wannacry | be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844

Analysis

max time kernel
148s
max time network
126s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/11/2026, 17:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WannaCry.exe
Size 224KB
Sample261107-vshpladv6x
SHA256 be22645c61949ad6a077373a7d6cd85e3fae44315632f161adc4c99d5a8e6844
MD5 5c7fb0927db37372da25f270708103a2
SHA1 120ed9279d85cbfa56e5b7779ffa7162074f7a29
SHA512 a15f97fad744ccf5f620e5aabb81f48507327b898a9aa4287051464019e0f89224c484e9691812e166471af9beaddcfc3deb2ba878658761f4800663beef7206
SSDEEP 3072:Y059femWRwTs/dbelj0X8/j84pcRXPlU3Upt3or4H84lK8PtpLzLsR/EfcZ:+5RwTs/dSXj84mRXPemxdBlPvLzLeZ
TLSH
T1A024015A7A61877FD0B20532746194FB4EFE0DD3F5A89A4FE74D0A501F048884BE3A9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery execution wannacry impact persistence privilege_escalation ransomware spyware stealer worm

Malware Config

Extracted

Path

C:\Users\Admin\AppData\Local\Temp\!Please Read Me!.txt

wannacry

Ransom Note

Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1 Next, please find the decrypt software on your desktop, an executable file named "!WannaDecryptor!.exe". If it does not exsit, download the software from the address below. (You may need to disable your antivirus for a while.) rar password: wcry123 Run and follow the instructions! �

Wallets

15zGqZCTcys6eCjDkE3DypCjXi6QWRV6V1

Signatures

Family: Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047

Creates a file in the Startup directory 1 TTPs 2 IoCs

A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

persistence privilege_escalation

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SDCF10.tmp	WannaCry.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SDCF26.tmp	WannaCry.exe

Executes dropped EXE 4 IoCs

pid	Process
2356	!WannaDecryptor!.exe
7004	!WannaDecryptor!.exe
7072	!WannaDecryptor!.exe
7120	!WannaDecryptor!.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Microsoft Update Task Scheduler = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\WannaCry.exe\" /r"	WannaCry.exe

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
5096	cscript.exe

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1404337215-1550464601-2805570857-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\!WannaCryptor!.bmp"	!WannaDecryptor!.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 3 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
7156	cmd.exe
5808	cmd.exe
7016	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	WMIC.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	WMIC.exe

System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WannaCry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	!WannaDecryptor!.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WannaCry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe

Kills process with taskkill 4 IoCs

defense_evasion

pid	Process
4672	taskkill.exe
1548	taskkill.exe
1412	taskkill.exe
3776	taskkill.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
6028	WMIC.exe
6028	WMIC.exe
6028	WMIC.exe
6028	WMIC.exe

Suspicious use of AdjustPrivilegeToken 49 IoCs

description	pid	Process
Token: SeDebugPrivilege	4672	taskkill.exe
Token: SeDebugPrivilege	1412	taskkill.exe
Token: SeDebugPrivilege	1548	taskkill.exe
Token: SeDebugPrivilege	3776	taskkill.exe
Token: SeIncreaseQuotaPrivilege	6028	WMIC.exe
Token: SeSecurityPrivilege	6028	WMIC.exe
Token: SeTakeOwnershipPrivilege	6028	WMIC.exe
Token: SeLoadDriverPrivilege	6028	WMIC.exe
Token: SeSystemProfilePrivilege	6028	WMIC.exe
Token: SeSystemtimePrivilege	6028	WMIC.exe
Token: SeProfSingleProcessPrivilege	6028	WMIC.exe
Token: SeIncBasePriorityPrivilege	6028	WMIC.exe
Token: SeCreatePagefilePrivilege	6028	WMIC.exe
Token: SeBackupPrivilege	6028	WMIC.exe
Token: SeRestorePrivilege	6028	WMIC.exe
Token: SeShutdownPrivilege	6028	WMIC.exe
Token: SeDebugPrivilege	6028	WMIC.exe
Token: SeSystemEnvironmentPrivilege	6028	WMIC.exe
Token: SeRemoteShutdownPrivilege	6028	WMIC.exe
Token: SeUndockPrivilege	6028	WMIC.exe
Token: SeManageVolumePrivilege	6028	WMIC.exe
Token: 33	6028	WMIC.exe
Token: 34	6028	WMIC.exe
Token: 35	6028	WMIC.exe
Token: 36	6028	WMIC.exe
Token: SeIncreaseQuotaPrivilege	6028	WMIC.exe
Token: SeSecurityPrivilege	6028	WMIC.exe
Token: SeTakeOwnershipPrivilege	6028	WMIC.exe
Token: SeLoadDriverPrivilege	6028	WMIC.exe
Token: SeSystemProfilePrivilege	6028	WMIC.exe
Token: SeSystemtimePrivilege	6028	WMIC.exe
Token: SeProfSingleProcessPrivilege	6028	WMIC.exe
Token: SeIncBasePriorityPrivilege	6028	WMIC.exe
Token: SeCreatePagefilePrivilege	6028	WMIC.exe
Token: SeBackupPrivilege	6028	WMIC.exe
Token: SeRestorePrivilege	6028	WMIC.exe
Token: SeShutdownPrivilege	6028	WMIC.exe
Token: SeDebugPrivilege	6028	WMIC.exe
Token: SeSystemEnvironmentPrivilege	6028	WMIC.exe
Token: SeRemoteShutdownPrivilege	6028	WMIC.exe
Token: SeUndockPrivilege	6028	WMIC.exe
Token: SeManageVolumePrivilege	6028	WMIC.exe
Token: 33	6028	WMIC.exe
Token: 34	6028	WMIC.exe
Token: 35	6028	WMIC.exe
Token: 36	6028	WMIC.exe
Token: SeBackupPrivilege	4512	vssvc.exe
Token: SeRestorePrivilege	4512	vssvc.exe
Token: SeAuditPrivilege	4512	vssvc.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
2356	!WannaDecryptor!.exe
2356	!WannaDecryptor!.exe
7004	!WannaDecryptor!.exe
7004	!WannaDecryptor!.exe
7072	!WannaDecryptor!.exe
7072	!WannaDecryptor!.exe
7120	!WannaDecryptor!.exe
7120	!WannaDecryptor!.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 1320 wrote to memory of 5808	1320	WannaCry.exe	87
PID 5808 wrote to memory of 5096	5808	cmd.exe	89
PID 1320 wrote to memory of 2356	1320	WannaCry.exe	93
PID 1320 wrote to memory of 3776	1320	WannaCry.exe	94
PID 1320 wrote to memory of 1412	1320	WannaCry.exe	95
PID 1320 wrote to memory of 1548	1320	WannaCry.exe	96
PID 1320 wrote to memory of 4672	1320	WannaCry.exe	97
PID 1320 wrote to memory of 7004	1320	WannaCry.exe	104
PID 1320 wrote to memory of 7016	1320	WannaCry.exe	105
PID 7016 wrote to memory of 7072	7016	cmd.exe	107
PID 1320 wrote to memory of 7120	1320	WannaCry.exe	108
PID 7072 wrote to memory of 7156	7072	!WannaDecryptor!.exe	109
PID 7156 wrote to memory of 6028	7156	cmd.exe	111

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\WannaCry.exe
"C:\Users\Admin\AppData\Local\Temp\WannaCry.exe"
1⤵
- Creates a file in the Startup directory
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1320
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c 265821794071705.bat
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5808
- - C:\Windows\SysWOW64\cscript.exe
    cscript //nologo c.vbs
    3⤵
    - Executes a VBScript file via the Windows Script Host.
    - System Location Discovery: System Language Discovery
    PID:5096
- C:\Users\Admin\AppData\Local\Temp\!WannaDecryptor!.exe
  !WannaDecryptor!.exe f
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:2356
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /f /im MSExchange*
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:3776
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /f /im Microsoft.Exchange.*
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:1412
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /f /im sqlserver.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:1548
- C:\Windows\SysWOW64\taskkill.exe
  taskkill /f /im sqlwriter.exe
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:4672
- C:\Users\Admin\AppData\Local\Temp\!WannaDecryptor!.exe
  !WannaDecryptor!.exe c
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:7004
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c start /b !WannaDecryptor!.exe v
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:7016
- - C:\Users\Admin\AppData\Local\Temp\!WannaDecryptor!.exe
    !WannaDecryptor!.exe v
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:7072
  - - C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
      4⤵
      Executes a command shell one-liner
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:7156
    - - C:\Windows\SysWOW64\Wbem\WMIC.exe
        
        wmic shadowcopy delete
        5⤵
        Reads the TCP/IP host and domain name from the registry
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:6028
- C:\Users\Admin\AppData\Local\Temp\!WannaDecryptor!.exe
  !WannaDecryptor!.exe
  2⤵
  - Executes dropped EXE
  - Sets desktop wallpaper using registry
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:7120

C:\Users\Admin\AppData\Local\Temp\WannaCry.exe
"C:\Users\Admin\AppData\Local\Temp\WannaCry.exe" /r
1⤵
- System Location Discovery: System Language Discovery
PID:3592

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

OfficeIntegrator.ps1.WCRY

Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WCRY
Size 5KB
SHA256 6077095258438bafa6aec72b3bd6c859c08a9f05ec30870a92a5c1a4cad38865
MD5 d82d834a7b0161e69e05c04b216bc87a
SHA1 b10456fc70d0487b4f65aa0a98ced84c5559cfa8
SHA512 cd576fd21a6f1683f33fba8132eeba6840284cc83c8b02a48e16d513afb488a5bb902c9e4bff408fd1b4d29241b5a8059d1ee832a0cc79e87ff5cdb649ffe8f3
SSDEEP 96:SBvSHZr7H3swKm5dkEHD2CY2Z3ErvI4lGKNO9Xc3WofxJykiJp95p6rz:SA5r7shm5qkiCY2RErvllG/tLj2
TLSH
T184B17D3FFC1054AA13BED55E2844766FD34C2A05348DDAB5CEFA7D12020D502FA9953D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.en-us.db.WCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\0EEA686E-6FCD-4A37-8913-8B000F966285\en-us.16\stream.x64.en-us.db.WCRY
Size 438KB
SHA256 ec8e19b79f9ed4f07b1612379b24cfa7226c83b8c4d63ef5a8d69f0ab4d7befe
MD5 302e87734e777cca1e08864270000cd6
SHA1 52d3abb8d50faf6676b93c24b08f02ef34ad5167
SHA512 39c5fac898cbc8c1bd6fb556d53ae829fa4ec19e9d08b235b6e8ba924bd4da989b307210ec597dd61dc09c11d361e750e7ca8ac3493673284f678088a9168b7e
SSDEEP 12288:VEW9634gv15fjhCq54F1CNQAT5EwXx3tEhgQO2bEtgBKHKF:Vr9mvXAq5Q14Qo5ESx3qp3EyYKF
TLSH
T1F0A42341A0C03FB2E1C5AA1841F86FBC04A475AC04BBEA8A7C5D3DF56E69912EE49D03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.x-none.db.WCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\0EEA686E-6FCD-4A37-8913-8B000F966285\x-none.16\stream.x64.x-none.db.WCRY
Size 1.8MB
SHA256 eab0ab5322b200404615467710e2e7230d8d8ada0be49c1af81294a1ae628e24
MD5 f5d27574d4d42dc0dcd0fb3d6025864d
SHA1 fa07abeaf4f1c4c2a028743bc592017c8b696355
SHA512 d902be26b9c34cd2b0abd5e2d440004b5d703f9cb60010550f244a348fadeb5d163a11fe27bf657e45eecd3a15b8f7af8540962fbbd92a7a7aeada9c4200412c
SSDEEP 49152:5DSA5+DNrhtQWxOdWD2Y2HRu2mZjYsqHOaBCogWEdl:5VwrhHxUYl2usbHO0CaM
TLSH
T1529533720DC565AC16B05AA33F342030DEFA0807C5B8FD8A15D499A7BDCB3E1B6E509E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WCRY
Size 126KB
SHA256 83b8488f3dfb0e737c664fc133942b3aa9dda0f67411247070e9a30b53a9703d
MD5 da81c690d0f20efbcb70cbec03ff44bd
SHA1 123d42f5db8faba8bd283d0f35e9c8dfeacc7990
SHA512 6e296c16a9d2a5df2506a6ae76b74428420d8de8d7a64a2cf96b3ab0550b5f8c80db3314262692894ed40f60ba1f0db3e51b5bac94fba05d4c4e3fc439d32242
SSDEEP 3072:1Vj4+XHAMEOxo7yb6dtYvyjmpKkMyIOc0K0nMFGtd:1VU+XAMEOxo+GovyjxbnOnr8ad
TLSH
T172D312065B2A5EE1DFC37C244AB6251888D49AAD5C37C8E5DC35C7F97D8E6B024FC520
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

device.png.WCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WCRY
Size 43KB
SHA256 43ff14c60205dd8c13862d05c1205daeeaef6981381720e82a4f0d4a2487ed61
MD5 556ea6f848cb8e83c4fa4b01d8620bf2
SHA1 d2fbe8121165df5b99ff9b54fd2a8bf7e240c2e3
SHA512 4a48010a73fcff4e97ed33a645397912aa975e05dad7306d26288bf75db36fcecbbafedc4963308c7c1a81429646f089d48643a147a9123d707b227428432295
SSDEEP 768:d18HJf1aoRxDOtvMXaqml/ZwJ7a6K45myMtMxj7GnTpcMFf2Hht+HNNRQ4Tq:cfh5X8lhwJ7y45mBtGCTGMFfe+6Cq
TLSH
T1EB13F1BAD05C975C5DF4DC640AA61EE7D1ABA531686BDE4B00D244333223E5BD2D3372
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay.png.WCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WCRY
Size 28KB
SHA256 28620336f472a02d9948a71b5b882fe7777d95552380c3d264e67311293fa90e
MD5 88fbe4caaad2b81dfcd5099b51cced01
SHA1 db67b0247ffd5266b94c7665bf6e0403612a5433
SHA512 6aa1e3ffaa541211fb12f283f7ab680f02a7b02c48ed2e816afa9641cb0d09c483976d88c76ee70720440cc3750298e20d4e2885ddb74bb25172ad358e545a31
SSDEEP 384:Gfvxj0yLEK8ypHQkkLLkyc9AeDzEE+4I4YxeKkPppiIk+KZecX53I9HK4A3stvwF:aF06EKQkRR9VEn25iv+KZrI1d9vg
TLSH
T179D2F17CEE3C420B8C111932A43D9F5F1E15611C27EE63EC99D673B60943414262AEBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

superbar.png.WCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WCRY
Size 38KB
SHA256 4a98a2f90e51c894ac78bf8e80de48b22b20678fef943d4f3753dd26f2342649
MD5 702811ccb390775f4c01689bf73e850a
SHA1 a358858981692ce70b5429ca6e97bd1b33258b03
SHA512 8343154af5d65ca0759e7296099f362ddcc76ab9e553702a7515dff79eb41bba09d97d60e610a47f2167dfe38c6a3622073e68b4724db82000846ca2f88c132d
SSDEEP 768:oi5om0rz44uSzevIAiRuizfTx6BubcQPpa+sOUWQQ/:oYom0H44uSzTfRuA6Bufp3sOUnQ/
TLSH
T16703F189E7486FE2B05267AD24C78D83C0DEF016B46F73665A53BD80366858DC16F4CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WCRY
Size 126KB
SHA256 1a1d9d66f6c813be0027c355046674a69beef4bc94c958968e02a1aa5c50d0c1
MD5 cbc688f593905687b90fb0a5e3d4e665
SHA1 9af681baa1db7b5425271699aa0be4fedf4138a1
SHA512 96b79169ae28263afcba64b58b4b66981b31a1337fafb41f95cdf6a1668c43bc71e96dac886584fc1b6bffc3b7f3b8488a434fd0ccb72150139ece44d0cc0368
SSDEEP 3072:poMlL6h6P/1KvdD1QNRyI/oR3sti7dlJMTPw/ARhhRSOVd1lv1oXAw:powOh6kvdBpI/isQ7ew/AvjSO/L1oXv
TLSH
T17AD3127F57BE980685A0D6A7101A7FDE6A563C9EBC23F50CC0FAE3D3314486749928D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

watermark.png.WCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WCRY
Size 28KB
SHA256 3540cdac5837631595034c5a050df52dd00b7057443f51f875802cdea0abae1c
MD5 5b5fc6514712728a2d4a40e66899f2eb
SHA1 d752fefa1bc1cacc7073379c5997e1a90298a57e
SHA512 a223328e7fb31ff28590cff8857f64d2d778f13696671869e6aacd29bc67218cee475aa922e46bf82b8c0063dc94967e3ceea29247cff9aabe714aaac2d8b1eb
SSDEEP 768:NwWvbQizlH/XDnR0UG/4uMr4A4lzonU9Is6xrG:NwWvbQizlfXDK/ZMmAU9I4
TLSH
T1C9D2F11AE853647F43195AC842160986A130CA3E78727C69F37F85F3C7C9A89F15E2A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WCRY

Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WCRY
Size 108KB
SHA256 78b7cdbf984a0e0b27244fb7c5d8a333d022091860e7ea455f4e4199becf143e
MD5 400504020936e66c2624b3e67bce3259
SHA1 0b740d82633109529b974ff8a37e5fb6cf34c24b
SHA512 32645561a9c11523855b48753aefb41974b33a4f77370e0d5f26781c0efe7659b42c21a5ff6663a19593e23fc47958292c93f8ccd92a6693cebd13cb587969c4
SSDEEP 3072:JpV+DarP5cVteuuX0nnr9eIBskyQl5JKqs4371nP:rkm+kuuX0nnrUJkyi5JKqJLx
TLSH
T173B3127EED5F0FD349F026544A62033BBA851D9FBC3E90685FA918BC3585F197A812C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WCRY

Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WCRY
Size 48KB
SHA256 bb8df48768118e8900ec7d179a490aa5c9c672720881d9c75a6098dabab59953
MD5 5c156bff4e2e5d34d105da6326ce795a
SHA1 ae8c3f3102f26f4710779682d19c92824df63744
SHA512 616589350522e19a1b0798b654c445aa63b116888c16de9060b870903d9ac79e479b95b14ae7771bdf98f156ca89504154e1858c181a23f1236bc21595304bba
SSDEEP 1536:Oem7I5tKD1D1Ezxrwe2KlLBn31e7mcesQQ+CEV64:GXDN/ejB3Vd84
TLSH
T13E2302ECC49A314A39DD0A6754F0FD8DF9B6E3BF38595852A48F4A7B041982ACD3180B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WCRY

Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WCRY
Size 20KB
SHA256 ffbc5d0c4b035a7a097a34eba7a34efba3f7c20cc829f23388635ec299ae102a
MD5 f709518613fd547670e9c74db9e58bd8
SHA1 025ebede92856912288653ea9adf127578890b4f
SHA512 59a3e45da6e2d54cbc980c2b76c3b59bd43b19f04fa3ca588897af49a7c7e0342f7e1c3dee84289f8087acf42104bd68215f441968ad514ca3c91eeb08df15ac
SSDEEP 384:wGL6reQfP0PznzBkXcDaoOF4+FIHXD1w9001s2zTcn49ssFf3oxIfbtse:h8lP0PLtks2jF4+cT1G7Tc6foSfbtse
TLSH
T12092D03BA17C9CA8F86DD5A06A4D3B7C2D799E778FB3711845C2A586C96304069D0B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osver.txt.WCRY

Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WCRY
Size 296B
SHA256 5827f2495388035ae3b63771821f1d082d2b907ee6c74aed98c1ebf7412a0702
MD5 6c163cafa9622747304763ceed2baccc
SHA1 1913c6ea02735e98c4c2cfdb8c2cc8b9a8414b05
SHA512 482af6c14d682692f6eb0af8c20edaa567350e0d65ad912b3d55f3bc4fc6666b322169afbd55a3bdd60a786326d6f8a0a3ae207f89acc35fd10bcd185032b874
TLSH
T159E0E72760436D245964607CC23572AF26D3040172C311508DEF59136F06D421C11442
MD5 SHA1 SHA512 TLSH

Submit Download

qmgr.db.WCRY

Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WCRY
Size 768KB
SHA256 2d6f82f29b9a3851a6bcb22da009185b4fbf7cf32226c036a6faca7d4314c661
MD5 86d3513f7141c39fc221dfac688ca8e5
SHA1 ac99c59d5d807865a854a2387e6caf60dd77340c
SHA512 e3663ff9a28cfdeef45d3f1de92a9cfbf40723a325b0bb449f6ac701507d8163e589bc28bd3e23d1048988bfd71e5b1272d74d2d07b35a765e7b24aafeca1449
SSDEEP 12288:CeNLiYiN1NKYtsyF8F7Df6LugN+TPv14KkNy9ca6+acnPhrVY0f2K3jJ1oqt:CgLNQblts6cf6d6SLa6Jcpr7eKTnok
TLSH
T17BF423C87A15F57652371726FAFBE67BB532F30A572A8954E8C02929F4C3404F306CA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PropMap.db.WCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db.WCRY
Size 76KB
SHA256 23e7acce5f5e18b1de4841853de1bf4e75a32617c23119a812f4519d9e05ca40
MD5 7f55a9b674dc830fe3712c0779e87b30
SHA1 14788e6cfa88e474426d16f15ad118d346fc0a32
SHA512 ca775432ad816dbafdb0257f8c3be08fc0d4d5969e17257414956c2fe512ea9aea9671169fe285277b137fab53275e51bafb8b4ad95cf771694f6a38c174cf5f
SSDEEP 1536:gu6SSss/IbRMbbPCCtQnKOVL7UNmZJaPTmIqKoyv7OFLME9a414ENteSqYzN7YkB:WStVV8baFnFVL7UNEErLClME9a4ZNteO
TLSH
T1917302A38662A343F466BF135CF7633513850C69C3DBB95E76888A91FED0788663C026
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SecStore.db.WCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db.WCRY
Size 40KB
SHA256 930a7bcf38c26588caaf39dc7e6ed83f2aed1ad7ae563f0b05f2c9701290ccaf
MD5 e55a408db56e2477178985ddc167680b
SHA1 567826cedc82af11ead56c160d6655cbbf635248
SHA512 93bf55ba73529bf5b517a069db5455e75f4f5c2fc59d18e60fa238018ae4ea08d8fd184315f7dd8cc4f5aaac3c708885c53ae7eb28bccd029d1bd1e5dd4624ff
SSDEEP 768:7MvBeBXQvVha1EjBbrQJVg6olh7bcZM9nD19fNdXUpA8SJJxx:7ieBXmiE1b0Vchn9DN9yA8gJf
TLSH
T11103F16794C33FD19640FEB65AED1A0226949A3DBF0DE422D78114F09F18CCED94C2E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-gather.db.WCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db.WCRY
Size 44KB
SHA256 b739d3c71df829e5a92f87dae85c6581455bdad20eaa5543a9342a0bcc25c299
MD5 5b1d3cee5d5fcd8139915cd9387c6c35
SHA1 a3d7eaf3d94dd2ed9c1190c3f0a50f4c92ff132f
SHA512 ca71bdfed3accc3afc7a34e1097234eb067cbbbe9e884fae7a9a4279e6ce8b43b2a459822b61233c9439d766fc931cb0879b6d0899f7de15ffdd0b8e51fb2efe
SSDEEP 768:rzIR2cBZhgUC7Z/tfgSYriw8Og1yQnT/4kAFmtDAcRMOsTN477VmiQNrp9:rk8OC7eri1OYbT/40R+h477JQp
TLSH
T10B13F1F884142047F4910B296B1DF45A4FFAA0469D5A3D2360C8896DD35FEF2CA38DF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-usn.db.WCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db.WCRY
Size 4KB
SHA256 aa7dfb27b5512978c33b81ccdd036d507f25ffced0a6bb3c5135c110c0650503
MD5 00d75adc2bd00b2fabb01622ee6b771f
SHA1 766b4980cb639497bda136958c5128ee5678c7e1
SHA512 5a34de9ad0e2378839c274b9963c35bfe12c9f0c7225d4afb4d923fba8ac6e1ff67c34a70a4a18c220f8f7ef193a7ccc9574aab9c58debefc648329534d6522a
SSDEEP 96:YLSVGYafPEIX7N1ZcUtm+a7zMKERhK8pPgfk/KM5X7zxOv0M6LNogn:V1IvXmUWp6hRKfk/B1z8Dgn
TLSH
T1B3918E599AEB70B5FD9D0A5529D12D12804CBB2A216216742973B1BE3C4BA2E2462A41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows.db.WCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db.WCRY
Size 660KB
SHA256 b2a6ff16e5faf964741371db523dd87b017aab79a1ff9c8be2c4bbed3e32b39e
MD5 841a940ae98e8cd911cc5756e34f9497
SHA1 ebc044ae38dd9136c9fb1ffaab17aa02a61e8453
SHA512 d9f53475d0c3a5814ee867a12d3490d40af4be700458d38710e9cc88299e3b71b7d236d6ee10b1bbb49130aedd5bbeb34e5dbe16686bf8b97e6efbf3f9f96523
SSDEEP 12288:xjWZYQ/9mUlPwVloOauRx1lY4MJI8Mmmr+glq3R6xyKEPDUNQ0sTdtNJA:dQFmUlP0loEP1lY4MMmmreOZYT/8
TLSH
T1C2E433A7B03E107C840723D72F204A473A62DC6F15580BD66C4968FE7E7199AECB935E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterInboxTemplates.ps1.WCRY

Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WCRY
Size 904B
SHA256 b4a3fd4fa247a2f07026da7b688ed158f28c1939e47c665e1426c85fbe99e100
MD5 cd3d54f8041a80c40a4642d3e42468b5
SHA1 9aa16eadca54a08c415db18e6161de3cff277202
SHA512 e331db5062298e9ee573063178c2bf96d66900ffd75d1a2534baa7b977f6ed461d2a10996d1727a841ecc056949880210e686bb9ca0abc6c5426045cd35c23f2
TLSH
T18111847480C1DC9EC03C573C882809AAAAE325A05F5505681691E686DEE6174F27C401
MD5 SHA1 SHA512 TLSH

Submit Download

guest.bmp.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WCRY
Size 392KB
SHA256 8d003d92045e37fc52cbf344e32cb84f1d44b28d427da2cc9fae7606d32889fe
MD5 1d0c11eaa90d4f87dd7d52dbf7411d8a
SHA1 0a6013a49c3752cb248a3a798728d8c01fc9a3e1
SHA512 24abf29a00c22bbda9a9759a4e1846ca040176832a41557b92325526b2b7092103cd691d92c9a1f7c1f7a2db0009698f4be2d0083974946810baac985c9081f1
SSDEEP 12288:sOPr4SNVGeyn9KVWFj1cBvtkU7BjR0HQa28JAMOxudea:nr4Goeyn9UWFj6BV7Bj6AbudP
TLSH
T1DE84236D010D4BB3C15E4B199D1884C8B62A90302DD95FB222528BBED1FFA93F7DDDA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

guest.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WCRY
Size 2KB
SHA256 2c96b0d00b2e505fa78f7e5fb5faf0a7df74116d2ffec46bf03f69ce1dca42a9
MD5 cebf05e16d9ea7a17c88b149fc2473c0
SHA1 57646e686278807206555a458776ec9c7d30f83c
SHA512 4035c6534ab48c61a7ca16a35a4c062b1c52c81453206e0b704b1ac5073afefbb5a39f4f0c265049fc8f33cb07a3d2d96f1944f6fc8d8b4d95244bd4386971de
TLSH
T10F4138ED2291EF20A5D310E0F92008B09F57029999F4CCB539DF683C08BD0ABB3E2821
MD5 SHA1 SHA512 TLSH

Submit Download

user-192.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WCRY
Size 1KB
SHA256 a3b60fc3c9919e74c2813dbe3ca9896102893734e0dcecdc524d3142d610f195
MD5 ed35eb7379ea62797a89bb6f750a5d19
SHA1 c95788c6a363fbede00d1258294b66995cbc501d
SHA512 dffecba1aa5fc18703d1f024b21b90e160ab8a3a2fda850544969f44faf2a6f6e0652d993cb07377eac51a94ab6fa24fad7a9187a0db8636f0ee86fa436459b7
TLSH
T14111B9DD3BC319C40913893C52631BABD293CED36157FC956C1956D15A1390BBE2E18F
MD5 SHA1 SHA512 TLSH

Submit Download

user-32.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WCRY
Size 472B
SHA256 a0e4e6a9afaa7ce2c35d0f4c495973a4f795f2ab08b77b692c48d4268b183072
MD5 1be50ea9746cb08cf8e9dbe4e5d2e1fb
SHA1 984fdf04c5f7f574c4d71b83a2d8f7ee3197b6e3
SHA512 46a69cbd855cca9a6e3e5a08d163ec870e34fe995f07a5dc397b2d8bcc25be129d3930e73b0f507f03b812f51b27b34e87ab81e62a4e7ef5011c363b9a4046cf
TLSH
T11FF0D4896A0741DCE979047652AE768FA74221A9A58D1544201D041EA6918CFCD5C976
MD5 SHA1 SHA512 TLSH

Submit Download

user-40.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WCRY
Size 504B
SHA256 6f2bcaebdb2c0ceddf8b10e60941084dd885d4acbcec3afd92d2ede7bdb2d06e
MD5 b5527a6971d72046859e95b84b1d1bda
SHA1 b321bd41ed6b6dc83db783da4b976f5f97588ebe
SHA512 648c546e80526d0e15bbf4b07340feff7e9016f9ff3d9ab6fdcbc534d18aa02fbe5fc09e8acd3c31a562686e825d587fcb3aaf560bce9596a5140612ad5297d8
TLSH
T175F05485A1DDE139D47F9A7D8BD41CCAAE0C30171B3788C3985B28C5E30D07C0D85105
MD5 SHA1 SHA512 TLSH

Submit Download

user-48.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WCRY
Size 504B
SHA256 e6135705f3413947366fe515f9bacfe81854900a429ab0a4feb95835047839cc
MD5 76cb508b248046a60b7635da83d70459
SHA1 c20b4247b8c3b03abbf96d13220db0b5181e81c6
SHA512 ac8119341a0068cf3fea7940ce19dd92d8ac7f23f542815d109217f265a857044417239b92e3f1a19655148164f65c8da2dfe0f9bade931d1e070b0dba532608
TLSH
T127F054BF2619C7893F8C95F47E81BB6BCE7282D0105E95F236404E159281CE0E301B19
MD5 SHA1 SHA512 TLSH

Submit Download

user.bmp.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WCRY
Size 392KB
SHA256 7b833ad8dd7def613062e437201535f97856f5a5b65f433172dbcdd50133b3e5
MD5 b44d600195314276f0eaad7da9367028
SHA1 6a818f8236677799684eecccc540d6d714187fbf
SHA512 4b3e84e57380407d6837e9967ef844a7dfda181b07491d7e935bff606a23f52a234f520a26873d4cfdd104f0f39bff4f81bbd95bd15d0ccab004e2f88e12ec8d
SSDEEP 6144:E+aPPWL2M7KoKKpVi+NrsehA61H0lrJcIP50HumOMYf82XOSB9YUc+ovipUFmg7Y:q3YqqNXH1H0F70IMM82XOy9YrvFP7fg
TLSH
T18884236B5A7A56B606DD803E14C53EA50D60B955E7F0A3FC8CF8BB44406830BBFB11E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

user.png.WCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WCRY
Size 2KB
SHA256 b3a2860804729fe03e437c9bc480cbec1d7273119732231aea2e97c1c1d9f658
MD5 f30474c6274c9034d99274ccca94ad3a
SHA1 786d2787da9840dcd6c6d2528fe238b7b1143fb5
SHA512 03829b2c7e19467e3f5957223cd23b51e3b27b282e4e545ea8d96aedeb50b498513191d1edf8859413a8193aa6f032604a25e51da609df5745ce679e373d43f3
TLSH
T143416CD36D514DC9D010E99754C2F4ED10EAAC9B2488D172FF5EC0C33AE609FE2811B9
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.2.db.WCRY

Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WCRY
Size 16KB
SHA256 f6111e7f93d4c6e3e334b79d7d4f1571e1d5bd848bcde50a49ed2309353264ce
MD5 4fda601045be227d39b44c72f8e77ac6
SHA1 abca8fc10327eaa9bd181b72b7ff1188643edaaa
SHA512 d3fb6039319545446e6c75c6f4c978326fbbfc15e6c4c53570b139734cf5b7aa444c1ac897f228400493a65d10fa678755748a41a04de56258593e29c49b0f62
SSDEEP 384:Q3XQsICaOUiaFNJU57yJeL5w2SbBUM9BrNKwS4z/7tJOnK8VYHL+OwJn:JsEiarEuJeLvSbnG8L7WnK+ufwJn
TLSH
T14972D07CD7EF458A7848EE3E57287513C084C011FBEBAF97C48568A16C29DF8C44E62A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{64795E6F-049B-41AA-A222-DFC09C253578}.2.ver0x0000000000000001.db.WCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{64795E6F-049B-41AA-A222-DFC09C253578}.2.ver0x0000000000000001.db.WCRY
Size 1KB
SHA256 54ac45133bd239f3ece0f96ef18357c33b857788a760debb39f92cd36779ee1e
MD5 cc4547448ee88869de340f6dc2e6b5a6
SHA1 fbcecdfb992923c7c9a6d509e79d3b1a2b47d727
SHA512 1cd88f86e16ed2e26eb3a47d549c22034196cc1335ae600692778c500665582609ce129c56f2b62fd0737b9ce92baaedb264e49e6c5860c72b306bfbe0fdf077
TLSH
T19331077047A00D84C1DBC6628B7B1EC00E7284B9A8C80750FFB0CA721948569E2AD805
MD5 SHA1 SHA512 TLSH

Submit Download

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WCRY
Size 297KB
SHA256 047b7cd6631a591c5c7939951a4d75b3c91fa5e4c80f64cf6d11a595af1d85b0
MD5 7b27719738023f02bd942d8419d6f916
SHA1 07041ef1cc55469d88bf2f0fa1bc7fcfdc573afd
SHA512 d4b34956e95cf7635a116ba276be01eb50baab88000bcc8947a733065c6742be06394376546fe0fd2c9b6059838f8bd250ad8cb1cf064171f06d726d15b7f067
SSDEEP 6144:rUER7kIq274CoxG1LqH1x8wHzRaQGwmcPPWAQSjnduPjYvbqTgMVVaHoQXr:rUc7kIq20gqH1x8mz/GlcPG2MPjYvbSK
TLSH
T1BF54230092B6E5959CD5FB730044B5F05ABE41A29C3FF3F1986AB5DB00C27A9B53EA4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WCRY
Size 639KB
SHA256 33dfa9be86e9adc2e7206eab5c929194d0c1d991a93e17594b4171b6044bb8c3
MD5 4db826ab0988cb6e93e16dd5403fdaa8
SHA1 143acd3b6450d25b183ff153ddbb8b6fe3b8fad0
SHA512 c84108e719e87c9b240be6ffc2e332b0b1b099b004c469e2689e16bdf55ecc84ecbe7e9c0e2dab8bfc27044f6841845b727f253534493c9a0451b34a630f5dc7
SSDEEP 12288:zkbPpyaEHmCLQe2zypTaWBeCNly5ljfrgR2q:zkbPtEGCLQe2zyjBeCNuDq
TLSH
T147D423791B1909EB66A552005CDEE6ECFC0DEF394430EFBFB399C94EC62049B4976821
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ActivitiesCache.db.WCRY

Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WCRY
Size 1.0MB
SHA256 35661a9f93c1e3ae6f6265a2c1887853bde187944b487cde4f48558f4eca0daf
MD5 c99ff04b604773dc272e9b8a224cfb0e
SHA1 55ac187079feb2513f255bf024447a34a487eb4b
SHA512 a21d8a319f35af5ef9537aa54ed05ffc62f152570dfbc23ad150763eeb0934ffdfdc0cabe42abbaf6edc0978a8ce98a54e50439c1f813ffb611e56fc9314b407
SSDEEP 24576:RORAhbJlK9yxueS60vv6bWo5Jjq/6W2ldj:qAlJW4QdvMWABS6W2H
TLSH
T1022533E3A166EB9F55B8967C7943B501E9E0B2725217522B3CDEB231ED5E208FC3041B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IconCache.db.WCRY

Path C:\Users\Admin\AppData\Local\IconCache.db.WCRY
Size 13KB
SHA256 543b85fa030da2375413de71843f7ff1cadee6fa75b8e8bee1d3dda563917d20
MD5 39b7f0149902817d0da5bfbc5eddb1da
SHA1 cd11c405714ebfed33b25bb75a5f8f01a211b8f8
SHA512 a4436eb739c149bd36bd010f92a6d421fcdb3302a21fa7b561bf10ea9f0aded9545fb754ca81adbf7d1d0226dace8c0a05b8319a34faa9a878e5181523344569
SSDEEP 384:HBOAUICD+tLzhO4TpZtOBRhMrEdnt00evn2Lu2:HDCD4hOMpZdwnZgn2Lj
TLSH
T11752C0C6EB3830956875B5F320D03607B398195E8652941F98A89EF3FD8106EA87FD81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeEDropSQLite.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WCRY
Size 32KB
SHA256 356739768a6a016910d9f10b925c1760f3fc60012a69302c0656e05821900ac2
MD5 50c3927f0918b39e986abf9dd70bcb93
SHA1 b379431e5705f843b0bc7a530dcb027c82d6d04d
SHA512 f61705574e06ae6983b50cf2af9688b5325080d02480ba730a1ca5d1b7165f304aab50cb2732e3ab2b5709c94f831e556527f8f01fb58f1174e3b77710184d54
SSDEEP 384:5ACwplFV0gQIU8+mFJEtOWQH/Qw5MWmwCzpmJyYc253iHwieRKFoGnhXVhiNLnbh:5upl0gQp8cOR+mJyB253iQVqnENLnSW7
TLSH
T16FE2E16726C3C8F97A8AA4412851FC34AA6169607F5D9BE3943D4B3FD2320644FA47E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeHubAppUsageSQLite.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WCRY
Size 28KB
SHA256 58a5f3e44796734da2b2894707c1d4a7306437a471a23661e83dea5334a5c575
MD5 6e172b576668e3cb9bb4a06c1429deda
SHA1 8be051cbad7157bb5dd3222577a4a8d5d32ffa30
SHA512 695c6d5e6b9684f78a1c4be981762bf41a912d2c20aae6084614e80fee80937ff8052bf0ee50f24c4dc6269dda9f2845d05a32530b619d9f352488dbc7c8ceb1
SSDEEP 384:0uwWuAomjqMJwT/QKnyMRZ8JOj29ETDqrSSJ4crDEBTEj0C7p/wWlCnl+Wi73ypq:VuCqBThy2jLautBTEfhCEWi7inFoJ
TLSH
T1F7D2E0FA33942FB0E87EA9B3C17DAF80184DD6C0B9F9949E9B09F724634071781692D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WCRY
Size 5KB
SHA256 7b3e12d24e65e3faf3b5da055ffa2b1172ae6c3dda57915afa703cb75e395413
MD5 52ab16e0da561277bd88046bb8c07384
SHA1 2a645a74da02d47d7902caccc209a34b5343e3b8
SHA512 9ac8ae289a613161a4d5ed1c3634613d68192ace4404dbb2d6f629dbf4d6fd685e353779cb55ae4323b7beb05ded15247cfe79dad42f0038c8a5e91e11f9d201
SSDEEP 96:eThnJnuf258MBwVmqMuKlPThvirWbpi6Drk6NPCXejU3Eg:AhJy2a/Fl/6bBD4yqXej6t
TLSH
T174B17D4F2EDDD1EADC299411045F2D8B2A696B6CCAC8A7FEF12D4EF103492B60432256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offscreendocument_main.js.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WCRY
Size 130KB
SHA256 5b498cb45b15c6445a32384973e4d9d2eddceb78c2ce5eeff2c7d74bf0d0dcd3
MD5 77ea4e93b04cddd40100e2bdfc52d56a
SHA1 49b01ff250cbe1c3704d6ffb82dd325a8c4e30b6
SHA512 be5c637187dd0605ff6818d9f92d77ea02bcfe61f0dacc84e2fec6bc68af34420d770aebdf8259ac7f88d13597c739a799219e587c7611a3ea47a5d3b4887165
SSDEEP 3072:f8Ivu4L5bNRumjp+ob+Zw7EaWP0oI88WkqWTgQ:UIvOwpUw8P0L8qJ
TLSH
T17DD312C0F52AD79E706B9B9D2A34E662001492D7C9FAF0C9CCEBDE41CC619D497A413B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page_embed_script.js.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WCRY
Size 632B
SHA256 8c9545688f4ed5d36d539cee79c6324c4962712c8359bdb665539aa37b334fd3
MD5 b224ae2eabcfae6c12fa25935ed5789c
SHA1 41180d8bf57f2a5e21534828792d36756b6d8cb7
SHA512 7c7419867ca5d91187303e29867e8753bcb4dc92f21d8a6852d08c2bbc13e1d0b92a6e8be49736354554adda926a3cf23ffd2910fc16b071f88189ee5797550e
TLSH
T1B6F062762AD2550AA95C1327B4A2D882ED4F82C0B35EC60A64F404C84B8FD2568759DD
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WCRY
Size 136KB
SHA256 c680f985cfee93da646c7a8bef97ad7963e307209bbae172466f995758bb293b
MD5 6fda57fc452ccaa78544610b7753ceb3
SHA1 31cf2c2a211dd9c9466d09b15fedee46370e0533
SHA512 76732706f6151dcf0d404c97a535368397c0229e254bd9d4c3605c368b7c8387261ad9abfae2f7739c4d79f73dd88737229014927f6d3ab8f7803b52d0c5c3bf
SSDEEP 3072:5CwOefpva6flKrxJZNtp4aUKNXn9wqMrTEo73dLuh2DpRYvfd:UNaBflGbPUiX9wRD3dqMlSl
TLSH
T11BD312BA90F734E19A085A0F9FD894132AC1B5EC170C8F7B954C5E64DCF9A3068B6B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WCRY
Size 664B
SHA256 6e21159a3e3b4e86d0ad50afec1c6722380e3f8de48521bf40999a03de6dee00
MD5 8e0b394f28103e879e19f0a7883c2025
SHA1 facd2710c205a7e526301bbd3f47dd560e78ee22
SHA512 c84d8169ace38b8be4d49adaa85f0995f4b67d0281349b1be850f55b835297703c71b281d7c4b505af0e35333ec1680512328e06d0b38ddefa91a3a10506349c
TLSH
T1250123622D2BA84912B102B6E02046DF8BD6F95ADC935B97C3CC296077486304ED5EAA
MD5 SHA1 SHA512 TLSH

