Music\WaitUnpublish.jpg.WNCRY
Size 984KB
SHA256 6e11478cd97fd69d6e2c49385ba0ba59682a8e9cbc9cf794dd6d6535b870e6af
MD5 de4862318599e569331a6f75ee90d4d3
SHA1 e63d8e7b4124062447ce4f6d1a2403685ab815fd
SHA512 2f0526985a733ae8e09c30ff4ff0e6455869d326bdf8df48efe7cbcf051d787795c006ddc3da0a3f5f0cab18fd40b91a55157b461a8adf5bb0f2ba5e4a95ca11
SSDEEP 24576:YJBIJN1js4geYp8BLWHSqWgUAPwb1M+t7qaAW4C/4Qs:E2JNtgfpSmYb1TAh
TLSH
T16C2533FB0983F65607125A6B0BE774775566CC16DA6293217FB19CF6C2C2E3D0B0E02A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertCompress.jpeg.WNCRY

Path C:\Users\Admin\Pictures\ConvertCompress.jpeg.WNCRY
Size 242KB
SHA256 a4099ceaef1e32d06eaf2c0f00fb50b117af1756096f9be822094f1a1a4b1840
MD5 99414787d9fd37694c6ef62ab61703f4
SHA1 0543f8563589f52b1e7b1a7bd5eb04926500ea53
SHA512 1ff031710e89b6f12cd77d40738c2cf896190bfc4b5eefb99c0c0bb986e8c44b1fba5bfb46107bac70c7d47ce096538286b8086072ed6b0895422a13d1d5b726
SSDEEP 6144:KgzpxGm4yvhWXBQZ8wmrKn+hY2PPl6hjRUCNHkn+VqTgG:zjP4yvhWxQZqvCOYh9/En+Vm
TLSH
T1913423096A0794FC46B27EE58AEB0F9FEDBC9430EDA5246F024F34115CB532478598D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyRevoke.jpeg.WNCRY

Path C:\Users\Admin\Pictures\CopyRevoke.jpeg.WNCRY
Size 122KB
SHA256 8240b23a34d970ca670cee6be3c9591402ee9dee4d339dc2c10b573ce0df8006
MD5 95fb3b260c53ddf047467c4c2e77bef6
SHA1 a144ed7d79c669003509e63071700788f61f9289
SHA512 17ce720aec95c0c97641f70c39ca6bff7b29640f5388a786bf1480d7861fa436c302152550e5d3d28f477277781865f9ad8428b9287588c64d43fa01f9c5cec5
SSDEEP 3072:4lbFNE/R9ybny7MuSjaSbkYl9x1H0NQDaxglVt2cOTfWI/:4lJNCvtMuSjjBlLNExglVt2PfWI/
TLSH
T168C312A45072EBB37CB1BCD0EF03AD5DAD6994736193D015206698B0BD36ED33B63A14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyResume.svg.WNCRY

Path C:\Users\Admin\Pictures\DenyResume.svg.WNCRY
Size 314KB
SHA256 0c42fa4532706f5c9f2e3607e7d3b70f85186458574de9c5bce0b8e860a01f07
MD5 b1964c8e5f60ce8b28fe150d441d25c9
SHA1 8e64f8a5f9e4440b14e197f142c9ea3149c13456
SHA512 5ddd14bcad89faf471b7f46dc79312c714f1152f4973edeceb6bfdc2cc42d92df97757aa86ff6c5bd7e9a727c9aada995e5e696805f27a96195cb06d4de743a5
SSDEEP 6144:5tnzQAQNNmwVZ71BSsLvU4Wl5tiCFFH8rb0YAnJr:56/8CJ1Bj4l5tdHWd0r
TLSH
T1AB6423208B248DFBBB6012933021756C59CF29192AFC6A3C477B8154D677EDB91CFB98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenySave.tiff.WNCRY

