Overview

overview

10

Static

static

3

mssecsvc.exe

windows10-2004-x64

10

mssecsvc.exe

windows11-ltsc_2024-x64

10

Resubmissions

13/11/2026, 14:28

261113-rta5cswx5m3

13/11/2026, 12:31

261113-pp6pcsby5r10

13/11/2026, 12:29

261113-ppaxpabx7s3

13/11/2026, 12:25

261113-plwd8abw913

Analysis

  • user interaction
    yes
  • max time kernel
    184s
  • max time network
    184s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 12:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    mssecsvc.exe
  • Size 3.6MB
  • Sample261113-pp6pcsby5r
  • SHA256 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionwannacryimpactpersistenceprivilege_escalationransomwarespywarestealerworm

Malware Config

Extracted

Path

  • wannacry

Ransom Note
  • Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �
Wallets

  • 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw

Signatures

  • Family: Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Contacts a large (4043) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Creates a file in the Startup directory 1 TTPs 2 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation
  • Executes dropped EXE 26 IoCs
  • Loads dropped DLL 9 IoCs
  • Modifies file permissions 1 TTPs 2 IoCs
    discovery
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
    defense_evasion
  • Drops file in System32 directory 2 IoCs
  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
    execution
  • Sets desktop wallpaper using registry 2 TTPs 1 IoCs
    ransomware
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 5 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 33 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 3 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 10 IoCs
  • Modifies registry key 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 55 IoCs
  • Suspicious use of AdjustPrivilegeToken 44 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 12 IoCs
  • Suspicious use of WriteProcessMemory 36 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Views/modifies file attributes 1 TTPs 3 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe
    "C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe"
    1⤵
    • Drops file in Windows directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4368
    • C:\WINDOWS\tasksche.exe
      C:\WINDOWS\tasksche.exe /i
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:3164
  • C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe
    C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe -m security
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    PID:1384
  • C:\Windows\system32\cmd.exe
    cmd.exe /c "C:\ProgramData\bmvgqpls225\tasksche.exe"
    1⤵
    • Executes a command shell one-liner
    • Suspicious use of WriteProcessMemory
    PID:3716
    • C:\ProgramData\bmvgqpls225\tasksche.exe
      C:\ProgramData\bmvgqpls225\tasksche.exe
      2⤵
      • Creates a file in the Startup directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:408
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h .
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:1092
      • C:\Windows\SysWOW64\icacls.exe
        icacls . /grant Everyone:F /T /C /Q
        3⤵
        • Modifies file permissions
        • System Location Discovery: System Language Discovery
        PID:3552
      • C:\ProgramData\bmvgqpls225\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:4124
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c 95531794573142.bat
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:2960
        • C:\Windows\SysWOW64\cscript.exe
          cscript.exe //nologo m.vbs
          4⤵
          • Executes a VBScript file via the Windows Script Host.
          • System Location Discovery: System Language Discovery
          • Modifies data under HKEY_USERS
          PID:4392
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h +s F:\$RECYCLE
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:3496
      • C:\ProgramData\bmvgqpls225\@[email protected]
        @[email protected] co
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:7536
        • C:\ProgramData\bmvgqpls225\TaskData\Tor\taskhsvc.exe
          TaskData\Tor\taskhsvc.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Drops file in System32 directory
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:7784
      • C:\Windows\SysWOW64\cmd.exe
        cmd.exe /c start /b @[email protected] vs
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:7548
        • C:\ProgramData\bmvgqpls225\@[email protected]
          @[email protected] vs
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          • Suspicious use of WriteProcessMemory