Submit Download

heavy_ad_intervention_opt_out.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WCRY
Size 16KB
SHA256 94ab815433e9bce5c758364990cf91eda1c59a8a39b8bc9d6fc7cf0f69215a33
MD5 8c7a350e470905e7c66b2b72cd1eed6d
SHA1 329cd124a4eaf669ae8d22a0eeeb8e9a4b0a5422
SHA512 a68ae17e9a6c4204ad2ec5f67dba8e773ade13ae4b6b85924fc2ffe04d0ba88d2a32702e7abb38dd101d42aec76653c077996cd145f473f43a047618206d039b
SSDEEP 384:oc60cVYYzkEbvc8HvBZMBqGwEgXFmyxUU1uVv23h+gdc:oc6nVrzFb1JEgXDuJ25e
TLSH
T19B72D19C9784EE5C46DEA9F20F9CC06D9275D2F0BEA5057AE10461D1EDA2F007784733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WCRY
Size 4KB
SHA256 a08d50ab420ed15dafc5752a2a9905622e225f0ede5d77bd9b780a3eccfc6585
MD5 b38d82dcf7a8eda998503fd82bfbd3ab
SHA1 25e41f98e3fad25fe84ec595ec918348209e2310
SHA512 8b4acf2b8ab0ea65675535215cb39c56b864e663418b2a0c8f1515cff9cafa62c141092ed80c2ddbe3d2dd67e8d2693e8108a2d684a831fb76b539081f31b975
SSDEEP 96:9l5a2s8VP2L9rmj66y4PG/GoFAcWb5HQ2jIr8kPn:T5xsuutKyMG/GRcWb5HzCDPn
TLSH
T168917E324E7A35CC170C3598FDADD7E60D3D6972FB3461B1C18D1B84B6A841B289A1D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WCRY
Size 48KB
SHA256 e990e3fa3db1bdeb63fb34b84eaf93ab814bebcc339bf5b6c76e6e0b6cfb50ad
MD5 48fed105c3fe97b1ac05a51a8d94ee2c
SHA1 a7dd440b681570b2eafe689c95c8cb7fe67e5350
SHA512 5ea9c75893fac461c051122fd1c1f6a977af06e85a2474ea037a083348a03b0948a6637721d560182f9bdc11f900e47cd7ccd84843936b9898c44d23baf9243c
SSDEEP 768:RMx7vhyvUHITj9uWlQImVGBosrlId0OejaakmsMRkCvE0MMT3DouYVIvIM7/Ua:OxrhcUCRlQImVGiOMIRDpDGVWIkMa
TLSH
T16123F1E15EAAD684403B503EADB9E5E6C763EEC5CC37B69630C539027923A327D10752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mip.policies.sqlite3.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WCRY
Size 36KB
SHA256 8d3f7ff5f452958bd2e40a270a41cfd30c09a77baab072303c6028bad5f47882
MD5 28789954fee0fa671b604f72018e1bea
SHA1 e6bca7dd279064cefcd4824f7545887048217cde
SHA512 20326e550925d1c52ee35d740b6afffb678f87c01bc0f54bd29d3572f4f0e5cecc0c7866205a72cbbed6a1b1af0218dee46648cdd7d2a1384574614d0bbcdce9
SSDEEP 768:6tQ6k+9NaWGOvPrVCJGBTW2lEHWXPiwHCAujSIPrrA4coE2:4Y+bSOvPrVTDHXPi4CnPrr7coN
TLSH
T192F2F209EC8E79768B87AC0CB8B5B1E7126C5533D02D1BC61B66CE6B560B6CF7C01578
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

excel.exe.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WCRY
Size 24KB
SHA256 a1ca2c3fb45c7eed29565718e490b35846c57516e7ec7c47da3938a8e800460e
MD5 c83722285a3e562142bb2a67321f7f02
SHA1 50996a57502a2362dc986ad20a78165108573537
SHA512 33e2bc2e04ff7fde86a4f39ab06bbceb8e219091255baa167cadf2ae67560322a6d1b513dfa2a8c45bbe808bd513435a6c771e9f0e0b899e8c295f84ef2df593
SSDEEP 384:196zmpnG2qSyBZzOIoSL+EmZwzPqA0JRBN4RoGxAtZ2nK7bM4dVZAHP:36zmpnGxzhjkZG1eLT2nKc+zAv
TLSH
T1E4B2E1CCE27CEFCD85194F3580C612D56E0DF398CBF1EFD42E1EA05826541B4A5BA858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

officeclicktorun.exe.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WCRY
Size 24KB
SHA256 5f3c068fb52655cf5fa06c156b4e17e68b9eecc72bbb99461568b17ee944e2b2
MD5 88b2e47782fdecea6811d5c44218479e
SHA1 2cad976989ad066b1afd1d31e0f3c49d0c6dc5a1
SHA512 e0c60be248a14bcee712d79524a4e32fb8a56d8efa5b646c4419f87599fb739d7ed52f24f7953dbd47d084bd136e3e2147595372a82ec08d5855289c5cb7bc57
SSDEEP 384:Xmb3uPz/QdDmwO1uYpxTztlvStgm5s+fvI+3aoB6HytUEvwhQ96urIqm4opBx1AU:qdVBixlUgmqoL5UEvwh+IqmhvTX
TLSH
T1ECB2E013B06A95CA8FA6E0F5BBBCCE0068D213296AF5EF15DF03A61D1409B511BDCD84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onenote.exe.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WCRY
Size 24KB
SHA256 9f74415702244bff8f461d3bc53cdf065234a1ffa2664f2b8dc86a8fc1fa6135
MD5 454de8848c1844d2fe00c316faca5a12
SHA1 c797e514ba71f1141358bce3670698ad0a1de554
SHA512 e3797db21e76512ebc5be280e6dc28be2e60624937b34c8d66212995d5be68c769f0791856ef197a8999eb63336b4dc3a57315845b6c8ea2b48c5260c555cd8a
SSDEEP 384:Nbac8RWkzLsd4tUg+DJpXJ2p5StygvAyjZZNSJJEW6LsFiBYbexVGNcHKJz:NbavWk3dtB+1pc2oyjMJJEd4FiBR3e
TLSH
T1D6B2D11A071844AC64C714AD3FBB707637D6F69EABD2E109CEB35C2B70C01D525AC99E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winword.exe.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WCRY
Size 4KB
SHA256 e35b6e70075e91340b85456e9276e33acbf3f2b10804e6de8eab6e9774a1bae0
MD5 459385c0264bde1c888ce4f723226131
SHA1 f465d02df8a77e7c067e8a9b39389376583cfb07
SHA512 64052392d895ce6cd17cbfbfde53c11214d9db126fa48d04933cba4ec5ff13c5d9c79be94ae6d7ff5cd9c043043719b17b30cd2964225ab55c4e9a29e959365a
SSDEEP 96:0Pm+SH1VC7CIbcazIeRQViFkTqscCmQXr1yyye7aWxx2M9DspwfbAmR:zPzkltRQV0kTqvCB1FpeMQkDXj
TLSH
T100917DD9D49F5BACF09AC9E20AB2353D068E4F21ABD8943CCB78C2DF22803192159D18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppBlue.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WCRY
Size 5KB
SHA256 86a0a26359c4bf46b7d8ee150c1da692c54823fa80a245d008c028075b22aa66
MD5 6a3d05f68a744cd732c1a6b1f467176d
SHA1 6677f8221d849884cc9173c61889460f06d14ba3
SHA512 dd635eea8769a34549a69229698ec64551e929ac67b177caf1df3db5e5a436ec218ab8fa3b703e7cab77c6b58e5d0f2c483d0a29df45998dd858491e0a6fb0fc
SSDEEP 96:7rjj+jlYps5tZwUk218unnHqISmlLH3VrtwjKLiSp1ApF5vw9JXca6M4G5Dje+ES:rA2ps7ZfX1PnnH/vXVubM+mjXegerhzC
TLSH
T1A3C1BF5FBC83501CAB717174B1487CF9E61640436F595AC5C50E63B1A9273A76DCC0D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorBlue.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WCRY
Size 7KB
SHA256 05517b1339b297893149c8d238331cede9748ae00b261fbfb89d7e5650cecd64
MD5 f2d87891889f8ccc9e7774a0a6391a88
SHA1 0e3722c72b6d81e30e4036b5d702cdfe567f42c3
SHA512 cadc68bd8fd314e0c883bee2250fed251f04e86a2bf93ef6f12b783e06a7275b2f6cecc0eb34ee2d56c50e6d941800a9e91aa8188d85b2e03d31743b3192662d
SSDEEP 192:eWeO4iWGKicbxjROKRtn/hVQqS1sHNVMnWev7vnRKMhdE8w64xN2xbD:eW3xYppRO6n0q/zMPnRLw+F
TLSH
T183F1AE6C4337A98E8243952B02DE1D50A4FC7B7867881EC64F85550501BFB75ACCDF26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorWhite.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WCRY
Size 8KB
SHA256 0a848ebcd84147aa72a7deb20d8533f1fa42c2f257ec0b7319b819f9c4f3d21a
MD5 225bc366d3c7533a11071877ec7f5cac
SHA1 0917c84058158efe7cea940ec0c213c29e83129f
SHA512 a11bfb5bc095412adfefba5e3c85a1587c79079d95bb5ed4ab9f988957ea835d7c4313b04824ea4443f5053721d2a2a75210b7b7db6b8bfea0152f638adabb0a
SSDEEP 96:bg48D237+fGanVLBGhr8tc25znkfpd4tAiHv7xHBLzJzY9Mvrnhn0EJRUpIcJHRZ:bg48DouLOrEy47PxzlBNRLY3G+oVS
TLSH
T1DA02AF46671BF4C8824A2CB7FCAB6F264F360123D5D8DBB0445A31B1061670E6BEC3A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppWhite.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WCRY
Size 3KB
SHA256 005b37841e4f6a191f07e5430dec9739c5161eaa47c914859df65ba798e08644
MD5 214c847550ae95b4dacf744aaa514522
SHA1 11fa8a4f2705e31318f122753e41b10a102750c5
SHA512 3e9667a19ca8517fb8499bcb734000398c1ed3400a92140981019c6cb33c5d60484fb85f91291a189591d0c0d2818c8fb1b41b7e8478cd0b622eaed20f0d1157
TLSH
T180615BBC1CEFA36BE42AF68B60BA6004AD87447C50069DC8D32268281207D7E265A52F
MD5 SHA1 SHA512 TLSH

Submit Download

AutoPlayOptIn.gif.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WCRY
Size 374KB
SHA256 777966870ff11e8ce22228d5120c9b9d513770089ae23c8e3fdd6307793960b8
MD5 d8f2ab558445f7d964738af2b8aebd07
SHA1 ea4fe23f365575469709d557bcffa70a8d70e0a9
SHA512 c3f7ac0d6dd92e81fb414dd88ba08ab1230f74004360901b8e94e588bd8dd1d0f162f66523baf30059d0b02f5aa3d9590c9c85ee4438a78001c318314ab47302
SSDEEP 6144:X/k8UwTPpV8a1OBlKJTq6yX+1fa0+CpTYuHp4OJAxPv6UlMht2vscdaYas4o3AhW:X3NPTHes9uwfoCpTYf8eyUChgx94o3EW
TLSH
T12E8423A3F14C7DAD1822EAFF5B51A3444B264D5A0E469CF05A0F60C9CED1DA385AC8B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoPlayOptIn.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WCRY
Size 10KB
SHA256 334c69845b4255b7878d413e366ed7f65cab7ff313926ff68f8158e87aae0c31
MD5 b29cbd3b70f35bfaf66fa43cc2b6dbdb
SHA1 3d563722d50dcc472623f5dd42072fdb9cf6363f
SHA512 0a50106337153b6bcd5d0bb1c6c0001608d7b15aacec65e7e859d950b89015a0a6e8e166e28d739ba97877e49b53016ae3d1d0d81678009c72f1215a008ec9f1
SSDEEP 192:HBPTj30iGEDG/fYy/mCI3khZLhiTFumWqPN1EBSPWJC0/w:HBP330iGiG/fNmCI3SOwIPN1Sa4C0/w
TLSH
T1E122AF7E17C856E55EAB01E0625D9EA111EE8ADB694A30C0AABFD20143B8FFD9CC4419
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CollectSyncLogs.bat.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WCRY
Size 6KB
SHA256 60b92256f308f840c86e0ef26227a2d321ee2200993574edc32defdf49def329
MD5 e6d5e27ae0afce9fe9cf82eb6de4237b
SHA1 1a048586b7bf27fcef4736c2ed931c8378ced249
SHA512 be34df63a98f57d7bbb6326f8fc04d9b7991e4ef65e3b3a2924969a20bf054d89ab6fb30bc2e56b00cd0b0b63abdd8f643ababf90a9540a4b2307bf54dc8e2f6
SSDEEP 96:V3moLK11w4Yr8b/FbNS7qUV2VbAMDdyPWKUjtJUATZE3035+I+RolGS8CZRQdrYe:VTLKI488r5VlddZAATZaAUCFZRQdr3
TLSH
T1DDD1AF008F19AB11F0B8BC34D0B5BD3EF1677140A7F54D24A781157C5D1C5EC9BE291A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppBlue.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WCRY
Size 7KB
SHA256 252bdff07ffc36c19be0cc34315365be9afd8551b649bc4adfdf27bb8da17b50
MD5 08f51377056b208a20c1173b6c82373e
SHA1 570384e0f51e0089bf3a2b35c9c9928acac60897
SHA512 f98981eebefd9af81c5fc41520d0b9082b0804e62943146bcb17c4cf711a7257fb22d52885368a5426fc872609c2fb079204f77193ae6d4c12490aeb659d88bc
SSDEEP 192:rfUkKHibe1PBzelz+QmQlDAPccabH2EL0jf5rktPbtL:zUlHibe1PBzc6XWDzPoD5ro9
TLSH
T1BBF1BF4D4AC884486CA8CE27242570703DB94B6755F07A3616D03ACDF73A6A2B06FDCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppWhite.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WCRY
Size 5KB
SHA256 de8b12016691c56f41e32111b156a90d7aab56daa4f8fbfffb4b5664c98e604b
MD5 e6396030ccfe3d5b19d2ca9ac7fd25fd
SHA1 35f8038081b8f28283661ee65c8d5aa8197e7aba
SHA512 b380b3965b9ec825d4d43ec3efbb5fd7fa15d908016f6de662c140cbcdaa3635937ac0dd93a670f8199c85525627273da0ffa1c9568924912f30a6b51382cb7c
SSDEEP 96:H4SA1u1MZ7GPSizA6/Sqw1h1kyMi8WmIraTwzCHzZC3WR1R+ggAJAukp60cm:Hw1udPSwq1KGras6dC3WRz+g3JAuHy
TLSH
T116B18DE4FDA6FCF12752CC766051A3346113DF9809336A97FE823EF8C5892B640410EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Error.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WCRY
Size 7KB
SHA256 17c7e9eafeeb99e680735a530da6ac13c740d85d184dae58e9ac2ec84ec0125c
MD5 b74aedbbada24e1e0adcbc91c633f847
SHA1 09de169180b7d95159575cd64d116bafae18f2d1
SHA512 ea7442131c7110fab913ae3cd863f2b77afd8aa2bf67e1b971e02807414530651ee3de0171dab0f15eb3a6fbaea7c0a243d7c66cf781c7e978e09587173910a0
SSDEEP 192:V+NPIXQR4rxOE0LBvuQU2C9jvmj06OTm/Kw/:kPIrI9HUdJmnOTm/j
TLSH
T1EDF1BFF384288BB958858059BCB335CA36E1FC6CB572B428B6429B7973340CDB4E5589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMHeroToast.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WCRY
Size 15KB
SHA256 c1473f6d6e44ea8fcffe71d5ac339f1e499d974e002d3e028da2ecc974c16e9d
MD5 f96d58ce56d53f02a893a7accfd4c185
SHA1 3c5c9af6a507260aa8daee46c1bcff9bdbb63f4b
SHA512 0e39a95dab8dd80210a0539656c294162208d827c6ec417a6b8dee38ca25a01552646457f2c029792f1201fb651bd51c7e459d50cccc6fe50021e51f52ec41ce
SSDEEP 384:TyAD3ZePwQnoI62N8zwQZ3/SIdXF2tIMF0OghHqdpA:Tys3QPwJIxugIdXc2hHqd2
TLSH
T1B362D097D33CFDB5A7296C3CC1FDE485FA0894B0A40FD538A992356329464C40AE9DB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMLockedFileToast.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WCRY
Size 10KB
SHA256 8abcda7e0ad976fc6786d54db74e30ef5ce8205d0c0b30a1a154652f6f8202ee
MD5 7408820f8086d3ae44ed68cf8d81e48a
SHA1 b50f899feaf82b082b46222958c26992c3818091
SHA512 8b0ad3370fe7abd50d0272a1f3e038866a84e4060d9fd72c6d45c27bded6a808262a5946781c8537dd710c493896403a0199b63d69b1580f3739e27f5bea4ccf
SSDEEP 192:HxcRQeBFL1Iua18DJMwPpOGvAZXTlK7ooZd8m9ixFhfzQQinTmwY:ReFvL9MiOGvSlK7R38m9QFlzJin6wY
TLSH
T14922C098B14C7080F2C6640366FBB629C363396152114B2C65E32C55F0FEEAE9ECB54F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMScanExclusionToast.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WCRY
Size 10KB
SHA256 137b0f09a3f7b0fdd65a9d6aefc9bdafe6db64ef919181e89ac3b865bfdb7594
MD5 39f6531ed498bfcd78a5240df0ec50a8
SHA1 963c465ab045fcf2668d85f1c6ef7becdeacac9c
SHA512 40fe0da502b078b77f270b0b3e6774e5f6037600388e27d1045886e6529e144387ee0223ec4bc2505753c58e31894375e70c6ada8cd3a8bff142c7ae539c982f
SSDEEP 192:yrxCqP3NO/nXhsZsPqjlBA4+HAKXQWn7AmFajZjQPiaIIund8BQAvp/m9luhE4XU:yrxH3s/nRsZsyjlC4SXQCAvfaIIunduc
TLSH
T19422C059034D9A49FA329BF4EA0ECC41F82D51E91A1B7C5319D6D1A9EA2CC005D3E93E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneDriveLogo.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WCRY
Size 4KB
SHA256 de3efd316fae3e877235f7b7a5598e8ba1fb3d2a9960d0ac45ff2ec163901cc7
MD5 ca58103a6c545598a6652f031faecef9
SHA1 b47a656c7b72c388882e7a2fade695dca819bcac
SHA512 ac060dd93d021ac01585171df9471ad9dc5905ec160f3206b64ac967bf4f640b6807387e9eed70371b2cb9ce7918ad4397b1fc855e4b39d71ab530529c94db26
SSDEEP 96:1R1TK+fH+YSvKUMOiIJcjLwBs1jazr2Tzi7xK4y6eVNB30VUmJMEW6w6:HtK+fHQKwiIJcGscrTtK4KVNN0VR3w6
TLSH
T142A17E68156CBA72955D08F90BED824CB318B6566D2714F02F22C4FE1F9F6067C4E2F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaCritical.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WCRY
Size 8KB
SHA256 2bc24678748f4e900ea41f6cba8e5c8661d92641e1c7dcc598a2a31496a315c0
MD5 c99f191a744c63c25ea9fec6b80c47a2
SHA1 def35390c48b1125e580bf74d8ee1c56d1cf1904
SHA512 05332e82982a89ac94d99ac2f5b5076071ab48017dd0e2174b00bec63a4fcd916a42ddcffa03479baff1e4c3426eb2e59aacab91e60b9958f321bb042c510bec
SSDEEP 192:XHmrbiSDVI9113UKOqFMg/dJjTQzUZFP42zDYw:XGrblDVC1pFMgVdACFP4UD
TLSH
T10A12BF6A58CBA3AC10A01AD591DFEC624DB65B3C56E1548F48B0F1F74F29F8409DB0BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaError.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WCRY
Size 9KB
SHA256 c87be30872730da4e4aaea53f6e162b90017bf46e3beadcaafcdcc001b5d2f80
MD5 ab1e4fba272181bb85aa8d139ed2b2c9
SHA1 dbee08b79a218550c5cbc4c28e2b1a074ee438fc
SHA512 a8772212ca3fcf5deac102bd755cff51b1cb2c6d65edfd453427313eff378f1b81c618a0cacb1e6406370f3b2393e96ba8aa5eaebb9501b20e85e879c021b887
SSDEEP 192:xqWb1V3cKS3KVTcu/Itlaw+ajVHHktZMWTf91fw:h7S34//a/+wVHHktZMWz91fw
TLSH
T19E12A06C6A4B0FBDD4C47A860870335293920B4FF3AACDBE55D9FD50936C8981C1798B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaNearing.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WCRY
Size 7KB
SHA256 d5130693fe78469af5820160ca163e30549e0933a378ee5b717d6afe283dcc03
MD5 aa959a93df7ba672401e0d113862d75f
SHA1 a5b585f90567426b88cf64fa93b9bdd16e0c95d3
SHA512 294449698fe2b9214941e300e3a814e8053eace7dc4fc422a828c636395ada8475d806750471a2f95ab3bdb09e6caecf3b10e8dea57b7a45eb260179e14d4070
SSDEEP 192:XAIIQ6cFte5CyI13kYRzD5mxMx7MtU21pXELi7QP60/ZlRcT:wIMmByI1lRnPM22fE27QyUZlRcT
TLSH
T1B4F19E9C702DE790E38A644A0518BD233B81AEC50BE6D6B6C151D807DBC8D89FCC8AD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ScreenshotOptIn.gif.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WCRY
Size 238KB
SHA256 dcaf895dc4e7ef5732c9d5f25d432e840899d1351dde90cda38ebe3353e56d5f
MD5 46fb0fc52bdc3541207aeee1c0240562
SHA1 cfbb57b656f4fc1ca413a8e711ef85f15dbf5b4e
SHA512 bcdee1347c76855a955b56724da95e148001968522a8637608cdcf201877b8d59a229b35b3f83573816a54b2358adb61420a03d4f1c88d7c677aaebc63c3ff6f
SSDEEP 3072:TYa5dBAX9UOzFxgvJOYgWIYLD2LKmZ6pEk8LHXo/fb4FLUI6Y/GWGt:TYLAvPgOyLb+Do3o/zot6CJGt
TLSH
T10634235CAF33DC78013FB3D2137C8E4482DDAAE98DB88D159AC577F2C3086A89B55649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ThirdPartyNotices.txt.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WCRY
Size 48KB
SHA256 59802b86136089b25a4081b85fc94310a0fce6c79f84c06e0488d5d16c6bab7f
MD5 c753e4e634a738ad4b5185d34385b0bf
SHA1 c77d2553260d6ed68f6be4de5b683e02ca17a2f4
SHA512 b71c76c013f81d11d5daa6da685c18c678debe5a4be369c8121aa436e20ac67c6fa61be619fefcdcd525988a39243e25120ab379a6378bb42fd7b7ae94023a6b
SSDEEP 768:Yave31QHJR1+eQkElIGrA2yARcRI4+Y57bdI6IoutqCaav0B1mPk+DcRChJSDn7c:Y3kvQkIIlqIlv5Pdt65rPDcRChqn7c
TLSH
T16A2302886CB2286F3B94216915CC98DE55B4A6FF7466333B19FD02E274257CFE0119F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Warning.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WCRY
Size 2KB
SHA256 6ae0a6f3edf7da949de567edd7a5372c938a8a4d03de81db2e87142f9d023b65
MD5 4b79b99f63679895dfea8f9746bdde09
SHA1 56714c9fbde51c39b4a318cdd33f569414588944
SHA512 e7da6e4d7732b77d72ce380a03c8bcd5949d8de39a6ba857a01583c9e132dcd2ccc8063761a9a8ba258594392378f4e859ec2be3ea22c4506a745e2fd5e43dc4
TLSH
T1F4515B15800A8A05532EC5E3A8B7511E737513AF2A23582E8931EBBA2E9B40149BC34A
MD5 SHA1 SHA512 TLSH

Submit Download

alertIcon.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WCRY
Size 1000B
SHA256 e94f21bd96e509f5a05ef26c88648866deebf659d600e658cb9e65cfce2e5549
MD5 b9a13126eff601ad23af4aa10a0ab24c
SHA1 b6d3b60109aa75296023abfb3242121f20f4bee6
SHA512 38a0fd95ea63f25156ef66e21c3b1c9afce7f957df389d8a1a47d2bc6108f86074ed9858473ba8f583712481845cbb94a0fcd96c57f4d721d68c76de913afa55
TLSH
T1B81194C9DA4D4E83908DE53A4C46E6C8E601E5077C1292A92CF7B07B028C0E6DDE5DA5
MD5 SHA1 SHA512 TLSH

Submit Download

acmDismissIcon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WCRY
Size 2KB
SHA256 765b683c27d0654657a3c9f34631fe742ff8592dcc16419b57e53d96c266f34e
MD5 e3c7aa58d3f5d324558d85e256878d69
SHA1 38335e7814dea1cd72cda38f5541200d1be441b3
SHA512 612db956f5b8f40068a5b70c8bdbd81bc99ff4a23af236d7b21f4722d6b29512a653faeb868578125c2d08c40c0610e76e644dad960d8dcb3be7dd2ba3aee5c8
TLSH
T195513CA1A6B446F4C8CD7E5D6836BDD539EF6B00C84573D08BCAF9C59D5A88AC300E51
MD5 SHA1 SHA512 TLSH

Submit Download

blurrect.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WCRY
Size 1KB
SHA256 f87ef5cbfe0db0871fe9d615cff23e1bf4a51858086ffa30edcfc7b62238665f
MD5 b72afeedbf2d1195e874c63a9a49d812
SHA1 bbc275fe7d5d350a24662e9bf107e4a58cad4a05
SHA512 44f9616d81f2e05604348491db41a2969546fdfb906d68c34ba6207d15659877e717ef8baabca1cc3940dccee371fff96bbed135dff2df5709335b8eb717afb4
TLSH
T1EB11B63E1407AA0C8E411E386AAAC1634457A350A80292EC3651B2AC546791306BFAF2
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_finished.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WCRY
Size 504B
SHA256 ebd2d2bc32dbb6d061555b14f6d8b03ca371419246eb6a7b7dcb170ae6595e77
MD5 0ed15f8393275f559e30ef2ff3325541
SHA1 e67c635d8f5f038965ffcb1acd783f03ad20e641
SHA512 186a2e5d063d3cf6968fc86de75507c37870cf76be441caa0b8a7f8b1e16ae7a2a17ef937d5d1d7cbf446a00d76d1ca7229462375fbf337d6d95c4716afcd793
TLSH
T1D8F00E50C9FDACF3C6AC36B610EA29446B087D182900A41854678FA89568D2732CD950
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_hovered.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WCRY
Size 680B
SHA256 a6cbd51840ea54b362cc40c4719d1c4a8db2ea9b1b993397ac83d437f3266c37
MD5 c2f6b0891dcb48def8c01b272686f6ab
SHA1 dc30d61f262c956eba22d55a533877774b864c48
SHA512 6130c61d5f32b85f87d6af8483c61fb4f0250e84dee2cc6aa3b26a0d615c02ab459e965eb53abf51168fe54bb3d739fed1d8477ff46b5d0330f53589eb10d2a7
TLSH
T113018850D9F22256482032035C4C1766F060FD9CDDC666C3167264554E77B61167FD9B
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_in_progress.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WCRY
Size 680B
SHA256 3249472a8af5c2b9b368abdc6b1bf08863fb94f4c76bac71bb639ffb58e711bb
MD5 10cc6afcb7f7800d7e065930255200e0
SHA1 9844353a23b48dc7be5d0e40b2df065d404ad5e5
SHA512 cbdf2a3a2b1af1d3bcc21b07b0aebd37ce9d35b71dd7faec23098d3621eee2041ff9b896426bcebc15b5bd51e792011860270cafa5706aa028c27ca74b5b1ddb
TLSH
T14D018845DD21561AF38713E8421DF059E67451C8911F19C01B9CF02FDEAD5385611388
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_selected.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WCRY
Size 680B
SHA256 ab67b7981fedbb2b3650e288e44e79f7b9144cd8828c3def41fe5c112b162f66
MD5 00b4313222af154ee4a75b1f1e3eea0c
SHA1 d98c19c4abcbf608a415c734eda8abcc73ca1e56
SHA512 cce6b9e40bf4a0316a27ee513cf1534c71fbd98bce6005d1b199af6c9a3f2f24d165d753cdeafcbdb1355588f68c8a46311cf64a87664d09a711d9e44dc8cfe3
TLSH
T1E00144E0210A09ABDCA3582462ECAA87FF3AB166081135E09D305C181EFD19144866D3
MD5 SHA1 SHA512 TLSH

Submit Download

chevron.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WCRY
Size 584B
SHA256 bb129e48c0fdc73db740859021a4bc9e81cea8765e792cd004e84be00011811e
MD5 ffde683e6dc366746e234abcb340567d
SHA1 4454e5ac36bb886f79ff6a971be27eb89eb22414
SHA512 5bdeaba7bf54c78af66b1381459a3a24a4cbda825dd5c6f2904c62f628cfb352ca6e82ef89aaebc450e2561d07ffa46e70414bae6bf841d03e0e0a5e7b32aeaa
TLSH
T164F0477DE4FC9D5A858C263E21127297324C440A1D06E141013B8F123E1945FE5D6C4A
MD5 SHA1 SHA512 TLSH

Submit Download

chevronUp.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WCRY
Size 552B
SHA256 b63aab38f266e56e679b4d6b57398a453691cb6eed7aad72195b1346d9e74b5e
MD5 452c2bdfd23faaf0d464aef9b8df5ba2
SHA1 022a87c408a0160db4de6a45f83ff1a6d6c7510d
SHA512 08e38faf076f1f931b190a00ba5162653942b3170ca3212a415f02ccaf3115cf0e42694c767baa100b82ce06d5efa80f188ced018118694b33f0966c48879c9f
TLSH
T1DBF096D4DF358158F4CEDC398C339B42138454A10342079F50352CDA70070D0DC3A140
MD5 SHA1 SHA512 TLSH

Submit Download

cloud.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WCRY
Size 1KB
SHA256 5a4e1fc18428c0ce4e533a1bdfec4b116aad977d3ca5833559a0ed5f58521eee
MD5 8e075f0185e57abf86e2d3d30e3f4391
SHA1 64bd7ac7d4296c81070606fc17dfc18252a178b7
SHA512 f5cb0df7060e31f84b9d51ed93198743b2b82ac3811263ce27b894202a2a0a7befe37586a82bdcb7ec4582eb7d0d63262cd660aeb6bafbf120143afd20a8f704
TLSH
T122410A851AFA0DD01324C8268C3E59043C48B67AEA5FC5AFC1A9D0ADCB176DA52C254F
MD5 SHA1 SHA512 TLSH

Submit Download

done_graphic.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WCRY
Size 15KB
SHA256 6cda85a0d7321687b5ce9c7f696f8ee03016eba2177e5e9f445bae53af4c2e40
MD5 450352e432c63768c130c83e55b53e84
SHA1 167eea3d31d6e355cf341dbc2442e71f6b4b9486
SHA512 e588a3beb72586e01c5b11bdefbb6f633208fcac4d6de3a965eccbf5aa1c922eea04b19d4f1f415eeee381d2c7524ba570b62ba8e9cbe1514e39b60a9eb70efc
SSDEEP 384:KKCxhThCOVu764BEfOxQw29GAUrHizMnYPIwYzx:KKKTJZcKOmQCzMn9
TLSH
T15862E1C8011532490FEF2844787E040A5F02C5EB992A3BFE153C24E67E64A5DCCADEBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

errorIcon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WCRY
Size 1KB
SHA256 69c275c2fb22605688ee5784bd1073329fe7c94eb4281784ae69231de647db45
MD5 b70bbdfdb2201df9b2acc8d65932d93f
SHA1 4eec52f4386dde618bce6b37ce24c950ae61fcd9
SHA512 62f2f49894e1c2b9c8fd8cf26e958d32ae9ad4f3757ec5f23b01a9b640ff09a03ad39eff874b2c8b4e44e784b7feccc22a2afab404508112577a742c8b540e17
TLSH
T17911B5FE99FF07C8C46B088A052D828B5015EC520D0F99CBDFAB09004C9E9466FDEC8A
MD5 SHA1 SHA512 TLSH

Submit Download

folderIcon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WCRY
Size 1KB
SHA256 552083096c5adc457ca8d62a77d996133b678c6ab34c0aaf82f5e855ef62a74c
MD5 8a794ade0a0fbab3ba7618af1446de4a
SHA1 30b6595850c853917dbb6422217dae6267b1e3d1
SHA512 f7a66ffbd35f83a746087a8d2426a7fa11837077d560dc4c7228b9ba4faa1a8f98c6eb22eb767a3d3035f7bc89aacb46eec5de9e9254f9b475afc24389aa8c08
TLSH
T13121F6E021AD2C23BA6334F9AC6B06A0CCB9ECD233800D06CF39E42197CE2100194BA6
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_desktop.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WCRY
Size 2KB
SHA256 2826b873f8e0f67c711d753de93cb8b5cb2cb624a7399b1d0203b4e9be54a403
MD5 9500633b03d87ac34ad297aa64ea7783
SHA1 c3993754eac33101d267d5dacdb7a8b88289b795
SHA512 b704f22793ec8402dffd869263750310df49db3bbf3e3df1b41d68aaadcde09cfd4e790a93ba913f1cac75fe24af1c40f73b2fd28f4089fae833723eec090358
TLSH
T1FD415E75B36A556BD79712FA68A2F153C8ED890D310087D0C1C2972BD3633B25917D52
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_documents.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WCRY
Size 10KB
SHA256 962d4fcf174290d775a3d07310764ac93536135f8022a1d5a55e90ea57c52757
MD5 8bdce3601f74dab5fa4c11d73ccdacc0
SHA1 a2188342ee717ae68e7cc6345f312ed125f91669
SHA512 435d6917807a61cde2567cb53259e3b054005d6222e3b2cdde12174fb44befcde545344dabfd6942f0239c1037fedfde0ce272c2ef65d7fb817fa3f772b266c3
SSDEEP 192:m3FblDLxRAo4nfrfrYYg6NN56FtfydRJwsgjUa3/tY9gqfUUKojYsHggI0Bzfd78:mzVV+zCFtfy1SZ/uCqMUKxsgK75s/UeL
TLSH
T19132B057D926CC63AB7E51EF143A2C9B6D47D0E809066F5D7FD642CCA848D32D40D30A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folder_image_pictures.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WCRY
Size 7KB
SHA256 2e2716c39ffb19d8346157f6e2290b335ba6214e2fbc63c0ee14f61314e9353b
MD5 fad8bead7115d53d0ac0fa575ce93871
SHA1 623cf10d23adb5eda90bbcf0d36a50ff360dbd7f
SHA512 48d99e231b8f0194549fa640b040663ad95ab7294009cf3e0b889cfff473db458d1a73702381ea80ce7d92b8324457ac50968fa3620de7f7cceafc84c6401d90
SSDEEP 192:ucUBrtliX9OjcEo/EMJuhfoJYcPbnieMfXIKIM38g:UOOusM2fkYubx6XIq
TLSH
T198E19F28CECB0E4660D43F0869B53F9CE5748D397F5884836F960ED9B2C2302268978A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globeIcon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WCRY
Size 2KB
SHA256 dfc7fbad6200dcdbf6661c7ae3fdbcbe1ac6067a2ec3a2a77d8f5789e4493133
MD5 cd9c5bb42bddfa1c392682f8651acfc0
SHA1 bd32ae2c158dccebf57b1b24230bbacaac67f252
SHA512 32e107cd33e58f006f1691a8ea0397b1c3f804f1af0f5ee8127e722950ea19dc2e640f0951fefe2974221b4e075e21bbaa7dabc2871963f6325799551581aa34
TLSH
T11A517C800CCCE159D65F85B2F7CC8B7302F6493108C98299BE392E47DB84449B30FC61
MD5 SHA1 SHA512 TLSH

Submit Download

iceBucket.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WCRY
Size 6KB
SHA256 4ef478f3cf138d6d31e37cdb9fbb73b9b1f83e196a73e2a85c0ab679c0150814
MD5 1ce0cf53e65f646702d28f76de644999
SHA1 24d5c1ee754f34cf7cf477e05c452cf844f41c23
SHA512 611e1a07448afa896dc50b943ec1e283535ba18ed838bf49420b30a29600bc24db93f1911c7ca928fb0366cdd64218009e8b70a63e856bce34fd3db20c5177a6
SSDEEP 192:SnEKjIUslrLbGCN7dm8fnsvCMxo9XHB6BV:SnEuIU4LdvvsJxo9XgBV
TLSH
T11ED19EB639359CB99BC252F24D60EB4131DB04E3BD31B3E44AEB43600DE692404B4E60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infoIcon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WCRY
Size 1KB
SHA256 99d3740d33a1a2b74e0237928627e2bdfb42e697173cdefe9a17ec4baf654c3d
MD5 13b8a1a4c7ff1eba9ac99c29ef7130a5
SHA1 6c3afb3ba492fa3b3ce3450a2e9f7449154c27eb
SHA512 28ec0af8154930a58e65e9eaf37ad3b252d38d4faf588d59852ef6c668a43099becfe5b589ec8b6a55910e76371c65f5850a324cfd6ee719a0e80a64f9a811ef
TLSH
T10F21DAC71401FF6BD215713241C181D3801586190146F48CAD982D3F9074AFAFB34510
MD5 SHA1 SHA512 TLSH

Submit Download

kfm_folders_image.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WCRY
Size 20KB
SHA256 77db88c7191eeccf521c3745469d9c581450a3e7e7496b3ef4c7e719255bb57a
MD5 5012b7b6e14ec2c5f0f49dcb0c8e8041
SHA1 3d97dfd432e58cb46d1c2bac3595c591be60bebd
SHA512 160ab0678d14dc98a78e47a935a348adc95ac97393ebb14fb2a94eda1d28406f28db107c3bd9ffbfad47fd842c5f24fe22007aaca6e589386b2295c2194f1e08
SSDEEP 384:w4v0t6lRn6Qdn54tncgCw1t3/ZXSNhNwhATv9dPly5tZKsCsWd2JjsKkVue+nGZR:TPlRn6qnqaChiNhNx9ddyx3Crd4sKZeP
TLSH
T19E92D15F8571A8E0E27A7137B363BC623A241A2C5F498B9E76216B8F341604CA0C3D71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loading.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WCRY
Size 1000B
SHA256 d10fb87ed9b022237ea444d46d2cc919ef7c6a87f2474d3643d294bcb5bfd5af
MD5 673282ec270d3b82824228535e080eb1
SHA1 49ba253789d348f72a050d8fd9e61dbfa3faed84
SHA512 9770c7625a58313f37dd9054441bcb2748f43883a6832cbfddc441508382f92c740e4d1c4d529699a73567ab631267cd2a490936474d86eaf5b026e29574ffdc
TLSH
T17E11A5F47E2711E6DB242AA01DFBCA2A1691C8076722419C2FA6ACAC468422704DC547
MD5 SHA1 SHA512 TLSH

Submit Download

loading_spinner.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WCRY
Size 712B
SHA256 61d823043652f329243f1eddf05a876c182923388c4d552bf7c4c8714ae74e32
MD5 388db61f681a18df244c8f782ed0fc91
SHA1 5190c1cabcfa9e55c033d9da74715266c2b79323
SHA512 4618a9bc8b2fd134261e7625f3dcffb9684390f598c32e21e0661701bb2220f8b558e91bceea67d7ce4a2f57414c404977cfd3dba256945e05b5c3f22baa5bbc
TLSH
T13D019471A07C3F2597587826010FB2CA1A70D1F9C19203F54D5CB0EE2B6CB288CA32EB
MD5 SHA1 SHA512 TLSH

Submit Download

onDemandFiles.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WCRY
Size 7KB
SHA256 a71dff145859986fd30697857abb62c9691035a8dbd27285612e19dba2c06be6
MD5 60bdd20b4669ecc120cdafb35a3374ce
SHA1 b075a5c0d6eef16f7039ca06265ad1b7a5e7169d
SHA512 fa2b31d43b9d91c5528374b0bf619b94fd376048f8d9a69549d1ae08089acfc8b25fec64e994d20e42610d66726203005d536f91f1ea7240a3cbf5fbe48129e4
SSDEEP 192:djinv+2GeN84vPCFGILUyJbxCjGHv4ZQBaBkktl:UBRNqrJb8jGgq4ik/
TLSH
T180F1AEE9059FB1AB6C5F07A900B0E02531963621D9E3BCCD166BE4E3BE2CD4C0D4B9D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandFilesDehydrate.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WCRY
Size 9KB
SHA256 cdd8c0a4b5d348a1e40ec9e0aa847677fe5f2ad5fa024e736a04241b228bb75a
MD5 f9bc218211ea3bf08600de787802da29
SHA1 1be2a14557d2521e67693413dca0f5f4c4a93a53
SHA512 a788ac4455b27e6b336f3ba604eda333e93a1343ad479097d77b384258cd20e529547ff60f80bbfc72d2c90e4a4bb9d7892962fa61b810fee17dd8d562dc99a5
SSDEEP 192:WhDwxMk2RGIvuGCHHFkcQpF0pY70jvbsCQg+3BtNzcRPPkbXB1eTg+hGoHQ:Whwqk2RGIoq7DAYAf3Qg0nzasbHy1ouQ
TLSH
T16922BFAF22D0B4C8BB8B3A5EF49B80B865873BF2212DF37E0D6DD9040941978D54A011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandSelectiveSync.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WCRY
Size 2KB
SHA256 299cdf0bf9e57031f98d94871e62586aa29f8a227ef8c1601c5f9ea1f69d8535
MD5 1f1e5b2551378dab6a851d8280170b9e
SHA1 a2b189bebaa39890167026e1d9507fea4ce732a3
SHA512 2658047d5f5051214bd53cec744c0e275e59bf6f1eac417ca4cad5d5c4f93d647cd40f7c4bc41d956317206deb1650215e91d08cd53249e00cf354d799aa17c2
TLSH
T164514B90F622E89DDEB074FB0831298A520D1FB2AF9D6AFECE460933706C024781F110
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIcon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WCRY
Size 1KB
SHA256 84ee8e0b54e80853434a5af8330d8364914bcf6533be33b89817c1e029501e69
MD5 4c34ce439ba87e5aa4fd5761eb2a5d93
SHA1 f955ad9e4d06b8147542b527756ee8ad77bff8bd
SHA512 5de4d28a6e14e47d46affaf5b51a58de981187dde65d8bf081d92fd7398f4bb6e1db637603a7024eae2c085bfe53825ed8fa86e51a133ffde73e6d6d16448b65
TLSH
T14621EA8A8559C91D5D0C875800D173942E467CBBDFA5A3F1C7F017B44FCF4466A96C01
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIconLarge.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WCRY
Size 1KB
SHA256 fca01465238fa9b59988b36c1ea0ac4678c43b4244d5223e9bd45454612bd372
MD5 1781f885057ba013c8ac78077745a5b5
SHA1 bdf4ae0b315832be80daf63cf7749c2c59199750
SHA512 d53d6965b14ee95f63f7b223e8a9f0e3d0b70b0b7d1875cddf67cf925a133d7d26e0deb1af9b14982627574f63b69dc87c7e4c528acf3724cb1ff04db59630cf
TLSH
T13A213B8308881007F69169930511F022C847FCE7BCDC3850CFAE8A37C67D50E174B1E4
MD5 SHA1 SHA512 TLSH

Submit Download

partiallyFreezing.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WCRY
Size 4KB
SHA256 3b9925c673a22151737ce3ac06ad24897c1aee7b7f476415c9239d26f723b2a8
MD5 04120ade984a93acc88b42fed66da5c6
SHA1 738920d053753a4eb2562a8cf7a243093ac8e40f
SHA512 9b84f2eff37bf038278644254fdf5430e5e165cdc1d8b07cd168747490abd197a9e24c14497b1c4440aeffbef7b5f4c24b1bd0633118a803cd793e9dd6b95950
SSDEEP 96:jDXt89KS8rBU+ypJ0KQ38TBDX2BMocDdOJ0Fvk1WrMZn:HXt8YS8rBUhvRtz2BMoKk1Wun
TLSH
T153A16D78C02AA4589FC995EF4D247067272E0C929E7E06AF418F49C16AED07EF0390F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

paused.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WCRY
Size 600B
SHA256 aae1e4703cee15e36657b678905e90cd79b15afe7deff336ae4cd6b625c29e83
MD5 f5b59aeaefd8bd3ca0b413ddf42021a5
SHA1 513a2b930cea69a91a49021c2ba0daa4187100ef
SHA512 1d50852d14fd458736f78c2ff5f08ce01cb990c0d67e258e1006d0a13318337adabf425b3e163e0bb5cd358b03b0648aa9879f78424cde10be4861f9675781b7
TLSH
T1A3F04702704F88A9254F13B16EC3761FCEAD0C059575939372C1918EEAC1D6149D7764
MD5 SHA1 SHA512 TLSH

Submit Download

premiumIcon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WCRY
Size 664B
SHA256 41dd4d7f73beb0d098f5b0b3f08c92a483e2a7a97caf7d94252623554631ccfd
MD5 c35790fcac3448f0ae19d6a3058bea18
SHA1 114f5700fed827b4401a78e3d6c89aee9b566080
SHA512 65851a85d16bc12bb357acc808c7f83714617842e8de7f61bd9ccaad8ea722658fa53b6595ac158e1c6b4874a17a5e6298d4ce44516647847bc313ab000c616d
TLSH
T1F301C85DA5809091E7C6EFBB28BB483DAC6B902F955005F704FD173C37285F961201A5
MD5 SHA1 SHA512 TLSH

Submit Download

recycleBin.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WCRY
Size 3KB
SHA256 5a18e54445c91ba6ce94970259d7f7fe6f2767083ea66edcdcae85568a73c9c0
MD5 a7e3c46a22c51a538745fdbf67d8691e
SHA1 a50fa0eb78bcbb48df4372af8e10206f85e0ac26
SHA512 bc8061818a7832ab8c45f17e6613bb69e3effadac5c0f8f0cce457bc562873991bba5af16107785ded4616b7660b7cb4a19e7c12082aa4351bf48963b422e426
TLSH
T1F8716C883EEC3053C0A130E24399315AFD016D7AFA9E35425A93334161D1F02B23BD42
MD5 SHA1 SHA512 TLSH

Submit Download

shield_icon.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WCRY
Size 1KB
SHA256 0867de78a63e1789bf33a511371b087b484dfee932f711315695a97a6aa844ff
MD5 43908ff460f96f6b38e778efa28c9e69
SHA1 8256b1208ccdfb0438b19e590bed4cdd6b35a431
SHA512 c85104d0e8ebcb9fd5bde9040f8ff1611efc38c6afdacb19e702c1b3772f75e8214d83829438c4212777dd293cc6fa22ff0c386ad32479bdf41bd9efb902d3e8
TLSH
T17D31F9EEE83C0427A1DC557E1001A325B5B48705E626B71B5BEFA987E458DBD04CB3C8
MD5 SHA1 SHA512 TLSH

Submit Download

signIn.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WCRY
Size 10KB
SHA256 d33359dc9159ef6ee84a999376ee65985b33bd50754c7cd7236cd27288536a09
MD5 9ff631459d055bfca52d1c8ebe50b3ec
SHA1 3eda02fb939d5937fa90a7b7ef0993988ce83184
SHA512 ce53739103615bc5a90d73b740c67e5a6d5bee0e4219e701d6b11dffe24e1fcbf65800f9a6bd36ae06c24f3a9f2afe0ad01401b282296d3ca15db4a8bd3eb3ec
SSDEEP 192:dt9N7abHissmsd+GmOtbvvyxPaKwLh78EXJCJ4N/L/fPokhissUeYcyV:ezis9sRmuaxiRlPXJCJ4N/8CsUXV
TLSH
T1EC32BF2F260ED1F8C02D91C902912B293E3D186B92841592E59EDE5BC3C17CDD58D9FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stackedIceCubes.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WCRY
Size 4KB
SHA256 c77e7bdb5bd826c2e352ef5ea9b4952f505ed9028213ae72e2adde5232637871
MD5 87d377693b1821a02f2e823b7cdb0bb6
SHA1 f3a11a2038d7be1a97a8efd1e5595325ed4170ef
SHA512 f121a15f6bd8a2982f2022431e6eb5e6ce5c50a22825b67be21ebb8cc5068b25abf2987e3b6a2bdba340b7e9744d7fe7cd9d961ffe4aca996988bf69c9021bb1
SSDEEP 96:oqk7y1ky7AaTksiS+idbAzW9TeaPx2q/tPah7r6gPdeEpFiMvK:x8py0siSzRsyiaoq/ty6gPdiMvK
TLSH
T102B18CABE01C03A6B8C0651CA10E1F952D41BEE2FC6CC7D4401A1670F296D176BC865F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

warning-symbol_grey.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WCRY
Size 536B
SHA256 1522f9fcf81423b754fd53569e54ad680bdcda38c28f0f4ad46dfc518273e8ca
MD5 5f3ae157d6b5fd5b08a81f3513ceb43b
SHA1 f9356e4bb21ba1dcbb7b238fa0329b3ad73b798a
SHA512 e96af2de0b0847c422602e9803468c04e844f5afec6539834948d0cc1cf6eda9c7b900da397a16778040ffb871111c6eb9f91822a30196fa39772cff51ec5c88
TLSH
T1E2F0C03A748D7A19CD83FAB241B550979C8169268D65119CB43A2F69151958206793C2
MD5 SHA1 SHA512 TLSH