Path C:\Users\Admin\Pictures\DenySave.tiff.WNCRY
Size 176KB
SHA256 b1759d7db1ef36f54f8219258c0164c933bea82cd9ea9e54725e4caf59858803
MD5 65bacf0978e34f1ca6030ca2e117db55
SHA1 8e0dfc21fd319621e24874e03afab4c9c578c925
SHA512 79023b6ecf83bf58796bbd44cde9331e0e5625442e7c4671618de352ca31ce3135e7a43acc0c9f60df10ea44a7a0de49a04bee74c3a2a50926347b4776675188
SSDEEP 3072:dEO+dbC50btq7syqCPtPQNhp/vLR9X4Fa64dLEssc+aMjZmjQ1MUkWIr:R6bCYtq7rqC9EnLRx4FOgjc+Z9EQ1M9
TLSH
T13104123927F4503B00A1B8B92A7046F2D1F23F231828635D1B12E9E7D69D95FAD58FB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectResolve.jpeg.WNCRY

Path C:\Users\Admin\Pictures\DisconnectResolve.jpeg.WNCRY
Size 284KB
SHA256 68f91a08bfff0f9ac86960d42a1a526c1d7ce7633e316817c61af81a2f1a92f2
MD5 978d39333fc883c740cc53c2ea13fb2f
SHA1 4277ecb6a8a4d51e0d59bd56ae9661db05397053
SHA512 4cef0a40bc9dbed37fec8dd2470107f171b3ba3b47b436c0464753aa6916fcf2d699cd312a88ac3758473d460e01a0e13d7d7bcab5e4b2bd3a23f6d332bc7cd0
SSDEEP 6144:5WiujKfsb545dfyk/d4R3t0gdOjPEk6PuePrk1A9:5Z9fsb5sdakSR9fgEkMueDk1A9
TLSH
T1835423466780D4B1827DB6019318F66BBCB7A68E73E1B259C590EB3F584B0D3CA6C347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatSplit.svg.WNCRY

Path C:\Users\Admin\Pictures\FormatSplit.svg.WNCRY
Size 224KB
SHA256 cba33cdf6da923edb72360b93a32941c914cc23ae366fef4e222a1d74287063b
MD5 d3120e06a7a1d6760fb62b11c5bcd5d8
SHA1 ba1501d43f10e00a904f10535d0485accfbc9a97
SHA512 2e7c716c8260eacc6fdefc9d6f4b7f58e4a5b1677656b816bf291fd2bfc60fdd26d17596eae171a8cef97c00b6f09d929987661bd196df5cff6acba69b65f488
SSDEEP 6144:V853/z5kV1fk0Th8kghkOChPKBvBz90CP0TKO6FZyf5F:Vs/zEJpykgtCRqvBzGCPMh6S5F
TLSH
T1AB2412C72C701B5986400161B87A6AE4CFC1251A634B48EB1D79F82ECE5FF29F2573CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportResize.raw.WNCRY

Path C:\Users\Admin\Pictures\ImportResize.raw.WNCRY
Size 266KB
SHA256 5830fdfd6da900031cc4156cbd258492159a5e26e43009e1c707e42eb381ad85
MD5 d5536cd255e3d412c0a54d15e1a34593
SHA1 f85a38b571700d222666e66e2e26be472713a07f
SHA512 6efef9e0bfd93eaedb316c6c2b72095d0a22bd5b282c89117403001529ebf3712cf432c9b30db76e8979847ef63d800261ea98ba1be6a2bc319e2116f35e3b21
SSDEEP 6144:88cIsyHB6eVVmOman3ucPJ8qyXT9sVQvfW/cUVqWZ/MhSyW:pcInPUOma33hdeVW0OZ/gSyW
TLSH
T10C4423B4AAE526E2048F136FA7DA09B8D851BD877DA8D5C01DA648AF45B11CFDC1CE03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeSearch.gif.WNCRY