          PID:7628
          • C:\Windows\SysWOW64\cmd.exe
            cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
            5⤵
            • Executes a command shell one-liner
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:4356
            • C:\Windows\SysWOW64\Wbem\WMIC.exe
              wmic shadowcopy delete
              6⤵
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              • Suspicious use of AdjustPrivilegeToken
              PID:5344
      • C:\ProgramData\bmvgqpls225\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:6032
      • C:\ProgramData\bmvgqpls225\taskse.exe
        taskse.exe C:\ProgramData\bmvgqpls225\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:6068
        • C:\ProgramData\bmvgqpls225\@[email protected]
          "C:\ProgramData\bmvgqpls225\@[email protected]"
          4⤵
          • Executes dropped EXE
          • Sets desktop wallpaper using registry
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:4108
      • C:\Windows\SysWOW64\cmd.exe
        cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "bmvgqpls225" /t REG_SZ /d "\"C:\ProgramData\bmvgqpls225\tasksche.exe\"" /f
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:6076
        • C:\Windows\SysWOW64\reg.exe
          reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "bmvgqpls225" /t REG_SZ /d "\"C:\ProgramData\bmvgqpls225\tasksche.exe\"" /f
          4⤵
          • Adds Run key to start application
          • System Location Discovery: System Language Discovery
          • Modifies registry key
          PID:404
      • C:\ProgramData\bmvgqpls225\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:5056
      • C:\ProgramData\bmvgqpls225\taskse.exe
        taskse.exe C:\ProgramData\bmvgqpls225\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:6444
        • C:\ProgramData\bmvgqpls225\@[email protected]
          "C:\ProgramData\bmvgqpls225\@[email protected]"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:6716
      • C:\ProgramData\bmvgqpls225\taskse.exe
        taskse.exe C:\ProgramData\bmvgqpls225\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:5936
        • C:\ProgramData\bmvgqpls225\@[email protected]
          "C:\ProgramData\bmvgqpls225\@[email protected]"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:3160
      • C:\ProgramData\bmvgqpls225\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:6476
      • C:\ProgramData\bmvgqpls225\taskse.exe
        taskse.exe C:\ProgramData\bmvgqpls225\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2208
        • C:\ProgramData\bmvgqpls225\@[email protected]
          "C:\ProgramData\bmvgqpls225\@[email protected]"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:3124
      • C:\ProgramData\bmvgqpls225\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:5756
      • C:\ProgramData\bmvgqpls225\taskse.exe
        taskse.exe C:\ProgramData\bmvgqpls225\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:7288
        • C:\ProgramData\bmvgqpls225\@[email protected]
          "C:\ProgramData\bmvgqpls225\@[email protected]"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:4744
      • C:\ProgramData\bmvgqpls225\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:7704
      • C:\ProgramData\bmvgqpls225\taskse.exe
        taskse.exe C:\ProgramData\bmvgqpls225\@[email protected]
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:7972
        • C:\ProgramData\bmvgqpls225\@[email protected]
          "C:\ProgramData\bmvgqpls225\@[email protected]"
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of SetWindowsHookEx
          PID:7904
      • C:\ProgramData\bmvgqpls225\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:7856
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:5428
  • C:\ProgramData\bmvgqpls225\tasksche.exe
    "C:\ProgramData\bmvgqpls225\tasksche.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4484
    • C:\Windows\SysWOW64\attrib.exe
      attrib +h .
      2⤵
      • System Location Discovery: System Language Discovery
      • Views/modifies file attributes
      PID:6192
    • C:\Windows\SysWOW64\icacls.exe
      icacls . /grant Everyone:F /T /C /Q
      2⤵
      • Modifies file permissions
      • System Location Discovery: System Language Discovery
      PID:6200
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:6352
    • C:\Windows\system32\taskmgr.exe
      "C:\Windows\system32\taskmgr.exe" /0
      1⤵
      • Checks SCSI registry key(s)
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      PID:3880
    • C:\ProgramData\bmvgqpls225\@[email protected]
      "C:\ProgramData\bmvgqpls225\@[email protected]"
      1⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:6476