Submit Download

waterGlass.svg.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WCRY
Size 2KB
SHA256 bb347d13703c6d8e5bbfecbcbd3c7fa8d9d6489e5fcfd06d59d25b73963c05bd
MD5 6e28e850fd2bcc6c746b263a2b95db7c
SHA1 b5c923e0289803befde8c83dc669a9c53565ae5e
SHA512 0ba930c0cf9871c06eb1a72aa7172b9bcbc32e3270880af9bf2d71cdbdf12cd17e59990d0cd0224c668338c627344245444204b96ebd6c2ca221f578cf01a3c3
TLSH
T1DC411A59D0C35A5AC9D7A336A7B33811044CB7955FC02F45253AD261494EA4E083FCDF
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-100.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WCRY
Size 936B
SHA256 81156f8c6ee7f711d3b469c209a09580d022b7f449bccf994fea2697521deff3
MD5 8d619bf6070ba2aee5da57321fb7de76
SHA1 aad620740bd151297be0445f8be6bbc2ef97cdbb
SHA512 8f951eac974ac9bf9fa8e648ec7a092f529be6e93f300e9449a9dbc09897a1ef5e4be6a324a1bc58fdba51bdce0a9b0fc5e53f0b07688df3e1a3d33ecf410ff1
TLSH
T19311B7DE1ACBD602F891A577B3A515A32CEA0B33C97E7A259871B0C3E0D143439BC46D
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-125.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WCRY
Size 1KB
SHA256 86a4054b14f6e68d6c8dd66f9ffaedb65051481a74f4e8b809194bf8de3f390c
MD5 0442eac0e98e4914c1ed9842ae708fd2
SHA1 c44ac278d59201cee0e9cb80164af52f1c5529ec
SHA512 984d1505ceca0dbadf41869f8ed9a1b7af01760d8101f4b24cfb48daa66f652dfca8b0d81be54184686aaded195a457eaeda59fe2c6da6ce0aeaf97e88b6dd96
TLSH
T1CC21F9F5AB77ED26ABCFB36ADA855B5C03B01221269C87C8560C2D03850DB52CBB0F18
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-150.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WCRY
Size 1KB
SHA256 09485939e6e28656e49f32771a2c93964e407b2969c8b009beee07b4665310c0
MD5 b2a9793ed9a5cdcc7c915ff217b7423d
SHA1 c0cd4827938cec49ea9bc4e2a323313b9e8fd83f
SHA512 f1a005210a1f72df39e767071aa821436c6d1c09dce8af974d2d2fd494a5300c03d7259517528e73095455e7213a9437aba1580c57caf7cf0f9f2d4cc5490b5a
TLSH
T15121EADDEA6E981FBD4DFB6439C6C9AC96E885C7C3A17224E835605B43101D8812C5DC
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-200.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WCRY
Size 1KB
SHA256 b33f3fe6f6ac18ffebba6d4493e9e432a6ad3989274a4d379cf2cc921e19adf7
MD5 9f817e1c94fbe78c564a802302554819
SHA1 3b60bd3df157e61d31e9aaffe72c4bc231ab1aa3
SHA512 25f78e95bb9ef1d493e7b14c78289e7a702ae4eb3d629a15aec5b41241586f03ef12a3e9253a5292009e55fbce5b2ec48fdd2afb7e731134623351deea3840cf
TLSH
T1FD31D843D8CD203C9A3FD598CAA1449D63225E9CB3E0E2C956005BDA189B737288B755
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-400.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WCRY
Size 3KB
SHA256 7055504987b07622ce0914af7648b13d1528e7710a7d269d75bc7b2ac49ab5d9
MD5 976383f3ba4f4aa418aba8cd300d33b2
SHA1 f704616406c46adf1399799241ace9b3cf4831d0
SHA512 f247cdfaea745392f6c78b1fe37378de41473f10c255c188d3c76e2ba693d255c3fe508e55606fd299fabcd8f1641384fe6952e559f4e604b8364ea75a7eeba2
TLSH
T1FC715CC88CFAA09496951F829ACFB58148A7329C807BF0582F3827E050D5DE6777423D
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-100.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WCRY
Size 952B
SHA256 5e5d8c54a37a8a384b0101aac9cc4a26b292372bb49df3b49882d27a15f776b6
MD5 b458081aaf604780fc0a2c0652703934
SHA1 9460e188d20758ae60df96035c22cc413cfcf19b
SHA512 cdc03962b3792c817e254945148db631c8cd802f64d8c8d90df408581690569024a2959a08ea0cd79b77142bd7242a8b756fc11a716db2540367e2ae484a0ac0
TLSH
T12311C891598B4310E2D0032F48808E0650F6729F2F2C36E7A387E74336E9159A01B1D6
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-125.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WCRY
Size 1KB
SHA256 ee692c9f4ca874bab94994bc35b9a94acb6b803f0a995fb3d7ccf58491ba6dc3
MD5 53c2199180c67232b90bae061d5c8cdd
SHA1 2f8cb898ffd90ef2ea2f4e88caa29d3a64d21af7
SHA512 97f236e44c386c8ec2573263964b6e3c5aa67e5001f973848f12132bac3378113f4615c46f1899a14e5740a92fbb5f2e6beac8c6dafd75ed72a66c155ac750e5
TLSH
T1CC210A2BFB16102CF314D690FDA3D07C161E5F808D540E8168B574D23C66C328884E3F
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-150.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WCRY
Size 1KB
SHA256 129ecac28e154c12a9cbacca9aa88f92b103e482151372686561cd8563a6b5c0
MD5 78ab045a57ea1c1544dbc4f05dcc56e7
SHA1 0eac3a6032212cd987081c42c1cd3c50ce92cba9
SHA512 3956e718bee0f155118e3ced5ddcf0ec81dd748bfb2b3ac70531c09e161943e2a07e4add4f3a860799d94d17c9e8cbcaaecb1ea3c7eb770677e2c51bbe5eb7f5
TLSH
T18411B9411289FDFAF159EE71CA950CEC71D5A66954A494973C01D81FF36CC314351768
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-200.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WCRY
Size 1KB
SHA256 fb92bc00ee636cfc6b96b03f074d2aa5337426fc817b45a343175f6ba660dc02
MD5 14fd1c1cc659a75cf5fe0a1c0e7421fb
SHA1 19024f0377104fe9522427ae5a162ae346dca39a
SHA512 fab7bbfb64808f6451a72678b66a834760558eca6d36560b745a8eba7938f21176e9ff79f1cfe0435af3fb7ecb642ebea4b8741d0376cbe2c9f879a509835c21
TLSH
T12D312995953739020CE0607BB53F732C3451C377FA3AE927C86696CB086604A4150528
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-400.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WCRY
Size 3KB
SHA256 4166f82ecfe04e6de4021c5aa440a757202add1c328922b9d03ca32a1786c44f
MD5 3a3c76f0bf1b65e64a165a25ddd76ed7
SHA1 b5e9ae527859ec240c5ef1ee941a901f035655bd
SHA512 719d71cae8679b314a6c1de96809c21ede0ad749395add4edc5b05b534fcb48765d7fc68a85443677fb04a5804e28769ab74997dee8d1754a4aa0a08e5c50777
TLSH
T15F817DDFC6486BACF3E63C541FEB2F420848E81978F0662A7020D635D6C298D5759FE0
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-100.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WCRY
Size 936B
SHA256 2c65f9cda6497bcf9efb5ec98da725d05fe6e82118c2bc00733eb94365d2c8aa
MD5 7d1e13b6e5f628ff6e86bf012d6f1f68
SHA1 fc975b5880294ee63f30e38bf1cb3102eb744442
SHA512 df14873cf3eafa5e3210ef76bb3d0cb5dfad2a074cd2611b55cb05b47a0eb577e6db93a17c9e7fefe58e9288ec8ce356b32ba3d1f2c61e7e3dcab59292b5307f
TLSH
T18111C8290CCF525112A283F197643FA032783905C2DAF6406828B5BEEDD559060E1541
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-125.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WCRY
Size 1KB
SHA256 dfa527a32067015671e8705e4161c68a25ed23d5855f1fa235e025cacd69e334
MD5 10ab6bf4c1d8fe4b84ebe67d1bc56215
SHA1 33188b05497ddd3a0b195afa35004394900aca8b
SHA512 2d3a89444d073142ab90f0d344d5ae87ae1e02f27fd36d393382e03aa33d1df6f89d8d1cf700d7a7a78d28cc6bdc0aa4c54d3fec41bb066b13391eee98fff187
TLSH
T176210A7596D79704CC79ACA1806432C5144AB106FD063F7E648421F3BBCF3E03D23640
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-150.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WCRY
Size 1KB
SHA256 96a41a77d9d027707e8347d8c5458169de6ba46e8b248525f40687bddc58870a
MD5 aaeade9a9ccf56a147da4aa1685e2fb7
SHA1 aec677881439106ed9b7ab95918bbd597966cb4f
SHA512 4380ab9170f9d41c6e441effc6922d9e7c72884c89cc14f8e8769371e8c5bd89384fe1f8f48fe62d9f3678c8a34f1fa64747f8ca2c219a19980b8873005feb51
TLSH
T11021C59FF5679590CE206EFE93DC6A72B3239675E1F086062806A2A404B03A02088098
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-200.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WCRY
Size 1KB
SHA256 939d9a031c675339e64554b717c5946d853980a6d3a3ee69dac039dc8e54023c
MD5 960f67ecc16156cd80aa0ab7e2a59b2a
SHA1 c21b9c3093b40c91cbded25115751701ba20f1c3
SHA512 b67d16310d04c1cf2dfa9b178bac072ae2f987c8e9e070af95397805b3ba93f1725595be821f739f6df10230f4806201ae399bf975ff80a7c6ffc00849db03c3
TLSH
T15031180087C3A7D77D52397015C84A32188A65D43757CA8C73D31834BA6F0EC3AFAC68
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-400.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WCRY
Size 3KB
SHA256 f3c8ef5e5e4ba2d2474f0b9ce8d9837f9027269980ff5fa3d263ec546c9746b1
MD5 1e1a4835d07c9336ba58f6b1face13a5
SHA1 95197e7e8b87de6498d286319c7fd7e226c1e4dc
SHA512 db961d395a155fec3dda83fe0b712bb2dfb84db97eccb764b097755e42a385bf53f147941b2a1990979824763839503320d58799e3d552d1ab604fc4cbd91c9f
TLSH
T1F5716C0AE625114B83C1CCFB61E778F079D36EA0F888D534B2237C0C66A899607847BF
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-100.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WCRY
Size 696B
SHA256 a773ec29708a3ebcbc1b2962df9ef66399f03d1de2cc23eb6848b9a954bcc3a4
MD5 d32d78ea27950b2fd909d9d6289e61ea
SHA1 47186ed66e43036e1f79bcc5bbb9da663eab1163
SHA512 6c238a52c5817577b08ce918dcb5aead1e4664221975de62a7820c6fd8098a355e06079377820163af41e664d557ed2203801162ff894399e4a58b14c0e64be7
TLSH
T15E0144B6529C0FDA4A5231745D61B42D59BBC4DEA99F1744096E1B020D94DCC8172405
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-125.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WCRY
Size 808B
SHA256 88b0f0928ae4ceb1386fc1376723b4fa6f35f8e7c7339b9c37eee5257cec9c9f
MD5 88bc0f1901e3f516f51928d72f752438
SHA1 8ea5edc6ec79469407717d3b965a7d64d22e46e8
SHA512 b7424c9bbd7ed0191967835fdb5dd6078e34bdb07d70c5e586fad244fb3c1710bef36845cbca66f38bac897f5588168944e501e5fc9fa37661e6857d6f53c1be
TLSH
T10F01C53F3BF082135B1E63BC13EB63F2F17A21822EBD6215397BC080186E24D99D2001
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-150.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WCRY
Size 872B
SHA256 0001be1f99d97ddd495ca3ecfcda3306d9934a73f424afd154751379cdd817fb
MD5 54a5a779b87b82b759a4f39be439d9aa
SHA1 1fb5cc9e51b6083a6df6f92affbf7154de42f78b
SHA512 2b737046002ec643eac68c7cefa794244e9b539014a124da5fa0622b9896ff61552acd52f7fda33ffaa6acd23e5dbbaaa381408fa65a378b666ad696c6a24a37
TLSH
T19911E680540608B0405FF39D7527F079EABCA9609EE8E2C482FA0B537C08BFA9DB600C
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-200.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WCRY
Size 1KB
SHA256 8a22bfd31c4b9515d18765306af9ff879e3fa55f349b0a1f6781471674d6dac5
MD5 5815c44f84434ae46abf9f01d7bbe18c
SHA1 6930735125dc24f9f447ab9fe8a11805209cbabd
SHA512 5e48cf0d1c6c4de8359a17369de27226a4628d96153ae8ce3e9f4d65fbff118d9f164635ae290322fc572987e2a8d916f098d8171421a08a28ede2ec5500a934
TLSH
T19D1186B1D0EF1129E67B26220E163E91FADA58909C0F9E733DD73D42D0952918CB5058
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-400.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WCRY
Size 1KB
SHA256 625084704af4e26433f1f248d6dccf73444ce93fedfd1cbeb278826f59d41cb3
MD5 642d501e4a61080e510b894d96f8da38
SHA1 f68f46c92ef84637e81053bfed95bd841ad578cd
SHA512 1a84f6ae2b0d679b60659f72319e210858e9bb54f3f23ea978190217d9bab2bbfe142c638b468ac0e780d6e25fb3a6ee784aaf6b4a97a4458479c8812a8d5352
TLSH
T1B34128FAC0CCC1E7CA699F1403CCE226AB64D1227BFFB861BA41B1D45536302455AA2F
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-100.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WCRY
Size 696B
SHA256 3897112bc9f6acaa224a8b6cbc4edfe88dbbf80440f3814a77a5741913e2d0ec
MD5 2fe31981bb888aff73f242b2246d13f6
SHA1 644b49ba1ceac54c00cab9ae7f6b8dfc1c2dbf86
SHA512 6bdf67e92a4530706f63d47a4f6cff3f5552c06aeedb95a1cd4fd19555e257c0b3072bec3a7813f6ec1cd3813cab23828f0f194dacc044c73006ce4130216bb4
TLSH
T174014419EF966261E82A657FE4D70422791204951B5152BCE4BBDA823D1345303BCBAC
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-125.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WCRY
Size 824B
SHA256 d08f88204dfd43707e136d080702393476973a08b225d3338756bc8ac5b65b2d
MD5 304b3d844b8b38804d1cf4f3885bcbf2
SHA1 6d4e5d15c548d041115491efca3225ea734951fe
SHA512 2d640f743f4f6e6802969b263e2542ce62978c4cd8eb31d7f2f5938abdd053bb8adc10f29817dd447471f062c05144bfc0f26f7e2e2ebe88deea440fd320753d
TLSH
T1DA01860D493A9606BA112EDCD1B76141664C483D5FC8691A95C8C86DB8A423CD7C5901
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-150.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WCRY
Size 888B
SHA256 2d60d5e20dc0b1bed0454f8f0379658689e930dc661fa1bbaa7ae4275bef18cc
MD5 d96c9c53f8e8c7dfffc5d861f17d2cc7
SHA1 e195765b6c9497c380014badf424693de4359d46
SHA512 597b6c8f806e130d0ab98e6f4129e0252c3d64d8a13cb6518c453dd5093ced8e672a5abed360212d1ba6d2c5701ce08c55346c7fbbf6787f5e0326e3f0f9d129
TLSH
T1AB11961F87D18D69D905863C80EE2BEBBFE89A1F8101F58255AB85EB85F03C6D5F101B
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-200.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WCRY
Size 1KB
SHA256 c94966892553267b7629483f69108dac7f2ee41a710283f755f5034428baa652
MD5 168cc6ca50e35bcfbbca67e9a3e98714
SHA1 6d1de59fce84a99908b688e6898c4cfce26b1b2c
SHA512 ad522d4bf9efaaad7e0e01c1bed0285b11dde06b66750562d12ee548129c5cfd7f4d4bee33e5fac2e16e41ef4a4a90ad935ef057289ca149951367d3526d4c16
TLSH
T1DB111C49344C8E7C8DB78070A92C75F0D04AAB3259B7215ADBF022D2640C5F748297DE
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-400.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WCRY
Size 2KB
SHA256 6ea7631a3ccd10350dd37abccfaddf2a04bc5479d58d35d649d35ad2e3ab29c9
MD5 0da9834d125eede778ea9c08516aa528
SHA1 75ed28fbd4e6f0506e72281c0b347dde91091305
SHA512 b19983306b86ad8deb3d6ce9292f984519742c68e3c0498c64882feecc2bb348301cb2103aea2a284b6c47ce9b41660499d7ff95cc7acb033719e734e3d76613
TLSH
T1144118383A10154CD01014D9B78ED3A2E66C1A50A12261F229806B735E8ABBDAE4EF19
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-100.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WCRY
Size 696B
SHA256 19e863558b2ed19beaacea0198d9822d620212c44dab410bb6d3d6f32c58ff33
MD5 50f4fea0a98d00a48e8ace2edbfac82f
SHA1 643fe6f8f5e7d09ff948b7e87d42b6c2fad44f11
SHA512 74e551d734fe3170e79036ae4d21e0d607ba0b0aacd751be15fb0768b56d831a256d37f97e9b30e18522318859ef99b0f2ecffc70aadae26a5321e3c54cfc58d
TLSH
T1DE01FE1D5105DAC9482EB07A2DB47AF109E4B8D40CCBEA96D92B66B4A64CA251810FE9
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-125.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WCRY
Size 808B
SHA256 e54654959688431dc6adb04f1e96f0f84bdf00f5e55e14c344c01116841f26f6
MD5 fbfe1c2e4099ddc002e8dabd6a60c9a7
SHA1 d75ec88053ba7e288982d680c5bc57e7a08d6bf4
SHA512 8a2ea1fb94eb3126b8719aef14a6eb475590efc5a0fd5270608400020d6d3bea828b2913ce18ec348fbb1aaef45c3c766bf70b1debf2a1991a4a0ed49ec01ba5
TLSH
T17E0186103B5B2707C361F33D148C20C713734CB89845A8F7DCD6992091196DC2D15C67
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-150.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WCRY
Size 872B
SHA256 a71d8eb7d075bdf396cfb92ec8f084ac3cf98ec9b9fa07e30bdfff79e79d011b
MD5 8ab4a8c06a5eae8ad5e8cd4223d04dde
SHA1 e909d4c228d44ef9386309b951e8957afe66ed88
SHA512 983455109916bba89ef576a55d0160e5f0a0064ad936dea9058427edf355a440191610448611a1e7023d0a9ed11d173ffb1e67690a763659778ee8fcc3561825
TLSH
T17F11965E4DA9411F6522793B09942204FF2D7E247E40DDF529FA4880BF4BC828063A49
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-200.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WCRY
Size 1KB
SHA256 749992e1588fdaee7d1447f9caa22911a47581432cdf8fb5594354ec2b3e87ea
MD5 84a6abbd680a7b6c09e68482ac8aa066
SHA1 4592860708e5462614f17dd80f6dfbbd8bd3986c
SHA512 53faa0c63028a2279dbbe430cc2740b9471b6d6a097bee8d9c69cbf95d5f5d9ec5dad1ad86117794669b4dad80c37bc49bafbf2cf216ca89a97860262f521865
TLSH
T11011E91DACF30E4F0CC1DC0633C5B6FB79F5F4666E82B6642890E093B12E2506E9400C
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-400.png.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WCRY
Size 1KB
SHA256 104b5a958220d757658303f8ec5ab0aeee7456c0bcbaeb8faedd4c8380e70113
MD5 68f2eecc98b33cf0c15bb227de2a2a42
SHA1 e331bd9a670de289cbaad7549ec86eb659b1be4c
SHA512 523a1e9716a7ae32784733724f4087c9a1e8a0ece8d55fa242cd3d6cfe5eefe925425ee1063305be932192ca5cbbc103163632bc75fb6d4cbd21dacd56ff6bc6
TLSH
T16741EA414C4B06978E7F6BF77E1A7F080814569DACFF59464B189714021569C2D65EC3
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.1.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WCRY
Size 16KB
SHA256 d091b1936fdf18eff649f86eacc2540b688aa34da1b238ad9c709f24eb123a95
MD5 ed95c387117e2b40b66360560fec9ee9
SHA1 9a26ca23c41b9a6f1755d979426dcefbcb72a800
SHA512 0c54241e7b1ab2fdfcd20e58f9943f405d4d731d872c214241277a1b7615b42248b5ca7dc5e401707915afd7fe02e63b4f7661b52ba8b0c0ddd2a1657a89eff6
SSDEEP 384:eDE4t6C4L6Zab/jXAeczCA5jKfXOQ+Zs+:mE4tb46AAe+jCm
TLSH
T11D72D05C210AFA8DBF6B3A4C9881C1AFC0297949650BC7F4EB5F3D5F40D05D80182FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cversions.3.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WCRY
Size 16KB
SHA256 6303f9b6cf74725d51fdbc51197e21675e5300fd4bff293045145b598dec0163
MD5 d0133a19f0022d2af407bc66f1cc496b
SHA1 c05b02a8819d3cee40d728a7de2adc297f379e65
SHA512 941702ff6e8fd55b41b180c48e1875503f58efe532df5e9174b31892a66fa16c135eb79dd73141326bcc08642a46c8e0084b7988f87af81dd3e1013873265f0c
SSDEEP 384:TBoqqhh/Vm3ioSfE3CghsGCYI61bFqnL7qyZDsuYeVkvfEYiEb:TBox/YVSfJgfCYI+2L7JZNzVkvfEDEb
TLSH
T19872D0312DC9ADCA765EB154F689D20118A589A9F307BACBDFCF40F5C8240651CF9B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WCRY
Size 423KB
SHA256 05d59c7cc8f33a7dbaa1427296f9a2ec67d442f1f84775d91ad758ef432eed84
MD5 9ad0c8a2f8e80fc3e71321ebb384c706
SHA1 b18ba3dd7442b08fe2c0170f5b12c16189bef688
SHA512 7f2e64cb9ad1a4690584f6348ba35e5eb9fd4526b78fd9802e8b25868a15228a3820281d702c92724a16d2b838116b85a08f93d9a7b829bc0e67db62b32167eb
SSDEEP 12288:5z6h2CHUUAiNQTr+qkFudGLv3PmvThvb5:Z6h2C0UkTaJFukv3MThV
TLSH
T1D794238AECD0D47145B5EDDECC2B98C81B9217F9FF53AB62B638FD0628A1D820355193
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001c.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001c.db.WCRY
Size 90KB
SHA256 9092be5838c11b11ca44284d6730edf17b6a3485a6a92e61415c48c1335da1d0
MD5 769986ccfb70d27f0f4f4a815b6b18aa
SHA1 8e0782b874f43810cee1ba73071c98913db1eb9a
SHA512 e143dd9a38f7e02266df13dc63250837eb95278459c05d004161266422e4ee016d441ef1b40852bc987dff13a768d30ab83da9a49b3cefa68044bdab19224604
SSDEEP 1536:hwvgUPz8RrYd2ZRHiD+vv+IOb7mUF5VNOc9S/TWMOSkkY1FcRMt3mAomgYHiy:pUbQXvRXWbCUF5G/yMOSKTcilHiy
TLSH
T1EA930112F0D8CBEA981B91C957BCC2390CBBBDC3AD6A51868A5D56527DFD287DC01807
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000014.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000014.db.WCRY
Size 64KB
SHA256 74f06943e4eb04c3eb8fc9fd01963555d27bb15661832c06b2dd944f96dfb5a7
MD5 d5c59bbdd49988cebae16a79baabe2cc
SHA1 ae5974281f134adf859520f79e4769ae022e1a96
SHA512 e64851126ffb657b292c3956c5aa27340a8b3b418434017941804bc0b5a03eb130dc4f0bd71dd43e10aa100d1dd72942d1761e543ec12101ce2db4fd60a8379c
SSDEEP 1536:xpaYF4Njzwe4REtxguvrtKqf1f1Usio+rKJbZq6mYuy:akOTIEYuvJfJ1Lio+WJA6V
TLSH
T14E5302AC55FE0E42799A6A012060199817F7E35F744C2A12F2F0B57FDA66C9E13D8F83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1280.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WCRY
Size 312B
SHA256 8a2bb07aeb4f758a7a87257893c2f2901568c4bef571c60dfb1de6a8b8cbeced
MD5 5552bd65c7b7f0d4f2873b77a1b30438
SHA1 3743eaa8a89a96adf1353f862ad173cb71c459b3
SHA512 2dc495874b2965da9ba2e8322054aa497a70d0f4764b12f3d66cea35472da893cd975f5c6695247820c7cfa5fd76676869c1a1a36d5737b86819a5754a15f361
TLSH
T1F6E07D194297CCE6D0AF3670E86ED7F171E1194124EC62A280A41C1427A79128405216
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_16.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WCRY
Size 1.0MB
SHA256 253a61c76f20c5b4b1a8d49db32f0594c157e2c379002898e66f60f89c4ced13
MD5 09209b172bc03a779d0efe60e4a385e1
SHA1 e1349af08ce44773e6621c4e7b2d27ce094541ab
SHA512 782e4fcacd945a92288cd6e2f3da3115a17123b040a711b136176ddacfc328afd827b6a2d1b02f571117534ce1787fea0ac58edc0f3c5b1464fc5c5cdf04438b
SSDEEP 24576:WJaa4g3MRG67CqHVYFIeq1X8mdx2C//5AUCpV9H4B2a:WJ1afPKFjq1X1xt35q9e2a
TLSH
T14625238B4E78F99814670CE1ACD11C82BF76C9DE5BD39AEFF0B0C109A54A595F393A01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1920.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WCRY
Size 312B
SHA256 cad5a4cf00ebac66b990aefdef579747cc0d494ac8936afae1b6af5238c3bf47
MD5 ec322a9ece1b83403ab3f17e2f892abf
SHA1 c8f6a5d1720af611145d381ed96f440bef466034
SHA512 5840a1eb81595b6baf34959a2b0881d91c03e67f8ecd6a4c486f5b87c88478be37900036a3e89d4a8b09a202ec0671f24df5195f4d6053a1884645e7a3f06bdb
TLSH
T1CEE07DAC72643A44E866247942CBC30B1B9275040A1560E2905ACC61C01B72A548EA19
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_256.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WCRY
Size 312B
SHA256 526851c36022890dfb4cf686ddfb8b01838e8cd70afb8c34b7ba90b7c48b7181
MD5 5e04b1005367cee83f47850b6117c316
SHA1 2f851f993b65c6a156edced4f7396d7aabf664cf
SHA512 ca0a1ea017c6ff3a688b1f39143d6f31ae58decc4ae6a923547a8f086eb2f873e283304595094f086be9a0bacf4ccc80f539055557229fe21805f20a0d2c3aaf
TLSH
T163E07D7CB7542792E008F23746B0732B065DE239C1DA98E0EE30816855056821182D8F
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_2560.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WCRY
Size 312B
SHA256 d9267698f0fb6ecc5a9c89c2823e3d3b0e0a6f9071065e5fe4491d0eb91d4540
MD5 83a18ed04de735853fbf342eb10ff852
SHA1 0cc6752b4f7aa56a4b489816abd302c816a20643
SHA512 fa96835832905c68c1cd542783f66d4fbc49095ea87f6e127346c577663ce3294e8bd278cd7d23ce8f25b8307dacaad7986d7b84c69727299dbbfbe84837b9a6
TLSH
T1D0E0E7EC6C63ED05DC3A597D58E8DB7D53C305CB32E00F4958D006566C7C595D2D916C
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_32.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WCRY
Size 1.0MB
SHA256 d6bf1a794879c265655c9e933b3e5ec59be306a8a2f68d7001b01477f71de25d
MD5 7d01be4db3cc7cb7b15b143ae47df4c4
SHA1 eb8546990a2407a3ffe629abea241bf61d97d226
SHA512 459e7063c6b4b07b50ce582d8d61c6d57798a8fc1d777689691bee5a181d8cea7082a1701ec860b1a958e2dbd8467eccdfd5fc35d4e68086c93e69d18faef864
SSDEEP 12288:rSxFLFsAoF73T2Vh/TS7OVKLJMQKt2eF4drop0keGqQmpTS5onb95Epnzfd1zk7L:eBsjzqVuLJC2eAoP4QmVS5arEpn/z4uW
TLSH
T1172533F5CC98A3EC4B16B1A9A80006A7CCE24CE73094C7B85CF598786C53DD9599AFD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_48.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WCRY
Size 2.0MB
SHA256 b1d9b02332fa54fa65c88ddf96e952624edd0ecc376583db6f56778287768c7e
MD5 8829768a2a93c8a311dfec4cbe63f315
SHA1 9a6699072cffa44e54d871f6d88fb454f6733cd1
SHA512 cac50b00fd5ce6a60e92f6f559a21e5a8a41e415928c8a886edc637f5dbd371f7a9667aa20b80ecb638db8130d10e376b4ff4db82123982cb037077546fd64bb
SSDEEP 49152:/fcEmd5R6qJ+A7KZMpt6qwMPQ8UTQmRQTGAvsv:/fkd5RBJHuZMpt6EQ60QPvK
TLSH
T1F2A5337E509B2616DBD95F7A800A2F597BB6ADD00C9D0D11F76BA83863108C70A3E5CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_768.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WCRY
Size 312B
SHA256 dbaaafdeca4a11d2b6d563a24d7edd2fd6157bf055d5c9d986bb84793c2692d8
MD5 b6e7ef09bf15323f4210b443ceabecc1
SHA1 20576c4e78001bb495c187bbcd392d64c9b3e792
SHA512 cf67a6bb073e6df0e4cdda3d8e1f45af71d321be3aad3b0dee6d31c38aad0da43efca6b085be85b8d6cc87a67c4dde2cf3370f3769993551baaa26246109cbe9
TLSH
T19AE07DC75001AFDDE8EC66B896D03A221D085BEBA284DA096516804DB9BE4340010605
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_96.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WCRY
Size 312B
SHA256 a3e8a489ff61472995b9e4c762e60b74e5eedd4c82fe05e2f6db21aa4eaa36a7
MD5 b36bc1cd568f74356d2ecb5e7b6d561f
SHA1 6cb89e006fa922fd94ab7ef1fc879f5a3611c6e3
SHA512 b70188981f5e7d2669772a96c2b10b85126f8ef242f69eaf64358f6a2625fa78fab2c4da3865cbd78bab07d8f09ff4ec745d472d25e985aabafc0824ce3cd9d4
TLSH
T150E07D6856364F56A014A77746DD471938AE9543844F1D4931512A4C0DCB6096906C4F
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_custom_stream.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WCRY
Size 312B
SHA256 853e7de079640ef757647d464e975159bd7f21f62aa67a56b3d46574b76aec84
MD5 8f9df92272fe2f28bbb32accf5ee3ce2
SHA1 ab5a8a57c3c4151c052de894e2c0a833bd6dfefa
SHA512 1f14b5df817c9c40faa5fd880d098e84be6085c79b7e6843e92d52476e6bb10752e3cbb2f0032283056a2481900d1fffe675e253d52e3a2816fc013695dc9472
TLSH
T12DE07D62E9120268E4844BB2F666166F13582BA744081A70046CA4F66526E49B10652A
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_exif.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WCRY
Size 312B
SHA256 88b14a806e3b1327e3f454b6e7f5cf128658e7c20eb65f0cb7ec6c0d8e9134b1
MD5 4d777c4da3b6255ea40ad05659a9127c
SHA1 f5aa36427cead162da3df5d1d256e06287b89922
SHA512 cd8e9754b6c3265fe9f792f016a11c56244cd05d26a6c824157fd16ea573fa6c8392a9ead97255cc6f141b962cec036b6f76246e4464678cd397c2df9423020f
TLSH
T129E0E765795AE52EFB50DCF4DCE41C4E45214F905D0C1FB984421A816E5D46C0EB3175
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_idx.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WCRY
Size 28KB
SHA256 49112488e9d871f3fe5a3450c9ad745d24e0c46c96a8d96a8439a92a1b6731c4
MD5 b0197d156323c52ff8e4e18ddeb3f465
SHA1 c3ae1bc2924a392057a5e04e8aac206837c9bb4e
SHA512 2af92240299bf6d033cdfbc898e35802be9bcfa27aaa39c81f16d087ab557340f7ad6f1c6bc1997e1d2114f586b221c6360ed9ca7b9539981a9c7bdcae546d82
SSDEEP 768:1asEyZXmQ9zjf5g7avQTwRk6464IKxBjK5vHuRRvVWngyPsH3+b:17EyJmQ9zjREGQ24ddbQbgyPe8
TLSH
T121D2F19F896909E86965E1531484936388F330F8B88F5B0427BC09EC9D7DD7E58868EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_sr.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WCRY
Size 312B
SHA256 799a1529f3ccdfc7bf308bf8adc09aa7c83261a9299102e29bfad29f66984de1
MD5 741a52e30721f5d9d5e89ae19fd85fb2
SHA1 4443cfd719f7b52c52d8bf8f8c41cb9e29c47a90
SHA512 8eb19a914f8d6ce73447e235a6481c3cdf14357004a44bb0a0548d06757104a4328cb88ecc037737e84087517be054dcbcc29a291dccf1e67e5b67faac5c0adf
TLSH
T116E0E7D56788F207F14FB0F402DE36275377915A484A085FF85D70D4C6754851F55405
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WCRY
Size 312B
SHA256 3dd3921e4676a8d745a60472c1e6bc683402f55764b7990f3e3065e6e6f94f24
MD5 d3af90d202d38461b5b38ae000a969ba
SHA1 077366c35473f809f9eabe735e5a2a3c030f326d
SHA512 f0b349d8b202a9000af0063d8e45d6205284f12e3ca335394e3255b3307c1f95e66a4f27c8148d630627dedf385789e5571e2e9624ff0769e753ce10e56376e7
TLSH
T147E07D04B97C3850DF10D2FBC4A435355AC6C57BD02A02F9DC58E465DDE10158680504
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide_alternate.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WCRY
Size 312B
SHA256 9dc458b2438549521178538f1af538e2041ff81d4e58ed342a1762085ac85b42
MD5 ed05f530b7f03e5dc00172fc0b1084a1
SHA1 e6527c23d8e889c7a7f2b91c98760b29ffa2aca8
SHA512 4ef0f8f5d3a5c6da8194b4f223ee2421660c7e2d98a3cd763d92b61f3c4d4de91319496e073f5343a2e04b35a783e2caf4c4a7c36a612a85920f5bf22a5f036d
TLSH
T11DE02DD8F264C6AA482C2D31CF9CA2050E020B00C008AA5840059F90E078D043C88C0A
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1280.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WCRY
Size 312B
SHA256 a239f06e3e5a59db72082ae6bad3062c579decdcf11af56cb2347566744c8cf1
MD5 c517c2c58ba36431fd5ed8c4581dc3cc
SHA1 e3cddb0936a4cbd8cd31437761070c3cd60606ab
SHA512 fcedf12f8b066989c716a254c9648444d6af40d3eb4157e7daf14c7e4a7873b1afd1f6e7c8c41a2de6895e4a47d02b4c2754d6419ad80950d2ccb04e774e1cdf
TLSH
T135E07D4D981E9311BA0EF93268170B77572A015F5169C4D8A58B1CC8D964943E4741D1
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_16.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WCRY
Size 312B
SHA256 bad888544635ecb2025c440733e632318852cab0d0dcb8f59c6f00ff07564e2f
MD5 f365870db2c2d20c0a0be8171a33b5f0
SHA1 cc1e3259fff59caba18638a0d5e52e0270443267
SHA512 e8351cf11fa410638b548109f58488d509484da3177aceb2f2df558aeac60a1f11ad9992acc15f8ec710a7efc805780f948015f1b473504379c3ba6459ec2cee
TLSH
T1CAE07D013238CC09974FA0FB861E114463436A211E0A19912BBCA98EAA7A92563223D1
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1920.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WCRY
Size 312B
SHA256 52e9c28f47579c7ac9a6c8e46349e06d82ac8d703744dc6c4e78da16b0bbf637
MD5 6bfb148712acc108d7e5ba48336c02d4
SHA1 3edf590b331196b559ac07386fd7ab6a714c9000
SHA512 8ed35ea09a0f553a682c0e0162498467b442849757f206bf804f13996c3d9185e2f5b8b1dd4b11678f515ffb53d67c2d954771980b6804c73b71fbe0f1dcb1eb
TLSH
T1CDE07D8C2B475C9492BC367273ACA65396137116165514C9576380C25CAB5E3414B514
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_256.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WCRY
Size 1.0MB
SHA256 67ad9ba0892354d40dd35b079294c3a24ea80323855979e9566a6f81f60d44f7
MD5 baa651d2a4597115012d72daf526b012
SHA1 17d6a8f13df1ead2a2c0d3eff4fe29e373abcc48
SHA512 c8e05278510005b2e7a9ed4dc310433f247a72967c7dffa2193724e2db5a69cf43467561d4893bd7c137a53f4099ac8ab8c55a543de721b0b5ee8838cc42ec97
SSDEEP 24576:d4mioC4hIFnWADD5buxroekWdTUl9R6pQVt7qrPrnbQJks6w7FQ:mmioCiIAAgrtDYlHC27yrnUJBK
TLSH
T15E2533C6226766BF0D1393D60CC5D8C92CD0B45B31E096EA4136B2ABAB571F3479D2EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_2560.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WCRY
Size 312B
SHA256 ba6ec71c4dbd6c7f360fc7b4d423d1a3b8f4426ba87b74fdbb899bd2d7806b31
MD5 a446579f3de2ccd63bc361fd79ef2501
SHA1 9819fd49ec2ca3a1c6936151b6a8efdfc41d5126
SHA512 8e19f4d38543abc82826fd9f6aaa0de70d1079bcb3726caf6acae6356ef0e7fa38db8f0563276e8ec6495166ab70c8ee2421e786bbd7ddde84dcc1c1cdbbf5bb
TLSH
T1AEE07D0245589644C9FBE57DCB68EF6F1D526941204108649BB1E1C1368534FC436A82
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_32.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WCRY
Size 1.0MB
SHA256 7b3452bb7d460bafc89951522698dc6f84e9e54a90f8bdc9717d972dc041c070
MD5 413b5481e9fcc9f2b27b9974d69d5028
SHA1 1e16f49577277cd58b48303e0fdfb8bbde2c7aa0
SHA512 9c61a2b3f35b633295a02a6c461ab545a8c6f8efc16e9861f3b4e57c967a3b86abfe79ba0027daba407141bdafc79ed0da13ccfd985b49f7011fabe7e4e8cd71
SSDEEP 24576:7C1JGPFDGoJ68DK65X785FxZPAhe3KjC0/S6WWhB:7C1JGP5J6dxZPnOC36WSB
TLSH
T184253333FDF673FFFE5291F46198BA8653BD566DD490FEA1F408221B143264245488E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_48.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WCRY
Size 312B
SHA256 2df42ffcf61de89c8a3f4b8522d80304de046b39cb1e7a946855a3b9658f4e8e
MD5 1117ece79f6d3ebbffd652998442f902
SHA1 652f6b20cb884e96e6c87ba76c15d40ea0983409
SHA512 f9842d20e16d547390f62e8fdbc6533fe57e22fba7b37a55417d05fe48fe7905dffdb46243b86ecf84b87a76b5602ab59b35ac874a02639514e7ab52c5fdc8a3
TLSH
T10AE0B79C00123F01F50DEC7C81EA41108704F200AD85F7C9427F31BC406C0C80C82C3B
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_768.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WCRY
Size 312B
SHA256 702e0ed61d844ebd5a881cc3c1248d927d1ca0b3ab9bdc8cf091700227d3c890
MD5 09f830bb1dcb7456ec2b96f3ad73619f
SHA1 b2e99ee083c30db26ce043a1671ebf7d503f62e8
SHA512 e2ef73db809a7a7a0693a1021a8b0226508e076d03feff1b9f9c655f2d4cac6f3d187759ca8074f3d1137c159c6d3106a757a0b1ef2ed24165948acc421dfe95
TLSH
T126E07D61F5206647FE9C58B0355CD7A2D713D0165431AF8559F3217B3086A574416B1D
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_96.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WCRY
Size 312B
SHA256 779ab218cd0289402239b9bc6e09af632dbddae09fe11ea33154deff5899498f
MD5 ad28bf2cd466f2aae73a4a81c7a533d4
SHA1 a51e07471bfa74c6fb37ebc35136355d63bf85e4
SHA512 f7aeb17504a9baf43ba31d568a7a335523b4f00d6d6230cf5e6b83c3222180d71a9a0fd6914a62bb91f9a815b006a8db8384b7e8a861c68d9ea141c8646d6586
TLSH
T152E07D357506E69CC5736DF65A18A9574085408CEA48144D2E275C056988DA675F6F04
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_custom_stream.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WCRY
Size 312B
SHA256 03dfe7bfe8d50f7093850b5c379bdd8dd766ffb94ce4984cff5d996800aeaac6
MD5 be92c98e6398d4d105740f2646f36ad7
SHA1 15430ca88b49aa8772c409ca967ff406ceda20c7
SHA512 ebc264d394594dd88ea8c569685a1fd6c723f4b7014040271463896c9b7290cc1be7eb6a99bd2823f822f69a8580f8416a4e354f3a27204116c24f72d3c5cc8e
TLSH
T17FE07D0E71D6A948F0B560A8810F301A7ED40576B6AD83BB0444D61517560255D85169
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_exif.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WCRY
Size 312B
SHA256 9ff64c06e5b15e0a1e9d035e978885f71dd3cc343a05e35a74e556493eba3ff8
MD5 18d7a69c61562908bd07d03950e08aa6
SHA1 0fd4f2016dc172a045904fe70be7f0d9496c5d2a
SHA512 6527468a3106c2246ad5d0825fb18ea37675c60541e21463217c23d3f5e81523b455ac135845ac1885be9a8a92dcfe5669da5410df41197bdef0f9076686ebc9
TLSH
T131E02D2029022CFEE12463E538E80447C0135B7E52060AD54C3168005B7800A20124E2
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_idx.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WCRY
Size 7KB
SHA256 e4bd28daca6c9c4e88f6c0d1409e159aec14adfea5233b6654f45232afcf48d2
MD5 ebe605f6590c3dbd7154427dc63df742
SHA1 b79056dc60e0e85e3a0dfc4d4db0fe16e0a965b5
SHA512 514bec99d2b2b17fc888e8f2e82d57ac719feeb0ddaab37385c8980f03f669ac4dbea846d64ae724db841e0a80024a5c337ea5e7d54c2972d537070654d8d488
SSDEEP 192:/JhdGFC4mQKqmFW/MDoTvucP63lXsmKXFtvMV4K68xEw:/JrGFCuKFFW/MDoibcBtvLKvn
TLSH
T12EF1AF79655742C8EA2677776266DED126DD9D3314AD4D88BB8124C0B3CBF6E080683C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_sr.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WCRY
Size 312B
SHA256 5e2931d4af0be75092fc1fcfb95710407a28a4ffead8350dff6aa0025111ed43
MD5 207f86e86cd06973b27bb5a0e41a9bda
SHA1 62787480839903a143c1ef0ed7b73a6269fd2c98
SHA512 0f11f5174d12ed66eb5af50e04f2f4eb3d220258755abdbe78ff0cb7c447deac55b21866607a72b77585446b74442db8a16bd6d5d04b8405d90d9a7108a2c936
TLSH
T128E07D2E46E19040D1050938FCA864401B475C027465DCEA10D091C4C6729795AD9107
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WCRY
Size 312B
SHA256 f5af91f5d4c74bf2420bbe102817362e1d58bbbcf0b7a047d542a821e2e98d90
MD5 881c35d434ed843ad0229c3ff83c89dd
SHA1 a05fe733854db64f08e4b135fedaf5b3b6d93f7c
SHA512 51498c17652d0168eeaca38b65133786dacb68479412d69652e6fdca7de516f4cae60fb6b12fcbc9df13d35f38011e1da5478c76b68c6f362a21b1debcc8184b
TLSH
T15BE02D20003CAC0D8C2CFE757B2A029E810E83C9A070CEB80394C04F06F806690E0292
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide_alternate.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WCRY
Size 312B
SHA256 4cbd381cbd91c268913b2d6cc1a0ced2ff2dccfe50224e9039c32b6f9bd95c07
MD5 d04524d4efbf0228ba68e25f8e1c4e8a
SHA1 d17b05ecc4cac5048ff48a758d8a96e0ba77869f
SHA512 93673cd4ce048fe8bf9abd7a3525d06ab5f9ac713913d0dbd9b5c6803c282eb8e914edd13c4fc0f5245b3b07fa37a11c2ff6d8ae8828394b420e0d05a4b6b252
TLSH
T17EE07D0132562E9B54D3AABD1A753F958101AD147DA921624EDB6344D741B3FD2952C0
MD5 SHA1 SHA512 TLSH