Path C:\Users\Admin\Pictures\InvokeSearch.gif.WNCRY
Size 194KB
SHA256 19bba220de65f81bd6eb93dbe08d55418508b26f61c161b3a77c36f45b7e9bc3
MD5 59bb2be15ac718920618c6a12c82aece
SHA1 406ff8b7b16ca4ca73e622787d68fda4b43fa38b
SHA512 5839fe2fae90af2b5085b17e7d523099d2a26d94b257676c72e5ede90d8a17d9190f6faedc87e46e6e7a36043002cc867f7f9ed24a8f6a43fabf375d4ee43b57
SSDEEP 3072:RxLpTrJl5qlgceCOI5GVPnlSxzccEHLPO945j5qwKeFfk6gs4B8fw+F2UJ2fGDGs:7TlaW45cNHi9qxc6K8I828CK7XZ
TLSH
T1C714233571E7BC5C584E8DD5B90E4C06FF9A18EB3C70EBA6C1AEECB543414ABA0D15A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitBlock.gif.WNCRY

Path C:\Users\Admin\Pictures\LimitBlock.gif.WNCRY
Size 308KB
SHA256 9bedcdcc8a076f61812d58c0bde996b4717242c55da8093e171a135899fda35f
MD5 43d154516cfe5e481447c353d711cfdc
SHA1 4f2102a074f14878604ad93a072f8b77ebf5192d
SHA512 f75517dd53e80235447eb11148c8a6d3607c30a4f0b5fa31efef565727811ca6b234e0ee934d7260b2cf050abcc549f954c642cec9b519a2e5af5db20cc131b7
SSDEEP 6144:1a/j7fJBSMDCsNkHRtp1QVTXSIOBmlmO9JZ6Wpn6SXa+QG:1a/n+MD5N8r/ETXSRErv5tX5
TLSH
T1426423DCD9F1EE810D54A4FEF23CA585CB034AE26F16ADE9DD63089E704A81E17161C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountEnable.jpeg.WNCRY

Path C:\Users\Admin\Pictures\MountEnable.jpeg.WNCRY
Size 158KB
SHA256 9a8b2d7a7bb2814cfee514146a9d63737504332e0cb2a54cb68523f32870740d
MD5 467a7bd5db9b17bc9c72a529b4b18adc
SHA1 0755e179277fdeeea1f729c7c9d986a9be753565
SHA512 a731592d335551ad153e7d046fc39968c780026280ac215612ee6e5e90fb95dc20e87065ecbbd27a93b02843f0ff5c832f5db9f78409b8b20e9b8a409a2e8276
SSDEEP 3072:Mu3rBL74DOLL9QgqpWXC/yi3CMH5dfAE08YMutx4f3c6g0gmqz5Z:Mi9y+9QIS3vH5dfA98/utx4Pcj0wz5Z
TLSH
T12FF312E4244592B5DCEDA89573AAFCE4D8405FBB0E90ED94F0B03E779247923C782867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewCopy.svg.WNCRY

Path C:\Users\Admin\Pictures\NewCopy.svg.WNCRY
Size 230KB
SHA256 b3249de4cdf96bb7aaa0a2288732731c15699a5038c7a887c0783b5da0e64da8
MD5 80a9c537553d2cccefe5bc08856cf644
SHA1 94f4f55f89039eb112565fa8930b5078ff7fa367
SHA512 dad345eaefbd2764014b0f848e24fd5764b687e4332d09cd19c442fd15fee75f205bb0d5354490bb1b79cc5468695ebe5eecce35bd3737e64dc8445143217b23
SSDEEP 6144:uT8Rtlmv2WyquButR4t/2gDUvPkTIJis7Bk:Lov2WFGutRO2gD2Jvdk
TLSH
T1EB3423A91AA504321BE70C9DEF86262FB8DC1F9E8CB1184D45F1D573E2ECC4980A74F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushEnable.tif.WNCRY