    Network

          MITRE ATT&CK Enterprise v16

          Reconnaissance

          Resource Development

          Initial Access

          Execution

          Command and Scripting Interpreter

          2
          T1059

          Visual Basic

          1
          T1059.005

          Windows Command Shell

          1
          T1059.003

          Windows Management Instrumentation

          1
          T1047

          Persistence

          Boot or Logon Autostart Execution

          2
          T1547

          Registry Run Keys / Startup Folder

          2
          T1547.001

          Privilege Escalation

          Boot or Logon Autostart Execution

          2
          T1547

          Registry Run Keys / Startup Folder

          2
          T1547.001

          Defense Evasion

          File and Directory Permissions Modification

          2
          T1222

          Windows File and Directory Permissions Modification

          1
          T1222.001

          Hide Artifacts

          1
          T1564

          Hidden Files and Directories

          1
          T1564.001

          Indicator Removal

          1
          T1070

          File Deletion

          1
          T1070.004

          Modify Registry

          3
          T1112

          Credential Access

          Credentials from Password Stores

          1
          T1555

          Credentials from Web Browsers

          1
          T1555.003

          Unsecured Credentials

          1
          T1552

          Credentials In Files

          1
          T1552.001

          Discovery

          Network Service Discovery

          2
          T1046

          Peripheral Device Discovery

          1
          T1120

          Query Registry

          1
          T1012

          System Information Discovery

          2
          T1082

          System Location Discovery

          1
          T1614

          System Language Discovery

          1
          T1614.001

          System Network Configuration Discovery

          1
          T1016

          Lateral Movement

          Collection

          Data from Local System

          1
          T1005

          Command and Control

          Exfiltration

          Impact

          Defacement

          1
          T1491

          Inhibit System Recovery

          1
          T1490

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          OfficeIntegrator.ps1.WNCRY
          • Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WNCRY
          • Size 5KB
          • SHA256 fe0e67218fc62ba90b9219c90f6f722658144863e5d120f55d4ecd725bedf796
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          stream.x64.en-us.db.WNCRY
          • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7E450321-DF48-4535-9261-41E41AB7A8D2\en-us.16\stream.x64.en-us.db.WNCRY
          • Size 438KB
          • SHA256 22f355988ca54f50dfac09926d482022a30c18f5ae468dfd5067a8a67e1d4567
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          stream.x64.x-none.db.WNCRY
          • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\7E450321-DF48-4535-9261-41E41AB7A8D2\x-none.16\stream.x64.x-none.db.WNCRY
          • Size 1.8MB
          • SHA256 21ed3892b7f3161a5ba6167c361701a2290969a42e0ba0b1eb67786f2357223c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          background.png.WNCRY
          • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY
          • Size 126KB
          • SHA256 4fc558bc68daf66d9be8ef7d497eb282970ffbed559744193a7671ec647fd1f7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          device.png.WNCRY
          • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY
          • Size 43KB
          • SHA256 70742e7d86e9ad4ddedd2b16e99e5d5c8812a71063d9c8d411e0d822f4dfdb2d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          overlay.png.WNCRY
          • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY
          • Size 28KB
          • SHA256 78c59d26802677774704cb61457e0880da9e19d4175cf74ffe858da03a340caf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          superbar.png.WNCRY
          • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY
          • Size 38KB
          • SHA256 1a87d764165d0e5c55d684404fa42e06ab734bd11250d3139220d6a2aec85aaf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          background.png.WNCRY
          • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WNCRY
          • Size 126KB
          • SHA256 9ef15572c90e6494111b7b7606af6939bff0ffab5bc67e8a729c0b222ad4aa33
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          watermark.png.WNCRY
          • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY
          • Size 28KB
          • SHA256 5bd60d631c969fd710cdba1da6a67939e02c02de5c28de3bed1968d388359896
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EventStore.db.WNCRY
          • Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WNCRY
          • Size 56KB
          • SHA256 6f5bb9d9eee7ab9594a7fceb77f3021510dca8407c8a97b553e1a79ea7eb31a5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EventStore.db.WNCRY
          • Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WNCRY
          • Size 32KB
          • SHA256 27b98e6f5bed6532cfa902a384841fa0c5fffeb3211a58e42724303ef25db825
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EventStore.db.WNCRY
          • Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WNCRY
          • Size 20KB
          • SHA256 dc30c34b1591fae4bad03cc235f9a980aa3cfdcfceddb414df315d9a464e0c07
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          osver.txt.WNCRY
          • Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WNCRY
          • Size 296B
          • SHA256 8764107e1516f55a48bf99652bd522a5ea808bbfa3e7594555b56d1612cfb899
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          qmgr.db.WNCRY
          • Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WNCRY
          • Size 768KB
          • SHA256 59fb4d7c3ee5ea78b0fdf107c77e3a06133d5a785c048aec7478c9f2cf5111c9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Windows.edb.WNCRY
          • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb.WNCRY
          • Size 8.0MB
          • SHA256 f7cd13ae8baeacdbbe32df870aa65a0695c22bdea0b2badb6dcf4cfc6ff135c3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SmsInterceptStore.db.WNCRY
          • Path C:\ProgramData\Microsoft\SmsRouter\MessageStore\SmsInterceptStore.db.WNCRY
          • Size 192KB
          • SHA256 1c3ca526686b418ac7e7a1abef2ef56e181540f4f8b16ec4ac9fc6766bcb02df
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RegisterInboxTemplates.ps1.WNCRY
          • Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WNCRY
          • Size 904B
          • SHA256 afb79e9001c028a9a01ca4347886aec396affdea2a7b2bac1a11b798a47daf7a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          guest.bmp.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WNCRY
          • Size 588KB
          • SHA256 4f2f8497fce2743e8b65687403c720c291891056b5de88004ff25f668d4bbd3c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          guest.png.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WNCRY
          • Size 6KB
          • SHA256 4f46f39ff64ef504e4add79085c8692fce7415814b33468615c07dd329aea324
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          user-192.png.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WNCRY
          • Size 2KB
          • SHA256 6f58b81b5b438c987450c381990fdc54a4fa0f044279353cf79a986bf59adb33
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          user-32.png.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WNCRY
          • Size 728B
          • SHA256 8e91064e14f27a5482208967fdb7fd926bca83ad178781690cfb3b9254a71854
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          user-40.png.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WNCRY
          • Size 808B
          • SHA256 ad0760f83125a80ed8da60a973cc4a9c54b320f2072e13090118c83edac4dbad
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          user-48.png.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WNCRY
          • Size 904B
          • SHA256 88d945f5baacaa074d435dc1a5a9ed1d9b5492297132b1d59aa099e26f881164
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          user.bmp.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WNCRY
          • Size 588KB
          • SHA256 3a99b9b2b0aeb57517b3e5a6a47d40f688a15db2bd8dd02b32b9510cf050f011
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          user.png.WNCRY
          • Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WNCRY
          • Size 6KB
          • SHA256 e25f7f87d0ddbb638fcf9b4677ed9185a3625e6913799b2962405e4f9adafa78
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeFax.tif.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\de-DE\WelcomeFax.tif.WNCRY
          • Size 99KB
          • SHA256 6e9d22a0882afea26728a7efd8cdcc21d7292189f5551d6620fe4ea1fe4a1736
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeFax.tif.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US\WelcomeFax.tif.WNCRY
          • Size 87KB
          • SHA256 b76c204edcbd91b034283d634c2cb688360d8d182c7eb26fa0f81c87e4916330
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeFax.tif.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\es-ES\WelcomeFax.tif.WNCRY
          • Size 94KB
          • SHA256 cc672e125f2666662dc229c8fb45b05f64ac1fa26a9718fb5844721349e6d0f3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeFax.tif.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\fr-FR\WelcomeFax.tif.WNCRY
          • Size 101KB
          • SHA256 34b304634dd741d9ef3eb833fccba9a6c643321e23ec7203d414888eebbcb603
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeFax.tif.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\it-IT\WelcomeFax.tif.WNCRY
          • Size 92KB
          • SHA256 f1ab6dd9cbc5c144a881f8723f91bb653ac7e27ceb55d4be1632fa173796cfdc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeFax.tif.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\ja-JP\WelcomeFax.tif.WNCRY
          • Size 77KB
          • SHA256 02d054f29547726226356f858e1fa0fbd1d356c4fce5d8ce28f40e5837091401
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeFax.tif.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\uk-UA\WelcomeFax.tif.WNCRY
          • Size 105KB
          • SHA256 5fe4afa47819bbb28a1a8021a28b0270aa61bef356850f615694fb9cebeb8e47
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WelcomeScan.jpg.WNCRY
          • Path C:\ProgramData\Microsoft\Windows NT\MSScan\WelcomeScan.jpg.WNCRY
          • Size 504KB