Submit Download

{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\VKUT4MF3\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WCRY
Size 6KB
SHA256 7cb6f1396cf02e6f117a743e14f6c2ca6e8d42a07e24310e48870e016d1c12c5
MD5 fb127fb09837959351ce98753044d62b
SHA1 9e6856a482366990cfbab197a74b690147026be0
SHA512 b64a6469a7bf8caf7f2c92c348b718a1fbaeec4741f69ea8e814841f643cb2e85e491b4569b5ba7a627c326f4e4ab2d9cd71060136f001e0908857d4354ba833
SSDEEP 192:6QrIJXDm3+dQmlr5wUxiFXUK4lFVKVDcQ7fFHb1r:6jfdQMrhxqUKmecIFJr
TLSH
T134E1AF2121EF48284CC6FC95DE0F9856DA85579953B6E0E02D1124FB354A299A1E6C37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wpndatabase.db.WCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WCRY
Size 1.0MB
SHA256 7e7f351476ab8f8075e935fe9510e29c2bb5377c53238d332655da7495470047
MD5 daf1c34a1f1180586f0e35d18a6dec82
SHA1 9ce86bec46a81b5b16f38a239a22aba3357614a9
SHA512 cc003e9274594f81d907fe8afdb80078f83f91eef07b870cbafe4aa297bc2953d50cc0192a87731f97f06abc12ce056e0eee64cda13921d58c62f45e88063bdb
SSDEEP 12288:ZyoFD+2JuGxbeuje2wydqKiTGHpnEh7Nfz/AB5ocyWqXOq+oVgW3FA89ok0NOY5j:ZFSXMbpe/zKiTN7Nb0feOaxlGAuZMHA1
TLSH
T11225332FF1C63163FD676587F0D6FB5E2B934218122361C2BB9710D22A6389B5971B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3645b78f-bc36-47f6-b24c-ffad77eca0f4}\appsconversions.txt.WCRY
Size 1.4MB
SHA256 f6e472955d0b7ab706c48bbb0207ed9bfcb4a21209a9595b7e5d1b38755109c0
MD5 62b86a54af40964f5fc0f91e54031963
SHA1 2c52b2502a40b0e9e3637eb2534edc443e422de1
SHA512 f0b167f5a89f649fcc1a39b90239bdd029f34f01f63f4db01cb846c4ec97d6703e78eba98a1e0769c8b5daa40a18bd0ca883fffdf435e6cb19d199a773d73b09
SSDEEP 24576:L/HX2mO4xzqOf/qj9OtsUJuYPXhifV3PQZM9iUE6vyWT57TRmEq80xrQ+x3G+:zLBxzqOfg9OFuYPXhKQKQUE6qWTJQY5M
TLSH
T146653356C1A9F1AE522647F4603272EDB9FF9240CE3E069F90935D23B5F40B5438B8E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3645b78f-bc36-47f6-b24c-ffad77eca0f4}\appsglobals.txt.WCRY
Size 331KB
SHA256 1a401a3083caf0e12c937d9a04e0c1bc20f10ed39c42a72356663c571f572b58
MD5 c356922f0f7882b73f901b29fad833f2
SHA1 b4da8fc7508b75f4022b1246ac7f31c0ac389da1
SHA512 92fb71a87bb8d467415d1cb01c51cd19c285904cea9f58ce742e1229542dfde624611f2652e0eea97645471c59d90ac07f02c6e2f54f2d53b09c1ee795d58a4f
SSDEEP 6144:TlpvHFg7CMBSM2V31XXDmKmNjRJK7zWVkQtodi2so61DZQHYN3s:TrvlOTuFjmTjRJqzNQtlZZpZQHYxs
TLSH
T18D7423F254494653FEBD57F02A89423345DE0FC8A08F532DE1270186AF8965FD4E7A8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3645b78f-bc36-47f6-b24c-ffad77eca0f4}\appssynonyms.txt.WCRY
Size 374KB
SHA256 a66f130d572451cbd72da5f5583ff0ae7eb99808f4a915aa3ce5df7526576a31
MD5 519412559a3335340001ab19d4e7a993
SHA1 823753c6293fe6e3bc26573320baa31d90e2ec34
SHA512 24c6bc0e3996c4387bff10bc675bdf9e86846286248469accf4628472f8fc22f1fcb6ad7e3ef8ee5add8521ee2abbaa88bbc202460cf64340d505a66a73de4ed
SSDEEP 6144:QEbVE2tdPpAMR7lBqDmmUW+o/bvjV8AESilaPt/TNHiZ4Q1iXQrvxQDXgrUYKOpT:QEbVE0PXRpBqhG0SAEJaP+KiQUYdYcM
TLSH
T11A8423AF2CBE538645581E166DB2739E5823DEAA8EF2F5B341FF6110D2B49312140B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3645b78f-bc36-47f6-b24c-ffad77eca0f4}\settingsconversions.txt.WCRY
Size 520KB
SHA256 f2ecad57fd0d327c13038db85ab0b562194d854a46b5ad27c4147a67bd1a1544
MD5 ff4e4852fdc45b3d98d8e02b1b948bd5
SHA1 f0d77811dcfd8a47bec5a5bc333eac2420d4b855
SHA512 375ec6ed0129d4e37611002afdddb82938c2578080d5d3d8f816b2ee5e081a78d63b2de051b1e718b0d10238457147cd2cbf1ccc95978b36f1534c51b53544ba
SSDEEP 12288:/gzQi2To81p5CscPnn721OBMbGMD7hKm28o49GkaEftSNON:/gzQtTo8H5CscPn4aKhKm/XHaWto2
TLSH
T17FB42387166CCD6F59245FAB056D506400D4B92B8246E8888F88EBD27F1278CD7ADFCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3645b78f-bc36-47f6-b24c-ffad77eca0f4}\settingsglobals.txt.WCRY
Size 61KB
SHA256 0a90ee170beda4f3393a9200c130789c96440b44823d845e43fc81aa84c8a5eb
MD5 8de5c17bb7980920bc5e91b77ea7b3e6
SHA1 ad5280aeb8fe325e60f5ace55617e36aa425211a
SHA512 f9a91844bd36ab141f492379df85096d2486f00344dd061fb4f25971fd820358092fc3c5785f9a556979fb5045858b9a463bfcac41f485fbc0cc6b1d236dc44c
SSDEEP 1536:atU63/MBofpT80WMOMX6U93o1Bj2rUa3Pbrx2S:aK63jhT80VEUtoHj2r/3DlX
TLSH
T1C35302BE03EAC9498F7B2AF56609278890E9A27045D5D2C8C2D8CA895B3BD741F1311D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3645b78f-bc36-47f6-b24c-ffad77eca0f4}\settingssynonyms.txt.WCRY
Size 125KB
SHA256 7496f793e4700308e3c211a98f30b2abf9370f2cbdc9260efe44a19152b8a51e
MD5 4362c6f56f7720520a9535ee93abc988
SHA1 b363a7455d0d80a152b535815ed57bd2c82266af
SHA512 d351d66aa0b72f70161e6d8ff93b990993d63f1e9d3e670d9858706549b999210797fde691101600b049128da9cc9d6950a0f8e658c14bd4e7772580f0498498
SSDEEP 3072:/X1d5HX280dicy/rVJvsaxGTGdrTnQOg2PBlU2F5G6zw2d:/Xt3280gcy/rVBbAGdrrQWPT9Dzf
TLSH
T10FC3124619F924CD5BD9C44D5EECE677BE20B1B0AA6297C2D9F393B092372FA0C48471
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{a7afbe7f-8de5-4b26-8b95-769351cc39af}\appsconversions.txt.WCRY
Size 1.4MB
SHA256 3468d65a5ee63824876a17704a1596814c03e9052cfea965151bd27fcdd092df
MD5 c3e08045c920d162f3ff28abbfbf81a4
SHA1 a6697a881e868b1699b8cdaf6a82fd496d556d18
SHA512 2f8256530d88a294c3efe92e53206efad8d56555be3870d7edc329c22261ea2aefb1213dd0c3164936b9dd7abc39a4d33c4b246383a5b582c7b1c629f9683bc3
SSDEEP 24576:sEeGP/xwERMbEs3ZPJ4cqOQb48H3p7dShslK9irwfxdK3eZ3epB1DzPKmIQ9amiK:rxs3NZrQ7H3p75K9rpdKBNPXZC8CWaa
TLSH
T1A4653361AD8597C3B612407E3BA7DE5210D1AF8FB7725D0FF088B8552A26C8E4FB164C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{a7afbe7f-8de5-4b26-8b95-769351cc39af}\appsglobals.txt.WCRY
Size 331KB
SHA256 e87871d7bf481baf83c03a9b00cd9134112487dfd2373f6e9670e6c843033333
MD5 eabf4246f0e56271db6a014129e6c5cf
SHA1 15807905c87e0292b9f3c52c64dabcddffcd5f14
SHA512 149b29913711bc81dd1ac0e5707f155314d63b1000c9ca2e6b3e80e215eb6ee8ad6e34b7bd950b37be650fdf7e886773b9d7ded5fd8e7e1cacf25ced50b712fd
SSDEEP 6144:MTT+lQOK/hZGkIc0HAhE8+ABgbAhw0XB+6wz/g7WxJ2aah9sPq7kC:y+lQ7X5IczECBV2g7gvahIq7kC
TLSH
T1DC74238E7D6B8D336E878E36D7814BC548571B093C2827E641D0259E7FA82CCBE72394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{a7afbe7f-8de5-4b26-8b95-769351cc39af}\appssynonyms.txt.WCRY
Size 374KB
SHA256 004ceafe7d04e4aa766f990c0e9a3dc1a50a4dc63903fc473b3157592aac57cc
MD5 c58f1797cbfebe62f3a6422ccaf6e960
SHA1 02ffee1f8ad88b7682787db3b83f6ca1de6250e7
SHA512 386fd9a0836008782d421889a99bfa1ce5b29d1d3fe20aeca8c8eb8cc60ea0848c1c43e1512ffacb70b18c9d98ec220d6b6a8584cd0546a4e203f4c2313e5c89
SSDEEP 6144:QTbY/BsPlenG14pUV+6InYgZCAz8DO/1nJsI8TcFduB5x9UKysQ2m9Nt:/lGmpUn48DO/1nqpAdMxyoQ2mDt
TLSH
T1B384236F04BA1C850C1A92FDDAB619451FE973D1C36934E39F6DFA6040F72EE9A016E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{a7afbe7f-8de5-4b26-8b95-769351cc39af}\settingsconversions.txt.WCRY
Size 520KB
SHA256 18f6812c7ca92bd0ddc62416e76cf87d04ca0c70c3d1d98b2b06b641e376338b
MD5 d37880102ac77c3b8aa82e5ea034e10d
SHA1 3bd2a3864486c1a3d84470417b8c2270bf153c4d
SHA512 5610755bda46ea062676535b4131535f2030600a465c0b4fdb051f4168de782118519fd749f136e7ebe86975e6a44c10f48e6a625206eef5d4c9165324a73391
SSDEEP 12288:+WlRD5T3V4cA/XihyHr50hZcozWK65s2k4:+OZVu1/XuyL50Xco7P4
TLSH
T116B42367BB234A2EE36D5305D3213984CD81E0E790015A7E880BD5132F7D97DEAA5FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{a7afbe7f-8de5-4b26-8b95-769351cc39af}\settingsglobals.txt.WCRY
Size 61KB
SHA256 8524a26f4e3947f14c645d766cc9ef982502d57e3b28baf848f7e129cc38fe71
MD5 794bbdcd34f485ffbee87910c720d38e
SHA1 ed4f693601827ecf2e35e098a558d4c4e878ab35
SHA512 c3de8a3b5f7c9ba4a94125bdd2e1ea5bd0f41b170a7ca25538413c957b1d9432838c68aada9e508854816a74f7bb11d44855dda2ef09d2f511491eae356f1346
SSDEEP 1536:qi5vYYDtYOGmT3fDCWwMh4+JSnW0QVTi7:r5TYOtTvVu+JSnWDTM
TLSH
T1515302BC9EE7256EE0713EBCDFCC1002A5E4DA2868FDD714CE90C06B499539DC3469A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{a7afbe7f-8de5-4b26-8b95-769351cc39af}\settingssynonyms.txt.WCRY
Size 125KB
SHA256 074f97b5d84c8908da7e3f528a4b43163bf3a4cc12523aaf327d17177091a3d4
MD5 bfc213a3d69dfc986298413ea0ab3183
SHA1 edc52681fc3edbe2ae6044fcc7ef5c3e21b3128a
SHA512 434cc28c652a43569b55972ff96053f5718de6ed7afe45246024379d27c33d22aa3ec35e114476470dbd3d50861f6b1aed14bbd46f9ad3a35796b15f488b58dc
SSDEEP 3072:8/AwcK/OuIiwsIbf9QVOPRexmjrldfUde9aYjR3SiGJm8uFjDRin:mBcpuIPsIOI50Krzsde9+iGgP5RA
TLSH
T1C5C31268DE362510D12A56130CFAD2DE45B382BEB3103477E4932BD0C0E565EE99FDBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppsIndex.db.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db.WCRY
Size 1.0MB
SHA256 cc026f3390af9cf224c5adea385e28de77902887f92e1144e430ccff70b9869b
MD5 f7e0bec807ea478b75b46d3adc62a35f
SHA1 6966e4157a04c42bc7b98ed657303ee71eb81f6c
SHA512 6c08c984c7ada26107a351cffb015659a2518499a94717f05b262584cdccb585af8b982a3551917e90fe55661b4b408a9908dbd1ebee1eabc7128e5fea66d631
SSDEEP 24576:ES4VXZStwDlnOQAejP9z1yRLQ9XotRPhtdXNno6b9/JCBC70T:EJZSqfdzcM4jZV/JcT
TLSH
T1E23533CACA1BA438B145F1A00F39DD925082DCD3BE6C4BEBE756DD91FA7385E41A0712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.db.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db.WCRY
Size 1.2MB
SHA256 d425cda0db69b44565eb20386e8b2818a3eca0325e9485511b45d5ad84ae0e0b
MD5 1a62314aaa6ab3f2246eda02f4b96b9c
SHA1 68f891a4b043ab53910532536e325cc43d47dbfe
SHA512 8eb251749b9daa473ef986d55bb0dff99ceb22f3f494d69c3367327a73aa3380bde5c2186d4579463d83a98113167745b05f6bb4cd8294737d597ab2adbe3c14
SSDEEP 24576:Fvaef3hQ4EYMeEDEM2YQLgLQdlFkQ6J4sP7UfcXvvdbxaxDlw6eR:F7DR4OB1jFkHQIvqRlwV
TLSH
T1A25533461579AC3F078AA803761F94488A79362F65A00FD1D1DE9AF29BFD0E9FB0C314
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SettingsCache.txt.WCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt.WCRY
Size 575KB
SHA256 1ef68609ed979f03f05fbad21855954fb26c45d8c895c3f4f183b4af31f2319a
MD5 228d5d6e47c834b62721713c8853a911
SHA1 aea030f10aa540ee34b4ed75aa64af21b04f433e
SHA512 fd5ba3cc0acb85cd3ca6707844574266115e5c40019f405d00ad5362289de5c5de66fe150611c0771c69be6838d4b2b68fd6ea04743255f6d652c2e0e3d63555
SSDEEP 12288:NmBngbpA0agvNT4iWwBbba+mYag0R0wqPrjvbjSVPyrcv7+JPWw5A8hioI2l7RpM:Swpvagvh4iW4bu+3a36PrjvbjSV6rcvf
TLSH
T1F7C423F30500CB831E72F0A93E25553F4950D38A9E8656368F093181E27EF18E5EAF96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

!Please Read Me!.txt

Path C:\Users\Admin\AppData\Local\Temp\!Please Read Me!.txt
Size 797B
SHA256 227082c719fd4394c1f2311a0877d8a302c5b092bcc49f853a5cf3d2945f42b0
MD5 afa18cf4aa2660392111763fb93a8c3d
SHA1 c219a3654a5f41ce535a09f2a188a464c3f5baf5
SHA512 4161f250d59b7d4d4a6c4f16639d66d21b2a9606de956d22ec00bedb006643fedbbb8e4cde9f6c0c977285918648314883ca91f3442d1125593bf2605f2d5c6b
TLSH
T1DC01F12EAD5572115BB2C572357DA197EA02925F022E0352B907C13917BC13655FE4F1
MD5 SHA1 SHA512 TLSH

Submit Download

!WannaDecryptor!.exe.lnk

Path C:\Users\Admin\AppData\Local\Temp\!WannaDecryptor!.exe.lnk
Size 1KB
SHA256 8ba706207942e64ce23aa9e41c22e937bed3669794b3405138522e04d9bf093c
MD5 5890c857727fef4b9edfc0e52b523f2a
SHA1 f3bfa32f8268cd090548d29d83839e9acfa79f86
SHA512 a2c3e1665dc10da78856e66a0890a7dffe524733f9ea8046271f163be046bf41e3c53d4acd88a76f7c7563c1a9bcaad9fe8076dc70c0a1a88232b1c6cbf2c295
TLSH
T1111152011AD32B0BC7B4A73B01FB0217E135B844970A6D6C80A183240DB27534FC9E0F
MD5 SHA1 SHA512 TLSH

Submit Download

00000000.res

Path C:\Users\Admin\AppData\Local\Temp\00000000.res
Size 136B
SHA256 a71fd86087bee153b0d37ad7afc31a2756e5684733253c7e15346345ba423c6a
MD5 9233bc424adebff7d64278e4b30ca5d1
SHA1 318704d52f6464c2e15df1fe82a8b5b1c5974fbb
SHA512 95eb87a6ffd314fa49749c6997f3de4e1cc23efb3f0b2ba6acd68d1555f24002e8f9eab162d305f121523fc01e9977817a5dd3b7693bd582b506df44c1536c44
MD5 SHA1 SHA512

Submit Download

00000000.res

Path C:\Users\Admin\AppData\Local\Temp\00000000.res
Size 136B
SHA256 afdb86fdef04acf192d7e683120d1f20519029162cc340a7eb723ebbf4629550
MD5 9fee5f24ae898bcfa8925e610eccb839
SHA1 383299989fb5f79ffa9ebdb517205b8368d15512
SHA512 2212256a1bfffd40589d22a57f00425e6d9b21d68288de358ac057c7b149ec3f2a1928c23c6c2c40641282eeba30c717a5808b3678c34f17147984c2be871137
TLSH
T172C00430014C4404F40DC1700704053515351D43F01451D340710544135C700174010D
MD5 SHA1 SHA512 TLSH

Submit Download

00000000.res

Path C:\Users\Admin\AppData\Local\Temp\00000000.res
Size 136B
SHA256 bce01047d0f8893764b5441aa091d8a874a7e301d20856c498a5b69d12329e9b
MD5 a6fa46784f400ff445d11ca669d0d354
SHA1 8affde6199f9519c45895a39c317a5a08e18966c
SHA512 50d05cec2903c59d0eb82325065fcb56235fbac5229a24a0d3bfeae08372fa55f53b5d66fbd0ca1d5857fd2171b78b1374a5a7964ea04e8a9cd0b650a4c56d3a
TLSH
T159C0043011444404D40DC1700705053715351D43703451D1407107C4135C700175010D
MD5 SHA1 SHA512 TLSH

Submit Download

265821794071705.bat

Path C:\Users\Admin\AppData\Local\Temp\265821794071705.bat
Size 336B
SHA256 73872a89440a2cba9d22bf4961c3d499ea2c72979c30c455f942374292fedadc
MD5 3540e056349c6972905dc9706cd49418
SHA1 492c20442d34d45a6d6790c720349b11ec591cde
SHA512 c949d147100aef59e382c03abf7b162ae62a4d43456eebd730fbedcf5f95f5e1a24f6e349690d52d75331878a6ee8f6b88a7162ee9cf2a49e142196b12d0133c
TLSH
T1DFE02608B649F1B512034243C83EA0ECD1E14C956303AF18CB77EC4CA2406AC297E003
MD5 SHA1 SHA512 TLSH

Submit Download

c.vbs

Path C:\Users\Admin\AppData\Local\Temp\c.vbs
Size 219B
SHA256 0fb5039a2fe7e90cdf3f22140d7f2103f94689b15609efe0edcc8430dd772fc1
MD5 5f6d40ca3c34b470113ed04d06a88ff4
SHA1 50629e7211ae43e32060686d6be17ebd492fd7aa
SHA512 4d4aa1abd2c9183202fd3f0a65b37f07ee0166ba6561f094c13c8ea59752c7bdd960e37c49583746d4464bc3b1dc0b63a1fe36a37ce7e5709cd76ed433befe35
TLSH
T137D02205E496E6BB1743A1034A73D40CC0F25C28BB06BB208B02EE0C338041D5FBE243
MD5 SHA1 SHA512 TLSH

Submit Download

c.wry

Path C:\Users\Admin\AppData\Local\Temp\c.wry
Size 628B
SHA256 9ebc3a059aba84f8ddc093c89ccec9ce7768924cee709a0bf32ae2e089a79cc7
MD5 ca98055e82aab6d710d8a48b07b20b39
SHA1 ea738e1c4ae8aff1588de0abfc2a8360f45eeaa4
SHA512 a45a91ce2504d1cf1c12c69270249d9c459582c115a554d7530a0b231ec6175b46cbb122adabd774e4a3e281eb75bceff23c7c861838ba780af9da54db9ebe0d
TLSH
T188F012046241150CDD1C023D001046638530CB4422004AC244318042CB7C2B37884134
MD5 SHA1 SHA512 TLSH

Submit Download

c.wry

Path C:\Users\Admin\AppData\Local\Temp\c.wry
Size 628B
SHA256 bf22e8e18db1638673f47591a13d18ee58d8c6019314bab5a90be82ae3dc9538
MD5 663e55df21852bc8870b86bc38e58262
SHA1 1c691bf030ecfce78a9476fbdef3afe61724e6a9
SHA512 6a54be1fa549633a2fd888c559207437b8f6efda98bb18d491c8749f39e9754f1e680fa8e2d623777b5f665b2c04d19385c75ce4e61fb251db16018963a9a6f9
TLSH
T155F012046281190CDD18023D001045538530CB4412008B8244204042827C1F36844134
MD5 SHA1 SHA512 TLSH

Submit Download

dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.WCRY

Path C:\Users\Admin\AppData\Local\Temp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt.WCRY
Size 1KB
SHA256 9ac8a78d8958681382acc4f34c6168030df78213ef0fc27287d8b0b352db205b
MD5 c9186699fef831e6fda933f992f634ac
SHA1 dd949cdc9f92418dfc50bba2fb4f6acfb55a7e11
SHA512 4efb4a3dc5dc184092860504b1dad7ed0291342bed6225a04315b456385376f8d51e73d2406d5c329c55cfc63c70231ad6de3d60ab86e49e748b6e27f25982a8
TLSH
T1B631E95ED118DBE4E71574F372BB85CB2B5C6F4D108851F0150F74E519B9191F0E2D46
MD5 SHA1 SHA512 TLSH

Submit Download

dd_vcredistMSI3D8F.txt.WCRY

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI3D8F.txt.WCRY
Size 426KB
SHA256 cb433fb2ff88b7d29be7ba0cf48d44cfbe4919d357d0f879b8a8063eeed6c63c
MD5 67d079f4dc01a5e88b97e2686cffe799
SHA1 3dbb6d834a0314623ef9d72d046f38e38592b47c
SHA512 4c097fe80c9d8b85929ad263269b2acc72ae4ba088b51f8eaa09f33d017a3e78b0d8050883bce65913254883e9491937eb2642d0739103b6c2b0bffa2c96fd5f
SSDEEP 6144:uaBwCnDZGj4iCoB+VUfApoLpZNlWUlJipwJOe1pnekbL39aiQzIwsfHq6eKyHKvG:NTk0iCokuAiZNIMJnrYipwIoWG
TLSH
T16394231DFD39D9F49AFBB2803689C010B9322EBB4566D17C0E231F836A54B4E159787B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_vcredistMSI3DB3.txt.WCRY

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistMSI3DB3.txt.WCRY
Size 414KB
SHA256 4d5eb46f1b769c557f5c22c61581478d99809c688ddc531602afea5e28c8aeef
MD5 af5ef9af0f378e0cc49d8132bfa2c57a
SHA1 5ac30b27b75c486fb0a41b924c1ec2d2d7f74b41
SHA512 adedb370b890ed0420bda77e4c88dcb6f8dc1c0f70f449b7783342da28f550749f94441ec1efb4065a2da35f5a34865079da6d681dc16308f1ae9c0b0f802b9d
SSDEEP 12288:1VprZMXr6KfJ1vc4YhtKr1b58AVG86oTNXj1:1VpForlR1vc46Qb58GGGTlj1
TLSH
T1EA9423E0CA6A12775D4B953C726B5DFD42CCFFDF8833DC04B1540B2929C4D1AAA8AA47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_vcredistUI3D8F.txt.WCRY

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI3D8F.txt.WCRY
Size 11KB
SHA256 587ca54b856abd35f4002425c9a17f0bd37a3057ffd155e72bee4ffa4fe97ded
MD5 e0551acde683d0e938b31934b5ada96c
SHA1 c46651d6ff85f27f3999c18a8082a46dfdf089f6
SHA512 18eb34395a4f11bdd06d20a9cbe1bc890684fdfdd7de8867ab29dd7435dc109b44d6a04a00fa5907957307b36411bf4e1305403020a8459afd2b1ab790378eb0
SSDEEP 192:dKLOqUL0UZqPPK6Xg3O9bVA2ANwA+krZdl5hFFc3bQlIJ5TOY5v6:UqL23E3cba2+wwrZf5GcWi
TLSH
T1AC32CFC08E40CE808AFF8595B1C6BC0EC46B72C735A5897D32A02F95C8EBBD68D804D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd_vcredistUI3DB3.txt.WCRY

Path C:\Users\Admin\AppData\Local\Temp\dd_vcredistUI3DB3.txt.WCRY
Size 11KB
SHA256 d258594bb32bc230bca1d2941a59cdd227fb3232788f0221f2b738f7c57beb65
MD5 a870e6234676ea42c29c9160b0e21fd2
SHA1 2331768b9ca054583417588fd3f001050a24fd36
SHA512 f69efb6d34140f0e4314a5021aea3c639fbfef961b36115cc46a4fc8ac6a1628f31bbb80ec872fed23be9cf47b64840583fbd5b83b90f7556503af1bc2a1ddc6
SSDEEP 192:P+H/psG4ecSG9wwjMtOLluzhvtQJaoGb16xE4+fNGnpA6hVnh5/gTPcGq1rSpHVd:2HRmecSG9wwIt+lahcGb1+E4+snpdfn0
TLSH
T10032C0349428604491D25E7F47D9841E8341787BD7A881E35E182BC65EF0EB8CFFE4AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m.wry

Path C:\Users\Admin\AppData\Local\Temp\m.wry
Size 42KB
SHA256 402046ada270528c9ac38bbfa0152836fe30fb8e12192354e53b8397421430d9
MD5 980b08bac152aff3f9b0136b616affa5
SHA1 2a9c9601ea038f790cc29379c79407356a3d25a3
SHA512 100cda1f795781042b012498afd783fd6ff03b0068dbd07b2c2e163cd95e6c6e00755ce16b02b017693c9febc149ed02df9df9b607e2b9cca4b07e5bd420f496
SSDEEP 384:S9sLTK3SWTsPzy3EFejoJQBO21z4oCTeo75Y3kmA31dv61QyU:S9s3mjoJb21zZrS14I
TLSH
T12D1320B800425795D26323E4FB27F0497B2BF41464E584D876EBC2BD717FDACE660A22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mapping.csv.WCRY

Path C:\Users\Admin\AppData\Local\Temp\mapping.csv.WCRY
Size 121KB
SHA256 d816875040f35ad5b35523944f4ae8f5da18b247da0fa91c3424fb3a2fb56c34
MD5 d793c355b62f6eb763a9ab9216ecff5f
SHA1 b9d8d30e9ceaf0f3abf0de59f0343c46c442f7ba
SHA512 6ad7b1ab48319e7e7039efad708d79d28e6149f95d614b18c17386f2a42e6407bd27462d1c66c617cf04b79293c0d989e816daa9599a8fcc8c2ee12f999b88bc
SSDEEP 3072:b9VcZvcc7AtTU1Ng0qWNzUrjYr4U8Z9UdHmjnWk+2O8b7JMk7n9:b9aZUTJU1NgtG8Z9UdanWAOy7uQ
TLSH
T19DC3120ED4B3A7F3D927AC7857DB27BC9A21ADC96E710558E972D02DE098CE047F0284
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

r.wry

Path C:\Users\Admin\AppData\Local\Temp\r.wry
Size 729B
SHA256 c9e9dc06f500ae39bfeb4671233cc97bb6dab58d97bb94aba4a2e0e509418d35
MD5 880e6a619106b3def7e1255f67cb8099
SHA1 8b3a90b2103a92d9facbfb1f64cb0841d97b4de7
SHA512 c35ca30e0131ae4ee3429610ce4914a36b681d2c406f67816f725aa336969c2996347268cb3d19c22abaa4e2740ae86f4210b872610a38b4fa09ee80fcf36243
TLSH
T10001106EAE5576110BB1C972317EA157FA06419F022D0262BC0A913D17BC17620FB4F1
MD5 SHA1 SHA512 TLSH

Submit Download

t.wry

Path C:\Users\Admin\AppData\Local\Temp\t.wry
Size 68KB
SHA256 a7dd727b4e0707026186fcab24ff922da50368e1a4825350bd9c4828c739a825
MD5 5557ee73699322602d9ae8294e64ce10
SHA1 1759643cf8bfd0fb8447fd31c5b616397c27be96
SHA512 77740de21603fe5dbb0d9971e18ec438a9df7aaa5cea6bd6ef5410e0ab38a06ce77fbaeb8fc68e0177323e6f21d0cee9410e21b7e77e8d60cc17f7d93fdb3d5e
SSDEEP 1536:L/MNGh1blJ3aMfSSPz/chKRb7Z3DK1YwVp2sQ6plKRPNV0BCg:L/sQES7b/jZ3AYgp+Na
TLSH
T1376302D7EBB42A9F7E210D483894BEAC3325834644F3515FE091DF061A68BBCA39529D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

u.wry

Path C:\Users\Admin\AppData\Local\Temp\u.wry
Size 236KB
SHA256 78e3f87f31688355c0f398317b2d87d803bd87ee3656c5a7c80f0561ec8606df
MD5 cf1416074cd7791ab80a18f9e7e219d9
SHA1 276d2ec82c518d887a8a3608e51c56fa28716ded
SHA512 0bb0843a90edacaf1407e6a7273a9fbb896701635e4d9467392b7350ad25a1bec0c1ceef36737b4af5e5841936f4891436eded0533aa3d74c9a54efa42f024c5
SSDEEP 3072:KeJJ0eIVAnbWOECR+uJ/0EJzBelG4t1nXFnQamKNQHFZde5tHEGaa:bqrVOEgZJcYelG4tQamKN2ex
TLSH
T16A34A416ACD3812DF3D736B88001C7BCA8A72E1095261B7BB694F8DC18367E5CE6651E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddHide.mp3.WCRY

Path C:\Users\Admin\AppData\Roaming\AddHide.mp3.WCRY
Size 208KB
SHA256 1820687549a4806906944519187c5c10a1860b165cbcc8727f4f09c44847d1b0
MD5 a97600ebebf3b646e676e0d5b7611468
SHA1 3f03054192d918bb21d3be1b1e3c3ba7e7c3a394
SHA512 bf2f6ab83dbf117d090fc96dcf5f2ac3f500149ca194ff6a0618581a9fa15fd77f73cc2ac6bb85e8b5adc49ac8a878096625678f282459b46553539e2444229b
SSDEEP 6144:4DXSP/xvLqG8gScGPWvFLDkBorKAYilsc8DRtrimp:4DXsxvGJguK1mrAR6LDRsmp
TLSH
T1102423D20AEE5D4C0347642F0D7694A20B54DBEAD6B1A77D82B20AF9CC7B10CAC49D4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddPing.dotx.WCRY

Path C:\Users\Admin\AppData\Roaming\AddPing.dotx.WCRY
Size 275KB
SHA256 d320d11ae3da4a5565b2e365a4457eb66a25893e14b2ae6d0e40d79c8a886cc4
MD5 30c7f66ad927e8d576c689dca484f4ab
SHA1 c9f02eaf6254b7a27fdcbf4445a9eed44f3aba17
SHA512 a1947c8a649dd5d14bea87806ec6d8337002d7a9b9cbeb6d0a0921ca027c4576d5698ff62de78c11646348f495dcac0ddc12e270bc06c244762fbb598d9627e4
SSDEEP 6144:nDlVSknzzfsvg4zxBF147j+bAUVpcF8JC:nJVSknsgiBb49SpkR
TLSH
T1EF542362D6D0F6A5BD31F544AECE26CAE3F6A01A1C5CD581C298DB5C0BAEB1038D47D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompareRemove.avi.WCRY

Path C:\Users\Admin\AppData\Roaming\BackupRevoke\CompareRemove.avi.WCRY
Size 502KB
SHA256 975f92dabe2ba689315d178691899197efea1ca2d778f51cc6d68e9902b2d39f
MD5 a0ed45d5270f7e1cebec7d7e79bf7b80
SHA1 bec3445a66f93d809537e5a3670ee579127944d9
SHA512 e5259776461c8deace9a1aef0e15a033955ae6c528e8eb7c268bc4cc862aefb8aee6a49e5d84cfdae7c920bb46f948eaf787eb79dfaf66bd832839714b62f455
SSDEEP 12288:kbDzlaeoPgpy2IHIRDCR+lUXGU531Ado5QV+/tnU8M1WThk1/:oDxVoPgpiHIgcYGInQVeIWTQ/
TLSH
T10AB42372D39EF91977157B4A678DCB82BAD9100FE02BB61CDFEC7D0719685AA00D0222
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatSave.odt.WCRY

Path C:\Users\Admin\AppData\Roaming\BackupRevoke\FormatSave.odt.WCRY
Size 645KB
SHA256 3c9bbf97834d39afd958392840c9b19535078bfd082d8b4680b2ff7ad467f423
MD5 dea2c7ed212f736a3efc00c483914f0a
SHA1 318e4f02c019622c07160a3187e7f373f739c950
SHA512 895721be57064f43af334330903fa7d8b4ae05e3490e02887878da5450efb9cc367533abcaa844f239f45d484bd922488e85d5b53fb1b5fedb26372fb28a95a3
SSDEEP 12288:zSklN1JUOee75uKmCXOpvL0+/9HHf5lYnAXHYoR2g30sauEDwo4znbvY:mkl3J9ee1uditShWnAXH7Rd3+wo4znbg
TLSH
T1C4E433E13BD8E1C5A805C29BF1E550664E9AC6038616395FF48B0ABFCE4E13E1CE35B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetComplete.dotm.WCRY

Path C:\Users\Admin\AppData\Roaming\BackupRevoke\GetComplete.dotm.WCRY
Size 860KB
SHA256 64c7b4da75a45bd7ae594917c02817ecaa2e7b62b18b1b56abc2ce82c6dfb6f4
MD5 264dfdedba6a211b94f0a4caee2d2be3
SHA1 ae7ee5506093a49d132f53a91449b0b920aaa6fc
SHA512 25167179cc1c612fd120f26c6e8f8c9342d0bf3a19506c60f914d2d3a39c518cec2941caa896c356c570ef0f4204b26750d6ab4772d827ac06f1859d02452ad2
SSDEEP 24576:4XmO0erigq+YBW85T7ZrD4UWOAMuPOMkjUY88GbWbr5pT:tyrliBB5tDpVcaUv8ymX
TLSH
T1C11533D122542BC41FEF24538E0A1EF2806B65FADE7A312B38A37C59696BF1453B447C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallRequest.pps.WCRY

Path C:\Users\Admin\AppData\Roaming\BackupRevoke\InstallRequest.pps.WCRY
Size 573KB
SHA256 88c15a827f34bad4d62daad8518b0ec50ed33be011f893ca9e21c9d5b3a6635a
MD5 dceccf6bc1158631c83bb6425c317908
SHA1 48bc721a4e952a9f1268e509c1b4f235c3ae5215
SHA512 2fa5b4555a9f102188bb2fbc9a8d8ebd4e8ed573746498cfbbd6eb8f259d0a85d56379a632d2ecd25cbaf1c434eb8cd51dbe9d5850b5a807508c3bcb72a197e2
SSDEEP 12288:TnkYPF2Het2iT1ywpgAlhsQuEHNTCON3QGMvqTvSsLOQ0pYFVoo:TLNSObAwp7eStTNNAKJ3+YFVoo
TLSH
T107C4230AD97A3B4BDE3A06A6E5AF332C4B5267CA06501D445F022FB65180E05BF92E77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockSwitch.mpg.WCRY

Path C:\Users\Admin\AppData\Roaming\BackupRevoke\UnlockSwitch.mpg.WCRY
Size 717KB
SHA256 73c31066d16968ac2db31579506a859241887d018856ec5d52e0a51f916ee042
MD5 f0650563cd8535329bec4df4cb6baa40
SHA1 b55612f46da7aeb5491fc798eb6e0adf71438da2
SHA512 96d5e512f62896a22fb80db6de5e4d1dff116432fe7d02660446cce8cfe200b16ba84e4c4c856810ad19a0767350a3f202bd53beef7c897b7f845c37c1196883
SSDEEP 12288:MphqBl8ITIkg0BIledlMmgPM7cpPBcjYwf2ghJ39A0DJTl3lzd5Nm9oyC:My3FTIanwzOjLX320Dxxlzdeor
TLSH
T165F423C7675D2F3713AEE1AFB68DA0771E90BA623815FC17C949E436CA0B2339E44254
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishPop.7z.WCRY

Path C:\Users\Admin\AppData\Roaming\BackupRevoke\UnpublishPop.7z.WCRY
Size 1.4MB
SHA256 1e9b8e0b875189a2de01937d9d3a3b6a74486d39af486def218364cfee9565ce
MD5 a224fa239a58740ec876fa30a3996cd5
SHA1 7ac12cd5859f871eb5895ee932d8200be288466b
SHA512 2941f6b4e823e90ff89b42d9b1fe6faa270e39df08a4f988c77c80d897dd838ad767c28ed2d98deb5844a57fe3043dc67777bb2e3ddcc1b7753daa47a15c94dc
SSDEEP 24576:X0AeuGVr8xaukMYPjNilvvcc85uqEg8DmfVQkt6dNrZ73+cD0:Eru2l9NgvcoFg8DmfVQkt6dBZ73ZD0
TLSH
T134653342BA6EEB9370C28343401F39E3D8D3D324139245B7E8DBDBB47D9D9421998A67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveTrace.iso.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\ApproveTrace.iso.WCRY
Size 282KB
SHA256 db08157d4b6f1e056a3c64342fc78bf8e678ecc831dde0ddc0f019f685fcaf66
MD5 f9fe43d8962aceedf36cea456b3ecd6b
SHA1 8d42a2c84e65d14f8f0b544324901e6d4bad0bab
SHA512 e869cd66294890f28ee00719a5f110c124899a4634a304d2731286ba1c53de1a44c22adbdf90eebeca0245578e16c71019ba0b4fbbc40fdd017f6c14f202c3bf
SSDEEP 6144:toa0fnU1uxyPrbQAx4YUnXm68kxwK9tpgeUrWTWblRJmFTKJ:6UkyDblUnuK9keUrhlRJmVKJ
TLSH
T1595423BE73D50EBF54E096596C22E9527326303A2578B8DCDAD870B9AC9BC327C0301D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupBlock.mp4.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\BackupBlock.mp4.WCRY
Size 240KB
SHA256 0d43c3d0c49a0ce1a7dbd05370dc164bdc18fb3a68a500e2eb542a4de69f193a
MD5 c41c93c8052f433c18ad262e36a8cff1
SHA1 61935ee3d8f5ec28d806c666f3efad29bb7f8a21
SHA512 f0940229372db93c935e183115ec06b0223b6d4b722d786b8011131ff5a7a190f76d3b28d6a6eb28e9ddbfd2aaf81989d58f021ef890f2c4f90fb7dc17389e2c
SSDEEP 3072:evW7BLJrzq/T8q8DMAGyROOQYiR86ia4t1SXZ7elxhBxUWq1Xbd9Y5EYPqpxPmjx:soJSrs1kOe8ttqeJq1Xbd9Y5EFxPcjV
TLSH
T16B34239C5C4FC8F0569C130BBE9FD2590A0C285E3D4E6A71B5B3E7119A15CCC6877BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyGrant.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\CopyGrant.jpeg.WCRY
Size 122KB
SHA256 0028de87ae8f41d4926ee2d2271d515eafa1691fce0042aaf65fda9e4ddd06bb
MD5 62ded9917ee4f740ecf7d971188fdb7f
SHA1 04c9787df24ad15dc7c0713e1f8c7a13c4dd034e
SHA512 2796ed2760655fa3b38ea1c096ae8a3ae618c2ac1bbc91bdd92fba7e51cd3515adb01b751c578f0aad1af1e8f9feb605580ad1d149207ad0215e650201768f4b
SSDEEP 3072:6Lr+SmdqXlIGxVvHsUZ1p1Fgzq/rfaLgAO0e:6XEqeGHaJ8
TLSH
T1DBC3121B2C524A75D1993E6046077D36272935FCF85E8197778DBAE2BC20B122309BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditInitialize.mpg.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\EditInitialize.mpg.WCRY
Size 324KB
SHA256 5f252b04e56ac203bf0300b7d3aa018265432edc92ef07db263abce156ed22ad
MD5 97670c092dd332dfa16728d5778bfe0a
SHA1 54bee0369d8dffee3fbae0d36dad5139182994b7
SHA512 368745cd8f7fbb0255aabc1d6a2121d3bf1e99527815f33e989e9861b35b55ed55138e9911a818fc3eba761246f154c87ca739a6fbdc7e59193ccc1bf29fe5f8
SSDEEP 6144:rVnzaM7a2Nw1LdKYWnDGtpQwoQULwEXW+kJiodJONRqaMIkbqYpyr2/V4xigp7k2:rVneMvNKXWkQcUL3UdORWhpyrvw2
TLSH
T13D64232B947C69E46FF391C1E1C18E29CE736107599739B2068D48539F2A382397BDF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetExport.php.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\GetExport.php.WCRY
Size 189KB
SHA256 08126b0f4f9db1e9e30088071f3f03b63cb745c63db5671c35ebd87910d0ca0c
MD5 83a618ce27a450ca35eda2411095d234
SHA1 5e75abe5d02d55a3ea96de02c48f73a8dd114f1c
SHA512 7d00c4a1aac6b5b1ddcaf608644d5dcd17986baac22dc131a0449ea5353a4d3d152493ddb4db0c77b410fca4bafa0cf90eaa953b69770983208570ac353a81bf
SSDEEP 3072:m/jwF4SmeIIw03tDC7iZ8Q+aC+H6VfOqhiQLilRummWWKHLnMEOoRa7JKw+BmAFK:m7xLwH32c8dj+HIWq3WVJHL6oRa74w+K
TLSH
T1BB14131E977560D947748822CB8C61FD018C59EA48BC0FBBFA256E712075FAB7A8700F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeRevoke.zip.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\InitializeRevoke.zip.WCRY
Size 307KB
SHA256 7d92fb82e0237c60e819dcceeac13283fd4bfe9a038aea4dbc3ba8c055e7a822
MD5 d59d4257671a51ec646d24bec9138a6f
SHA1 2c86b0fbbe71ccf4639cfdedc334a77b8fafeb0b
SHA512 38554866bb5edf3be56e27247916595dfe012524ecfeb217df570587d9cb47190b5c75bf61b330441fa7aa283d6ab12f1dbd4b089030020b6ff2d13cd34bac10
SSDEEP 6144:JKVsp8vT+7lLs+39qD1nwcGwK25NWuOYyGH+UFXkbnpLwRHv+H1h/5:YTvyeq9e1GwK25Nr+8+UFXkzuRP0v/5
TLSH
T1216423DD3B57B367CDC531826D40EC189A6A64CF1FC0D2919D909B77190C2BCA4AA8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewGroup.xlsx.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\NewGroup.xlsx.WCRY
Size 130KB
SHA256 fcd5aae72236fb0aadcc7601cdd9e200d3bcaf472bba20ba400644de594bbf66
MD5 bf1d805259cf5eb8be6221721fcc295c
SHA1 7635a911a7201c25e5f85481d4d66108207d6bd1
SHA512 e186691665034011426875ca3c2588af56fefbd1cdab80d62d9e4cf53d9aad775314e5ae25c3930f2daa5bbc72c47674e30bc533b69ddec2df5adc2dd4131cb2
SSDEEP 3072:g1T7J/RrNGK+Snx5kZRATQPfnhY0lr3bNxhc9fiMw:kvJ/nyUScTQPfBF6RiMw
TLSH
T11ED312B23396875F3035A922E930759E502450D871DF24BF42C5EDE9ADAC333192EEA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewJoin.vsd.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\NewJoin.vsd.WCRY
Size 232KB
SHA256 f4102b03bd0bdbd915104821d9ce35995a7bd865a8d4cb4a4898827d00f9106c
MD5 0e0eb9046c2c8b0de52975171cc6503b
SHA1 b9dfcd3ab884ea67507df18ce872d9c68cc7cc10
SHA512 05c814c26febbe5fcc4ca385424b98f95aa51adf6eda40959da8d791c05af079bdab1247967fed518f932e2a7c259db57937f7b2b11fa9d568c17d3ec4fe54fd
SSDEEP 6144:hYC2XVeYAfoNjFzlcckm/ZuKrzORntQirW8eAw:K0jfoNrcckmBuKQNrW8rw
TLSH
T1CB3423EF36A0CC9C7CAE3D1D1A1B9DFAC3A1422B4F7F81C215576CBA5EF10941A50688
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetExport.wma.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\ResetExport.wma.WCRY
Size 164KB
SHA256 d7c2cee8de1cc94e1a10a957bf88f9efa0d96d5b96d1ea82081e4a29e3b802f8
MD5 26cede902ecf00b004fe8880c1a0d66e
SHA1 fd27841f0ee6b882991b66fa59aff7136a5ad0c5
SHA512 c6881229d23f3dcce36b2f965e6515f03ed19e2267f2b680278dc11fc418390743b29c77b6bb9ad846c450641affdc5f72b33c5757e139535f482268eebb7046
SSDEEP 3072:YTNsxTkaTy2FN1az/efINbT3tV12YYVYiinb9EHZ6cBf1MzgZhH:eN0TkT2FN1c/eANntVYZ1iyHZ6Q1NH
TLSH
T142F312689D2F99E852AC7CC611AC3371CEC93C840C4A9BF1C90A3AA547DE56C947F71B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeDisable.vbs.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\ResizeDisable.vbs.WCRY
Size 291KB
SHA256 e3b078defdd78b617bcdc703bdac6382ac6e06d74886a08205b92ad2ca9a1220
MD5 680b1419eecda0804a0c49be97fdc758
SHA1 6f22f852a83fb601283685994ba36d96d67c7d0b
SHA512 a1fa141ac82505ab93dadf46da07b8fdc56da27ecc4cf158632b894aaf0e69822ea2aa980e5138ae9498fdc14f148f747753100ed7d49178042b802f2253b538
SSDEEP 6144:xc47Foa0t6J3s+orLCW8nSJ5QC102wgSHkxIbpmB/QJSQbmuInaFoC20UKXbj3xb:J7SwrUynACvDHLpmB/WNzF0BKXbjDIKh
TLSH
T10654233CF6DC38382363ADCE655C10B4635DDC0DE8B766AEF5148116BCAA27258B63D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartResolve.xltm.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\RestartResolve.xltm.WCRY
Size 181KB
SHA256 75002af96a04f0195579f3f6ab49c12f7f668568c3912eef18b0130acde91a08
MD5 f190766fd158b7627ffe64fb87adf954
SHA1 fcd9286735c79d550014cb8099699c7bc120579e
SHA512 b3ff03d0b6d5d026c72bd179f6b9c12285824dc071a198234c9d7514d51e73bcc3dda619a219e22db86d316c7013a9a4f5e500c204251de9bee8cb619284486f
SSDEEP 3072:YdHWAc1BC4Gc0SIJEf6sgdqX68XT6PdX8A7kE/pbA3HT+nC++zQAyJggAScY:YYAI1tIJEiaX/XOPdv7kE/SHTQV+zQa0
TLSH
T1870413E6FE4E11426227C8F9D9B813B24D5E1F990C4E6CA19A6F870866670319FC50EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeDismount.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\RevokeDismount.jpeg.WCRY
Size 156KB
SHA256 d7285b95906ae0f26a5b11c3a7607d08415ab143883b329905479b97e2b29ff6
MD5 71ba9bed4257b1852f462921e373f34c
SHA1 c472f0c4547849b23107f5b6ff0fbc0ffeb8d757
SHA512 bcba23d8552eaa5df24e95361b0facb61628804c86cd2aabcf58983584e86ec4141c8705f98816886060731f34000fda588d54cdd266c9332a726432aeeb15a3
SSDEEP 3072:pj2c0BlLg+0YjfHLVPCht9KfIfYR910oJtsuXM30qBBLImOMZnuHXw5G:J2cGlMMfLstgfIf4CoJtrXMkoRImOM5I
TLSH
T18AF312DD4571230A4AE4F04BAFAD2675668F346637B09697BC24BA3D0F5C4B4860E23B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchEnter.xltx.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\SearchEnter.xltx.WCRY
Size 173KB
SHA256 b79e86ef94276f63dde6a85f13b36953c16173687e7cb59f010e98b856fdcf2a
MD5 04cc7c7a01521b6d8b99c5120c3003cb
SHA1 435216d339ddd7e1c55af4269bc489e1a346f3bc
SHA512 ab3d5b1173b9746f680e1d5a33eb9ab4d1268e7854d46e72b052ce8eea5101988c2ffc73959afc7b7d30328da027fd3974167bc95c4b50b0628e2fa9f63cf939
SSDEEP 3072:/ZOZpMG2SYv44aHY2PIBVLP8H4x26By6iX8k8aaC+dCblMy3CKAmX6ai:/GK44aH5GVLUHWU6a8fdA6MAfx
TLSH
T1120413DA7AB35DF550DAF7623761E84168E73E1AF344658B04AEF1329AB60B6840343C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendPush.rar.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\SendPush.rar.WCRY
Size 316KB
SHA256 4939f9e31a752c968a4ca57ac4b76873b2db6b7da0ac5b9b60c6639c7e50f51e
MD5 4edec1bc3b018e7d2969d16fc0d59292
SHA1 d7d1fc0e63ee5335100ceebe4f497fb868df5058
SHA512 96c2c244459e254bae988721e7c785215c55c713aa27486888ea0fdb6e3f10ad66d933a0c994601ed79f08db795860b3a34a12915c7f2aa295433afcce8f088b
SSDEEP 6144:Uffp7WlPOtfLzIrr07tMLahNBpf9dmLs19/cwt9YeJuWnvzHhUquI:u6POtzzKrnLatpf9dmK90MYeJuUBUquI
TLSH
T14164239B86CF341E68390979D35538DBFFDEA01964B1D2871727AF3AD5C83048921AF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallConvertTo.ppsm.WCRY