Path C:\Users\Admin\Pictures\PushEnable.tif.WNCRY
Size 116KB
SHA256 a0666dd8aaf9fe0f554764e2747a734ee2294a363d78d8436ec935b253fd36fe
MD5 a1a2df357bb6acf5f7f7bb90bef9aa21
SHA1 26559487ced1fd3d0ff0ba86a41bf6445cedd907
SHA512 cc57977093d42f48dcb6ea3c865e6226362350153438eabd6dceb19995a9359b1a5b9901154d85886ca84754f960e78d93f3a27a8fc0bbf4648432619fe54689
SSDEEP 3072:tdSzLTJ6lx7totNwLUGUerN81ALG775v0ewOxLOdIo2:tqTJ6fetN2UGUOkoG77FwOxLo2
TLSH
T1F8C312433F865970D17D821873A155424F4CE13BE2E830EC97A4EE2F2B16892E1ADF5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetJoin.tiff.WNCRY

Path C:\Users\Admin\Pictures\ResetJoin.tiff.WNCRY
Size 128KB
SHA256 8d3e2169396d0df6c283f4f3dddd215dc06aa294ef48e312e1d0393466104316
MD5 6efc0c2ee1f6e2eca22fa5e9e6272804
SHA1 a375fd364ac01cba573ba98846cc9c8050735c34
SHA512 611366196d5d5d5d38084fc640d9d4a4be26ab46c2f1768306658214875e071a3f0c8336877f1cfc44eafea7157a722dc5e6f2f7121e43003f6cc6f98c9127dc
SSDEEP 3072:Mz0VmjulJghTpQVR5RyDq0fDRHXev46vV8Q48heSg+w2x5Lrtx2M:Q0Mj+J/5wfDRHuvlviQb4SRr2M
TLSH
T1EED3126D4DCE68BDCA6884FC15E45FDDC1CC74CD3AE698B8874C13E8648D6A218BE41B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeBackup.tiff.WNCRY

Path C:\Users\Admin\Pictures\ResizeBackup.tiff.WNCRY
Size 278KB
SHA256 ca1b42b4410921e2dd3194650e452fa4e7405bc3007e81c9cd708d8c8b35ca48
MD5 f0f7da3e17dbf3eb9c2140558c58a4dc
SHA1 0a2b61b491809977e131007e37e8c707468a1ebe
SHA512 d6547b245fcbbeb2857801f7478ba6de4cea2d88ae22b117461350a384dfdd8fb75c9951c8025c91fdcfcc4a89a41167cdfe59f34c7ec12db60de01f03aabae4
SSDEEP 6144:Klak4XmFzwHsDdBZodZOTLgXcu4A3OlvSbmjtS8iWEfG:Aa6zwMx4dZOXgXaAe8KBSjfG
TLSH
T156542216A06E6F9C9890BEF31DF8B115D7A8D0D2CC0858DF6957E7C09453C6962C82AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartResize.svg.WNCRY

Path C:\Users\Admin\Pictures\RestartResize.svg.WNCRY
Size 170KB
SHA256 a807161d9cbfca8132b40f547c2ac7e97ca453278e7224c6a7335ce4fe0d06aa
MD5 37e246ba76f62c93ed9349a58bd9a2d9
SHA1 d23f409710615be297fe970bd77e2a1daa584be3
SHA512 ef6645f274ee49ff6603049ef53902994e57a061c931737fd7f1365e3e49b3771f307e28bc951e9c5213f6e3b72cb43eec27d84a12b3bf19943e834e3c3c34c8
SSDEEP 3072:yJgVlJR+1xWKaHc+rNTkP6PCmEkeXqO4RwopvLPkI68/Kukc6XQ5:yOJAWKa8IFPtEnqYMrkJRDc6XW
TLSH
T1CA04135850B3086D93E88C0B0FF1AC81ACF7936F4C8E4125F10469ABAE957FF1E95D5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallDisable.png.WNCRY