          • SHA256 906c11210391b789c4e06be4482963292b797d26af875a7035852f9af94b8ecf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cversions.2.db.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WNCRY
          • Size 16KB
          • SHA256 e33d4526df95c05ab2d00e4229f0aeb917feaf4a1912f2ad4db7feee30d3f6af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db.WNCRY
          • Size 289KB
          • SHA256 4f2b14b3d3ac0aa959394c96f081cd8e51d66840943ba4cac7c8be9a819529ff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
          • Size 289KB
          • SHA256 f69074127d501b8530a7c7f9998c264bd972fcf22bcbb9f5a07f9f9616d1af1f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {B2EFE475-8A2F-488C-9C85-C3E7F9F96DD4}.2.ver0x0000000000000001.db.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\Caches\{B2EFE475-8A2F-488C-9C85-C3E7F9F96DD4}.2.ver0x0000000000000001.db.WNCRY
          • Size 1KB
          • SHA256 7517f125141ba97c807c784c9b1a51f3f0693c43bfb6fc43fea8b44e6bf9b1f9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          {DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
          • Size 623KB
          • SHA256 fc415c197dedca6d2828f648fa9a776b0850a75707db636a3198e982c51f206d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SBCModel.txt.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\Models\SBCModel.txt.WNCRY
          • Size 225KB
          • SHA256 dce90b2cc1fa0406fd14d84bf76fcf9918889f4082e966c9a1a432b21fb7e1fe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LockScreen___1024_0768_notdimmed.jpg.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-18\ReadOnly\LockScreen_Z\LockScreen___1024_0768_notdimmed.jpg.WNCRY
          • Size 120KB
          • SHA256 46730e4f0df039daf294a589e8efd63e4ef0596a3443b038cc21aa1ac03a5733
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LockScreen___1920_1080_notdimmed.jpg.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-18\ReadOnly\LockScreen_Z\LockScreen___1920_1080_notdimmed.jpg.WNCRY
          • Size 312KB
          • SHA256 cdba7f628520f23b44231a976d3bbc1e484a3bdcd98a3d5b35503c8e0b751907
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LockScreen___1920_1080_notdimmed.jpg.WNCRY
          • Path C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-21-895009113-1202185046-1686627690-1000\ReadOnly\LockScreen_W\LockScreen___1920_1080_notdimmed.jpg.WNCRY
          • Size 3.4MB
          • SHA256 c6176c66fba77c2fda4634af902c95b52c9ee9a5a1a480bb7850aec84758661e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          store.db.WNCRY
          • Path C:\ProgramData\USOPrivate\UpdateStore\store.db.WNCRY
          • Size 60KB
          • SHA256 408654c275f19eac2b514d25fefe1cca376a42b20eb453ea44e8d461d10f036e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          00000000.res
          • Path C:\ProgramData\bmvgqpls225\00000000.res
          • Size 136B
          • SHA256 9fb2fc4901987bcf2cefd0db9af3a1ca51f1e1d7840aa8f3aea34f165213a1b0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          95531794573142.bat
          • Path C:\ProgramData\bmvgqpls225\95531794573142.bat
          • Size 326B
          • SHA256 59eef94410966de882e1b5cf00502a88574cf8ed7d82c069fda45a9c4358a69c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          @[email protected]
          • Path C:\ProgramData\bmvgqpls225\@[email protected]
          • Size 933B
          • SHA256 840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          libeay32.dll
          • Path C:\ProgramData\bmvgqpls225\TaskData\Tor\libeay32.dll
          • Size 3.0MB
          • SHA256 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libevent-2-0-5.dll
          • Path C:\ProgramData\bmvgqpls225\TaskData\Tor\libevent-2-0-5.dll
          • Size 702KB
          • SHA256 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libgcc_s_sjlj-1.dll
          • Path C:\ProgramData\bmvgqpls225\TaskData\Tor\libgcc_s_sjlj-1.dll
          • Size 510KB
          • SHA256 9aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libssp-0.dll
          • Path C:\ProgramData\bmvgqpls225\TaskData\Tor\libssp-0.dll
          • Size 90KB
          • SHA256 f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ssleay32.dll
          • Path C:\ProgramData\bmvgqpls225\TaskData\Tor\ssleay32.dll
          • Size 694KB
          • SHA256 bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          taskhsvc.exe
          • Path C:\ProgramData\bmvgqpls225\TaskData\Tor\taskhsvc.exe
          • Size 3.0MB
          • SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zlib1.dll
          • Path C:\ProgramData\bmvgqpls225\TaskData\Tor\zlib1.dll
          • Size 105KB
          • SHA256 66d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          b.wnry
          • Path C:\ProgramData\bmvgqpls225\b.wnry
          • Size 1.4MB
          • SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          c.wnry
          • Path C:\ProgramData\bmvgqpls225\c.wnry
          • Size 780B
          • SHA256 0ceb451c1dbefaa8231eeb462e8ce639863eb5b8ae4fa63a353eb6e86173119e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          m.vbs
          • Path C:\ProgramData\bmvgqpls225\m.vbs
          • Size 205B
          • SHA256 3ccb2f5138f9c867dce255f4419f8ecf522fdadd5bf9ffe5dec9507365b5e0ce
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          m_bulgarian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_bulgarian.wnry
          • Size 46KB
          • SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_chinese (simplified).wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_chinese (simplified).wnry
          • Size 53KB
          • SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_chinese (traditional).wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_chinese (traditional).wnry
          • Size 77KB
          • SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_croatian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_croatian.wnry
          • Size 38KB
          • SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_czech.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_czech.wnry
          • Size 39KB
          • SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_danish.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_danish.wnry
          • Size 36KB
          • SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_dutch.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_dutch.wnry
          • Size 36KB
          • SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_english.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_english.wnry
          • Size 36KB
          • SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_filipino.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_filipino.wnry
          • Size 36KB
          • SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_finnish.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_finnish.wnry
          • Size 37KB
          • SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_french.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_french.wnry
          • Size 37KB
          • SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_german.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_german.wnry
          • Size 36KB
          • SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_greek.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_greek.wnry
          • Size 47KB
          • SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_indonesian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_indonesian.wnry
          • Size 36KB
          • SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_italian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_italian.wnry
          • Size 36KB
          • SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_japanese.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_japanese.wnry
          • Size 79KB
          • SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_korean.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_korean.wnry
          • Size 89KB
          • SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_latvian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_latvian.wnry
          • Size 40KB
          • SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_norwegian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_norwegian.wnry
          • Size 36KB
          • SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_polish.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_polish.wnry
          • Size 38KB
          • SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_portuguese.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_portuguese.wnry
          • Size 37KB
          • SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_romanian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_romanian.wnry
          • Size 50KB
          • SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_russian.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_russian.wnry
          • Size 46KB
          • SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_slovak.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_slovak.wnry
          • Size 40KB
          • SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_spanish.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_spanish.wnry
          • Size 36KB
          • SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_swedish.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_swedish.wnry
          • Size 37KB
          • SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_turkish.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_turkish.wnry
          • Size 41KB
          • SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          m_vietnamese.wnry
          • Path C:\ProgramData\bmvgqpls225\msg\m_vietnamese.wnry
          • Size 91KB
          • SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          r.wnry
          • Path C:\ProgramData\bmvgqpls225\r.wnry
          • Size 864B
          • SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          s.wnry
          • Path C:\ProgramData\bmvgqpls225\s.wnry
          • Size 2.9MB
          • SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          t.wnry
          • Path C:\ProgramData\bmvgqpls225\t.wnry
          • Size 64KB
          • SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          taskdl.exe
          • Path C:\ProgramData\bmvgqpls225\taskdl.exe
          • Size 20KB
          • SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          taskse.exe
          • Path C:\ProgramData\bmvgqpls225\taskse.exe
          • Size 20KB
          • SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          u.wnry
          • Path C:\ProgramData\bmvgqpls225\u.wnry