Path C:\Users\Admin\AppData\Roaming\CompressUpdate\UninstallConvertTo.ppsm.WCRY
Size 265KB
SHA256 b94cd346a605c4f60624c5d12e910e28e31ce78c60ca8829af33835f4fef9483
MD5 8930ff1b8b0a501623959ab9789f401b
SHA1 25e8baa2f7038b758c395e40b64f55f6e301bf06
SHA512 e0f8367dc59e6311f1e29ffc853edbf9773bf1a730d52d1e87fe60b75945a83bbf051056d43f3bcc75756d45c5216e50f179b388a175035b4d033f90a88e34b0
SSDEEP 6144:ZCeuiAZ8trSNRGlZY6hrY31VtAV3A5RpKA7sxpICc:EeQOwSYorY3uA/pKsypICc
TLSH
T13B442368902759BBEF19B31E0FA306E88FD4AD201E2EA465DD76C950C569EF57C3C280
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmInitialize.m3u.WCRY

Path C:\Users\Admin\AppData\Roaming\ConfirmInitialize.m3u.WCRY
Size 320KB
SHA256 b9fb0e0250b35bd67efcf174f44a88e14da167bd3fb4a58f211729a67e225e3f
MD5 ebe08ef14b2918b537e4471fff6a7642
SHA1 cd070f61712be155a1f753fcb16e7ccc7bd8d83d
SHA512 46d44b1e95c6bc7c6f9c64e25a2ac4efe174d3d4d3977eb97bde4693522993a7a971950925e334418a9ca2f6039cb5f25a9e4db2084047a443af4e847fe468f0
SSDEEP 6144:yUnqeBSSDm68QnmpZdLbBsY9kQ/aph5+rF61a0vQ+KY7CdETv54z+K:VnqoSSDB8Q8ZtBZXoh5+rgU0vDKYudEi
TLSH
T1FE64237C56E9AF5056813F3F17D2E222BBE4AD4D9119C8F8C282E342FCAF6B64111C56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmOpen.asf.WCRY

Path C:\Users\Admin\AppData\Roaming\ConfirmOpen.asf.WCRY
Size 309KB
SHA256 55b119945c5deb1edb8990982f6d1434b47c45ef281b30dd3d36ff0105dc4e6a
MD5 6708a3f5eb5b706b4bf602890074e0fc
SHA1 054dbb854910751b3db3e7a4ea1e6c157e0a888c
SHA512 17cdf09e1299805a6d38b8dc70ff2ffaf096099ca08c788071c89cf74109ec787fc38e79d0bb1ad3e04839650c1b23da16c02d24be352bebc57988fb3422387a
SSDEEP 6144:pmswe6+K+d5jXF7lUwdLWSRc7CCsbT5YMUlybn2dHFnFbgsMxcQmPtqEsmvOX6:pqeBFHjdTNF3LJYLaeDbgT5J6
TLSH
T1B46423C903DCABABAFE556AA29E704E905B767ACD3651FCC58A170A4430C045E2C5FCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressMerge.ps1.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\CompressMerge.ps1.WCRY
Size 995KB
SHA256 05831c4421dad2d87eaf8e2004798b079df73b2be2998c8741e9b262992834a1
MD5 9ea32a19f199c1c830061e49b13ef867
SHA1 a40bb4c6ac8e8943bcb75d3ed8d312e5a73bf07c
SHA512 4bb3da7d3d6122935d094696340f9a73818d1999038eeec11fc54acbf0af222426d4f270c4736277e47e090b44de4571102a85c3829da5da248ff913eadca639
SSDEEP 24576:wtRkwJty97TT58nydB8iIfPTcN3HcDd+5OnWlgH:E7C5TT5l7YPomx+UnWE
TLSH
T1AD2533816F863A85CF92081ACFC60B8D37776EF12E6DFAA23591557436C4DE16200BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToAdd.odt.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\ConvertToAdd.odt.WCRY
Size 1.5MB
SHA256 e7b31dab50713f828f574a8a6371e57a41ad0657523f08d84b33bbf96eb5cfaa
MD5 108818544c1eec76dfea1bf3c9957d5d
SHA1 70d39ae03deaf1b25191fd8662aa9e2f37f7f5cb
SHA512 31d83bebf4fb9209857705151e44eecc306a14619824878aeb05609b47f38ecc6a91d8c31dec83c7dcdb4313e83fe7f217d72ff80139d37515125fca39cd33de
SSDEEP 24576:9gJ53nu5T2PvkreN4KAWppnxhMD0heCy0Ah3pP8STo54l7X6CexRYk:u6IkEl/LTM4heCy0Il8D4lrW
TLSH
T1B46533AF8C57CBA36654043C055530A32E3F17EBA9A9F55BD034659629B2AF2CE30F0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeSync.svg.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\InitializeSync.svg.WCRY
Size 697KB
SHA256 6dbeb98450033ceb9dbab77ac6a2f7ace2f611aeabdab6c0e7c917c213b35216
MD5 58cd46d350b440bb8ea8ea93dc986778
SHA1 a8dad5049c832aae1db94428122169b40457b8b7
SHA512 7a19ed6de36722422c0eba1754138715f2a2bbdb27b0852daf9f8e4c4c765615c2d4a4ef6e21329de6b2dbd827ddb24ffe6b27a2be0e593e776354a6f0515483
SSDEEP 12288:hAsPT7njK5m+QfY7YAd5+7BDtXW9wquI0uDipZVhghmGlHWpQlh4kNF:OC7nGBsAj8T6nu+DQy1lH6QlpNF
TLSH
T1E1E423EB018642A5E27F4511EF5EE8FF7DE8E442A11B75A3D522D3D144A038C6C8ECAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinPing.mpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\JoinPing.mpeg.WCRY
Size 1.4MB
SHA256 4afa3afb5e8eccde8025f78120af92c4a85dab424f50d00056c4cbe0a0f33543
MD5 2854e6339c7382da9341e356b7721a72
SHA1 3cf38608c2a93cc62ed7fa28ecda8f1978efc8a5
SHA512 b27ac11910f1a42916299b786790ef6c38d2e25a01590c2731b8bb63ffd2f64f9116f20f5632e1975c12f899d7c202c0de0341445984a4f97f8aeb3db528d60e
SSDEEP 24576:L14CG3rHNycK0SYpxGlPqIv4Gh9U/16cBilrx8EZKC+cIh64vD:L1JG3DNycKVwGlr4uu/ccMhIQg
TLSH
T11365333DBDE0AADB38D0D0CFE5A1DE94EA8D51570690AA3490517FCF8229B1537F807A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingBackup.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\PingBackup.txt.WCRY
Size 1.3MB
SHA256 2969c0f6c027f1b3bfb2acecf77b7cc3b5ea102f03cd80f84ba794d4fec43313
MD5 de31c83cd8e1d3ebcb617f5634941f12
SHA1 70501f1df3de4b44805111789e2ca947883b6724
SHA512 67772e8aa9452830c8f2f0ccf31a28915319fd668bf4ff267fc39eb2a0ab144c0ed9b7c6d09b1c02e1db52302130f7d83680e422af5addb150a454f78c2c4862
SSDEEP 24576:a1m1GPHKWwvg6TXAOjwvjJe8kUdVK3+aTut+XLxm69b8XPtQAicjI2Qwc/kn9hW:ag1Gyh5REVkS7Qut6Lxl+PtQZ7McMn2
TLSH
T1865533959DB2FC3C8EE0FCC6E13D7DB92AB16EB84B6F150C1D0708C7BA161669641386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeFind.asf.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\RevokeFind.asf.WCRY
Size 2.2MB
SHA256 97f321eea998d004e77ba453fd55f35e649febafa1cc6d3e8eac4f930160809d
MD5 1e2efda5848431dda7c34f59e0775b95
SHA1 6d56ecc66389ab76638c2187e1389c32dd6e038b
SHA512 30244e0890e0d0f2845871718ca257457e7deff25f6195e858e6d1695e0e3ae1cfeda56b04e46e1587381d3f47006f11feab9dcb43e8f2e7817de7e4f94ffd13
SSDEEP 49152:V1fWyj3SfKm/kbKF25UcOXyZXL98uaR/Y2tNLL7PXrwTN0:ryiwkbku+sb98dqoNf7Ux0
TLSH
T1DDB53344A836A5CFCE307F2B0B450AE4AD59DABCF0E2E53FF948F50550978EE01465BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallDebug.xlsm.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\UninstallDebug.xlsm.WCRY
Size 796KB
SHA256 aada4c8b7a9c40bb07c689e6389fa8a67f45da0ee317ecf9636157ba703691d6
MD5 f845a062540224647f6201bae908237d
SHA1 a5ba0ec2c12c623855e5eaa88eaa04d010b5bb9f
SHA512 d0b114e16ebc399a8e0410b9bdfac630a294b34303318e91a8fb3371c8ce9c2e88d439fc54489b21499b5d246f32007bbcd96d7b44f2b674e89532dab266fb91
SSDEEP 24576:eK4N2D9lZkL7RwJ63rt3CnG6SQdyJw6sB4lO0W9:eKbD9MFK63B39Qd4o04
TLSH
T11705331E3832104E7AA3A8119561B4EB07AA999E983FCCDF7F54E58637C44F15B132E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectCopy.wma.WCRY

Path C:\Users\Admin\AppData\Roaming\ConvertNew\UnprotectCopy.wma.WCRY
Size 597KB
SHA256 5eba9b2dfe8541321e1bf7f529f6ca13eb9e844f9ad74d4b6a2040f1bc8fffdc
MD5 1f7e2c1558d85837800cb3904b5e594b
SHA1 9fe8dc99a22fec59f68a31b18ff8484b5d467c3e
SHA512 06333ba91e3cd2a87f942fc969e1246409a411b8fb4ee5ef308ede9a6e1e53b703326941a45f8e3babc048f6c7992475294c7d1a0a64d53adb835fef30f14ce9
SSDEEP 12288:zAvO2/NVklGy25/WHYTjPwWrZDYualtwOeF05AoTyA:kvO2IlPvYTTwWtM5YXiHTyA
TLSH
T1B4D423A7B908CF9B0641F02D55D47DAA406B70D965AEE1FC8C32BF2703489B6D056CDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyRestart.gif.WCRY

Path C:\Users\Admin\AppData\Roaming\CopyRestart.gif.WCRY
Size 174KB
SHA256 0832b9c6974f7abbe56c55cd1fb2e8fd168ed654a2060ad8730e95d189062460
MD5 054f6d7e19084673cf56581fdc965437
SHA1 34cb7c5b9221f5949c19a978df5bdc147f3a7861
SHA512 6220bc8e97fe317cb701ae9aac418b607b24b5c2b752fe7fbee8beff5195c1f04a5ffd3b1da034853a89b6cf57e2c48bdce39f97e8450dfe1ea7d1d1da4d2794
SSDEEP 3072:UuzjT9+8VVYMVzxWZx09yXHXgqZBx2y2+q9eeNDdLoWwBZd1/STIsOgNm4:UuzV+EYMyxSyJ2y2+Le7cnf1/STIiN
TLSH
T12004221B3DD56FF1562D2023194A43A45C18BE6C4A7CBF988FE78E486DADC944CC20ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FindWatch.rtf.WCRY

Path C:\Users\Admin\AppData\Roaming\FindWatch.rtf.WCRY
Size 298KB
SHA256 86777b20af532db25c2f011e07d6baaba44cfa148d6635b93ca37c1919e693b2
MD5 a19b02b452ef5a15de137d7360c224c3
SHA1 078dbafef55ba816861878a746a65cc7619d2d5f
SHA512 1de44e7a95c6b73c7dedc3754f30eb49b314d8486c808ed51bbcbb7bc274b63fbae23798154d0603413ff878f43b971ba1acc8604e070cd97fac5ac9dcc48f59
SSDEEP 6144:GdUE0KAzIdl+gpN2Nq5R6Oc5NV2J5DQ60gjsYCMo9UzQBVaXBH:Gmg+g+u455NVTyjXZkUQyRH
TLSH
T10E542355F944B6F8281C84D352BAF6864CC229C36BDF09325844CB9F3D574C66A91EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompareResize.vbs.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\CompareResize.vbs.WCRY
Size 719KB
SHA256 3a2e00897e13e7c6c84482ee1fb070579c610faed28689af3b98294f9b52058b
MD5 5359ff031f09bb055f50a65844f47099
SHA1 a859d4d2232a6f1352ddb77d6ba39dec030211e3
SHA512 c02aedccc98ba7f66b74119fb2113e56f5706a1f68ac0933888c46bbcf4ee673f95d005214ffbe00edae39f03ebb8d35cbfdb54a821b1d8caab09cc926d97055
SSDEEP 12288:4pi7LZ4+Kp0NsxH4wSpAYnI0PIDWNvc6oY7iqabiuusvjmQ8mzUum:H7LZRKpOsHj0hPwWyfBbJvjf8B
TLSH
T1AFF4331DA432BB92E8021BBD56FAC3C00DD4429A76DB513255DE539B0E03D9FBC3B6A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditUnlock.ppt.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\EditUnlock.ppt.WCRY
Size 279KB
SHA256 84e3c69b4ca5cb1964dc11f0002f02c039d818224526e54c3494112ed333d0f6
MD5 02af98628f9a58357288fad77974b0a5
SHA1 258478f62d38356498d3dea2d27eb2d302187789
SHA512 974f310f69d074e220bf201717e0eadb4dd3f58eeff266192dd48e398416d4940c87c308be1fb586116cf202f94b7832b87cf913b8838f2e9176c04ccfbea45b
SSDEEP 6144:PK78mpm1waJ9qnrUFptREA4sXN1CBE6b/bTrd:CJm1waJQYpWsXSNzTrd
TLSH
T1E05423074D32B3803A481CBB912E4F65C5E65BF192816D395CC829F72EB895CF5372AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetExpand.xlt.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\GetExpand.xlt.WCRY
Size 398KB
SHA256 2ec4d4d3a335d1d9f9c22a48550f0ea5d6b5aed6022f4dfc16009228a9166540
MD5 df7be161777ad8126b23f91e2bca3ff7
SHA1 04e07b6f8c754e74ec85f0402a84822ebd5a240a
SHA512 ed25d59e2b862d3dda3e2031ee00cbe9f8b582ae60378cb71e3fc09354707cd30e84010ccb8d854a791a49e434da30569d4421d52d9a09048769dc894bb4442f
SSDEEP 6144:I+KXMSi1cMFmPUFbHDl6NrQWfFY7rhB9gvw8zFt3dre+0o4Elo9FRdrcgfYaxTb6:I+KXMSixFmPgHJDWdcgJE+X4xn5tZ0
TLSH
T1418423F6F74A98989ABAC04CB9A849037CC63A731BF1B78E36447FC426C551B3611DB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupOptimize.bmp.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\GroupOptimize.bmp.WCRY
Size 499KB
SHA256 ffbc994469fa9066b2ed1b2a2977dd22c4ddc52dd1c1b11ddf29e5d450562ca9
MD5 bdf0ed08eb1794570e8a6aa7d5dc8db8
SHA1 eda5e09d2922cd0df279f00b44f0e47159cfc919
SHA512 5d76b736743f66a7d5d95a57800b3298aaee2b255ee405dfd73652fb7275ba50ec3bee0566143c1402a8d208ccc2fa45dda06a91f8b2a4da4dbc74a443a98388
SSDEEP 12288:TzV3X9/BXUygOOJMkkj69qrT6nl1V/51FWdG0X1xe5fK:TBVaOOmh6cT6l1V/5ednXTe8
TLSH
T187B42326DA39734695E7DCDC2104F62B3F4193CE63D1B1D8C1DE16E242841DEB2AA1E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopStart.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\PopStart.txt.WCRY
Size 804KB
SHA256 bc42d8440835b5c5d92ff7285cd166b8f814e561df9f78cd5656b070e1059ecd
MD5 59dc9963c837f58f4bba7ddb19f8ba07
SHA1 5b1b0df55335e15c93e6089a9fda683cbe97b217
SHA512 421a8a4897d7114efd73723028bc0e8625bd929fb5a9fc05490fe923bd7e170857899c4646b60e68437aec2115ad069c11b625c3bda78497affe0658b39ff396
SSDEEP 12288:l2PuWvt40ZXBtbVDxLOXYH3WA+BgTMbrKYIOJPPT3xI1kdZD2L+Z7SvW:oDnZX5ROXYGRBVvhPPKiD2iSvW
TLSH
T1AC0533E91E338F3E475B550A13887D87E8B2D6E12968C14C1FA6C11D2C2B34AD1B7B67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartPublish.pps.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\StartPublish.pps.WCRY
Size 770KB
SHA256 b8b7e61e34c6ad27c38e9b260bcbba994ff8e21308e8eae1d4ee0314e2cf8b2c
MD5 7fa3f81c979814a351efd6fc623509f3
SHA1 d05ff39420eaa7b3545b9ba24cdc71cd496145c4
SHA512 c6fac561292c6cf0efdb23bdb5c537943fefd952646396c04daac8d00d48792fc33abc33979f0ff5eb60955a62aad755db2fa8672b748af6bb13cd2226f322d8
SSDEEP 12288:qwYEPwB5/f8LBjF4SNoK/iwq67G9KoqRAg/4Tg9yvbGz470ihCJZiwd+Z2qqbt2m:SsE9UVKcVqoG8oiDcLQyiiwd+Z3qbJ
TLSH
T130F43372AB67235780F1186BCDDD00133B7F38569FD0967AC497864C8892C15EBA3B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartStop.xltm.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\StartStop.xltm.WCRY
Size 516KB
SHA256 3a4f3a51a77d6edb91adc6f96a860632c1aeb4f02846c0375d46565a135f155f
MD5 dff5ce44539a04062b7d4c344850781a
SHA1 7c46165ddd59153176cd937547893654eb79c750
SHA512 c8e459c56d111ec27426198c031936fdd4b35c15618d5aca18bcb680a3cb94a05200cb66490b534d1606df7a01693a24b32f60b99431ab2ef43416e08e855301
SSDEEP 12288:uxBFfgbWgJvc21cAdbWgbNQaa0BTE/x61O1oRgmzTx3fzVxFfbkEuY:aQBZckbN7asE/1mzTF9fwEuY
TLSH
T199B4230C71C53F2909B964DA1B7CFD8195B651AB23A893CA6373C706395F5FA8B7802C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepMerge.dot.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\StepMerge.dot.WCRY
Size 736KB
SHA256 6944e496a250da37565250b805be9e7811dcb09e64477cc6a06537552295395e
MD5 61078ac1cdd1e81787218ce410c93606
SHA1 cce075335f763088055884782d0e3f710c4202b0
SHA512 533eb8c59c3c270c090989a68fbc3523e15cda0d0a0f9994f8ad9a2c26e6e6286f8c2877812d3179382e95dd67a16fbfdcada1975d2be18f922b5027ce04782d
SSDEEP 12288:59op9z0p1vNbQvZiGEirLoIUYoEaNx6zniQzA8kXUZi6+2q4gK/RcVUZVk:Qp9z0pdNbKZZET7z6WQzAZEZio2VUzk
TLSH
T129F423ABCC4B7F1CCE0D5DF81766B69768C496472A736DA0F2EC12C3F4A9C61662D240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepMount.rtf.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\StepMount.rtf.WCRY
Size 550KB
SHA256 9e7f76af340375dcaecfe57a7e7cef67b8c9c45f2844c946d4dcd01a25a57d79
MD5 285f068c38024a6e4cfccc93f75acbb2
SHA1 4083a1f0c32ffdd6b5f07920be50a413fcce0f6c
SHA512 4417cb9adb63cc7deeb92083d710cf2f2859b7b1008f61619af5520a9fba0bb08c8fbfe28a9330012ee69aa6a8206df6d0e7255f90018ea6c8742534a31b809a
SSDEEP 12288:0HXtIPOWbmw6lLx8g+M2GVuI7QPPLPIvRsYQSXfeKF+cUhkfVaQ3ZsP:IXty9mXlpLhr70PrIJsgXflUhk2
TLSH
T174C4236648E5F8E70225763F2717E0861F210B792912CA45CBB8AFB13761ED5F128B17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnprotectResolve.mpg.WCRY

Path C:\Users\Admin\AppData\Roaming\JoinImport\UnprotectResolve.mpg.WCRY
Size 313KB
SHA256 93d3ec5ca140150398e072e654cc8efed5ff596c7f19adf3944325270a7edc69
MD5 993d42f41570004005fa6f741b53d9f1
SHA1 685fbdb17e42cca02e67309d70e647da8a8b974b
SHA512 221b15680d2807523c4d15db28f5da3a6ed4a2eb9a77440c459bb052d1dc1883b0f592f807d0509ec8e2ebb2e2ee657162b8d6fdc2b0c2197a0bcfa20af3d18e
SSDEEP 6144:azLzj/KASp7vbmBp4bhUP/IX13Tyg3u/ZZTs2SF+uuYXU:azLn/KASBbmBqamVXe/ZS2ruuYE
TLSH
T1F36423E072682D57CC7C47C0066C684BD56394CEE48ACC9EF1B7C4289D69EBB2065E7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockRepair.dwg.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\BlockRepair.dwg.WCRY
Size 619KB
SHA256 27c1c18089a673f6e5638cf85dd7d3305a2d71c36c0cb7f3d1c63f07eb6426f4
MD5 3d894c32f265b81641c0e3540fc30970
SHA1 dc591715ec9cd77c68cbd1b014216e8355821572
SHA512 21ef87b79793c727f167b71327c4b0de437b851a1c1d0c61f0896d968c4983e09cfdbc05d706135f6602bcce6d56848e8eee471608df75cb69cb3ad096666061
SSDEEP 12288:YjgZu1LxPdqVLdwTaznuY3sBnbtGWmEH6kwKP97Sa8fl:YjgZkFd4LCOnuY3sZbtrpwKP97r8
TLSH
T18FD4336060CF2F2B2BFDD6232CA4784FC7178A9A2D951526C79E1E9C57E144E70AF234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompleteUndo.odt.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\CompleteUndo.odt.WCRY
Size 677KB
SHA256 7adc5a18c029f1a2247daf13cadae08200bfef72e64da697b2bdf00aa696144a
MD5 3fc37c33d5a30a3ab2191a27bddd02e8
SHA1 7740f1473f9318257a09fef962c1566fc72c12a3
SHA512 d470265438a53eb8875d08b1ab04108bb916e172007a7ac600cb0817fc8ee1c81b15e8d410f7600983c2fb4021731d2abe83e6e9350c26b0233d56c2ffc1f3e3
SSDEEP 12288:5BQabsXUO0mu7wUA0NAN4kCV0d3M6xFJ2tRMKVt0e+odFxaiVJr6yyQ+E6sg5an+:AgmRC7007V0d3dxD2rJVt0mrp6+n+
TLSH
T1ABE423251889470E694E3F2BE6F4FC20D36EB4DF5CAE39D22408FC4869A153CDBA6255
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectRegister.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\ConnectRegister.jpeg.WCRY
Size 541KB
SHA256 b38efbf7e184ca93705ba3d5a6a98018eb0849aa4fc23971c9e12e17a2a121e4
MD5 f564209a46af3ea937ad5c4fc152413f
SHA1 fb906e1b89f359953ca4ae48bc49df0aca9e03f2
SHA512 1cf0cd4efc0b48f7ffd2d7f153686ec619108bb3e22ff99a84615c105ae8574402fd8d2597d38353d7238e65c58251bc8cd7a127a9698cec2e8d66eef86b8d4e
SSDEEP 12288:BDQ4q/cAt8wiIZeQb2rjeot1uXxDq8gm3llgrARgaVh:BQ/cAuwNZPqrjl1u8e3bRgEh
TLSH
T1A2C42356851449EC8C2E4E578E7E1F3E8C21B8E0C8636E5E0D6ED362D699CE1F3C6A14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterMount.sql.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\EnterMount.sql.WCRY
Size 735KB
SHA256 5a4be5557a2ec65eade367ec26aa33ebf95d30dcdcc8344dba386c8d7e39a71e
MD5 97d9c00c490e0cebd728b7cb11598d50
SHA1 6c5a4e2743ad4eee2a86ff96e5574215e956cc4c
SHA512 a60e1766d2b8248b56a888de073790589de663f68137292e82cda86636b09d284880508ee9af01a77c3e75c3014b8f17cad7aec823d9540fac89aa62510ceabb
SSDEEP 12288:WFk3wCOUgfPJboKrEGI/IeOmZsSCSgt1ZIJlCSm4TlaGJh9:bwwiFrEGI/jOmOjSJDCp4Tgs9
TLSH
T1FDF423CE02FB2E1169F09D43316DD6C5424A50FB40EE7D4AFFA5E810A8C05BD6F6B899
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeJoin.docm.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\InitializeJoin.docm.WCRY
Size 348KB
SHA256 4072ff6dff841bafeb8b1400f79bd70a8d21c74bd14b0e9ce3f280b0466e1014
MD5 0621a44f74c2a478ace4e1b697894a0a
SHA1 68e2e1a18ee4ae180daff2f5aa7200c64a9418e7
SHA512 11fcd314e36a51a9205d651b127fb72bb9c2038f501dd3840efd78b53487003a83187368a189e32a36496403337bc21a154c2844afc2f84fc6f3d59cc9cf7cfd
SSDEEP 6144:n6VlXxpugM7ulM/eIdRS7Jh1k65d1V1Lj3fZ7F0yNqsVhcPkcddH:oXnLmum/eOS71k65dXFjJqyN9VcbH
TLSH
T12C7423178ED153944B8E3C00ACBAE0EABD3B65459CBAA70D9C246264C7F357DF8D7284
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveEdit.xlt.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\ResolveEdit.xlt.WCRY
Size 367KB
SHA256 66f6d9edb2091414d6a35e4a128c57cbb6acf9c8232e9f79b0cfde106f8c94ac
MD5 5e0d04b648dc84591bca6ae8e40552ab
SHA1 3f6676e9795070531194ddbe95d6fd14ffab60fa
SHA512 9d9c9d0b36c7873d94454193192826e1cb80c4de66f32bd6775a8715b7b1d3e7ef8f274749e7d1b849328c5c2748e0f65fb4617790da10b0445cb424f8691532
SSDEEP 6144:3T1dnwEOPuYRLDiGVdAUWhOB2B/cGSvWi/PMxjZBRCP3Mf98pqZtuJlAcSDXXGci:3LnwE4uYRBVi9hO76iTP3Mf98UZUscSe
TLSH
T1EB84232EC5A51293227383A339BA131AD39E9D0EE822351820D9D4F579057A59F3CDFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeMerge.avi.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\RevokeMerge.avi.WCRY
Size 329KB
SHA256 3769e4ac4fb3282d49034eb4bdc07a603543b1ab71d92911cd643da9e2ad91ed
MD5 763a843ca43d9a803b36fc328994a795
SHA1 f404740d064feb8f9821102cfb824e32704e8ace
SHA512 31e5264882b62a7a708c598fe81158cc574992cf0f1fc15e49dae9e5da45c0e9e55603c9c1f73912dff7ba2097f649f0c44d628aff71c6687564a0f50affe8ae
SSDEEP 6144:81MJ2xir5wZaCfrhVncip8BecDxRepK7fn/TtU2AA5oxtCLwX2DI:aMsPfciSpxRepKbbmA+lms
TLSH
T1D764234C2C229689833DBD62A628BF27E5343579A5C6F07EF5D6D1C5934B0EE1046CCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepUpdate.dotm.WCRY

Path C:\Users\Admin\AppData\Roaming\MeasureSkip\StepUpdate.dotm.WCRY
Size 696KB
SHA256 288f543acd8076d4ef479480550a2129f9064d7cb1528284a9070862fc485156
MD5 805c9822f90db9b282a20fe3901d7c1d
SHA1 366eebde18e47ac594c4699fe6a26fc6888e5f08
SHA512 746bcf6cc9cb11090a1fb788dab1ee4144108e05cd16db33f31634e38aefa3cd96b004890c2b2800c7be28690ceefe024969e73727b45929f32d4705123d8de9
SSDEEP 12288:9ob5jfWxtta4qEQLzYDfXCfJMNHidYN2hlCT9zy99K3qZArp4tknYNcfdOJrP56v:yb89sL0fXCwimN2j99OqCrJlsJrPkv
TLSH
T153E423C95BC976DB757AD8A2C56B28D72DEF8B7082CED563BA610153DA00402CC6C6CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddMove.doc.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\AddMove.doc.WCRY
Size 359KB
SHA256 dadfa730ce5395202e941b90021b8c45d04f099da107216f06159b272898d8d8
MD5 4a73f923ed6fe5ac79d8f199e03baaf3
SHA1 86f062fb673abaad28343e6b87da43142448e62a
SHA512 f70d27c773d532913340379273e8a8b62b29dcf134674bfbd63942abb6412641d497301ddd9917ca24f1da4f1c8bb53f7166278abffb8196a932193071e43fb4
SSDEEP 6144:9DTP3FcJJrZREcFXudeAQeb0qRUji8VC1a/6E+WZgp9CbO5qoEBDuX2/2XBBdzIm:93aJrUAreb0qRG5+WZvbO53WI2YBdkm
TLSH
T1207423ADCBB1B5D6FA86EDE910DA371C44C095BA9AB00956D56CF8840F84BD9C03B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportOut.bmp.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\ExportOut.bmp.WCRY
Size 390KB
SHA256 3ca1eea375ec9dfd12f1294420606025073904def20c928ba1c46179bafc2bea
MD5 2f9cfd1562717839ca0a9e5b67560547
SHA1 b693d5f965c93152029abf4e3e6e84c9209c55b3
SHA512 1f3ca2cd45d438d6977cfa94f4aabcff15b6abbd134b8e149afa0b8cd5e5930647fab7e705966527f2627a14e6adce6dbf38ece917c374e2e1274719da8cd176
SSDEEP 12288:SFB9nMPfrVg0RLr4Y3fTGNGTh8wOQ42U2RMM8g8Gn:SB9nQzu0hPTGNGCwOQ42U8MDbGn
TLSH
T186842379C833B61F429C5BFF70A70828245DB76356257ECA3C6089DC65A430CB278EB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FindMeasure.vb.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\FindMeasure.vb.WCRY
Size 441KB
SHA256 51d9b71e67db911be9ac501c9fc1213520bd2f14fc450d9e1c6996c4ffcf0bcb
MD5 0d90958c82018d722b36ce3a968f5cb0
SHA1 485e775b14fa7eb5eee07423c5275ca5f1b9a31f
SHA512 00bc87a28609d2a485a255aa79b1bc9e25c2a1de8bb88643b6f177ff699b67a768a93c30c9c8fb5b6bb62b116c44d76592451e5e7b43edb814bfd40026a2f8f9
SSDEEP 12288:rsw+yI3VFqpCdc9nG86jpLl8I3oZWMw5auie9FR:rbIvYezQI3oQMyhv
TLSH
T192A42335B0625E76E45870ABBD5F4D8BD2B5BA454FE2E03B3126C0620CFA702654AFF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatInstall.dotx.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\FormatInstall.dotx.WCRY
Size 287KB
SHA256 0dfd6c909b0d89209674412e24ae0f5ad4130636c5738e470ad8956e8d5d2805
MD5 702630884192948722f4c6e6cd126f40
SHA1 8174d0c261ead623daa10c4cb2630c5c49e4fd91
SHA512 47cbb8ccc771377b94c74e2c1657388add8babae6b798675c4191193faf34da634c52367bc374029f3d54639bda631ebe42ce6eab44dfe93b391186cd2ecdf17
SSDEEP 6144:CekrVgwCRNCWKENxVKUY22wH8Keyg1d2BgqwqcZLU87C8SHtT:CzrVgwwrVx12wH8Ke2wqEVeHtT
TLSH
T1725423517F5F946D2EE3D85290C0C5099F2BED5D11A9A0AFD0E12BE2C0E448FBA7924F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetOptimize.mp3.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\GetOptimize.mp3.WCRY
Size 226KB
SHA256 605839f68da061467c6ee00907b1d8a193e7217a97df2491f5b0e7879f76fd6a
MD5 603cd4bf4be6d1c083810a63b97833f6
SHA1 32db50c7dba5fa95ab50bee5d4e4edbc32d18a12
SHA512 4d50bc36e31c2feaf988fac335aba5dab0afa4f5a648c6b2c030c7c4eee7fab17409337e3cdce5803339143804bcce7c89c3a1d2fa33bac30616526ec86a7f84
SSDEEP 6144:Q6EgAtq47DpuewlFaqeGyPZTw4jEBlLUbPefAuS3ntKA:Q6apdKFaz3lwj34Peou0
TLSH
T15E3423EC4EA08DEDE1FE1C087BF1FA4335A1769C8548AC875FB1A3E4289FD98190215D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureSend.wma.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\MeasureSend.wma.WCRY
Size 524KB
SHA256 43b07bcec6ff707f6fa3d1c596afabfe9cffd299aa9788ab5d05c87b5175bdfc
MD5 558dbb68f4604b065467cab1752d9ca9
SHA1 5c9101771482fc8d96144df8ad47bd5b3288b588
SHA512 1330ef8b570ba0e2cd70ed1f995e47639d895ba6ad6b7c0fd95a18df5de2f630a1077046098ac6939ef076e390c329a218267a52f41d069f31fe0978129a3163
SSDEEP 12288:MHKjOYl1tmxEVQhfr8amRFy7QYf9jtcIos3n6m4uVpb:MHKjOYhyp3mRokYfFtRo6n6m4il
TLSH
T191B433A0A48EF1D127B07879EB8B06D4D23F14A6F4C5B342517B5D32F43AFA08697963
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishConvertFrom.asp.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\PublishConvertFrom.asp.WCRY
Size 493KB
SHA256 cca97e47ae398b397508dcb820ab496baeffa9f457409ff07f635a7987e6ed9e
MD5 d56a1dc20e87d1b08ce419ca2e9f2881
SHA1 2e65b1f432d4268c5dd4d3b2753de589f812b6fd
SHA512 141f5feb1cc37ccb52d2c6aec24379eb380ac95eed799a602d2b1d14ba07949a7717c2c3474a25a45dc26f282d7e7af630686413e6dc58b3dc06914d9febd73d
SSDEEP 12288:RNGX5+ZNuZbkL9dkshemC8IzDPG8bu/+Cw:3G0SbkL96sA/zDPNy+J
TLSH
T131B4239F5AD071ED3DDF786E7A91853436F02B046AABC063DBC912AE4C605B18DF112D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveRevoke.mpg.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\ResolveRevoke.mpg.WCRY
Size 215KB
SHA256 3459fa59507e24aa05ec56a70e7ff9a4e3c685499c0c373b6b1d6a720ac55448
MD5 5d758dd065616f27b7d8bbf5f5f143d2
SHA1 b48c8e6b2f68f65c930d36e92bf0e3d7f210a5fb
SHA512 a236824a6772efc2a3fe08a2d9251c232eac2efb52ad6bf55bf835a8bf342d63a439d22b963ebe5b92857a15c56cae49929640cfe09715151c8bfa70b0d0d7d1
SSDEEP 6144:lAYpCEg3bY2YS782APym/dYyPeuJsx4p1Z4:+2CJLYYyWyF1a
TLSH
T1112423E108ED329B24E6A650958D4E8F27EF283E4F8DD77D0E2D54621345E783C9E187
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestoreProtect.png.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\RestoreProtect.png.WCRY
Size 503KB
SHA256 80b37c297fdbf3af3638aff6238b1d72cae8328d937eec22648f4c0e09fc1251
MD5 92d6d4ce2076d6289fa12e92d5d985ff
SHA1 9fb325428ddb2ea23c3b09dd9fa2c63313ca5bf1
SHA512 1dffae17e66c15867264b6e7481b8d766cdab9b547f213f936111939d8ba2f8d206259d37ae112f1281206f3e9a6ce31d620fb277b690d5372310fe0f2d457cb
SSDEEP 12288:UlNLqSUjQ6ZNju64y68YXqqmgWsY5RNwIAzSn65YZdE:Ul9hZ6T4y6Bp4sY5ReIw4dE
TLSH
T101B4239FFAEE93D82600C3D52FCA91A88D5A120D929F6172F740D047791B5D4D3BAC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowMeasure.xlt.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\ShowMeasure.xlt.WCRY
Size 400KB
SHA256 41205c81ff43ddf31cfc8b81c48227e1f75d05a3c443723745cd9ea7b41202db
MD5 87c79048a3c4914d31f710264228154c
SHA1 069a27e7b7ea36a81798221ebb3b71c93e871544
SHA512 a7c9f7e5942169dfced86fa8291742f24c4234714b7f746b5019f3d26476b7a1b1107ffef50bf88fb07b2c98f57d567d13fc8d62e0573a52dcbdf8d8882c1128
SSDEEP 6144:42XLD4zQg0Px34BPJZ4AcMaDvqe8WRLU5tu3w5hxD4hzT8FYjM24X8pUm0cCBMSg:f4BS4bBJa1ZLaQw+9wcM2uGURMA9O
TLSH
T1659423DAB7F0155CEC84AB1863BCFA8ED96418A775E832DE97898261C4C90DCDE3D311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepEnter.vsd.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\StepEnter.vsd.WCRY
Size 236KB
SHA256 66b37084dafb762752b9c57fb9e474fd6a3784866977c5a4065063d81561fb50
MD5 66faf8ba13de57095bdada80b2586bbd
SHA1 968124e3182ffe6091aeb13273ec55203da6fcd4
SHA512 bb1840f436ca252c4933493bdf12b9c0561ed0b564040bab5d919a319e12abe86c5cc274c6ddb3e9e65cfbb3b5fe4e3bda00ada14f600881bb31fcad4b4d1554
SSDEEP 6144:Z4f50wKYCQGAwzb3NI+g6+ByJmcEWAXpKpemGmsH:ZcSgNGTnE6nmh3gGmsH
TLSH
T1933423E400FBBF6399801AD3289611DB5165EE2A8BF19D3D41FF129DC7EAD0C83250B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoEnter.tif.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\UndoEnter.tif.WCRY
Size 349KB
SHA256 e15a8798a5ec748beafe077827b5b2b468e192ab4742d6fa96f401cbe5f97555
MD5 aca58ff765a54533ce34b30538c0ad11
SHA1 e11af8a7d25bc41cd354733c934f8e704a638641
SHA512 b1ce2e56c17eb00c73779c63ce73e3948f8e6a8485f643f9b571aeca7fb094d95c3cebc583f7cef975b54dedcda1ecc90b76dc40bcaa68b646374202d30d4a99
SSDEEP 6144:qHkJbT1NM9QnZFjG/ptb6clu3goGe9fo+XdI0v/I/hQIPLGYF5Ab+ciVwE/KZ+a+:/bBu98ZFC/muu3gnp0vw/BTr8+ciV1ku
TLSH
T17B74233E239CB279743EF2379986ACF70D87B78ECB5AC71F0871E5457A84A0191A1253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitPublish.mid.WCRY