Path C:\Users\Admin\Pictures\UninstallDisable.png.WNCRY
Size 212KB
SHA256 78e0409176cb440070b74e6724c28c31d0716e6fc1dba17d5688ce2d55eeed3a
MD5 4417be2d263a4b10d8b2263ac6ace533
SHA1 6b276392ff78b752372f7c7103ce66b161513354
SHA512 dd7a3acc75267f153237cf00531d5d298b076d9bb2a63f74f7231cc5b3d49b7bbf4eebe3e4732c542c182c35001bcdfacb746292dc81f2416b2031b1a0995cfb
SSDEEP 6144:d7r38K4moxAoeM/L5LqxB9c3bxqWFwJa6cUdB3qg:d/8BmoxAoPxqLmtzwJgI/
TLSH
T19624238A2C6356D2DAD85FD8D2593FFC51C8ACFAA78A3CA1FB4AC3A1E5514032354885
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aEqYmHqC.jpg.WNCRY

Path C:\Users\Admin\Pictures\aEqYmHqC.jpg.WNCRY
Size 25KB
SHA256 027601a8d29f22302ef3311637a40326fdd38f8384c0aa8aa75f0a22b0febc5b
MD5 0436ffbd717f26c86524455c3937cee9
SHA1 ead1119ff6d68927bcf6362c50539c0e5e6b34b8
SHA512 6efd5b676b599530c4358c83d6fd7c680e8a3eefcb038a9bafd2e0773b5b00a880e233186501937bfd83817f7b03f15fc889e6e92ca9bbecc0c43d35772805c9
SSDEEP 384:T1abxBXbujNuhXK0C+xzHT6AoT3jesduLWnUtgKE4XT2CGHscD0tJGO69D342g4M:T1uHqj0QXeOuSUDLXTY50tR4D3+4K
TLSH
T1BDC2E1D74EA0544C2F4ECCFA723B8999428FA160A0FC69409D3C917B516632E97BDF70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1324-40-0x0000000010000000-0x0000000010010000-memory.dmp

Download

memory/6936-2143-0x00000000739C0000-0x0000000073A42000-memory.dmp

Download

memory/6936-2144-0x00000000737A0000-0x00000000739BC000-memory.dmp

Download

memory/6936-2125-0x00000000737A0000-0x00000000739BC000-memory.dmp

Download

memory/6936-2126-0x00000000739C0000-0x0000000073A42000-memory.dmp

Download

memory/6936-2124-0x0000000073B20000-0x0000000073BA2000-memory.dmp

Download

memory/6936-2141-0x0000000073AD0000-0x0000000073AEC000-memory.dmp

Download

memory/6936-2140-0x0000000073AF0000-0x0000000073B12000-memory.dmp

Download

memory/6936-2138-0x0000000000810000-0x0000000000B0E000-memory.dmp

Download

memory/6936-2142-0x0000000073A50000-0x0000000073AC7000-memory.dmp

Download

memory/6936-2139-0x0000000073B20000-0x0000000073BA2000-memory.dmp

Download

memory/6936-2127-0x0000000073AF0000-0x0000000073B12000-memory.dmp

Download

memory/6936-2128-0x0000000000810000-0x0000000000B0E000-memory.dmp

Download

memory/7156-2151-0x0000000073B20000-0x0000000073BA2000-memory.dmp

Download

memory/7156-2154-0x00000000737A0000-0x00000000737C2000-memory.dmp

Download

memory/7156-2155-0x0000000000810000-0x0000000000B0E000-memory.dmp

Download

memory/7156-2152-0x0000000073860000-0x0000000073A7C000-memory.dmp

Download

memory/7156-2153-0x00000000737D0000-0x0000000073852000-memory.dmp

Download

memory/7156-2162-0x00000000737A0000-0x00000000737C2000-memory.dmp

Download

memory/7156-2156-0x0000000000810000-0x0000000000B0E000-memory.dmp

Download

memory/7156-2161-0x0000000073860000-0x0000000073A7C000-memory.dmp

Download

memory/7156-2160-0x00000000737D0000-0x0000000073852000-memory.dmp

Download

memory/7156-2157-0x0000000073B20000-0x0000000073BA2000-memory.dmp

Download

memory/7156-2158-0x0000000073B00000-0x0000000073B1C000-memory.dmp

Download

memory/7156-2159-0x0000000073A80000-0x0000000073AF7000-memory.dmp

Download