          • Size 240KB
          • SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ActivitiesCache.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WNCRY
          • Size 1.0MB
          • SHA256 fe54e159af71841d11e2864f63025e41f98fe0e96eddedf78b231b4f0e49df0d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          craw_background.js.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js.WNCRY
          • Size 532KB
          • SHA256 4446816ab5eab816aa6274e246ccdfdb40a24d1cb7161c0d451368d42dcc5eae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          craw_window.js.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_window.js.WNCRY
          • Size 255KB
          • SHA256 987ee354fe3ad25f5b00cae2b126b8475b579e17f7b46e2d6014cb7e136fd2ab
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          flapper.gif.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\flapper.gif.WNCRY
          • Size 68KB
          • SHA256 a9fccc6f61100b65a6abd544aa2a41ad2e8a7cd36f0475522a2cc68d565f7d09
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icon_128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_128.png.WNCRY
          • Size 4KB
          • SHA256 a0266463f2bf97b6dd85deaba97dea7d7707e4e860f352d809dbc8f101bff458
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icon_16.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\icon_16.png.WNCRY
          • Size 872B
          • SHA256 f5842420b5bd3dbd6e2f0fa55c6c50d4c33690fe853d77f0e83eb08cb2d8fcac
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          topbar_floating_button.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button.png.WNCRY
          • Size 440B
          • SHA256 892f93d80ce3643e4b6482eef778fdbd548969489e69fe6c3ae74501a084bee5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          topbar_floating_button_close.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_close.png.WNCRY
          • Size 536B
          • SHA256 421ee056a43253cd78a30cb0471380dab2e75342cd5b021b3131f450786301de
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          topbar_floating_button_hover.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_hover.png.WNCRY
          • Size 440B
          • SHA256 621b92ea8a0b7b317b21f0952ada70b39e0cab1c8fd7b4ed187079ca02eca1ee
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          topbar_floating_button_maximize.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_maximize.png.WNCRY
          • Size 456B
          • SHA256 fbf0b4e340f4555a89f1cf7ffb5bbeeac56933d9496dda06849fd66ce0355056
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          topbar_floating_button_pressed.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\topbar_floating_button_pressed.png.WNCRY
          • Size 440B
          • SHA256 abe0884deeab0eca50876e8823ef3d6b37e7ba12146b72b738daf0c352c738c0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\128.png.WNCRY
          • Size 8KB
          • SHA256 e28a524e497688729731a0540e6b86d9d15f3f926b56ae8ecdf122cfc47fdce2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          192.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\192.png.WNCRY
          • Size 5KB
          • SHA256 2872d42ec49efba442cabc386b99be569e243a2d946504d3e5c2bd57229df61e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          256.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\256.png.WNCRY
          • Size 20KB
          • SHA256 861bb5dbaafe0b80a5733e3c0ac0b5e3fe93c8fcff78788299aeb525a9e31446
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          32.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\32.png.WNCRY
          • Size 2KB
          • SHA256 336d1e8dd3d21e35ef706153870d87c89a4fbc45486277126c29a90639c7ab95
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          48.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\48.png.WNCRY
          • Size 3KB
          • SHA256 b7f0e451a0ad044ffd59d947be886dccd05a595b3e87dbb549a9d38c078a0d48
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          64.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\64.png.WNCRY
          • Size 4KB
          • SHA256 1ef215e9aae791e02822ef5ef49aa21f828974b3a36b6f0d2b6723f5ae50e7b0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          96.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\aghbiahbpaijignceidepookljebhfak\Icons\96.png.WNCRY
          • Size 6KB
          • SHA256 07a3b31bd373de3a05e1c56b66fb5f2dd934e85bc0bc45dd6919ba72b74ca64d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\128.png.WNCRY
          • Size 10KB
          • SHA256 8bfb1ae20593f30065c28e9bcd510de747abdb991f79a23f8e4146874532f004
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          192.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\192.png.WNCRY
          • Size 7KB
          • SHA256 4952da1d34e7446cc4601f4d8dc820d2c6c33357623bf3667bf92e90eb00ab8e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          256.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\256.png.WNCRY
          • Size 26KB
          • SHA256 00a433dfc0436d93e6629c3b0014f5229e15bd49240da79b22a1e461f39a4671
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          32.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\32.png.WNCRY
          • Size 1KB