Path C:\Users\Admin\AppData\Roaming\MergeWait\WaitPublish.mid.WCRY
Size 308KB
SHA256 b914556533d9773f815de20249b48eb021e9ea6fbd27d89db632f010b7128707
MD5 af5900982bec8b68388d1f1557c013a5
SHA1 8ab522f4ca2328a6b270228e5fa02f2b85cd24a6
SHA512 012757ae9ff4d605c8692ff9d78bcf3ba35dd413d266749caf79728a0c93b975d693e8ccc255e9c90dd4c9acf4f71bb50da65270f516aab1052b308bbdca6934
SSDEEP 6144:wamytFQnLOV0bn+tjCwHO0RZOvS0zgxcb1XnCZe2KEeZvuP:wamUQnLgykZp2Skgxy10eHt6
TLSH
T192642377A6A710D5BCED891BF444AA14C5F971E34A718E85FB2190BB4C832FE23758C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Normal.dotm.WCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WCRY
Size 18KB
SHA256 2f5d98dcb83cefb3933cb4ff9ca867b94a3547ce44d41ff798d3a755b0480cf1
MD5 69e297f88e03d00b5d94642d06127ec5
SHA1 c9b96f60d37fb5fcca922c7127786e46144f48d3
SHA512 3bf10ce35dfa8b963d437b0ad046238af188c3a0d586ec8d02ef486383da893f9b17ab528ffac48ffd209fda90aa90f69e959ab998aae8a5389b1ac8db8c271d
SSDEEP 384:IUicGidQs2yqRPGgvqlLWQduiBPh+rN5I1h/EMO4EcFf:RioWdYwSiQdD11hcyFf
TLSH
T10A82D15375D109FC8E86415D123B1E82CF6ADCAAA693547CD736665212E3FBD4C24188
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertSearch.pot.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\ConvertSearch.pot.WCRY
Size 526KB
SHA256 ff2eb129c40c5972818b3c366a6ed733bb9c3fcbce6dab7dd4e046664e5ee446
MD5 71eca12112e85f7867c9b4511a2a51eb
SHA1 6950b5208e5640154d97b540ee9da152c0549d81
SHA512 2776fd352bc46016839749d7906e8d56a4b8b292b91f2e002556cb35f6705033f47c502dd984cf882c9dbd45d218eb860edfe2b16738cab77d8a0a02424bdfae
SSDEEP 12288:IolBB7u7j1NKhvJK5VO/KAafClkCsUfQpsrEDW:blBB7g1NKhRuO/KAYW66AsrSW
TLSH
T152B4234243F7F6968445D49EAEDB80F8020EB4B245301EAE59BB5268B35DDBD12B1CCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeStop.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\MergeStop.jpeg.WCRY
Size 760KB
SHA256 654b4add9c75bc319627f02e53f95eb5d954b231371cf0b57b919df550151f9c
MD5 e55fd0f86a3470be0e5fc9149a9fdbe9
SHA1 5823b6eb9f81536ba5216fd41cfef83f1661a7d6
SHA512 b61199be8eae09df12bffe3a64394d3e36554d26028a45db0b8fddaf44e95213f28321d1e8c0b7da5faf543341a87f5fd9b7bc3a7fa0292a9c69381336197149
SSDEEP 12288:rJPpaOpvLPiXDdFl2viBB2AV+fynyOlM9AtM/y6czqiYKA9JhP9hUvwv3HH+T3JK:R0Iv+Tdj22Bdrnrl8+2BPQYXIY
TLSH
T162F42370C9667FBBC503FA5E7E86431B113BE85ECB4CABB1DAD03A2875010A4F979584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoFind.tif.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\RedoFind.tif.WCRY
Size 916KB
SHA256 e7579a9663495f438de527589f0d57f23a4afa46cb4c7dffb6b98cba7218b3f0
MD5 f255a8c5297dcbd4026d43eba6c30cfd
SHA1 694bae6209f83067a3d6f198d724984ccf49e074
SHA512 d5317445a971a8e5c899a6043c5dc198f112372251f985a8e7e606eb6924ead2c9df1035b8c8be5290e8434d6223ef51ac157762f7e6e8efbcfe1243aae2029b
SSDEEP 24576:mRUilRrlWsZ4ZY0QYu/6G/RswVbWUZqs2STu1W6c4lA8:mzWquuCGlYUZZTN4l3
TLSH
T1A6153319AF12420624F0CD770A6A8D35EBA32B02D9C616F6F5C7C9C340F5972A5A3E77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeCopy.avi.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\ResizeCopy.avi.WCRY
Size 721KB
SHA256 3c5ddd2c6f4dcdcd178c81987d55d0f91c7c28afde54c6652b30a184b773e569
MD5 29dd4ac0f85f04c27331a2ed0f6a3fdd
SHA1 f36b16f36ef94f91a2aef1f02263ed2f395418f5
SHA512 10f88665023888031aaeb411cf90b4f4a50d55fa962423b6f56a61c4a13e4f57a85f4c89c2d259befdaf8ff3e1747198ae2414d89c4eb42b4dbf1f997e89703a
SSDEEP 12288:+7pEAyiGYwVud5t7l2iY5aHC2zkZX2dFpD933ra2jYR8lDGOEyA5HJpyaaRW:HxYLDt7nOX2dFr3+2cSJxEfJgaaRW
TLSH
T1D6F423AEC1181C2742381415BF6FE1508EF2116A7C956A8216EE3C48DDF33D29EBBE35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartProtect.sql.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\RestartProtect.sql.WCRY
Size 877KB
SHA256 0193b6dd02b2cf4d6685b1e7a818ee160c4800b14ff3937dec2a5131e86a044f
MD5 256d00f078c4f4a3653c97efe2ecd0f1
SHA1 a031bb210daf0db89a040389e9c7196ccc8d2990
SHA512 1cfadea833ba9aa1f4fe9b7876c0337858a9316cf2a9849c84e0d573c378f46d89ee12186e3e7f9ab85afeb2208200d2923abe6c5b94c87150a223fb0fcf61a4
SSDEEP 24576:iSFwybZNyJRFb25y+S1RUEYW2rzFt4QuofsS:iuwyeJacrYW2rAoES
TLSH
T15E1533EF175F53D2AD919FA67B4DCB725510AA3B442B10B0220E2E7ED247F8D81E14AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeOpen.wma.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\RevokeOpen.wma.WCRY
Size 487KB
SHA256 834522b05c9717f4fb371bd62a641e5df36d46bd4be077cfd0deb3826059ffbd
MD5 22aea4e4e56615774a99ba1f9fae75f5
SHA1 123bee867d9eda02aa00302031737693e3c38070
SHA512 ac29f9d924dd6fc2ecff897f53a0f70df10e5bffe248bd31ccf702d42d1e30d233ee166c85eba17e9e8b138637da561abb223ca83c108cd895222765fc2adf1a
SSDEEP 6144:ya8qBgjjVv3NhBYoJkK1Z7JobHlgYSivdFYgEwd7BijtRHjvru1lE4jHuNZo+kn:ya8qBgddhBrJkKh6TdFW6AHjzu1duan
TLSH
T1F8B423EDA3C981941D285ABFED3AA2425910DFD35504CAB587EB31339FB920E1C5E0DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepDisable.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\StepDisable.jpeg.WCRY
Size 643KB
SHA256 877c6984bce5ad5c96d0493045118ebd86c45c8d03169248ca70cb48649911c7
MD5 b6f984150aa4a4295bb194c47e76afa7
SHA1 aaa80431e0b544ee70ff8e2c8f835dff3c7c4111
SHA512 58e1c4111b8e60590d942bfb7dda80e9e0fb49ad6583db0463c780278786aa97051efd5cb3841bf6e88bd3d5f97efb993a96e1e0bc08bb9eab33c14e4a34a00a
SSDEEP 12288:MNheH1X+HSscBgGS0HeboHMuPLom1482COjwrineMDAe3n4SQArhxUQmyPd5K8:ghC1/scBgD0+0HMuPEY58e43IANBmkc8
TLSH
T1D4E42376DBE750A5684F80F1A891D83021278CCF2B4541758A9641FE635FCDFE22FAD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoPush.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\MoveBackup\UndoPush.txt.WCRY
Size 838KB
SHA256 72a3dc189db41fe56e0121ff375669d726db7c18102def10307555011c008890
MD5 87d1547f226e6eefce71959a32c1cd7d
SHA1 56c51d764077149510f60eb7d6cdd269bc0b5f04
SHA512 773665e655eb9b16eb10b51af8ddcf1b8c76dae0cdb14fbf9fa4888e27fef05d33e6834f36e77eae7538754593e430b42665323cba84ea8b155139a67b6fd606
SSDEEP 24576:A+MgZKjqr5L04mcL3P2fLhZvNqZhbzsm7kbjyz:A+MQrHmU3PiFNQVzsmjz
TLSH
T1580533FCC892AF97FDDF50D0D4EA4FC7448B9B24F8162608C6B622175EED7190A946B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js.WCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\vxycm9og.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WCRY
Size 776B
SHA256 81a14a24f1afd0de7fc98703859706ed9b1b2ccb45eafba9b43cc0270269d4e8
MD5 7af1f4ad7f4296d4f27723030da8965d
SHA1 d14618548d324f322723ac5e423c4b6afb4e82d1
SHA512 bcb9816437a1fe8af5d9aec7949cc4981acc3591b216d338b9a28ef593132f53cfa088fc6adf370f9c9599e2a8389ab04c90f45af126fb75e9e47135ac3741d8
TLSH
T18E01B5F6FF7C51A0C8C0E739AE08F0B8BBA281141E39A6A4050DD4AF13B90053F55951
MD5 SHA1 SHA512 TLSH

Submit Download

user.js.WCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\4e6yyh2i.Admin\user.js.WCRY
Size 536B
SHA256 bf7644f6c39bb4f2045aa51b572c84eeeeeeb2ed8741f63b135c6bfdc2ac865a
MD5 b69528a26afb23ce9704e7316e9b8efe
SHA1 7c5ee3e78a2b19cb29a5fcbe64306ad688a37708
SHA512 f834fa2f71910e5d84f5246ed3d18da359564c817e2d6162826966351e42cca02b3e1e3616c15f785e7ae19b323b68950db0fbbbf72f1b20a77e9f02404860c3
TLSH
T14EF0759714588221C490D7F2E2645C916C86653B4B6B585D80E3A356AC0E7C073D6C07
MD5 SHA1 SHA512 TLSH

Submit Download

cert9.db.WCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\cert9.db.WCRY
Size 224KB
SHA256 02c5b818baf0d0b592fabfa4b887902c79890333e5694cdb32170d4889c8af15
MD5 b4144ac826d8456f174fbcad5fe9e32b
SHA1 991d9e723781a9dea10ad3e272a827c6ec9d40d0
SHA512 99f60474daea46eadb460773253f0bd3db22ab0610e742531f7385128ed58461c99d4ac28d0e2ce9c3f11b90643c92f7cba059e4f76a7d49a6d3abbefdd52a65
SSDEEP 6144:vjuc17py79XW9hkn6q0sNeIkRayWdV4v4UtU/DXI0I:7r1tyBXW926QNeNMVwsM
TLSH
T11B24234839F473A881E109A9BBC2CF6A14446D13CDBCE544E55DBAD663D2EC14035BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

key4.db.WCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\key4.db.WCRY
Size 288KB
SHA256 e36dbfc285b2d8660d897803a2b703bb8c2419c0245ad87c760c048c4126b8f0
MD5 37ec87032a42b4ee0b7c0cdd76a182d2
SHA1 c341873e4ea24874b5e868dd3444781d4342c732
SHA512 229502e9e47cac7794dcc4639f4a0ced88c84c165869085be3ed813b690b57972bd62fd4501f2dd2259a9996573ecd0d14ff4da3e20371d4ee9f482299ee66ce
SSDEEP 6144:Hl3scNr6HBy7kzd8nlkKRJZiyka6fcesaL0tD8b+S:FcKGMRlkVAqcesSsD8+S
TLSH
T1C45423D239A5B1C8E51A2C135CB3C8FE41FE7C262B9ED27C4665A13043B4D0DD64AAB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkcs11.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\pkcs11.txt.WCRY
Size 808B
SHA256 78eec17989f39c0db5d111531cf87d7237cf4f9ea02f87d54c858944110b4127
MD5 25902594d381d28feaac3c4ea3a3d931
SHA1 517a0c4486aca9ae8790b0b1581c3c1514422b50
SHA512 66f5a1edc4a146e7bdd25e6ba79a6b1ff0c08c77202b9cdbdeb1841fc32beee991e0eae5e8a2d3949b26897241e3ce2ecf396de26e4292dc0ef6e813fc138d28
TLSH
T1B401C5CF841742A2CB6923713A8D17D41CE615B2D68E30C3B33AC207C80D72728B12D2
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js.WCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\8z6dgki7.default-release\prefs.js.WCRY
Size 7KB
SHA256 da970c45c7604df60c5372c69a5deb4c6b1d1caaff4c64cf293cddd0e0ced6cd
MD5 1765fa9592d1b2c70b9ef1c4851bac75
SHA1 48d0b1437e820e48571af4e50192c8858590e0b4
SHA512 556fe5b7d5cecd6b3af62338371dce90e0828522d4d50868218cd55bbe0d9091cd7bc36effbcce9191114108a67dcd496bda21a45658902ec3ece84629f31695
SSDEEP 192:S47/Q965DgNZ5BtAdvu35Ch31kti/glpKPgPJD:ZQ9IDgz5z38h31pEMgPV
TLSH
T124E1BE2C503FB6AD8BD0D7BA2B7D0E1D5A4F37B3B0B875E8386C4A0C635651833855A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoDisconnect.wma.WCRY

Path C:\Users\Admin\AppData\Roaming\OpenDisable\UndoDisconnect.wma.WCRY
Size 1.2MB
SHA256 2e13bd88977ac445bde4ca22aa11408145f1072d229500e1d7afa7a4acada302
MD5 64cf98001ef82b62db4dffcf49cf38e4
SHA1 f855f4a9de674e98384bbf0c066918d4bf01ab30
SHA512 11e4f3be9e858cf9296beb498eca329dfd3a04492a3d5d41d2703bd8e497637590a77f5400d3d4a7ea491f0896444270e02036eeb791c2811b2bf37961ac7122
SSDEEP 24576:e1uEz0C4oaISpVM/8aVwkvCH6KPewMFxWcCff7FJAfB/SPTlEYi8YQ/o:ekEzAoabw8uo6XGcm/6FShEYi8YL
TLSH
T1275533E5A480504D6FDD1ED8A9D46E241DE8C22963FC8CBB2FD0A1EAC8E741763E17D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdatePop.pptx.WCRY

Path C:\Users\Admin\AppData\Roaming\OpenDisable\UpdatePop.pptx.WCRY
Size 863KB
SHA256 7d4850d985d7e568f12af33d8fc4534ac75c5ddc4b9d5eee2cdb8a4d8e89d553
MD5 a4bbea78f81b90fe0ba7e58a0e39449a
SHA1 0d1e2474312651c0d638811f6a7e6c76130db198
SHA512 90f77bc72e8e55e882b4c40b81eb8c286c9d38063a33a0f604eb2aeea366d6693aeb66823c083684d9a6ddb00db1dd9ebd10ab5bc3c2293744c34b17a6267aeb
SSDEEP 12288:Bf84uIKOm55w41n4PScEulgeySFyxeDcmHU8y2UhfLib/1a2YX1IguBexqyo4uSW:h84upt4i9JkDjUVHub9A1IgqMo4uSml
TLSH
T17B1533AF49D11CAB634244AA48620F7A047274743CFC35B26B036839AEADFD1ED5F6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseSearch.rtf.WCRY

Path C:\Users\Admin\AppData\Roaming\OpenDisable\UseSearch.rtf.WCRY
Size 761KB
SHA256 e3de8e2f9e0822c2da14b364e696cfdcede7934a46f7f294a2d0af88631891f1
MD5 4a487eeab03469af5ca0e8b5e778c985
SHA1 a650c88db0d20433e93ac68b928a7f345b787469
SHA512 44dbb363705445587fc26beb3005d3375078cc088cf19d91da2bfb414517514c21701f9d673f599efdd3b5f3203f40921572e464bd128c1c6c953325931ab48c
SSDEEP 12288:AzhJRI53ynVXl2VRh+ml4WGLKfUMwkDudGlGt0yWU1C58+3gJdn:AVJRIZ4VXl6z+8PGJ7nH1C5iB
TLSH
T1E1F423D908926736CF9F3E2DB10C8FA7C141CF5B5A0432CF7DA2ADCA16ED6E88119459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyRevoke.xltx.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\DenyRevoke.xltx.WCRY
Size 425KB
SHA256 7184b733a1867b7e76fee6f2fa30e03c1cfe5a4ca886031fd0331c762eb3900a
MD5 b271bdd75f742fe1ab015bad9bf93f4e
SHA1 b2e2da92bc000cabb8a98de0a17b540a05ad66cf
SHA512 dac8ebf5f194ec76b7b4f1fe8b919b4264ceedcd1714cb4d43c373e771c0fdf520c5eb63ad215da4a40d91f0adfc3e65dc5d912d006e58ce0d57701642d62b21
SSDEEP 12288:x+X1QiLQSaS1Ij3p7ESjJnA9pT0nv+GHbE3imFX8k849X:KVQtDp7ES52pT0nvLHbEV8q1
TLSH
T16994233C9C05F8767218A1988C420F4A6DD1D941E98E99ABAAD34DF07947D3E7DC28FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportStep.potm.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\ImportStep.potm.WCRY
Size 213KB
SHA256 5b43d23cd9b30eb5dfa04d27b001be41b334036464bd6a55977f788268e6c935
MD5 89f549f820475ab34889b38860200793
SHA1 b804be03ea1d767876d7759eb13ebed1b84f33af
SHA512 d7d11856afc0872fd1ed5c75a7d5a31f0cae578b7a7b8592ad3d3312a138aa1232c6d335491cc1ecf6b5a58d5cfe50ce16110887ed27b45420cfba8b14f89d14
SSDEEP 6144:9lnUnh+nyY26ExMRCP0uwGHBCjsjaHS74S2F:c+ykExMRCP0uwGH2y7x2F
TLSH
T1C32423E932018336D94493753426F46F669119E9AFDD89277100303A3A6DC39EBE7ECE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializeWrite.mp4.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\InitializeWrite.mp4.WCRY
Size 178KB
SHA256 a9f4a256fc7a43ee253b6f5ff1f14d528205bf2d49b938963689056f26a138f2
MD5 f7a584ea6c1ed22508541eb62980ab62
SHA1 3dbb27edc2dac28521cadbf39bfe67286eedefad
SHA512 b5934b6e9340f18fe9ac57340efb872e7f95b2cc9397d77683c458fb7ad60ce69698a6b286a4aa1f870d35fcc06d34f6570a69b8aa209e1bb8b893e7af376e75
SSDEEP 3072:jQPPl0J9va9reYOZEvM0N2aImYVX13UDUNsclnAIgm8oyOtcrSfiNnWMdn35qieu:SOvvahoGN2aIJ51o0CoyO9iz5akLdnyS
TLSH
T1DB04121494B4C74A079043C292B86094587EA988CFAC76651ADCFDF389D50AE7FB43BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallRestart.bmp.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\InstallRestart.bmp.WCRY
Size 230KB
SHA256 bbcd526ad75adbc2b90cdfc2b50823bc805a0345e6bfdfddbe79da8e6cf21d2e
MD5 8e9405bdbae852675d025409ae375da7
SHA1 b65ac11fc315f07b2a1e13bdcf57aada4158ade1
SHA512 f5e46f86d83a1cd5d3f4d3d33b2d54ab174c01d83caa281fcaea1c4dab9f852a5bc4052ee113d660d64c2050be16007b038f7c4a3e1a37051d18fee92d0aa5d0
SSDEEP 3072:aHLM1bFZvc1hUk1dAKIWLELKYA5utrvwFxnhai99hHnjI2BdhdehsAugQhxQ/Pg3:hbFJHkPdbA25ir4EiNHMSfeovhEP/uGO
TLSH
T162342391A8F71B6812CDB415DCE0C0615F79989EC109FA885DFB27EDCA9FD12374844E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutRevoke.xls.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\OutRevoke.xls.WCRY
Size 366KB
SHA256 22a7f9909380ab799aaf0fb44b040c8b3e4d550132ab7791586e691ce8675a83
MD5 38fd2a58c9b76e4bd842da5349c54f8b
SHA1 76e812d0dacd1f8b714b04cd33dbfda8dffa23d2
SHA512 fab7dfd124096eaf906d38f634c28f9b5c1645eaf522045e4115528fa69a89ea68c23c60292c3557285fa2c0a677f3f8f20d73386ff4be0dcf29ef56ede4bfb9
SSDEEP 6144:crgLEP7mX00JnQRBX3vnlq9n4mbShU8kFIZkjdm63En1WQXfggDkajgMT5d:tEjmXEzn89n0qFISj0u01W2IOz
TLSH
T1018423AB73DBC6B068C9153C40E6C9B1E70E21F2E364FE561EADD0252D8F024117B5BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishSend.mid.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\PublishSend.mid.WCRY
Size 332KB
SHA256 81572775504a42b96f33b1c78ca2fa4a5258e1bc8ed0f0fe7f5f62c92e97ced7
MD5 1ae49b513f715b7f36b941fbd5653d41
SHA1 af8de39fea11c0c7be6a694b7a81af705109e5b7
SHA512 eadefeb4a7fbb28db1585429eda5d7c98e37cf4135e62d06d19bad17f798616fd977986c8dc1ad0d846ea523b3fc65bd58488f9525bf0e7c8831b40d72f56411
SSDEEP 6144:GLZKXEm+l2QYK1pUAYeJtpixoLqn9Yv4SQ1G1C/zyNSfz4oLD0:uKG2QNXSWZv4f/zyNSb4o0
TLSH
T16B7423508BAB9DF68B32439B8E83B3554710DC94EE54D3EE9A6E43C230F4A194AF1CD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeConfirm.mp3.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\ResumeConfirm.mp3.WCRY
Size 264KB
SHA256 6c482d02f95869d340fe426760bf74a762931398d7e41b9278fb5317c362977d
MD5 21f2733d92a68b9d8395155b54f320dc
SHA1 6fb9d5f5e8b16fe172f25c42acc49aeb010986be
SHA512 aa527f0ed9b789710e620264b9d04695d7ef38cd32adbb1169963f34f1e9a5fa0cbd0d332f0f5c9564124968041cbed4b1351a53cba6197fae760ffc1596b039
SSDEEP 6144:4Bgby7LzKz8Vtr+N6kXQi429vfUiATfbvhzrWrOuiHng:4BgeLKzwr8M29XUiifj5uiHng
TLSH
T10A4423188630FB634AE62BA09CE49388B99F3970C5D725CC3AED832E712471CAC54777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendRead.ods.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\SendRead.ods.WCRY
Size 161KB
SHA256 0779f832875d7d14397de75a8dfcc0cdaebdd46a725179d9c9af8fbae0c6c40a
MD5 7547ebbe8b306274d6e2eef87329da96
SHA1 3380462aef7dfa1b79412db862a5574626b08829
SHA512 a68659a398f46613d6f3ef69d0640b19982ba9bfd63267751e1ce90d168ec987db7d2b01e38016fbf990eae5054cee348e04551be6871145a153875f3c7a064b
SSDEEP 3072:2KyTiGSHgFbrz/X/FS3AqQ3d8BWYQGH7Bfr/eftYpbGIiJ0Vywv3Sx:2KYrz3sAqQ3YHNf7WtwJIwvCx
TLSH
T1B6F32341FB19AE926B02B12AC5629515317D7E88B4F1D837E2C422CEB7B714FE8D1D8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockResume.potx.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\UnlockResume.potx.WCRY
Size 281KB
SHA256 ce02b68abe9a7da2548d4db48863b487ef466684a4ae9ecf5ee1cdfe6acba599
MD5 5820423dd99584785a28053c3897a10a
SHA1 2acd0cd7355f735a0a5dbae34d23d7a8bdf6a7a4
SHA512 0681dd427630cad95e4830a9ca445951f3cd8657d2bd80ebb8b8d0a8481a3db585c7209ddfbd36a209793cd3f6b9e190558620e4d01f49737d284de45cca21e1
SSDEEP 6144:ztyjW8Jijc1A/ME4urR254dgRPN6mpYWkccGKirSl4tvcueKNM/:ztOkrkEtRtgpkmpXN7kueKNa
TLSH
T1DD542324E786E1C03DB23B745431EF1A65ACA7BAC81857AB059BD5D8C05A2BD3C601FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchUndo.avi.WCRY

Path C:\Users\Admin\AppData\Roaming\PopMerge\WatchUndo.avi.WCRY
Size 315KB
SHA256 eb6e0904a09482c6234a4bc31440970cf54122b609c42ae3762f6dd886d41e20
MD5 8352b6aa5b248078dfc298ef6f6d6c58
SHA1 fddb59d2d8f1a4aac02f1abd9575303418e9588d
SHA512 808cbf2d766ddaea36b878783f561ec2a104ee6101f56f30f4485df1a18eeee72933e174721e3140ddcee421b7bf46916f4f8423783e7627c05593553228a567
SSDEEP 6144:iKq8cAnI5SgiLRBhg0dsK6EFyfgtAEjdja5ADxmqf7/LeodFG2S0g:iKiDYBy0dzFZAEj9DxRtG5
TLSH
T1DB642319B42AB0536E47330C38642BDFFA6492A704FFBF8A562532D1F7B30945E3549A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameSubmit.vsd.WCRY

Path C:\Users\Admin\AppData\Roaming\RenameSubmit.vsd.WCRY
Size 163KB
SHA256 67ccfeb073f8fca3f8f6d92f3eb2fe61b183a5aff42b7b14fa78019029cc096d
MD5 c14314db7c279e96b43f2a244a3ac276
SHA1 5dfcd5665d006fd9e118352ffc1cc4784bf1e651
SHA512 0a7efd7d6080a86a98b98fe55df942a6d9d1b7f410626077b9ecab94c35e34236450d71f7bf9a4eed361e02e1ce696846dd4d808845a591563976e430e0f5920
SSDEEP 3072:2GXicnK3q2y08X7ikXoRxjldpsdps20GUBILF4NGSZ7F1MVJv12LcOFa2U1QJT:Ei7ikXo3jlLsj1UBIL7D4yD1QJT
TLSH
T18DF3129CB4B316CE9EB7165E09815CB6695E01A030FFB116EB1C88C714C872DE6E87E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveUndo.wma.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\ApproveUndo.wma.WCRY
Size 1.1MB
SHA256 212ff7d8572237bcd5b7f068816a68bc9b12b91b31071b31c1a0c82eefbfd0bf
MD5 f08f0b680208dcd3d55a4b3ad4676831
SHA1 3e3579adf64a357a1313ecfd42bed8c19fde561e
SHA512 83ef00a05aa2768c02d9816eb39e02d45f7b1e257614ace498a97e7f9fd320f7149a5ff84f2981b28fbea359302f3f955723124652cb82b81158b518c98bd6fe
SSDEEP 24576:ZL6fvCp1IrEnTYm7nvPthA6gfvnS354k2zjz0Ro5kL3:Z+fvCp1IAkUIfaaTzE25g
TLSH
T10A35337671198D63B613BABD4317BA3F23C015D01972EFF72A70F6B02C90A6A91F8165
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromAdd.csv.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\ConvertFromAdd.csv.WCRY
Size 860KB
SHA256 b5aebfc85e23ecd373573fd5da690f81a79404f3915bb91d61f274f86dec6ff2
MD5 0032051c5def9eeedde569dd27f169fe
SHA1 5e2cebb3b4de898b2d1d322d0eaf987be640eac5
SHA512 2071c50a898143d56f69476c7c3493e7a86c200a190e71eb8d521c7dfe14583729de56d76c5dbb5148176225e0c6697178a5ef83fa86bfa641b6c6f12b4de25b
SSDEEP 12288:+18q7KFuXUZeB6dCZEXXhAimzM5pVdi5Z1JpLZ49SQkxSGoi7Ur3Q1C6DMWxwiOu:LqZEMTEXbbitJxkxiA7WT4WxOvq
TLSH
T1571533FB8844AE65A78E441926A0ACCD137376C65C78C88BCAE7DC6151FC952FECC349
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopySet.jpg.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\CopySet.jpg.WCRY
Size 1.8MB
SHA256 7de84c8540fdfffff9e60c05bd416fab27918c7b6113725b8eb9e3ec4a8fec37
MD5 9d65c0a13c2a16b6b18f9ddc79dce622
SHA1 0e87fe5e4d80ab7248af0c4a640b6885eadcf868
SHA512 ac2539fa0651ca08eaee46fdb57ee0faf10943f37e8c053d24a2fc6589ee4c07362127e2a9abeb2a55055dfa9e60e520652418b95aca3ab1565af58b81e56aa0
SSDEEP 49152:uZBYIlLMN3mIfCwvARriMCC0gU80ob9o3:uMm4mIfCwYr/CIt0N
TLSH
T15F8533F5AEC80D82F9F9DC2882771A559E7D060E3967111CA1CDF1C97788A178D0DF92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportUndo.xltx.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\ExportUndo.xltx.WCRY
Size 1.0MB
SHA256 bd1a14ca437102d14e0d4869d20852640b328caa5cd774fb94302f24636df7f3
MD5 0455c69ac7b622790fbfe7e1c35a40e0
SHA1 80f67a6ee02d3faabbe566d9e9a4117adfcaaecb
SHA512 d155ffb168fe1210bc3501d016930f576a88c2a710158aa54cce4fa03d52e4b7583a7481cc4b62a13ff2c44e4e87049cadc600f3a63b0df8a14fe1de4fc08e79
SSDEEP 24576:yJ/0TwPIe/UlWe9AlnWi4lkR5CzKJ7SSrDVqAjt2:yJMMQesl79cncCOGJmSIAjw
TLSH
T1343533A30B2FA7C1AF016E49937BEAE594517D4D860FDC211CE4E58E66312DB0BD06EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatInvoke.jpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\FormatInvoke.jpeg.WCRY
Size 904KB
SHA256 5d8814e014a5988c838dd8c15b92f4566ca9b6fb4f6a265f26ce07302e274041
MD5 22cfa5d3060efc814ad950443a07909e
SHA1 f3d21cb711999de423bc7fce3abc4bacb9ee76be
SHA512 0bf150ce2d54594c2cf9960e07d4d87009295a790b47ef064d08902a7751e0a2f98d29bd991b08c7fb8a609279004552270e272530784b3f64e3b5e2d7832a63
SSDEEP 24576:JxYArBd32UT4BLUpOSU2heO1DZdMuaM4Uw:LVj2UTKLsfjuul4Uw
TLSH
T1D71533E728F915542D8806599BF3BC36A6E8CF50F5C25A01A4EEB07DCB3D51E2CC2B49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetSkip.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\GetSkip.txt.WCRY
Size 639KB
SHA256 55289937ee4561320aca9a844597bfed2a2daf3066c53b0115c66d6bd2cb3e8d
MD5 aeaa89dfedc188d3ce68f4cf5290e431
SHA1 8246226acbf09b9ff09dada8ab7c4d5bc63aaf32
SHA512 1be9655d79e005e964360baccb216f40e71ea9ca0c95bc14a8eacccf99a6205e8ca676410faad0cc82918285a4f27689621d890ce8fb8375665d40935c5eca0c
SSDEEP 12288:jvFZT+h0wHu07aumkXKzIVA20XzVCxwSKjYpANmaVXwRQXNmSPK:jdZT+h0wO07Dm4KzIVKhCxwSKjm026X6
TLSH
T195D42309ACF92F1000E9502C39ED2ED670F8BC636C1153B236D159E270BE9E6E66E375
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupLock.odp.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\GroupLock.odp.WCRY
Size 684KB
SHA256 3925396424b89209998a6e8ccb603df8888eb4473907095b72f79dcafb43702b
MD5 cec74a65d70d73fc8900da47d80e8b01
SHA1 e43f2355791c3ce744c0cbc4314e085ceeb71aec
SHA512 ddf3712aba6ed24ae0e77df78ba7b8dff9ecd298340a46974185a147906e56d86bb00fdaa2b1c75d20c722cfd56858dafa9c42ad0bd8de81ad3c4d5c631179f5
SSDEEP 12288:gODhcY5kZ/7Rle4s2DwSqghPuY/+EoVT+r3UKKiDo8rJt5:VhctLl7PiyzUKKiMSN
TLSH
T17FE42381A3D62A2193B29DD64B2ECB106D1D80C2CD1B872DFD2D6713E78B1DE693D0D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureAdd.mpg.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\MeasureAdd.mpg.WCRY
Size 1.2MB
SHA256 4d651b5f4de89f69e22b9b897b03157552c0a2235ee8b77a3b4117c2b5d04297
MD5 5de866e670d48edf973b50c20449c6e5
SHA1 b1cc51fb8c9ab3e65f6e8897194aca3a48486db5
SHA512 d1e2f8503200a0e2af7ee6ee5d188980911f91397f530b94d7bbadd9510495b2951d9c965ddb6aa7ecda811b9cca18023c10d6b8523426d338ea78bd0a9bab5c
SSDEEP 24576:kQEgTF1XeLTg/fFvNYnXobUylLbPIs8h8x7ph/6WNuqlcXCY1FY0:k2FILTg/fFvAo9JbPIJC9l6WNYXC660
TLSH
T1E945337B2D5B0146C8BEDB237013AADA26289D9BDF0094B7A3202467F4C11D946DED3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectLimit.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\ProtectLimit.txt.WCRY
Size 948KB
SHA256 f273618809b4d076c1c5b231b0e331930ab1042129f9fb226578b3634b01dec2
MD5 d0a027dc2b5c98ba2f5695e88d7b9402
SHA1 f996e1f68e14748a3801299fdfe7b5d09346cb72
SHA512 23ec9fc5d0808fd44fe070b297f5e605e58ae78def5763eae8033ab56ac578a9eb5600f90ca504dabad587f5d05a615051ee872b8ebc5f6aec18acc21d293196
SSDEEP 24576:2JyiNyZ8wflv+SXzXGGXw6d9MUbhpSaGeG6P+cwV6VQ:2JbNk5flv+KzXK6d9MUt8aDGI+VCQ
TLSH
T15E2533ADC9F6CB8DFBD3F1A9125E6AFC9E9D074C272419254259EF282C9633D640C702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendLock.vbs.WCRY

Path C:\Users\Admin\AppData\Roaming\RequestUnlock\SendLock.vbs.WCRY
Size 772KB
SHA256 6a6fdc2f35315d5d58738e1220ea8f840b4f0729a31617f90f9743cafdb1886f
MD5 c87c864105176317a3d677b8163c7aa9
SHA1 cd9da3fa55a7f228ba657f30bc225f8689d6bce1
SHA512 1787220b42b9bb63a9dc6a73db48d4c7123501a01c1cc8eb011c9f9ab3ab0b989e57108012960ca6abea1e2c017cca4574e2fe3654d0d32feeee6c9d996bc8a8
SSDEEP 24576:Pplq9fiBLwD464Ivpa/Pdb8/jNrDXOyOuDXRIm:Blq340pa/Pdb8J5O4XB
TLSH
T1F3F4234CCE9698D05AE83E272795CDF622351060FF24CA21F5A4372749DB18B3E9B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugSave.3g2.WCRY

Path C:\Users\Admin\AppData\Roaming\SelectOpen\DebugSave.3g2.WCRY
Size 249KB
SHA256 44edbfa97711f5d3ae7d816a25f78781e67d45cfeadd06dbb5008eed8165b068
MD5 ea3b0728a6046e1794da352b229f6894
SHA1 bb4e1bc57c03489c264a7a5671cd053b4f856fc5
SHA512 0d506297fe457a44becf9c13c19710634279a86b9395f227eeea6e7231130722fc45e90e48e7e061169bcd8635cb7f0b22a6f2c2ae1ae1cf40c5b4fef378d225
SSDEEP 6144:oCQ5aj6etGI+AzJx8KYrYieUJpcO4YQ+0B0nQMAt:MYj8J/pmO4YQxBGLAt
TLSH
T1534423C1969CD0759F3AF60C67AB538CB44F3AF6C18E852A288B8E5118D453014FDEE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeUse.dot.WCRY

Path C:\Users\Admin\AppData\Roaming\SelectOpen\MergeUse.dot.WCRY
Size 498KB
SHA256 592af0c16619ef352d6560cbf63df290be2047423e385c6f2916de8201b2a246
MD5 804d85a910d4ca688bfb1c23b2974781
SHA1 973443b061e98e5693dc9482ce5f8f31ba585461
SHA512 327caa53cb266998c6d162da8b5fb95f72a41b2f152f8118f8d8f9be4f772d19cf4db1504d07b7fa935dacbe380f60510bca1750e33ec2765afe0fc1950f1fc1
SSDEEP 12288:S81DmE28jwgorAVIJBKPwIZqhT117hDm3Ff9Ehw40:S0h2eaBKfq9111mZuC
TLSH
T1CDB423957E4FE3FA7F3148B64EDB514C5C746702553FAC22236CA2A28EF5920C3258A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopWait.gif.WCRY

Path C:\Users\Admin\AppData\Roaming\SelectOpen\PopWait.gif.WCRY
Size 338KB
SHA256 63a1a60c6788d6c8090bef51ec2f793ce937da724c99cc513091c7d3d980ce6c
MD5 b471d2d398f1e25f77c868df52d12fb4
SHA1 539005a381601786f71162e340bc9156e92f9e37
SHA512 72f14c381e0e98305d8872d806019ac700d54feea93a8b4928443236c5065007e83fe4a24ff26c64c5e64250e204f720084e4e16a3c8b5398fe95a2b875b96b0
SSDEEP 6144:wmE98n6QcvzNWopLI4mAudqUFsESHw8muuPBcO362pjIaatHTpE1Z3bTBiyjdPT:nEOnrcvzNBNpSCO3/CVJWHkIPT
TLSH
T13F7423A6A6E601074CB6A6A33791604F1F95F631DC3C4D8F833364E9EA36A14E97F604
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishReset.mpg.WCRY

Path C:\Users\Admin\AppData\Roaming\SelectOpen\PublishReset.mpg.WCRY
Size 444KB
SHA256 31b3cb72bdaeb851a7baca7bad1d9ee26b47fdd87a7a8095e9512a7b875cfd11
MD5 0406088ae10734c46d4120bf1e5d52a9
SHA1 f9e55afb5283e05e71d5837c1a02e23a3540bd0d
SHA512 1c1350e79635a5f62c51822bc0cf4eaad73b419eae77ccceb7f08ebf257694ee8f87b5e6f25c9a25122d89c28651a9f001312bec7107cf64d431f2cf1af1555e
SSDEEP 12288:qsTChg7T0bJ8BaM6lGDBCOu8H8hbg+HpMXHa:Gge6amBTu8gbgHK
TLSH
T1E9A423CBE86C52D2792468F6A3DD50C532F3A8172F1D3D85ECCA5F64B4589A700CE89B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncDebug.potm.WCRY

Path C:\Users\Admin\AppData\Roaming\SelectOpen\SyncDebug.potm.WCRY
Size 586KB
SHA256 cbaaa688385ac2c7aa3921c6db85d801cb56f6758dcb27b3a5c7dcfd8901b054
MD5 c09f835a30845487503d012f13c752b9
SHA1 25e6f2132199d7a12eaf294c6ed9df2567f06fe1
SHA512 1ed744d927fb81bfdc0fc81a41ca7d2664583c0c36a5f7bb91614477fd8d0450460aece6b80f149c6187aa22bd74a523a787bbf577c6787f05fb3e09055c47e1
SSDEEP 12288:2Zghw2jDmwM3Mkd79SjERlupIeoBKHAR1/LAvFNYxG0bzmfuI:2OyQDmw67CMluypDjL2NYxG0bzOp
TLSH
T17DD4233043BAC020F5B4C77A2B4B7C59277D5C19F249D80F6CA79B4FB6E5E62E456820
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WriteGet.iso.WCRY

Path C:\Users\Admin\AppData\Roaming\SelectOpen\WriteGet.iso.WCRY
Size 391KB
SHA256 47d7e81a4f46adbea271215242b851a25cd74e458939c85488df871913a27be4
MD5 51f8c78e7f7a126cf907efc71d699cbf
SHA1 79c4379b7eb551f3fa654de2fe279d8a96c6a5fc
SHA512 f1ea4d2754283ffeb1eb4f32f4a280f318ea10510312a557eae5fae3bb5d52e420cdb82c77a6cd9c7eeadf38d02b89402f401732e933817ebd6ee209260ef61d
SSDEEP 12288:odVb32lZ+uwMfPYY9gsKeF9YYrNw9hlkiTO8+U3nKtu:6q+2Pb+sF3NwTlkB8x3Ktu
TLSH
T110842370BBCBC406234907C119DA593786FE4B236E884E90E188EC49415A2B5F6FE6F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompletePush.tiff.WCRY

Path C:\Users\Admin\AppData\Roaming\SendImport\CompletePush.tiff.WCRY
Size 938KB
SHA256 6edccd61a2f39cd6cbcd4cf6d2e9421e3f2e38aaedd3ab24c6d60d771e4196f3
MD5 bde59d02155384e30518f1e21750a0f7
SHA1 e094431c6a881a9487fd05c0187039f3dd963b63
SHA512 1bb36d13df13c917a676572377292d3e88ffef686464c2b118b92addc233ceb0437e02289633374e1dbeae7a9eb87292ce6be7495155f8bbddf13c5636881198
SSDEEP 24576:jAhHBqgBWxju6Xb3C4NV84YsOtHPZRzj3/tBO3oiJ0HtqVfkZT7L:jAh0tRu67184YsSRz7ODvVfQ
TLSH
T184153398F39B9CDE31A58B2662EE2F7F83E3F8D5DC70C550664A4BD2610E3E1C612185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectAssert.ps1.WCRY

Path C:\Users\Admin\AppData\Roaming\SendImport\ConnectAssert.ps1.WCRY
Size 1.2MB
SHA256 75369e85a7876e1bc9a817d36d51ff670723a04eb9b97fd6da94b035ef116455
MD5 d98f7d44dbb3cb0be21635f6b8117446
SHA1 3a94db49835f1a7cd293c1637bb067818cbf377d
SHA512 174ade6e00688ab96d4589013386d07feee98278b9820274283fc07b400c6ca3b523185522769828b379ad81141b0e15c0b6b20dd17f05ed485f804218fac3ed
SSDEEP 24576:T6f55sQNZ97HEjCV4cvZCdxsB5BL5FRGzgj36gk+RbAU/5l6pREJqvSgZZq8:Oh5zzHfzkdKd63+Rb5OjEJqvSgZZ/
TLSH
T1A245337078C31F5383E468A1511AD35D8CA7EBF8BA72902E982F1BE75DCB119B847253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertTest.7z.WCRY

Path C:\Users\Admin\AppData\Roaming\SendImport\ConvertTest.7z.WCRY
Size 512KB
SHA256 da9a3639ab8a49f143d3858b493e675189b2952d37d530e9e203ef2703043aab
MD5 af7a26fedfd195b9da0b401284be3bba
SHA1 0d5199a880df741fff1f7b490c0916aaf6ba5eb3
SHA512 fc54bb39c1c8236abfd8fe16eeaf2dbb59ca2079c877cfe79c4b1f3a994c82697b747d102e0e8df8ed83175101687d68f3860a607fe037b5ef7ac8aaed4b2994
SSDEEP 6144:qY2leXa6rdpUHm1P2UF0JywPtodfi2BA01u34zcBcNc/S2kIagCKcSKHUaBC0rlQ:qY5/h2AF0JHQfEiu34hW/S2rCRSRadrC
TLSH
T143B423E204C9B0C34B2DC05F93765A99489F2A7E46BC7DF24469E21CB6107BAF417DE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MoveReceive.rar.WCRY

Path C:\Users\Admin\AppData\Roaming\SendImport\MoveReceive.rar.WCRY
Size 1.3MB
SHA256 e725f75861a3f1886f73e69e6c3d39a9f77a970f69218a2c094aee41f2f0a090
MD5 30a2fc19009b918081dce06cbcc0219c
SHA1 59187c6d8218e47e470d9ed1f135e6974f0f2479
SHA512 4d110542cef586924e29bc8e38ab4284227e1664762c783a80c0de685be0c013b1401c850334137c2afb05a8c52275fe5b1d79598e29d597fbcb4691068689d6
SSDEEP 24576:rMfIaQiY3irA7LzwtRNC6xb16te5jY+wY1pv07qbEQD0CBbdEPIewug0:iIaQTiCLstDL9ote5kjY1JdE1CJGweK0
TLSH
T18D5533FA9187B93158BC85CBE4C82B0A343E48DA15D6D03B1DB15FD7C8B4985B72ACB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetRemove.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\SendImport\ResetRemove.txt.WCRY
Size 1.1MB
SHA256 3d5be66ffcee8f41631021a2d1f5be96cb7ee837520913525ebffa62ec7e9491
MD5 863595c1731c578a2f59b07c4550f264
SHA1 f38c597d2b78dbbfc320c965a124fcfd0ef31631
SHA512 4c195c817312451cc39741c55daee0df994da58d3746cc07b24d45e00e98095184822dbbcf92436388228d08fb45d62e67b56d09fa640f0e2f31a01eb4eaf9e8
SSDEEP 24576:vogQ2CTv4TuCKUxE58j98azfoqSJLQC38cgKcE/G5Z+N77Y:+2ex58j9xfa5/38bKc8Rl7Y
TLSH
T10D35337205CDB8F12928BE81F26CFCFFB54E52501C7A5026C89E72995FA421F471BB64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendDeny.avi.WCRY

Path C:\Users\Admin\AppData\Roaming\SendImport\SendDeny.avi.WCRY
Size 682KB
SHA256 56635715e50ef662e8b26d5de94530ac93cef817375d4a31e6b6a5d67b30fd3b
MD5 81b5959b67c4355e77a53b99a03527d8
SHA1 91a2fc486de46226a03e1425e23e31aff1a67c55
SHA512 d9d00da37416558fac3d258e9e63f57883ae13efac28dafe21284270c42093c1c97a95d091df86c6bc49c8204e9fa761641a23b51a6ac382402068d4d349a58a
SSDEEP 12288:c4zN2Lds9y3YmvpfqgTkb1eSW47Vrw46AwemkLXAVVFSgZXi620fZ710zyRuqS7N:rzELK9GVf7TkxeSW4646AwemkLXAVByx
TLSH
T1A6E4232805FF667E9CE877AD91A38D083925CF726B707FC2E6052049B21FDD1A2D29D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallAssert.mp3.WCRY

Path C:\Users\Admin\AppData\Roaming\SendImport\UninstallAssert.mp3.WCRY
Size 1.0MB
SHA256 4f03ace7ceabe66a2753505cb9a4b647398e5cf8c074c5553857ec4d5eb57105
MD5 32490bae2925563b60c60529b20a0ed3
SHA1 41c3ab2e79460a541911ea00b23f385fa19509a1
SHA512 3f2c8abe4b4f922d93004691959f7ed84e38c788d69b1b8cc9b086267575c879962ad51e4ff8fd222a9f80b42f4f06682d066d9b96a995ce6e28c392b4016afc
SSDEEP 24576:CdQDglo0NQ/ryKBs1tJbpO28hE+1HiCa3doLmKzmMXGCXCp+lyBJA8/TPf:C8gu0NQ/e6CtRIhE2HsOm+LXo2yfj
TLSH
T1242523A74218523162A4B2E545FEE07CA5EEED7D348A85333E7BE0BFC4251315528AFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipOpen.docx.WCRY

Path C:\Users\Admin\AppData\Roaming\SkipOpen.docx.WCRY
Size 432KB
SHA256 1a4983464911d7967ed3138768965fa27dd2a5766c6592fc260f2f6241bb0385
MD5 0b56231e3a245013165d3372396779ae
SHA1 c5648835a576604af90285ea9c50a09df3cbf63c
SHA512 6fb434d75c50c653807a1d72f440f918de9631fc2fd7aa7712fc9a1fe09d3249bdc46d4674c80a1b5d3c859d27026ca883a9d16a9d66d5277a77f826810f5c12
SSDEEP 12288:aV2U+4Nqt5HWNWSAT56qSKgne2Ck+rHHa1VovD:aV/+4Nqt5FrV6AceZLHa1V6D
TLSH
T14D9423D148FF9928A09BBA9907BCD11AFDCFD57F1E0224F04D1B8456A630DAE3CD2952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitRestore.mp4.WCRY

Path C:\Users\Admin\AppData\Roaming\SplitRestore.mp4.WCRY
Size 253KB
SHA256 8c336035dd4bdf30c0980b551c73031f5ce1c05f742ea8c6d84580f65ae112e2
MD5 c2fe04dd0513d88cd6cf2ba6bd643f36
SHA1 1d48307f74a10cdfdde22fa7f6be3989942755ed
SHA512 4cdbc6ca853b674f352887bfef0ec19b858f852e8d44feb50849196413dc34756712d90ac7a5f9d6a5824b2001d97d28cbf3de004e6d1a33f55e4e4af51bf069
SSDEEP 6144:hF8WXQ6jkuXqV31mZxOUAv/CdxjShhscbi2G8MjGvi:78z6jlqV31mDAv/CdxekYiAMjG6
TLSH
T1D94423FE3F518B6A1AD98BCBE23488827D49C1313794854906384B0CED6B36856D7FED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupRestart.php.WCRY

Path C:\Users\Admin\AppData\Roaming\StartRename\BackupRestart.php.WCRY
Size 512KB
SHA256 4cbda1beed6062f5d06637bccadb06b6f90c6f1f3a965f3ee0acee8b07c6eaaf
MD5 64002d82177b7f21032118911ae94e5c
SHA1 de14ffd0a95a4df702c9f0e1835a9fbf67a32a45
SHA512 7c8221468ae807e9e1bb100b36339b019dea18d1cd664dd19f96abf7478884c0e35f814a2c3cebd9363b83541c9043e0b8178b0a1f5b6a2676e04b7e1442249c
SSDEEP 12288:BRykf7M7m/W77ns6C1lcPNXQ1UUa8F6RXVRKkm/5skb/TUJFqpmmDCs:BRyg47cW77s6C1wXaUUL6RXVkkc5scTv
TLSH
T17EB423FA55B069CBF8C4F9646E4B1AF0BD35063CA00C8E14DE253BA5AE655F0E2D3E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseDisable.mid.WCRY

Path C:\Users\Admin\AppData\Roaming\StartRename\CloseDisable.mid.WCRY
Size 341KB
SHA256 b61847ea55e1b81404f84187e821d2ee829cb15675d119e6cd95a09e08aa96fb
MD5 40808694df1b0b852d6adf506b47c230
SHA1 1a0c7e021ea2f7ca44b944b8368176d20f73b448
SHA512 72bb34066d13a6e054821597161803f12b867f576586a6b4d848529f5183ae6b44c4934e46e40b7e886d24596dee979a23e5137b000ecda6c6f623529fa705a8
SSDEEP 6144:J0r/okkgckUK1kznB1fRiffUufnbH4ggMEs7JIUdvPTs4HKge8gInELbE4UJUL:JLpzBNc1fneyI2/KgdgIniVL
TLSH
T16F7423487A23226F5B19F46F4B4D74E2CE156C1903CA59162E3BF57B372C91CA82AC73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestoreSubmit.3gp.WCRY

Path C:\Users\Admin\AppData\Roaming\StartRename\RestoreSubmit.3gp.WCRY
Size 256KB
SHA256 b409be520694b9d66f5c15e84f96652fe7fc481835330437862f188f3460f062
MD5 3e5c34770d261a9ce23ae37ddb93d1ec
SHA1 b8d10fd8f1e2a94f5a77dfb68db50c3225923e2a
SHA512 adc34636cf10de598fd639c5dbcab91775ee2c7a65a986521155e960d84b66e53c3ee0838bfe4839f3618321b411b98501f7e4102ef123d3ed388199cc31558a
SSDEEP 6144:JRk+BOrZ5iDk2bHgxpdRPBYe08anAwMfsyVwEt4BlLqmw:nSZ0kn108PgyVwEYlO1
TLSH
T12F4423DC0C0DB82E25BE79E0633725499D8F36D3FBB38706856E8290440773E6BA5976
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseRemove.txt.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\CloseRemove.txt.WCRY
Size 456KB
SHA256 f2b3fbd81c052be52659d091e174a3225dec9bab025126bb024e9cf3a2793db8
MD5 1f5e76ff60c585eff64bad24b36a0be1
SHA1 9cccb6c5759cad8e18e2d9d80d1be778267a7600
SHA512 2c44d324b4f0cbd503557d4ff33d3521a31990c0e3f27b24ea8b295fd9ca12d5bbcb3a591a096abbcab088764ffbe4bc551868f9d2adc175bd486b1ca90ff87e
SSDEEP 12288:WT3KCH5kD7pQ6+ca8/stKNLrnVXA18JE6D4Dbw:Gce6+mktK/XA1a/D4Xw
TLSH
T1EFA423481D93C9E23BB9924D1212549C1AD73EF1C5FAF10222D3A4FB4259FD75B89C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectGrant.png.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\ConnectGrant.png.WCRY
Size 218KB
SHA256 7c02f72ba5ac84fc38e2b892884c43a717ffd01dad5805b39554ffff467928e6
MD5 e80ae2e35a312cb8cf5902eaab4bd452
SHA1 53bad931901bd758ddebafc1cd2086267d63bcdb
SHA512 93b80b0b031e2b280c2b19c42b55a9467dd8efb641acc448228659ed3e84d04ee97ddbad9a0d025e36642610e8bc60f99af4d215b959a8ade6f6af100e376bd2
SSDEEP 6144:5bmDFS9/71o9FbCXIIf3xsnzvlmh6sgJj:UWXIkhsnztmCJj
TLSH
T10E2423C934EC87BBBA80235389E995520D4C790A1963D2D04BFE26467E7F24B3B0B375
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportAdd.dotm.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\ExportAdd.dotm.WCRY
Size 414KB
SHA256 f8411b45303f6123f9593a85ec12ad3790b8fe9d25ad7860711ef74c2440fc8d
MD5 32eec8cd03194eab9938f609c809cbb0
SHA1 0e699e8899fd7378e84a7da972e0cc1de10ed554
SHA512 8acea82ccecd6afc3ae38d7201b0cdf90b5485cfd4eb58d6d36c483136b0f3da03620a0f8b8807a86f5d9c41de7739bf2d6ca5990cc09f54abead55878f5991f
SSDEEP 12288:eBYLcuC5+c/5c4s7EQiGa7fQpMiBCe/QVe:eBYIjwchcMd7oye4Y
TLSH
T1EA9423D593820846B6716399FF7EB3DA8FC9231B5A3D94172A4007218665473EAFB03E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatOpen.pot.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\FormatOpen.pot.WCRY
Size 189KB
SHA256 bc9d3c7eb1f2916dd0ce734d2382d9bb4b0ab7773bfac29ac5b217b64684a26a
MD5 3c84c440876b5d4ac84ed54857b4333b
SHA1 164614398af12c6107e46a782a5d1fe7f1b4cd97
SHA512 a28d690edd35a6daf8ba206e2858b246af23e278649979b8fe99101264630c2b7d504a3955b057c36391ea25a96d588ee8c1e097433429343651633070f44580
SSDEEP 3072:Zv4CNuhKGq1tgDuxBjiLmcB/00e18+T3l1NXF/u/1rAo3hO/EO+VNDzFDT0FNr:qCNMqTxkmcB/00e9TV1NXZupAEVNDzFG
TLSH
T12E142359BF4D42D0EA4D903524A073ACFA783E0A1FE3DB0C85E27B397816B27225E1D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideAssert.mp4.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\HideAssert.mp4.WCRY
Size 400KB
SHA256 00a85abd397bfda749f7dd4e2405594badeba55995f0b85a7b4acc9d36bb1de1
MD5 42e92ac91742d57782aac67ae8593cff
SHA1 a7cb577981406873371c47ece3c9a2ab27570af5
SHA512 5b5632951621c6db6ec2ed06350b9ac61f555ad009658a9b5099febc3a766e4f7a5b43de2fb1bee0cddad8698783af33f5ddc7e5f7dea5de4c6235093f4f9d88
SSDEEP 12288:Ol5yZY3qiIyUwO4eZ5O1P8i2lo3fjoaJKrMt8:0Ipt5iZvjoawz
TLSH
T166942335363154286A5168B60878EE333D9677439F09D7EEDC53434ECABF0F868892DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountBlock.zip.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\MountBlock.zip.WCRY
Size 512KB
SHA256 0de9d07e21ea0b37b11ea1ed7e966283039df175435d229a0f6eeb33496c0fcf
MD5 281dd60d428d6a49aee041cd9ddad4dd
SHA1 8af7b94d5aea76ad6d0bd774666326e50090fb6d
SHA512 ea113526c89be911a55d4cead76ce36ec0e88a19c6559fcb91dce092215f68cb2d78b87f08259b775700c3a44e995285ce94ec01b28b7f9c231175171f1e4351
SSDEEP 6144:5miS0cX5mdwVWyoV6Mz1VivMZP2e3qkhYhwpZCry8kVXN0qGM7NcO5lHzpecQVXY:5NTMjHTSVi6+AqOYhwhXmq1J5xzyf013
TLSH
T16CB4234AF80DA3DF7A376BEA0D56BCAD4180D6806BEF99332D140643191CD4FB5ECA61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadEdit.pptx.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\ReadEdit.pptx.WCRY
Size 498KB
SHA256 34a9bce02f9eb1fe843953cb7cb58a1f0c9354a761a8cfdfaf15e9efa98fac42
MD5 95dc447a832719e45e5510edac80d8ff
SHA1 75e6b4f92614a4bd188f2b8a019f697887aa399d
SHA512 f808a3a99be206077b62588f708eb44535a8f36d7d7927fee2534f2a4b9fe8fae875b2d91bb1d382b1593ab3b56a2b193665f1805d37e7dea0b63a45a3cda842
SSDEEP 12288:4VzpzAGp8qdbL8JRMSKyTfMamq+LbBl8O0TPSb1SclEDjOSz6u:suGSibLQDLMamq+L9pASBjlED5z6u
TLSH
T1B3B4236B213AAC36AAB740ED42FB29731F017D752039911C73612CCE94BBF627617992
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeDisable.mp4.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\ResizeDisable.mp4.WCRY
Size 428KB
SHA256 7e1ad38a0a3d6ea1001f320ad97b1d4793d598f1fb558ce900c38093901cd874
MD5 e2b30f91740a321025f2c552824338e2
SHA1 72a6a72643d3ca99c044b9d461842e0fcf3e41cd
SHA512 ae2abfd14f50f8cb3e1f84b5ea6063fbc08730a2dfdc389e5cdf1c37ede2f3db32cf79138b3ff266d30bbc3920eba9a51c6d9bdff9bb1d774009d6b46ba7eba6
SSDEEP 6144:9G4QKa17xnFKD8AzuIxMqDu99WhyS2HD60XWCE0iQlYbApUl6wgiSsvtXlJBTrfk:dHqxn4DUN7aN2WGnQspTwdZ1HTTBlQbV
TLSH
T1DB9423E3DA2FE52C704FFD7682B4764828ED4E56EAEBD606037D3153BF240938680256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartSearch.vb.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\RestartSearch.vb.WCRY
Size 358KB
SHA256 c01f63a780dbcc0e2ccef9eca515531fa1c070db9e2f6dc249f291a517901d32
MD5 ae56ecf32820facae9d4d251240d04ec
SHA1 b8b45a14f756637eff9b839affec73059da40c47
SHA512 c7e06433860f7831e53d8ab44db43044cd8c26653a88d9e8c53f717a92fec9aaf06ddc6995593b17e3851428e6556c54108c84e08d96683dc1fb733d6339b7d0
SSDEEP 6144:MNgm9/Rbu/BSKAt+jeO31A7ii8jstBaFw2HVEOpfWFaQU1T/Vbc:MJ/HvQj9yJIGBaa21E5apT/5c
TLSH
T14C74231F037A6679EB70132F016146F69DA0DCCFB2E0617A66C99CBE3B0B505E7E2509
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectDeny.asp.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\SelectDeny.asp.WCRY
Size 330KB
SHA256 8c54aca46b882c40a215bb8a086656463c2cd2d053441da5882e6bcd0ae6b5f8
MD5 1d5f4c69015a7871a42bb9f83c0349a6
SHA1 6aaeb105920586b309cf6b9ba64324105e50c313
SHA512 4d148a5387b9ac1cd97e3ad79a18b2f19577ae629c75963ebebf935945be9fd8b0217fce6d9786dfd007de0e0265fea7df63742d0447248e14522f9391328088
SSDEEP 6144:jzeLto2QpVcRBTPLA3D5WgEJoXUbyxcExaA+wEIwNPKL2YuXNNsNX4uU:jzAFQp0BA3D5WVJ4Ub4cEkwEIwxKaYu5
TLSH
T175742383C1CB668E064937939F963DF27B690490307E54EE2358A6F31F76B852CB3516
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetHide.wma.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\SetHide.wma.WCRY
Size 302KB
SHA256 88a4ea80f7e0bc5389ce64cd78a88f0379d686ef312cf922f4747c873197c01e
MD5 00f1af3cb88877ff027c5abfe240a190
SHA1 9064356e6ef08d610cbab68c0265b85017932f13
SHA512 9af50d5cb8623b477552c259b8fd0387c0958a6e132500ea8310aab7da5302b8077456b5dd005da6cad95c6baae5724b6f890e854b1d95f82adf0f93f5e4e3f7
SSDEEP 6144:5F209b/1h8E8T5TdISk8rp/bkn5409mp3+nH4vK4TrEdTy4XkME+sb5EMX:Lhd/K5hICq5409mF+nETPE2b+a
TLSH
T12F64236D724C164778C5E05B9E7DD22AABA80DB27705B60C084F780ED03C551B7A97FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitWait.docx.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\SubmitWait.docx.WCRY
Size 288KB
SHA256 661a10c8c95082083047a8d2dbf035b7ee564553be445a105df2b5d125d767a2
MD5 16904f95ad1becc6db47f5406122e4c9
SHA1 b441b661ee65000b3c1ead2288a9dd390254a824
SHA512 7008834683fc612ae1edd15534fa4b3fdd44fbfd4d3977935f3fe1d2ea7efd930510e3bf3974f1c60527227bbe3bcf10215f74d1271caf9d0a37b97c40b365ac
SSDEEP 6144:+Wm5i2e7+TnOwtuaBd06oSlzj79I95go35+ybGdI2bytNSsbO:+q/SnnsaBG4lDa9Ko35+ybCI2bytNpO
TLSH
T1DE54239C93E6C515F1687013E36E980029B09D1DEBE743D0ACCAE7920E4F52AE5D733A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendStart.xltx.WCRY

Path C:\Users\Admin\AppData\Roaming\StepDebug\SuspendStart.xltx.WCRY
Size 274KB
SHA256 0d4eb85dd7fd02383031e52bb2c48c9e217918b3845c5fa2d62c9d2cefb9bdad
MD5 e74e4290ac27e291d88c728ca8b7e8d7
SHA1 c1bba2bb6ed977f474ec4d9b3aa73844d197d6d3
SHA512 de5221667d34bf6ce115117bf712aaa039051f0fbe643867444b0958309b52099233b1a0591b8408ff010cb29dfb4d73372249deaaeed4fd6660b71a97ee28f4
SSDEEP 6144:f1K1/uUZBItLxPnHMBkrbwl8JcLmCWzb/Tf2sRrouF1MLbKaYzb8:M1/uP/PnH0kr0WJcFA/TfB7F1usH8
TLSH
T15A5423421BA3871BB40188FB72BD83A4509FC17E2EB677C5D81ACC6C52DE678E1C40B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepSearch.svg.WCRY

Path C:\Users\Admin\AppData\Roaming\StepSearch.svg.WCRY
Size 595KB
SHA256 4916745012b2188a151ed73bcb5ded8e79172a99457d0710ae83e2e703bf9eeb
MD5 75261d2cdfb85136cd4c38c2abcbc92f
SHA1 9de2d55b0a84767ac52e5da1aa8f54f7ee366a77
SHA512 7034acf185a85837317597a14104e15a1439ee176f26744484a52f2bc9593a4abbc73ecf93cd2aa73578ee7e2b2c9cd52f503cfba2eb54192daee75f0516a8c8
SSDEEP 12288:CItNCJpymc0yieI4zvL5mNQtJ9yL9muj04Nl/KqT5gyRUiICeqqtQif:CACJVcbiezjL5mNQ79yhDdzfd3if
TLSH
T18AD42388433997940D5D643BA3A1F6DA439D152A8BFBE3E24C4C60EC89663F365F01F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddResume.cmd.WCRY

Path C:\Users\Admin\AppData\Roaming\SyncBackup\AddResume.cmd.WCRY
Size 921KB
SHA256 ba6280a40949d86cbb8b386b927bf26e2ed375cfab80751abb7d7072829a6a08
MD5 437c91cd1fe5c664454d9601bce1b80c
SHA1 93e0b464894bf92a20b28fc274a3d7d0482913ac
SHA512 8c2468c69ef9a1237e9dfb1c10d80e357df3905cb28207ddc98c8b17255aaa53f5596fce47a48edefb3629463f5bef4c8a3c87e480ed792115b5857446d9e226
SSDEEP 24576:SkcgLGix9r7IM6SnKrBVTxcCzZDN1Om+EuD:xcgLG+9rM5SKrBVxcIBZw
TLSH
T19A1533750D304DF1E87F086AA9F56ACE6F2B7E4A9C81FA5443C77E68C8142CB64411B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompleteConnect.bmp.WCRY

Path C:\Users\Admin\AppData\Roaming\SyncBackup\CompleteConnect.bmp.WCRY
Size 1.3MB
SHA256 68e44c939a0088cca62716f02f918623a00ed8ccd07198cfd71af509f6833a77
MD5 0ee77099affaaf60c21ff375fb2d7e81
SHA1 bc5d05453f0de1f38646c73d72e154a5542a7d91
SHA512 adc2bdbb66e7001a5bc3b26ae2e5500322f8681e50e342806094fb1d7bbcfa9764f5016b3a15561789567ed81e90fb04ee329264f7154c3da7a373dec66c945c
SSDEEP 24576:F7z4hbQ48qFl/62wU3IyKEf6d4wq+YGGlHHK8vORp14eHCjSp9K+gp:Fn4hbL8q3/hwUuEfHwNG08JeHl9Gp
TLSH
T11A5533C6C387248BD7170990DA4D8C9CE97E49F4371BF7E69A368589A73096C311AF0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompleteLimit.ods.WCRY

Path C:\Users\Admin\AppData\Roaming\SyncBackup\CompleteLimit.ods.WCRY
Size 1.2MB
SHA256 a100917c35bf212959ae7ecc201efaa715f9d46c3154e936db880b4a635095fa
MD5 78de45814c6892dac79e220a4501759d
SHA1 5db230bcfa6a5ac295f3ae8fb295e699ebbdf1b5
SHA512 6d661e33a51ec4972364de17bb03e0205b8b91213df58a52bdea76e52205fc8ee863fee54598e4598e7d8ed271d314f25665b668e3e0647b3f747886923991b0
SSDEEP 24576:GmV0TkYtCE0LgZJ17R4tnzVjC971yzh0Rw2kovkxgsnzj/0:GI0TkYeLgVWtnz9Cx6B2wjI
TLSH
T1E0453364489F6107B2A5381EE689096072466AF42DE54CAF90F48FCB0775CDB6C2F7CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HideEnable.mpeg.WCRY

Path C:\Users\Admin\AppData\Roaming\SyncBackup\HideEnable.mpeg.WCRY
Size 717KB
SHA256 f73c29612357e87cd9ea102d60ff72f98f59fab591d24cbe030d14d75e033de8
MD5 6bcff8787813b7cb0165a54e6cc44b28
SHA1 57d0892ec6bbc2adf6e1dbfbaff64f8d0d01e33e
SHA512 388542d6f8ddb05fd4781b67950ab48c344b89d3ca9708cb50fb3ffe008296cae00e02cd40f7b5ca39355f584628720a6f9cac5254c15bd7da0a33c043e2135f
SSDEEP 12288:7fDSPeatLogY7WAlZUkDk5791fhnxsr405nTbnJIqtSqqLwT55ruCD/F24q:7fm7RxQWAlS8kzDnxsMuzuZqewfBD/FW
TLSH
T1FCF433551D89AF821A7EF5FD88236FE33AE1FE40DBD8687B350E03E022EE1151695358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoExpand.raw.WCRY

Path C:\Users\Admin\AppData\Roaming\SyncBackup\RedoExpand.raw.WCRY
Size 1.9MB
SHA256 9d0e46cb00c6c0d81b890aea32d55a3162602e40611355671ce95ca4b842adfd
MD5 67b7a7e1f52e5d1911de062509058875
SHA1 3a5fcb7a56aee5c20f3994d58d65ce429f2a6d8f
SHA512 ec9539c1f784b33f38119b6962f95e969379afdd66a4f050baae7ba71e64c140debc603b82a1c921eee744fbd572f20819daecd0238012a70d0599191119b94e
SSDEEP 49152:jfdarnwEjvTm1vwWX3qW+fJva+jLL1SD+YEXZk0J:jdaEzwWXaWga+jXsD+YEXZk0J
TLSH
T12E95338E274BE9EB4B63481127E4B87FB0D16470C189BA1EB44B751C121BAB53335ECE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetBackup.zip.WCRY

Path C:\Users\Admin\AppData\Roaming\SyncBackup\ResetBackup.zip.WCRY
Size 512KB
SHA256 ba2e036c6bdd3ded710a24934ab979ae3f80bc97fdccfecb09f9cc5a1d46b28e
MD5 9b24962f1dfbc3d658baa8d38e5df615
SHA1 70a38994be59a50a1569920bd1d6e89675a82a02
SHA512 8c3720142e68b9e1acfdb04045290aab97daaf0f762151bce7c1a6a4c7cd3f57fac88f9b36573f53960fcc6ab32b904ab3338d4a4de1cfa3a3fb5dcfd8b53008
SSDEEP 12288:GQLa9RIHLkzQ7ixlBhA9IkcQ+CPHVgybmL6dV+fMM:pLUgLGT/BlkcQZNCL6dVyMM
TLSH
T155B423CAC1DC8F770EA0E5EA01BA7595A39D756AD430D383309282DB9DC4398B44DBBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UndoResume.asp.WCRY

Path C:\Users\Admin\AppData\Roaming\UndoResume.asp.WCRY
Size 376KB
SHA256 a5ffd0569505d74408d270938e3bb1f5e8b03fa47eae4813d65d4ab2a2acde76
MD5 c45a18b48e5744669f72f7681dcce2f8
SHA1 23c5a866f7df4584eb5639e61b2c6918a0a8ead8
SHA512 d4e34eb04d95dee0eb34035ec94192c6a4599adddcb442da8f8d5666a55dd6f37000f3947805566bce1092af7a62a760649178bcb6bee56dd85509958545626d
SSDEEP 6144:DpbH4LFGQcwoNfwH8q96Aud0/zeiJ6JsEq3N8dFz41Lq5rNWTFTQam+rd1OUQFQI:t2FGQcHq8RAuWzeiqbFILq5r4OamvXvV
TLSH
T16C842308FF1D414719CCD4EE9959A2D0E205CA17EA68B4C4B8E55D9B6CBE6C2B306CFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateSelect.odp.WCRY

Path C:\Users\Admin\AppData\Roaming\UpdateSelect.odp.WCRY
Size 230KB
SHA256 710e5bdb01e0cecf9cace831558d126994dc40d6163663c822b139354b8487d9
MD5 b968cf450e2f3ace7077fafe1e8eb033
SHA1 271a84f6abac7a14e4148fdd4e42f1d6d58d6d4b
SHA512 851c666040a8370c8009a8a7206f11e4da0d3a041e3d6713a7b07cb27f636e003e7d50a0f3332440b4fdcb46828593950dfbd947560eb7c3532799053a1192ff
SSDEEP 6144:nfa9b8B3nUEY4CEDFJUO4rRhnO3QG38pWiI9sQ3oV24GBldWzv:fY8B3nn5CEDFJGrPnOgkeQ4Vh0M
TLSH
T1923423970AB21D0CC3343BA9CAC856A9F11B274F1C64B1418A5EB3CB5DEE0759C772CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugUninstall.rar.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\DebugUninstall.rar.WCRY
Size 282KB
SHA256 87c1a54414e98f0f3471ab5c333922054fb4e6715dbdfacb4ab16554c230f233
MD5 9ac3505b52018c50bab242adce159def
SHA1 2c3f93ff3ec34b4501a4b1fb547df79d53c8ff10
SHA512 3d819ed7a786d0d3d5ae4503eaceec5022113610c63da666f6b1f0269ef063630aeef724ba4a6067aa87dae82a339cc12344e3b847333cfd72120f8aa6c07a2e
SSDEEP 6144:T0aJNqgQ4rFvD8IKDG1+Y15t/Ss7qbRTtYIl:TRJNa4rxD8IKq3qbRB
TLSH
T17E54232E2E4A65DEC21A7DDCE1FD3B3A7D23ACD60010BC5A6BD5BB25F0B1852D096025
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantReceive.xltm.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\GrantReceive.xltm.WCRY
Size 241KB
SHA256 06ed47e4c2b0f781e72948e49f7d6be878490b5c9e37aa6b1b499c22a11b01b0
MD5 9317a89f1e188430e39928384d866fc1
SHA1 a33c359c079fafb6da93060d292e4809651917cc
SHA512 860ba64e9a8b9e2321b4461beca9592eb4e3649dc563c87c69e682e1d81e0f088274243faf8f122b6f527b89cbd750f859036688ce3d45a092817abecf511b75
SSDEEP 6144:/0MN2bo8mLmo8wxeNuoMI25sWVZLXECzTMgiZH:TFUoI25sWVZL0GMgYH
TLSH
T13F34128367B2A4223D962E3EA103D3153071767C569628BBA7C90613D7CB4E45AF339E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupCompress.mpg.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\GroupCompress.mpg.WCRY
Size 258KB
SHA256 bd179ae0a10cd0020cf6f7f7594609fb34a933f76ff560c2f9e28351464e7e70
MD5 fe598c0fc23164862927df8cd4730e82
SHA1 74690b2e64cc9c92b5fbb33effd0ce51e9e92380
SHA512 172156ddb89b2348625b4c2475f6e1f4518b6b754ef0c475788b1c548de79a6c4114de6f5b4f3c05abafb5da0ee30d222bb29585afd8945167620f5468144195
SSDEEP 6144:rg9wz2X/kzyG4U2z70ao8B1Al1g8AKJfWGuih6qjRH:iX/3U2hoOSOAGihdH
TLSH
T1E544239CD74D15216AAF252045803B1C643FA7C2BCF2EE9098CFD29944ED094BBFD98B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LockUnprotect.mp3.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\LockUnprotect.mp3.WCRY
Size 401KB
SHA256 cff2ece920f601cc0e4dde6ae974c77457d0e0d631937483be7abec4f74d6207
MD5 39c58182d7548ae0754c71c14d244b22
SHA1 0f7261f5b82c4db179279ca246d1b281f461c4f3
SHA512 ed3c71e88d6c0af486029fc31d85447e54cfd749c780507a52a939b94d4ef56cb10d88dead0ef39d5a59fa111d8f50c88be77d781359d7e2a484da301e4168f8
SSDEEP 12288:9QRkWwrtD/QPQaUh6Ehl+8xp1K3bmgwZ2K:9ug116Ehl5xzAidd
TLSH
T108942359B4266275AC6BD0943228F4A84BA02C0C6CBC1C38CB70ADD65B791DD683BDBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeConvertTo.docx.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\ResumeConvertTo.docx.WCRY
Size 119KB
SHA256 d97f11bae718481c176d39d5560f1b52aac1bfe433ede1f56e4cfae63d337d01
MD5 dcb3c89df94a532d6e9589d17a09237a
SHA1 32bea4b4b245adcc3d8ffbc19a8d88dff0a4b123
SHA512 e2e1bb748295b8db3a93e443c620fa7ff0d481b981bdb279bb014791fc9116c4d1fbd3922352aa0318f492dcdfd7f070ec438e668bcee1ed2e5f80ea1d858b46
SSDEEP 3072:w17pEeyrGRHRxuBU2/V58tOEthwGGZNLJ06D:+QrzVDSGZN+U
TLSH
T194C3122326E0C9A171DF9CD9B7964015E14737BDB312BFA25E70F7A649128F489103BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendRestore.php.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\SuspendRestore.php.WCRY
Size 291KB
SHA256 7c32067a6f98dcc93c51538a61481ee398d736c16daea932b22b36e829fb661a
MD5 996f553f93d3439a400502d171d7901d
SHA1 4fb88d4e2fdeaf5982d26a49b33834d7d8e241b1
SHA512 c0a05e8718335fafbd7f2af05246371bb55515a26f2b8f642d74db1a1cb93f4363352f92798b113059e7734b65c3ca380684f50560aca4d6485d52728f3e3a6a
SSDEEP 6144:aC6zywNSdyqwc6cPZ/bNkhluTDXZG5d+g343gWsxB:dI9q9yluTrRg3Kgv
TLSH
T1CB5423183D180C6E72A3636F9289A3D1F75D9789E1499F9C309922D6230BC96B5C4F8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockReceive.avi.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\UnblockReceive.avi.WCRY
Size 217KB
SHA256 a953624839e53fa52ed7a1fad83c3f7e36decc3777e5c4a5c4a03ca8531c61a3
MD5 9f90ef0f197ed542bd7e29a51b586395
SHA1 7047459342cc4f0a2d252155b3a9e6dc6f4b865f
SHA512 d658a5752d406fb2557fc23053b7adc7901e0ed2457bab1a1396bfe878c20403346b3225e4362c97ac24b84a1782614d0acd59381bf8a1f1db00e3104c1d55bc
SSDEEP 6144:/Iw0gPKid2iN/AMcBFlz1CkyZdrY1yaWK5rr:/eERUIAMIF7Cz7aZTrr
TLSH
T17E242352D4435739B68ED5B066722477332CF6A828DABF3A11F28079E9E37CA35E7404
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallPush.docx.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\UninstallPush.docx.WCRY
Size 192KB
SHA256 bb3c05cc98765bc8578cf6226bf09e24210909c6ce5c25c309b9c5d3c530db1a
MD5 9232521b6036abdf5ee49ce864e330b5
SHA1 b1d6c1f728215029794a008800c913ca0956e319
SHA512 ac7bec854c21cb00a3834448dc959ddfbf2f12751bbdcafa88b1c334410317efce12d38cd335fc0156ae91e4db1f0f2f7f267557a053e7a6d5c943e713fc0c95
SSDEEP 6144:D+EJseBoGXNcNqN4acnJApz573c1EdNkohc:rJ5aGxwO1M1Edni
TLSH
T1891412A0646A54DFE7E88A738FFE28C327115C2950DB7575AEF0123B6C46C7079E2E60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnlockSuspend.ps1.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\UnlockSuspend.ps1.WCRY
Size 102KB
SHA256 e8b8c70d54e619675c3be35355b60392ae3554b6de6dfb7d46ef2b69bbcbae6d
MD5 48378420bbf518fe79af6e95546022ae
SHA1 9b6227dca7d8fa40a217b32d5f691720e209ca5b
SHA512 4847a0e552a855e954127c461fc4fbfd41f1b29d5cbfc8dba573508f291a886a598a8f6c368e028aec787f8b577c2fc08d9f53489604bc0b7a39d99c172db57b
SSDEEP 3072:RAbw7XT5oDhnFm5Ka567IReT6lMP/2fXynH:RAmT5oDhnFm5t5mIReT6lTgH
TLSH
T12DA31298A2E13C908E23253D31151AAD6AED8914183B390BFC99947E9A4CDF2D74D3FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseReset.php.WCRY

Path C:\Users\Admin\AppData\Roaming\WaitRestart\UseReset.php.WCRY
Size 143KB
SHA256 638bf295dbe5deb31ad44ed29dc3e211dde06d22ebb0151a99b55ac7316baf68
MD5 2f7ca55c924bcd25aa3b033ed540efb8
SHA1 a20f53ba3fbe71cddbf106650fd81cb2c697d2b7
SHA512 eb0618cff1dbaf431b8ae9cf6b997c2e6583b3f59a8e0c1b233df99d245c1013f666a2e53b2c1107b8cf0e5ff637b6d558ac6b0ccdfa2b1c297471e9a6da8756
SSDEEP 3072:oYpsBJwprERfibecYIj4F22QAEvm5ksHzzo9w+2IEtLxZeeADYqo:oYcwZAf2kvPEvmpzo9w+dE3AVDYqo
TLSH
T1D4E312702BACAB567CF20757D9D50F4F0CA3B8800EB2C9B5C1527960E2DE2B1E98A175
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearOptimize.docx.WCRY

Path C:\Users\Admin\Desktop\ClearOptimize.docx.WCRY
Size 16KB
SHA256 c83c375000614a1e48e1f43874cf7ea73e0f03003b9474d953ef03c257e06b44
MD5 d0cd69ec6ad2b989cd3205dba1637557
SHA1 d9e0748f586162e7c54e8f125a513d038d01fe71
SHA512 7660bdeedbec85ec86aeb581cf9eeeae18aa01bfc1f40a391d23e073c1ca5224d34948d71e2cfb9fa26562483d3dde3efd259e90965e57143e7cc594f0bd6fc6
SSDEEP 384:gGCPq0YMpKeacT/gKZje3itCCXMweKEbT8bxU/ZhZuW9nD:DCPq0YMIUT/MisCXFeKEKxUnl
TLSH
T19872D1FA8F47626BCBD33E25A06D433536FFE32A2B425C0534A982017BC893C75B2556
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseCompress.js.WCRY

Path C:\Users\Admin\Desktop\CloseCompress.js.WCRY
Size 187KB
SHA256 d397ae140707d26e2d88c2bd99964d46335257799e1062720cdcf779218533fb
MD5 5ece6337532d6b7845b3c296c4ed8e66
SHA1 9eac2ffc63287930d57aad364d17a2ba6602cca6
SHA512 14dead329655e531fd22e7065f4ed16ae8f4c603d76131aa2291bffb1f28e65aa8d323e72c94d348b6249f0d373caabdada931f2bdd7e4e0a4b3ac3ca5fd0339
SSDEEP 3072:io1Lhm+v2YXHhnYSmQZErek+a48KeMf7CuwhS1Tmu++hLlvnINuLY9Rs9:tlm+BBYlrHKeMgSRW+RlvnvUjs9
TLSH
T120141258ADA52CF9AC55798870EC46DB91E9C2E872C1F3B1B4DB046B9011097F87EF81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmEnter.jpeg.WCRY

Path C:\Users\Admin\Desktop\ConfirmEnter.jpeg.WCRY
Size 219KB
SHA256 8c94fb6607454cf89175ce32883c49a842b99bc4172b8980b0a3bb439af47810
MD5 c0afa18b09f95fdc2f9a50a1e71bbb22
SHA1 eb4b6655efffc597c255dd1cbbd8559dd45c6cb4
SHA512 b91932f1937447bfbe76e32560109ca4274afc0bab569930b543a9121831b155037e38dd3920119e8883bb424c405d8f763ea62dc1a9a62d23fc2c35887603c9
SSDEEP 6144:YwmXeuZbObqs6F21rq1Qlusmgdp27G2OjPhWyyoSMBAaI:YwMeQwP6F211usr27G2OjPhWHMub
TLSH
T1E12423839B829BF5B9FCF2D99550C22FC52192194DA727C417632E18CC483D6C2E53EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromNew.txt.WCRY

Path C:\Users\Admin\Desktop\ConvertFromNew.txt.WCRY
Size 300KB
SHA256 bacad2decc8a8c3849c62fe2bd42a0dbeb10410304b631668b4a8227185ab35b
MD5 6383f1d956d7dff4149003e02796329f
SHA1 ab5dadbec626d871e6288b2f001f722a67540c6e
SHA512 ceab64c49edd2ecd8f7a40f459ca63ad98867f973346ffcc6f0c7a3db4a5d0d992d7eccd07384863693e83b0570414fda8e7ca1abb36e7436ae3958d86bb13a4
SSDEEP 6144:y+ZHTeldNtXyIbSyBak7Q78+kBL3wVm2O785M9iAmKj8qwO9OqBxa:y+ZsNtXyABi7DkBsOo58DVj8A9Of
TLSH
T1B56423F2D1F26027491BB61396BB84299CD8D0B3424510633AC3DDB2B5A687F7DE84DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableMove.xlsx.WCRY

Path C:\Users\Admin\Desktop\DisableMove.xlsx.WCRY
Size 14KB
SHA256 e1505eaac02643b8445e7247792ca95e548f9a7c9a42f04fe170835d98d13ec4
MD5 632245df0fb9a00b2402acdaf3e616b6
SHA1 fd2a44f7b852fd1bf8c91ee24c394cc28dcbec11
SHA512 21fa5b6858db5d5150fe31e43ad5caff745a139e1b5901a561a93b2412b9e809938074c55cd1680feb180621e2e332277f0f61f5d29d9c00bb7b5067e2e29cce
SSDEEP 384:7ctLHuHq5TmbL6V7pEqBsKT5er8vsrT/AcVcfmIj:7cdV5TmbLKjsr8wT/jVc+O
TLSH
T18E62A0BADA0DDB74F195CA6D2E0F15F398EDB244CC9503D49271BD9EEAE4AEAC1014C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InitializePop.avi.WCRY

Path C:\Users\Admin\Desktop\InitializePop.avi.WCRY
Size 203KB
SHA256 68377e482fcbf2f6ff371ce74314579cf836104ac76cea9ac27b43f6b3eea254
MD5 269e7208a3c63bf5dba44f9f4c3a1d7c
SHA1 41731b16376398e8f0a4e451f1d4d07c7a42c9ba
SHA512 db67ceb707616e964099685f6768fb62d9a69ce3d4d25f11415a4e0927d2a8dc6836e77f3f709f9d67c12f38d5ab9e8b2da36c4c85d4326b2797095c14ec7f81
SSDEEP 6144:FnKNeFNLdja5s1tDh11IFtUH6hEAof1ZCzOBGtrh:9KgTFr1tDh1uLGpEiBwt
TLSH
T1931412B7828405F87D76345FFEF7A127BCC3A136C1332B4A98F6A50585792DF0A2A205
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureReset.zip.WCRY

Path C:\Users\Admin\Desktop\MeasureReset.zip.WCRY
Size 414KB
SHA256 fa478de65d83b7b05ab6249b5eca37880b7e0df3e0e1914f70ae9508f235232d
MD5 9539e449086150e3d71a13a2db1eddb8
SHA1 d618167db56ccfcf38e55b52c6118d919fefa661
SHA512 058711b4cbbe37dd201f6ca31f8cfe53db52da6b7de571b7c7cc261b63b0839e51b3c28eb49a818fb8a5f2df4776710eaa53bb8d622a784c5b5169d5c8492fc6
SSDEEP 12288:6SXR9p+zy3Zf8TzNffONcxVl6o7VnNXZofP2U:DXjkzy3V8ncNcxVl6EhNXZzU
TLSH
T1D79423A22654AF5D2BCD4DE2AE94823CD76245F6399C7908C542F0EF1D5B9EC08E4BD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairSave.csv.WCRY

Path C:\Users\Admin\Desktop\RepairSave.csv.WCRY
Size 170KB
SHA256 0a07a0df95ccdb2830db5cb3445de8e54430efbe595950905004c9c955b45909
MD5 765548b128b911e6f29095c28c6475bb
SHA1 751633e1a7c72386d0db7d65d75b3d22f1671a3c
SHA512 b01ad017d751901a02f547eb62188db7d6d449ea152ff35184ed0b3939fc03e39866993ec80db56446a1df9c75338e4c7f34cc44e5ea2cdf20175e886a568b27
SSDEEP 3072:4Zonl/hWLjtv1kQmm/k0na9TN4kMHc9si81XhSuzIxwdpAMYrQ0Vxd1WNQ2IL:8Ul/0LBvnmm/5a9OkMHcj8ZhXz8lrb9L
TLSH
T1F1041283B9940361FA686BDE3516CD0A9A4B79410E7C1C87807FDAD3608B3394ADD5AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestRedo.xlsm.WCRY

Path C:\Users\Admin\Desktop\RequestRedo.xlsm.WCRY
Size 398KB
SHA256 739492b98afda25512c1b49ece2f000f2183d48324dfbc92dba4007fb180efd1
MD5 fb8752996d78a8840c8db49460f80269
SHA1 413efbc9ceae2015f9c84aaef978fa5771e00b2f
SHA512 8efb65df97773235f9ad394d45b46cd6bc659d95d85bf549555cf583583f4a0c27df2cdbc55fe32afa59bca723e498adb7c44d3fbe319cadc6d462ed2a28f3f2
SSDEEP 6144:f8+IuGUwskV2nD4mploJs1GAFREXwHuf1jgRBqWhcHruAiTBnv1jEHEATeeHqSEw:8uGWHpyzvHsRHKsFv5EHXTeeHjE81
TLSH
T18B94230FB681B44DCB99AED946C266F00468EAEC42E4C171754ECF89C78BBAD1157BC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartRemove.tiff.WCRY

Path C:\Users\Admin\Desktop\RestartRemove.tiff.WCRY
Size 268KB
SHA256 3ea3bb67c7bb483b332c6af55d49c60f5fde7ea6cce9bfb3db3a115246f383b8
MD5 db46f2eb46b52fe72c3339d3973ec7dd
SHA1 ec1e5b1023c61093e08d4a7051deb51884125c8f
SHA512 c6df64173322e2689fb941af2f53b52599021dc5ac1af5db9487188c4f8d23abbd51674940fdc80cda907feda9749fef428d2d6ea7f01be010854dbeaf37c316
SSDEEP 6144:P+B+bRWW5y/dwLlBzihDi2ABnYCLK1B69cbhty4eezB:w+IW5Wq5Ih2BYC+1Pbhti2B
TLSH
T1844423E199EF3A46F85500E65066DC3BD4FAA31D0B3E684E4FA1ECD49D0E6832E6035D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowOut.gif.WCRY

Path C:\Users\Admin\Desktop\ShowOut.gif.WCRY
Size 431KB
SHA256 88d7196734afc1b692efc32e286b11fafd9342d92bf84a5c70ff12cc1df3946a
MD5 26d02c17f101d9488a8b2edc91e60ef8
SHA1 6d8cf5846b074ff78614ddc206d9d0b235e21b96
SHA512 c7b84fc15c05f0d42bb097a6b80ed693b0d0079549d4198d1bb555dd4e7945345f12216755689e7419ce7d77f38e3108e30ac407b4e45747397fca17439d7c96
SSDEEP 12288:upPC8g1/xcCzKd/6Ng7/8mGRPEJdYaFHu:WPCZ+/s2IRcJdm
TLSH
T143942335A04548E23E57EBF8167474A00D3A3FF8C569F7D210248FF64D97328AFA6986
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopPing.xlsb.WCRY

Path C:\Users\Admin\Desktop\StopPing.xlsb.WCRY
Size 479KB
SHA256 7e197123b718151bf862137d73ff078ff33029aa47b0b8b2b4cb0d6ae83e74d5
MD5 80fb457aca3ffa06f424c68757966b0c
SHA1 c1616b88a1629541309f29523280842522e037fc
SHA512 f9b110dff54932f171ab8028d7ef67ac873bfc0ed1f421d5ce00a9a3e88d835c0e6795054455d9ac86807d9fe035653ccb522d19d5b06f7555926692b2e631ba
SSDEEP 12288:RFMb7wosUggE9Qq1CwlnRvYz2Cx7CNlMFBkmQM/1kGV4Eq:Ri7wgFE9QuN7vi2CxONOc9ck0C
TLSH
T134A4230F9E62F047A26D946E4B052952E95C431173FF7305ED7290EADEE904714EC87B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddMeasure.dotm.WCRY

Path C:\Users\Admin\Documents\AddMeasure.dotm.WCRY
Size 627KB
SHA256 98eab2fdb82e8b185357d3281a254c94296268115d0e45db0eb9b3d4145021ed
MD5 b1110b9571aedea949cf017d41438656
SHA1 f7f4e8bb060c82394ae16c68212dfeddf461986b
SHA512 5efee3b1f674d01e388ee3cb044d566a920774ad1f7b160b31305b0af9743e59c8aeeea7b31ab5d9528eeb4ce84435b92c9a205b03f008b15be0a5be38f98bfc
SSDEEP 12288:5a71W3id91fyYmGTOoc9OhVKElijDz9YD9QN81Hz:5i1W3CaYlT7c9UKElijv9YD2NYHz
TLSH
T183D423713541F43465C7BF72C3BCC468ED59E523BAC9BC426F927E43D240A9B4B96222
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertRead.potm.WCRY

Path C:\Users\Admin\Documents\ConvertRead.potm.WCRY
Size 518KB
SHA256 03c3f2650f61000763c8329d50349e35def3bb09cc751d2f5246cdf5f928a2c2
MD5 275aab48faa104bbd4e32c71be71c233
SHA1 55158b4b8243780cfdf206280ca92a81ecd9e21e
SHA512 529059fd4c8b7f520ac768f5cfa890bced71d0be7629e2372ca4b29a40564b180ff1ffb49ffedb96d4087259164bdbd08992698db4e780967a59ada575d631d3
SSDEEP 12288:tk7jhCMQN/A7u1V+Kfj9Ec3QJnHd0di4Hnd+884NsODmC:258NM++I99+nHd0dZHd7zDl
TLSH
T1A0B4237E55E3829B89DF813B02C594DB26D3F0A7B8AC552D7FC093BC4BB0C5A30465A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterInitialize.dotm.WCRY

Path C:\Users\Admin\Documents\EnterInitialize.dotm.WCRY
Size 446KB
SHA256 27ba3947db6a3499f7e87203b34a714a4c698027b9539db71c260bbd2620f623
MD5 3224b736cf080b3f9046c372d24bd5f8
SHA1 94e7c7d272108775e390862f417a7b6bc7b016e6
SHA512 bad9155aaa6aeeee1f16e90f3f1d78de493e70a45c6b84bbab817734026abbc7332c5b99f3699357ad536e6229b78d084d0bfa165c2077d4d74fb23793ebd1d3
SSDEEP 6144:ErigVP5cNV9lRNaTH9FLQzok4I+RPLSXrgUE1Sbl42RFAUYPYJimyWfMQwKOhfQA:KigV6VDkdFUzL+LS7LiI481YNihwPh5
TLSH
T191A423827DC5A011B853978202DA4DD2CCA6C66B0865D74D8DEDE2ED900FF7F4AD4E4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterOut.xlsx.WCRY

Path C:\Users\Admin\Documents\EnterOut.xlsx.WCRY
Size 9KB
SHA256 9ed9898608a4370af5bdea9cb3b87956e40be194e6d79bf0e80b931c7c55436d
MD5 0974662402f0f65ecb41228b32c2e618
SHA1 ef70d0d77b2c46aefc012363b539eac098464cae
SHA512 78e94b722737a166cb98eb1447fd2c7290e03510825310b74ef1c311b19d6158208855cb13a65be1e4b964deeba7bf44692030623883ecf2de4d843e2eb033cc
SSDEEP 192:9OiW44LNMPTi/1NuFxLeJiWSTQesk1g8BKhi+jNLOdhTGk:/WSIXuFFQesk1zghHVU
TLSH
T1E412AF2F2675D159E1F9F0510E7EC04B6182D6B2590CB048BFA6302B989F355F18F52D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitOut.xltm.WCRY

Path C:\Users\Admin\Documents\ExitOut.xltm.WCRY
Size 542KB
SHA256 93316a090a3269a83a3b8494d20c81b0638a73e8ad32bf71675b75b4a3162a62
MD5 133f39914d02f5d016936525055e98eb
SHA1 34c7a8974307a7ca81337e7af13c996b1b0114b4
SHA512 7ffbb5c7fcc95ee9ff08b8daf106bdf799413b89b1d55cc57e7242bfffcf96378e15bc2a9918a0c26f0f032a7e867cd61c44760733c94ef634867243b897c281
SSDEEP 12288:CPcAYtQl7cdJm4Z6YwrN9JJHIYBNPg/dw2Luh1:CUvtqcm/YwR9Jx4/djLuD
TLSH
T1DBC423CF10FDA5FC7A7859DF39B812D01156AD20BCB6A4AEC6FB0152708A65474EB0B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitUnpublish.ppsx.WCRY

Path C:\Users\Admin\Documents\ExitUnpublish.ppsx.WCRY
Size 265KB
SHA256 6857a753dd5d85d4464d0b062586a7ab6e032825e06be12c2bc7f4bbbaf30a13
MD5 8af12c1adf86642960258d9e07bb1f0c
SHA1 c48598d87f0de21a15862281388ae1243806d7cd
SHA512 c28319284f6845e00a1d9e6b5971942b75df247a19452a96ba601deeef7c3aa6bbca72af3cecfba17701504e8fa5992f7a7caa268531c2194e18b210ea3d7200
SSDEEP 6144:reEA6LlTuPm7ZeTAz1X9Qpp4Ajbdvm6ImluBcPEobL:KEA6LlTuKe04p4AjbdWmAccGL
TLSH
T1A844231919DB70320A4934F7B2E44F38D43ACBDCC4EE8EAF3525A0F505AA65B15B06E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinEnter.vsd.WCRY

Path C:\Users\Admin\Documents\JoinEnter.vsd.WCRY
Size 578KB
SHA256 9443c482ae829a65c6f7bc16d8dec459e5b94b486279df50ac3e29ee00a33c7c
MD5 873467bd8adc79e0a20cb636dcb46c4a
SHA1 d0085eff3a4ec844092a3424cf9492efdb99ee64
SHA512 4787bcde930dd64663064768c117e81ac2c055a147c52b1540ba3a10dd35dae800a343966bb69a1348c0cfa92c3b29f71475b9360ccceb3481ede80ed15555a0
SSDEEP 12288:z6AMTOOl4Tr3uHdEe/pbwsMlBJtdw/xsQ98xO5u2l8fVqs2IiPJ/G:z6/CO6Tbu9EAbwsMRDwJf9e88fJ2IiPg
TLSH
T163C423F6DF05B3AA758269BEE20EE2C4D72840C0B79D6114D8C890C15738BDF91978EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinTrace.ppsm.WCRY

Path C:\Users\Admin\Documents\JoinTrace.ppsm.WCRY
Size 904KB
SHA256 a52174023b4307b9b4e30e2a666fac49ad5e5644d63f605460d9276afb581ae7
MD5 3eb547d5413766d11b3d45c299653e7e
SHA1 38dc12d80edfa5c9cdd5dd16822c9c5e7e0c0ce2
SHA512 954343af699b06591c22f15d66ffe022e1bf23d007b498a850606b4c8782f88b850427ef36d8c7752274e8d29fd9fa4506b9e1dadac20b86f74a100f7e14722a
SSDEEP 24576:VVPrHHmZsRPtBH3kCb60gDaRALkqptRqwbqtiaBPN4Tzr:VVPTm2RvUCHgSALkT5U
TLSH
T17C1523B9787A0425823EAD1C9F9DAF6241FBA161DC89C5D8B0D25F30BEC7C1D881382D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewWatch.ods.WCRY

Path C:\Users\Admin\Documents\NewWatch.ods.WCRY
Size 229KB
SHA256 3d09a541813d635ed96daa85711115a10804e56b8205ff8b9612bd9ef164b6a6
MD5 21efeb560066d98d3f9f17450ebb4df1
SHA1 f8ff05e4817cb8c9cc385a63242a1c01fd5aed5c
SHA512 7d1ad482d92f3761a924919fa359b81cb06e13d0bb5a445fac88a9599cafbeac021c016c9ba000c43c83b5dada9d51e062111758279b2bc74f5a07515b2784b2
SSDEEP 6144:CHl7iwmJMwLk2QMcv88VWIsEeMYNVi2FeuOOuI:wluk27cv88QIszMyVrFzOBI
TLSH
T1AF3423DF5E78ED6599876C80DDEE82661264013618A9F022C6017E707AFF1FA3CDAC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Open Notebook.onetoc2.WCRY

Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WCRY
Size 6KB
SHA256 6b3cfe0614ec64b3c0eeb0bd95bf790c0f53ff2a25dcc6a10ccf8932a14aea16
MD5 023d5df5aca44f6faa48a573f7d94a36
SHA1 27dd9e81ab0c7953f24a3a808b01a24ddc8beadf
SHA512 e66e0a677b45404448220f61fb53eb10bde2900fc5aa07e917fbe03f7e4162be56c19f2d844efc957462fb9907c22879c94bda2aac50497fe75cadb9dbe201d1
SSDEEP 192:CfcbH1GatBGii/Z4wtNXmH4T9deeO5w+YBN96Hl:EiVFtQii/Zdtpma9BUw+YBqF
TLSH
T10BD19E4533382C56C778FACD70DB7AB105CAE8048C4980763979B56FBB607EABD76280
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Outlook Data File - lrhusvafiz.pst.WCRY

Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - lrhusvafiz.pst.WCRY
Size 265KB
SHA256 902e837d0aa8014f55332f11a18a0a24bda882c6f5ccb7c84dc854280d6ae3fb
MD5 2c5572bff351f1a5814ef7a7f1a99c78
SHA1 4db8a4502f285c68d88bbc127e301ded26f4b968
SHA512 b723f80cb972f75c58353861fd189541e05eb83cd97d7ddfea8ac4281686cfa26907c4eff55f1541215931b1851b7b5910b5582afa39f254d9c492f9609668e9
SSDEEP 6144:VF4+335s+Y+Z3mKYYuWSwJWuigHjHoxEe0W9N4RDVvM:VF4+335sF+tmaJbigHER4RDVk
TLSH
T18F4423E691A147E8A178D683680735C1A42E097FBECFF1A73F06CC9C8794760E9E1A15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopRename.pptx.WCRY

Path C:\Users\Admin\Documents\PopRename.pptx.WCRY
Size 470KB
SHA256 c3f9a79aab337f6b1ac59c5640bfca780b09e88fa5a16b6e43a1206ffd527828
MD5 148db2e1f4e934bfd05b112a854512f4
SHA1 8df8c6aecc8ebea01269ce345252b0901f5084de
SHA512 8f77cd35b8892158ec982c43569c0c5817c21fb4b2fabd47e3a7c1fa209e2c3648c01c1c0964ea063e4243322df1deb3d9c02c8a68b1e40476f34772e2dc017f
SSDEEP 12288:hDD0ZJ0gtNECqHmVVqnmqvHsflXEa/5pUb72h6Ph2S:h/KdtNErsqJvHs1BwJ5
TLSH
T1BAA42375D0C34AC81B9C2D73E8CB4813189677873605F58E8573A21ECF23EC6EA9A4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopSplit.odt.WCRY

Path C:\Users\Admin\Documents\PopSplit.odt.WCRY
Size 458KB
SHA256 1586a07c7d31408739a5a8afa0e749f988cdf838cc30fb9ebfc9ebe7c749266f
MD5 cc9a72746bd516a61d9537079a23ede9
SHA1 59b7c21e639db6e1a639128366c611e2674f710a
SHA512 1ce55490580ea608834880bae0f6d4486ae78b1a063a8747904392f7e3b9339aa692b47e485ada381eb1b89aa4f8018f21315162a57e9d55da7952f6437725b8
SSDEEP 12288:iW/B/9skbk8T/5Z6deFVhlTHS3qQkDyDL2BH4:iW/N9v3T/5ZA2VhlDSaQkiLKY
TLSH
T1C0A423785F89C69F2DDBAC3D7315A9B42C7AB6D4048180235B3AE92546B1732067DC3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushDeny.pdf.WCRY

Path C:\Users\Admin\Documents\PushDeny.pdf.WCRY
Size 603KB
SHA256 7d6d6911654e9e62416e0370849ccc1a151367dde02e8eaa6053f1a3394b6d35
MD5 9f6111db0840db3d45f600f8a618d616
SHA1 c2c76ddaaad1a953ed51a01fbfd547a70cd38b79
SHA512 71733b6245c759d0aa2163b67d78ecb1eb6b3f7d514b6ea4bb24ad78ed59f117ffc7880d2e89aef73a78c167ae0d5f253003fa2b61224603d6e5887e16f8c748
SSDEEP 12288:g9HrCEu4DnzrrTj49pYN9SK4efSP+iuERMoC4S9POE8yU3MdnqgtS:uHrT/nZm1P+vE6Z9DsOn9Q
TLSH
T1C1D423733EFBDAE3B24520618D105C8728B692292395D72BA71637EF76A0363DF514E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterConnect.pot.WCRY

Path C:\Users\Admin\Documents\RegisterConnect.pot.WCRY
Size 337KB
SHA256 ad50478091f25c1d1b67d394487d42f6f48fe6cb9307ea87fa12447ef23f33ba
MD5 c9228dd8b9c23a551192a68152e338ba
SHA1 a1f9f81ccc443f3ac022926c5687831d2ef72f85
SHA512 ec7dca961d0473f81b3e50d8f707e14c718fad44f433911f1d45a3ce0557c49e4dc99d51cefa89bd70e1d209170a8896bb3f8544c2a639112364b0946ca04b90
SSDEEP 6144:NE2wOR8qzbJenVtDffqcvUWC//EIKsYgQfqJSEMVXsrLKUKJqOyZmw+IUzEvqp9N:qj28qxenVhyCvDHsYgrMVXsr+UKJOsvl
TLSH
T1857423D71762DCC8DB4DB65AA8F65FDCF4E47E884D130E00FE4218A80A4E83A70D356A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameWrite.potm.WCRY

Path C:\Users\Admin\Documents\RenameWrite.potm.WCRY
Size 361KB
SHA256 6e01789863d605c473ff3e494b1f1b9cc9776b6b3ec30d2465c2024e4d87c91a
MD5 631a99ed63110927b6c027b842ffed9f
SHA1 d01642a9e102b14152dc446bcebf6f4c7f213265
SHA512 1ecdd22e65b0df13a4f76d56795983223883181835be07a93cbf26aaafbfec9def42381e193ae7546ef166ab0104d6cb060d17ccd5d8f2288d6cfd4999632005
SSDEEP 6144:faIglAByPVZKQ7IYLkUrBCGTlvMJ5xaSJ5ZiHJw5UOlOKqB4VsH8:iOgtZKp75CvMJ5EjSTO7H8
TLSH
T134742393EB06FD363A108A3B06D3127A70945B16B078DDFB564A77C58FB96380505DAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestRegister.xlsx.WCRY

Path C:\Users\Admin\Documents\RequestRegister.xlsx.WCRY
Size 11KB
SHA256 29435aa80102e1f71c494bcc8ac20585b6194d2d2c03fdc3f105f59fdbffd74b
MD5 8a17ee41671011ff60dee6ad72b4fb97
SHA1 620a872d0b59ee96ef48aa2e2f6f34a814a6274b
SHA512 1d18f7a75fb28ffd4364a3492bd98963fd3e07d765da74154b52fac1f5b9732de1e9545f1ff193dbe472b35e64a4cbbe87a44036a9ca4718543901ff3f50f5ab
SSDEEP 192:Llrn51EKBgOZUItA8rSLXVDINMG7k4/A4ohOGYFC+da1o4xGZ8uIZMkWZUo+WyKI:hrf9BgOERDJG7k4/kOTFC+dWomGZOZtH
TLSH
T16D42CF80ABA6A30510B3F0D94264C6739ACFFC1B9A0048FAF9542172DC27F616597CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeNew.ods.WCRY

Path C:\Users\Admin\Documents\ResizeNew.ods.WCRY
Size 349KB
SHA256 b554627925fb8ff20472350e591619d2c694a3291d945bcee270abe18558884b
MD5 db18e12d281bee4c123d078f322ebf27
SHA1 bb71845ec34a06c8859421dfcc2dadb46af24827
SHA512 4e4f8e4cb0cccda9aaeae957ba6a68f47f6afdfa0278c84bb4cb17ae147f92b3ba69e9c0140960cf9cbab28567f353b68aae7347f78a142e20862eaf140489df
SSDEEP 6144:NAED2UXDy/f42alk29D4HHnslUS0IBeNZXATVD2RV4+eEHGJSvAy1hPnJL:CEhzk45yHsiIBeNiTVOPmMvAynPt
TLSH
T17B74233A9049C6E91540ABA012CB44CF4DBF61CE0F657A0A34B77B5A447F7AB878ED09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartUninstall.dot.WCRY

Path C:\Users\Admin\Documents\StartUninstall.dot.WCRY
Size 615KB
SHA256 4a666d28c3c124e37d84e1828cbf6d115297610f9bf4f0c6ca00d6e2fb232ba9
MD5 bcf0e119ce9f2fea98e150af9bead219
SHA1 39f8ed34dc907f9644bac6cfd15ec4d36e3cc5e9
SHA512 216f0fbe44ff602872face769e5bda75660bfdb0917cdb9cf31fa1a133befdeb64d5dde0541d070e8af4ff772bf6e55a598bdb8f37ec2653eb90c2f079d8e835
SSDEEP 12288:O3AP6hOx8RxdkTNAIchnsvc62rICeC+SmY9MkrGfpd3qrcKpPgQlMO2/qx:OI6hOCtbdhsU62MCeC+eMkaRdUpflh
TLSH
T10AD423E6E69284DC43853E3B119B0FC130E95762FCC0A684BF541A668EECD54AF6F487
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitTrace.csv.WCRY

Path C:\Users\Admin\Documents\SubmitTrace.csv.WCRY
Size 651KB
SHA256 d6def2997ecc565924a5bfa9a036a54b5c458ab6b6ca92d8c03fc438b41f8e80
MD5 8f5a35ade53c71a57305afd134832276
SHA1 9cfd46dcd5dad3cb001bcfbb3092e987f0a1bc73
SHA512 267d4e5bcfa050877def930932297b5ef913cb722cd18f858bcdd0a755746daef4a5d1ad8d1a846285359b87f88e304e1219e3dbf5e2dfccb338882d9beb867f
SSDEEP 12288:9Sp4srnGgokevTc6XSM/JS+EEXEOfIzqEIp9u1f2l0QNaSqrL+tILSOkeAs/N:9SLDGxvoCS8JJDO47DlnaS8q2LS3Ds/N
TLSH
T1C2E423DCA1436456029264681D67F30FF19E1EEC9D6C64ACD0CFA43C70DCB68A89BD9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncEdit.potm.WCRY

Path C:\Users\Admin\Documents\SyncEdit.potm.WCRY
Size 530KB
SHA256 16509c208282544274758a9e208ec2a52dc4be03e0fb9a9e4d6b78325306405a
MD5 b8b07e7625fb9b947fcaae74bb0b2fb7
SHA1 acee7a2598f35f8fc12907a9e4ab72a43005ab77
SHA512 4b5179b0b2a190cb83db62b7317584e3bea65e64491e9d6a85786b5d820a131a5a4427f794ff56ea15387d44ee7cfb7f2b46cf4f153f0a62c429ba2a2952e979
SSDEEP 12288:D4qO6k1/E01OeGvPQFnNR4goDZzVqXYx+6VN8fjxoXrhoI5p/C:kqk/yeaPQFNRW0i7hoI5A
TLSH
T1E7C423EBC9C1525CE5F7A3962E58E24550BDFCA3D05E7C01E0B14F112622E97ABB3C29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceConvertTo.docx.WCRY

Path C:\Users\Admin\Documents\TraceConvertTo.docx.WCRY
Size 19KB
SHA256 704c584788bea24490161a0f360829b5fe93be631a3d53197c5509771014d49f
MD5 7e4594d5536e815d8b4f4ef85e1eab1d
SHA1 49dd19dda7320e4bd28c2bd16af59f264af822c8
SHA512 78bef2a09aa23c87b1742c5d3b77eafccd746b79c82329dc995139e059f67fe8fe9557c10eb8a6e22aec23c335f18b48b583b36cfed667abb8430d14db37fe13
SSDEEP 384:ElkjUJEUTO+oPFpZBBzhx1vjOdNkm1rgF7gaKJAt5j9Vu:QkjkELtBBz17m18lgLiU
TLSH
T1F792D017A6A692D75524B4D1DFB6D5287F90D7CF4BCAB1EEAB2A2CEF0009C11D120394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterEnable.pdf.WCRY

Path C:\Users\Admin\Documents\UnregisterEnable.pdf.WCRY
Size 554KB
SHA256 8250b44a6faa784ad9c9daff74d446678c5a21f1903ce2eb26ae162e0a056662
MD5 4aba27c089e47fa63500d16d06c088dc
SHA1 0e0df3d0ae47b6be6014500ac1920bfd5401447c
SHA512 71d2185edd9d513c82dd973dd2d52ef32e96edd8a8ca0593dc82df22254de1b5f68dd8f54991565798c7f5bed1f7a0cb6e1825e0facc9e9e082530813c96a3a8
SSDEEP 12288:Y0xnRHkvI+H6LQW+alyrJdnOhZsEYO10M6o8ODcA:DxnCI+HkZoJdnOknAwA
TLSH
T124C423FFD259098962F648889464C9CF4BDEEB1754FE1844669A19DE35F0D0BF08A333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterRepair.xlsx.WCRY

Path C:\Users\Admin\Documents\UnregisterRepair.xlsx.WCRY
Size 12KB
SHA256 6795c2a1dae871b0a2c1405e7b01507f80b0626361cdf004cd7150ab04d78d5b
MD5 b45cd5afeb21fbd7c37e81d4176f5cbc
SHA1 25bd4e1d4b46d765920affdc9a8d3b062420ec59
SHA512 d965080fe9103979db73eb79fc382eae080719eeffb20653dee665b38be15481f6d72a9e54123d62ed9911939f8a575b724ebe9ab7ebf13c02cd8d4c1cecb880
SSDEEP 384:geM2C5g0k0w22QnuEMB8sOdjosj5Qgw2f4To:gH2wrEQnZi8sOdk5Vov
TLSH
T12E42C07FEBAFC6535BFDD5DA4D5C89A04901E8D58BA0A4DAD44C0FD003BCE2950349C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchSkip.doc.WCRY

Path C:\Users\Admin\Documents\WatchSkip.doc.WCRY
Size 506KB
SHA256 005b1458a24a4ca04e17583637c1d1f1c86746f01c47bf0502fd48efb9d4f570
MD5 16e349df9ff40d4b7aee609d5cce9e3d
SHA1 d95d9a19ae7a628582eed335ccd9b337a7031b56
SHA512 230ae0322dc78dae3c6184ec763120bcc01a94f01c3036a70a5f067c17f1e6f73ac02bfd5dca7d8c29e7eadcdbcdd33c2dc8e85838853cd2d8778ac2664ac405
SSDEEP 12288:xcE+MJmMm+/xsIx6ntumNBITwpse33hF1:xqWmMj/qIMntxNBI4h33hX
TLSH
T18FB4234467DD8B0B747C42F166914ECB63602F46A1DAE26FD6D898CC2B19E0FC3A1DD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlockRevoke.wma.WCRYT

Path C:\Users\Admin\Downloads\BlockRevoke.wma.WCRYT
Size 398KB
SHA256 e23ac4886ed05f050ae366a34363da244a418953b90ab7a3337e35df452e8dde
MD5 7c2ad69c27064e2802ac2f4dba53bbb1
SHA1 5045e190b8966648c6fc4ab93e179854d3b2c7a6
SHA512 bcc771a17f0c9177cf4d81c22e99190973837e4e6374c70e27b354a4dbddcc87e323fc8761a455f9b41a609b3b38fc87159369753cd702c2ba38a80e06e4cb4f
SSDEEP 6144:K+ZHt2gbSP+qfKr6cGrMy4GH+drFYnfyQKQkQAqML2Xxs3LzyXCAlDDb3aKh/JIH:K+K5P+qJ1IMKIkQPML267zgFj/+
TLSH
T16894231658B4E26A0F832FBBB44B5C9A7DB35BD0E9327746206F99921B0C0D5C5349CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectRestart.jpg.WCRYT

Path C:\Users\Admin\Downloads\DisconnectRestart.jpg.WCRYT
Size 364KB
SHA256 701f34e6a9de4cb34b835051421c8feffbc504f8c6f355390a2f7c0b8be36ae8
MD5 c5dfa05dacac812b95dabe34a89c4bff
SHA1 fa22cee1dca9af34b6a064b6b3277fedba4b70d1
SHA512 3abf70fde6c58ccc8ad1da106401a7cee3ca586ff70ff997548b2bf449936219734794cd25556f0af0f7579a6747bdd530a02e763888c8d882d6f0273ef5324e
SSDEEP 6144:eSGfB4NeY7MV9R27syLtk4emDygKdJ6eYHEVjf8qInJgNyyrUrA+NqY2SusgsHvP:DFNB7I907lrAgKdJNVjf8JgguUrDNksr
TLSH
T1EC842399E5E5827423BB2371BB29538125FA54DE38E4D19FAB06D01CDD79ECD28CCA0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepRemove.pptx.WCRYT

Path C:\Users\Admin\Downloads\StepRemove.pptx.WCRYT
Size 375KB
SHA256 4dd04325fa4387e485b601c473afffe97ecc2058e6027859ca4c112d2d7f8f85
MD5 0f13ca5884b47871a90ec119dd074a2f
SHA1 6daf9f8c4ef7f366fb755a2978c70de2709afb4a
SHA512 55940be085312b2485fccdc6650c808283c2067b7aad776027ffe7e02788f33c0c36ba2b74f4abfe223b56cb2de66b3d30a60b5ad9f670970015fc22d73f9784
SSDEEP 6144:YDFK2HiPTJ+zRffb/ANGXB6Mfk7waXe5sX16GH+x3scfBIfscTnio:YDzHiPTJ+dfFd5sES+Deio
TLSH
T18D842329B165FE75C6547C3B9A9CA1C3C3D523DF704ECB645708B6BC227805EE388A4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugRead.pptm.WCRY

Path C:\Users\Admin\Music\DebugRead.pptm.WCRY
Size 1.0MB
SHA256 8a848da8f191022ed8a72a43d88ab2858e037b62223431f1a9319fa7a4ae6fce
MD5 57d9971abcb207f6d8752745b5b8f268
SHA1 c7cfe7bc9ef6d9c69d94172ea1ca5a732a4e2206
SHA512 99f26de46cae816ab8220d5f2a5dba6ee4ac64917074dfae0b38daa4f49ca0de278593b266fb2d7b4e68f2270a8b1a9cd502d8d5558f70d67ff601982b2e9b16
SSDEEP 24576:I8d+eoFW6fkqNeEr1tCxUhn272Sq742GQoFIXcl8at6GNmaR5Xw4:I8d+eP6sxC1tCyh2Je8rwcl8U61y5Xw4
TLSH
T1DF3533484A782779A0846B006738D4E53BAD7D58400C69EF32F32D7E8A382D677ADF57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallSkip.docx.WCRY

Path C:\Users\Admin\Music\InstallSkip.docx.WCRY
Size 685KB
SHA256 f2bec31fb404ce55ad9b23f6de9851f45dc78b195fbd5cc124d7c41fdce91b66
MD5 ff615b6f89cd101e0501661b3b18474f
SHA1 526f92bcea064caa399fbeccbc135d7723016b43
SHA512 54c5dd4c6e46170a57d9b6503bcc64caf3b3353336febbdbee5a4b17893f23d6452c5af72f5b17e1cf593a59a5125085e7891f4b42c509a5a4fd2e5ac089f5b7
SSDEEP 12288:6txRY1BVIa4oTGR7jZq3xU4oOmW0Zz5yIeDsMYbS4Y90+n7ddIvbKo:6tXY1vcgxFOWaj8+bSpCQdqx
TLSH
T1ECE433042D3222995228AE721BEE9713C84C9507FFE4E092F925FDB248517BBD5ED4B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoAssert.pptx.WCRY

Path C:\Users\Admin\Music\RedoAssert.pptx.WCRY
Size 381KB
SHA256 e140fc59a1bed82bf41c959d901006e10d11b4b13eced39e88eaa504ab348789
MD5 110daa4dcb9513efcc189fed0e4786d5
SHA1 4699e72770e38d5310a5c70e6d1306c37c7ab6a5
SHA512 6da21fa13fba3e76e11e2ead5ceb7ce8b938c785355952c0176fa5c94972709ef4f916405f7383dde30f998e0a2c42c3a36c313b1d7cacdbda326f72a9ad85ea
SSDEEP 6144:q3kxmyZgLM1aQxV54bL5irPE98iQTSnhFF210giIshuAmbccQZt6hjG/cPR2KUtH:qGPa2435ii8he921fIfZt6hjG/Z
TLSH
T176842333622B273D31E7123A824D7847FCB6FE6144E641922DE9419940D1AE7B37D6E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestDebug.png.WCRY

Path C:\Users\Admin\Music\RequestDebug.png.WCRY
Size 279KB
SHA256 c2c69b0c6c0a17ab584903b0be5b7599bb97730e9482c6fd4972f106432820e7
MD5 27e6e82ae62274d6238d704a9053d9b8
SHA1 8bee5618994690df46eeb8096cc962ec43ffdb96
SHA512 f6f43be80b67789d7379e86c2d29deb7acf192e3030c4f2b9157d25872cf8b8d7e822803c3caca5447002333bd0f3a76d88fa5f634991e723d30aaedb71d6fbe
SSDEEP 6144:8p37eILI4Aiuatsjz9TFVMFZ/3UiBEiiaWDFyr8ReqDoUBYsKl3A:fubACtK9TFVe/5ELD68RJc7dVA
TLSH
T1D454233673AC121B1DAFC29FC12D939DD75C4B7EB9910900382FF6B0E5B696A7140B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitOpen.avi.WCRY

Path C:\Users\Admin\Music\SplitOpen.avi.WCRY
Size 330KB
SHA256 33a0faf2fffb8d5796d2e492e40784ac0007dd26dd63ba249d5e298cd7429b70
MD5 163670347e29d09c625e74ff9cd466fb
SHA1 a3385dc74647d15a81c1c11e1dfc6e4ebec0a111
SHA512 8c7a4f50709d5af5f5fc971dedd76ac8cb98ed87a06b6ac7595e817f455d61e7695836e0a9e785127e58dc89cf9efccabfb3179c3556a7d20fce5f7020cb50be
SSDEEP 6144:N8gdfb5aLFjyDTd5pKF/KNsMjmIKurE4n2z0G:N8sfbcLFeDzpNjC4wt
TLSH
T194742378871A338BF2D056AC8EBB44DA25527AE36B3D960C00FE5C97971E84405B38F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromPush.dwg.WCRY

Path C:\Users\Admin\Pictures\ConvertFromPush.dwg.WCRY
Size 377KB
SHA256 03106c0fa3493365b206bf5b33c2f4e5cb44b65425a7a7c83e2d8e8eb165e719
MD5 a492cd6bc457ffdc5214561ab4d2292d
SHA1 97e987f66256aea7e14cfe14c789d1c0f7e161cd
SHA512 a3742af8698cb36060a7823b572e84f69477fedb17fe59c70e3ac1fe8f0b545db517d073a75492024ceddf111c52efb64362cb8c031fc423d2fd31d9a2a3482a
SSDEEP 6144:fcEOSQlsRs7iz1vPmMA6rOcPjX+D2urfrdRZNB2tPqzWBiJ/KZzwWUfHgYpe:ffOSx+g1eMAIOrquTDZNs9q2igEiYs
TLSH
T1058423F0423F08ECBCC4DDA37C8563FB9248A4CF671849641A9EF6A94FD42989CB146D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyClose.tiff.WCRY

Path C:\Users\Admin\Pictures\DenyClose.tiff.WCRY
Size 508KB
SHA256 6a780bf63db4a47a0a1f5a98deda950f021dfafd3cc5a0b5d1b0cc89d691ffa9
MD5 b2aab016c5a870733ab6a087be7cbdb7
SHA1 612a55276c731eba94cf209f3429d5d2e940415e
SHA512 5f3a847b2bab2139ffa4d1c6c3851575d6d0636d20b6d849c0b223c79765852a2400daa03ea41d6e88b461fd6856aa830d1cb21a7660a2521bdfb677f2ddcb9f
SSDEEP 6144:woDNRp9CtIN/BMPQyvjiZ8Hb6iKwJtVzB8ZykoqnPwlVXvHAU9FY+XLbPJY27X3i:bqiZVifB8ZyhU4nXvp322LqwRJa
TLSH
T14AB423CF586D91D1A76DDA6FB3B9282C50E08541ECD17E20EE8D20D86F0D126FA8ED64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyImport.svg.WCRY

Path C:\Users\Admin\Pictures\DenyImport.svg.WCRY
Size 496KB
SHA256 66b7c62c66b4b75c307040ac26447f60ef7d730359c0d6edd9973f8daecd503e
MD5 e469658bc8011d43fb77941c28ad1a08
SHA1 5a14f8efac6fbec8dfbd08c6a60a44a5e1ea2760
SHA512 98ee00679aef0fc3c74f9ff93b3a400982688056597f1e9b751485920c1cea460af0e82520754c0cbeeeb75be0c1f68d10289fb307de5f61712033db33e4083d
SSDEEP 12288:EhIDw9o2bjtE/u3InYhvme5Wsm+uwGXjwGOzR28W/vmm/sKUm:EuDr2ntYu3Ar+uwKBmnc+m/sm
TLSH
T108B4332CA996536E8FF38091CC1F55C0363C4F8D7EBA2C2EF297A7A07441A94B983755
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableResume.raw.WCRY

Path C:\Users\Admin\Pictures\DisableResume.raw.WCRY
Size 473KB
SHA256 6e3352b82f9b8622d71813789e24205fb3b51e197ede59b2f6abd473fdc444b9
MD5 ca5c4a273118bbf3c93e11efeeccbe9f
SHA1 f33609b724b70d83219bb82b63133951500d5ea3
SHA512 c1cf25cdeedd0f865e0ca0f856ff247fb2128658fd6fc5ae7678a6dfb9bd1bf8b9591d49d723549e34a0f43c523e7c630e76dae655524bbdf0cc9a72f0b8de97
SSDEEP 12288:JFL1z2zIsFqTVMCAr/8Q+HDBo9Popyxpr5O:J51CTFqTGCM8Q+HDBo9Pjr5O
TLSH
T1D3A423D93B7CFD72B4D2EC4AE3CB52505999A83401687D8938AD8DA704DD6E098C34FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectCheckpoint.bmp.WCRY

Path C:\Users\Admin\Pictures\DisconnectCheckpoint.bmp.WCRY
Size 269KB
SHA256 6a30a67e25bfacfb895565949477e6e75227b1446adefba8f8489a91773aacc4
MD5 d16a1fda3cb0b53bb524800305981a32
SHA1 1af1de306a2e875795aa63bba9f4ab17215c3af2
SHA512 aad90d95c8e98869392ad1fa38797be3ff68eae69bafb56825f85b816facc2659bda40666589d10388392c967eec124d403b45d0c835433211a1e634a8ba241a
SSDEEP 6144:tdxRVzTiWtQ0kMGqx/WdGEYURICWWwZIpu0EzDdzQgQ7xcMu40kXCilHB5:7VnDmVG/JFU/FwZyKMgon0kXbJn
TLSH
T16C4423092CB9835D3B6ADE3F194942A0AB5E2C1F9721DB6D573075EA8073294DFC3782
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportImport.png.WCRY

Path C:\Users\Admin\Pictures\ExportImport.png.WCRY
Size 520KB
SHA256 d3effd2719873a23e58e052cb12256604597ddaf5eb014d78a0913a205cbd948
MD5 54c16893da8e08802ececa21c0447e19
SHA1 d5a37474bfcb00e3ccc59ae11be4abdc06c2b178
SHA512 6e641b370bf36e61cb87cd720c2c46ceefc23383e806e133ea9b54e870407ee036edbfd0191fb9582dddcc441b12313be4392bb6a1a0ab6d9e95a5a2184b089f
SSDEEP 12288:uKc/udYAQPEBqtU2hm+kK/A7n+8ojufV4s5syVe:uKYiB+kK/A7fFN4s5syA
TLSH
T162B4231DD0DE1DF3A4B15D3D78FFD0D3D290D2AB2A6904257F28B05809E089BA36F669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FindRestore.jpg.WCRY

Path C:\Users\Admin\Pictures\FindRestore.jpg.WCRY
Size 281KB
SHA256 2cdc84f91a9f645fdbd31d26ebd0cad6293fe67408ba9dcff7fed8cd236641cf
MD5 c96b372957a7b30033387d164a9f79c6
SHA1 83221b3d4beb610692e068c0bb43b1c8b725207b
SHA512 20d3b82934001e6e1dc3a9154820a46b627c5f172c785f6b0a86939ffd09228dbc2e98ef062f681fd3cb6beb9dd045844ec39c03412e70e805fe91506b64e614
SSDEEP 6144:nY1vhXu4t2C6vjG2oBgshDbsMZYZqtFFGgNDbe/6hwgZyxp3WoFTl:nsft96g11wqtjGsefgwCo5l
TLSH
T10F54236DA1B9CE5BCD8807833257F059EE45B005C5103D2A6928F74ACD6BCDF8B2C86E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetInstall.tif.WCRY

Path C:\Users\Admin\Pictures\GetInstall.tif.WCRY
Size 449KB
SHA256 6d15b397a1613d8dca16a7f3b1c6d65e746d258025e03bd10ae99cc1adadb379
MD5 f74b8366848e75e78559d40e4200908d
SHA1 b964e437f28608948072910bc168ecd55b7d3fa0
SHA512 91070fa1c404b0a6b7ccf3302deb0e8beae07499194daf00a3d0391add926319cac6f8810d3062c00210014208050e3fe5133a078be7ddc429ec8682f472b34e
SSDEEP 12288:TIR0/b0jNGWge17SrUCBp19NeARF9KKqpmNfA:J/b0cm4P7jVGOI
TLSH
T1D9A423A0C847EEDF2A9967A5C789B82C5D0875F336CD400CF794F5B9066DC06A3E3588
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupReceive.tif.WCRY

Path C:\Users\Admin\Pictures\GroupReceive.tif.WCRY
Size 317KB
SHA256 37e7328a6e794eb0e01dd03bf744b14449a22328e4037fc179d06009c9d2193f
MD5 89544823e8a550e0f05e1003608b85d5
SHA1 5719e29acc80fa61495d5b13b1f0e0625c46d422
SHA512 739535854ba61043cdc1b0c3b9a6bd84caafb3442d7adb6936d434cb696152ac6398635703bff6897197cbfc6787a5308e9d3a043935ca03e30c5a46f47b597b
SSDEEP 6144:Fbv9iqw7KHn4nkiDxnVKCKTl5BWm/WEgwG2AqTJpsNtDwQjJCClyDFqW:aOn81kJ5BxWEgwKqFW34ClBW
TLSH
T1556423279D522F32FFECB991F44B9356444CA455F48A0C46EEA448392B3FB8806572BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallOptimize.bmp.WCRY

Path C:\Users\Admin\Pictures\InstallOptimize.bmp.WCRY
Size 532KB
SHA256 c14de2bf2105659173d1d3f14accd5d0aa66881af46878133012f627ece1a68f
MD5 bafaa93943d89fa0968ad4f3f146a6be
SHA1 02e9e7bbf0a285eb1f097e34a59afbd2c1d70b9a
SHA512 d6baee7f9df2f9a6bdf46c41736f17abeba81f8c146525ba1770b8afc45d60787810c8f13f0c6025f1bb9d04b462f012feca3a76ce6eac3d174931c19ff64a99
SSDEEP 12288:JtjdzcIphfQiTac2tGQ7OJys1MeFTotJwMv2fOD1lNO:JdhVLfdTJtQSJyIMeWJf/K
TLSH
T165C423DDAD398D3EAB94DA5694F1F3E1412021FA75105FFA43CE56ED8CFA602C60E098
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeasureOut.jpeg.WCRY

Path C:\Users\Admin\Pictures\MeasureOut.jpeg.WCRY
Size 580KB
SHA256 c168948c33ea7f5c0822ef4c4ad0e2138b4e74c71205e88f1ea48395a8beca44
MD5 5257b33b6f31ba42d8ae1bed67e2891d
SHA1 9f3f3693eb3dd46fe21f70ebac4de301e2c359a8
SHA512 1a2f1d48d67c25cf48d72ea7cd481b7aa437690173cbb9a6a4370b9e984a9ef8c448e3a41e2ab49d2804197cf6b398eedb1026324e56a1cdefeb7e48af11f858
SSDEEP 12288:ObG2BaC5uf+KMpZawVgDqreqMKammODrwi3SIfBvL9e:Do1LajDqaK5mWV3/fVLc
TLSH
T1D1C423E15DEC709707B6597CF0DDAAAEDC5248F5410239B84DB94E0F627D9362BBC120
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeClear.bmp.WCRY

Path C:\Users\Admin\Pictures\OptimizeClear.bmp.WCRY
Size 640KB
SHA256 98cc623ac07f7b49ca46ab1bd1dfe02e9de680750ef53dfec45c29e3bc8428c7
MD5 89f54796671a7f1ddfeff1b2617a8cd8
SHA1 6b116747b75e52fd4e5cc5311cff9757773c6af3
SHA512 612ae88ae85a827970157bb75c5dc0507153af721cc88c6f023ae5af569c946bbb38a200fec332d5d9effd67682aaa95b85f67e1b2e3d3ba2f75c9051935ab1d
SSDEEP 12288:mjkMk/pfhmYt6t6c6Kot5OzzHQOto2CR+sKv6z5Yjqm3q6N/e/LVA6fsP5:mjkdhfhmYgt6FOIOto2CiizYqTKqdsP5
TLSH
T1F4D423D7FDB99174B8C353E62CDBDD7BB46016D7AE7889826138391214C2EEC089A1C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeDismount.bmp.WCRY

Path C:\Users\Admin\Pictures\ResizeDismount.bmp.WCRY
Size 413KB
SHA256 d6142eca41222a523c1a2b8644ea2ac0b628f5e9e7db8be876efca8fb6ee974b
MD5 3a358a002ffd86acf33ced04766d2527
SHA1 3ea34f3bbf5ca609a059ab00abd6d4abcf366979
SHA512 77a7a464a8f39d9ecaf516954328a590f1ed525d7293bf948a48e8820828f66eae769247be524ef75ce329a908ca682715b2f7e99f5625694469da2738423e4c
SSDEEP 12288:v2Pvdza3npGAAqH6eOq3frULcAA1tR9JPKF:+h2npGPVoMcAARHP6
TLSH
T14F942314510AF30904CADBE65C994F60FBA4722F4D268A70D56879CCCDF899B3BB226D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeExport.png.WCRY

Path C:\Users\Admin\Pictures\RevokeExport.png.WCRY
Size 425KB
SHA256 5c95892ac34f421767e17c1b08fdeac535981e388b811906c6ada627acb143b2
MD5 2b1b59c2c7476397a560f0f0895361dd
SHA1 e039473013e690ba9bafb88ea38cbae26c5b3457
SHA512 121ffc945b3f5e5c701d8064d762b0a0484eb3817bf9aa71ab9120204b6a3e053db65b47d835130fc6b21f1f54b93e42c9cc5392ff09ea81578a97e00c4b4e1d
SSDEEP 12288:H1KcUNNth04z30Xipqe3k4jp+wp1lPVI+hT:HQNNQ00y8EjpppL9IM
TLSH
T1E594236F08E9652B1306D04147B07A8829EDD2581932DD5FFE0C0BE2BDB394F953A67E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchLock.raw.WCRY

Path C:\Users\Admin\Pictures\SearchLock.raw.WCRY
Size 329KB
SHA256 f57e7d38a8d63b662dbb3727861bc66d2cbbc100849c5342484800541b3574e8
MD5 043f1ea5e46dc5acae20570d583cff54
SHA1 b7243af5da916300eed8bf089452252fe50662a3
SHA512 656b921310ca153367aabb1823431ba261f3f9e1776a87862d29cdfdd16791eb1b55766a78b60dd20d452e1930e4df540d23d56d4be5b6423ad40378de07976b
SSDEEP 6144:w/iZlydbKNFzgnZNbc1YItYYgRxCjbwCisR0xXKpe387dBkco/ErPA1aj:wKZMdeNi/VYjb48s3870nsA1+
TLSH
T1697423E7972C234BFED2690D18F0FEC672506DF20D16A5DC9DA085BE0118DA14FAB5A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectUse.dwg.WCRY

Path C:\Users\Admin\Pictures\SelectUse.dwg.WCRY
Size 461KB
SHA256 deed5f759696d8e767861c4a33d43d1d323d717590fd0690ec24ca90e4a1b84b
MD5 bfa201f2f0a1c9ec87c4c791ef5d38c1
SHA1 74529a0dbca7b6ef41ab17cab4e6d0bab74e4863
SHA512 a3203c8e06cf70362619e44c93d8aa1048ffff631ba5e92560ccb955c5f62e82d09418d8149a59bfc9862b1021191c18c34901e1344f1f84d3c1eea5b1a9bf7c
SSDEEP 12288:hA7w+lrXbbw6rrnXVkooIArmRy9kB+AsfM/2wtayDQqw:hA7JZbU6r6/yRy+c9E+S4qw
TLSH
T1CDA423DFA6D4D9BBD3E9379969A10437377C7CAE127CB822AACD0B2074C386DB550580
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetExit.bmp.WCRY

Path C:\Users\Admin\Pictures\SetExit.bmp.WCRY
Size 592KB
SHA256 2666d1681656d19ae5950698e66b79d0b95e90432308cc9064540e93ee96feeb
MD5 a64d5cdf512099944b497432e2376cea
SHA1 8f7d670461f3c191c4f7eb66708160a3945a6295
SHA512 cf4df32f64ae39e0f03684c7fba9373b0fdbd16f15cacf867dbf43d76aa95404b77cfdcd77b286fb8a1caf0ec557b95af1ce1a1b64107141bd8075799c1b0c12
SSDEEP 12288:kClPrZ+8ksBAhpl5NbUgR7QnSAr6KPBUAtV/lb1NHw0WdlhUEZNH1:kC9tFkUAhrbUyixt5UAR1efhUEZl1
TLSH
T17BD423261C3CB7427DA34DDB528EDF5E8F7EE787344105C3A4D855B0D2A2D8AA3C849A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowRedo.jpg.WCRY

Path C:\Users\Admin\Pictures\ShowRedo.jpg.WCRY
Size 305KB
SHA256 ccd42100f5ea9e3c561a229dffbdd216ec0798bb4685c12cf77a239284251334
MD5 669cda2c449bea27186c6840b8917f0a
SHA1 307b5184c5305de0cdc747212494067a87ee1802
SHA512 44d3c7a4efe3a8526b4a92004741c2727e1afb083eb0f54147f2510bb186b2629db1c7f82ed56926c80c3d895d6d3d3058de0e817c5079ddc4549da94bdc68b5
SSDEEP 6144:wyExBm5N2U7RZfvmb4qs90JJE9g7ow1mCLwO3MFrJXzWvfwhA:wq/NHWb9VJE9g7NYkwTrSfL
TLSH
T1D06423F0ED3A33589849FC9EC63548C09A739BB1E8E403B156557E45A1D0DE6FDC62C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepOut.png.WCRY

Path C:\Users\Admin\Pictures\StepOut.png.WCRY
Size 293KB
SHA256 b855938db80743e94fcbb7435d58886b4f7231734c3750ac9c02b92a4d60c6d3
MD5 9004e3763d938ddd35abc591aaa6b044
SHA1 78347eefaccd37bb43a4aba00257634d0c11daa3
SHA512 c96ce1ddf52ac853fee69d0fe6946d8bc9ed5c14c4547c2249fa637089fa020d58522f0ed90851eb8ca49b2c2aa040caf4d933264a4c3c01d0f025c33ab86e29
SSDEEP 6144:pDvrslqXNzxxPkVqM3KKRKQkCQ/PO/DAm01+nJOdlOpOgZkWELc98k:pXIqdFxcVqC/RKtXNlifdELC
TLSH
T133542364FFFC4055DABF0A1DB2A22702F95D6CF8DD5842883FBA60DFD849F1A0554990
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchFind.jpeg.WCRY

Path C:\Users\Admin\Pictures\WatchFind.jpeg.WCRY
Size 604KB
SHA256 296474fb45390366cca94a55478752c269336050c5e14817fe502dd4f67b44a2
MD5 5cfe26d93c802b35147cfa2b1bd8d038
SHA1 e69e84177a698dc02eecbfe1c975c684bb70ccf6
SHA512 84d2270c66d54410819f539f5ef4684ee54c664008710e88189d8889a6a7b3882cc3739a9e506edd937dfb635a5b3a22b05e9844a493c17ee7ba6fe9c84d6543
SSDEEP 12288:QOa7+cWpcG576oVUkd2v6GTdYioPjBRyzdXLhE+Knn0Xd48p:Qpajj7NUk4v6QCrB81hEW
TLSH
T199D423C20E24FCDF39AEB3D6531EFC715059DFD921857AA4E9DA01B1A862E4E7CB6100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kvkQg.jpg.WCRY

Path C:\Users\Admin\Pictures\kvkQg.jpg.WCRY
Size 24KB
SHA256 e284a47810561b18f856ec57413059e5abf355a2a1a1fcb59968a28a4bb77ae8
MD5 3704dfd01000baa4f72b071da6d7a50f
SHA1 8a5f1f17d302bd111a7df366c72241ad0c13af6a
SHA512 49a22ed5657ad4f1242d3a251b80124e2ed0aa3d4690f9ff7db1398b86a4e87ae72d6c74905577d88ad204903af2281752283a1d1219b60b737e1658646f92a3
SSDEEP 384:AyMx9RcKBVKRSnrPE/Ffs+MhNtyCAo8vmC631qoQhGl65rVeGDe/EidRVkIjs:iPVKRSnrP8fs+8t8vmC6koQhtoGe/9ns
TLSH
T1CEB2E182CD1E33F0D198F42AC765378ECAA1D42464AA82779EE33D6EC3B8C556865247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1320-6-0x0000000010000000-0x0000000010012000-memory.dmp

Download