          • SHA256 e2a29b727bcf7a04ba0bdbb7eb4a7e184d7dca6c6d9ae5bd36b94426c6abc07c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          48.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\48.png.WNCRY
          • Size 2KB
          • SHA256 a728b1add3606ca8645e9a4904ad1cc9c30aa15d1cded6487a73fca6ceabe1c6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          64.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\64.png.WNCRY
          • Size 4KB
          • SHA256 43785f8d8ffa65f81fdc740adbbde519443b54cfaeb47c042c0415dd7b942602
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          96.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\agimnkijcaahngcdmfeangaknmldooml\Icons\96.png.WNCRY
          • Size 7KB
          • SHA256 0c663e2f6f60ff0b2b0d47b6a1bf107b55e8a7029ef1084af30f038622b19701
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\128.png.WNCRY
          • Size 2KB
          • SHA256 31a995c4c5f6344dd02c8aa548b42f408bb036b0234363a09a4e1aea505df722
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          192.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\192.png.WNCRY
          • Size 1KB
          • SHA256 8724dbe050bcf08282cc1a5f4ccfb30a9a63486b9eb0f29c4fb1ef5349db299e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          256.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\256.png.WNCRY
          • Size 5KB
          • SHA256 3523b4797ab5ffcb21d2d316e159b83016845fee983d8576bd80a61fd72e63c6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          32.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\32.png.WNCRY
          • Size 1KB
          • SHA256 5f6e3ada8a71f563e1261cf6f744051942fbd330da8745a7ae18442c9d882ec1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          48.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\48.png.WNCRY
          • Size 1KB
          • SHA256 92ad64ced5dde93bee3146834488894163b81309ef444f1c2768166dd6455ce5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          64.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\64.png.WNCRY
          • Size 1KB
          • SHA256 b2be6c1b731ed271adad6e71666ac64983a8289b7d6ff11489648a6720085936
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          96.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fhihpiojkbmbpdjeoajapmgkhlnakfjf\Icons\96.png.WNCRY
          • Size 2KB
          • SHA256 15848d76ab447caac589bd14607d03d93ad0c35990e85a14dcc49e34529679c7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\128.png.WNCRY
          • Size 5KB
          • SHA256 b9aa0f442cb8fe874c6d80f586a5ec1ecaedb2d17acc4bfc2f42f444b2052823
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          192.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\192.png.WNCRY
          • Size 3KB
          • SHA256 13d48ee7870daafe0f4f90cedc03dce01cc126213ecd332bf5ee38063d4ce6dc
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          256.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\256.png.WNCRY
          • Size 13KB
          • SHA256 f5e75bf54c8c4b0f874a826625070a6ab97c051b024236931070969d7449ec74
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          32.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\32.png.WNCRY
          • Size 1KB
          • SHA256 a614c4d19845be228af9ffe6ce87ef840f9d33b2219a0ad9aba108a01ebbaf9e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          48.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\48.png.WNCRY
          • Size 2KB
          • SHA256 327d1da59450f1f0d150167212ea8ee8c9ac35d78cefa7a2d7c1685f860b1ce9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          64.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\64.png.WNCRY
          • Size 3KB
          • SHA256 2268fe02f63acfa13f51195c01d68e93a27aa647672040127fe187c02244887f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          96.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\96.png.WNCRY
          • Size 4KB
          • SHA256 3b72a497e689207bea37ea5d032d7742d9aac95330a3be2d9027ce896bb1ffed
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\128.png.WNCRY
          • Size 2KB
          • SHA256 c9c32ce68a7e0715914a3c59bcc3ea9dbf198500dc4d21bcdbf2542bca2dd721
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          192.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\192.png.WNCRY
          • Size 1KB
          • SHA256 5d8337859a27dd7c272be5e3324f96f0ff595d5ca7b27efd87ce220bdf92292e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          256.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\256.png.WNCRY
          • Size 4KB
          • SHA256 8c7dc4a6968bbd6c27d90ac7165e3af33ddd63837b8800cc441736a6cbc46a2a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          32.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\32.png.WNCRY
          • Size 1KB
          • SHA256 4cc82631eab643f5c8356dbd8c33c799647cce153dc15cc02056cede8b13bb07
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          48.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\48.png.WNCRY
          • Size 1KB
          • SHA256 88ebd636249363bc363b9cb0928136213582ea836fce98b1812d842245f43ef7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          64.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\64.png.WNCRY
          • Size 1KB
          • SHA256 71c8ce34cc7ebdb48bb0dbb052c34cfa946bd134a949790605f5392343618c8d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          96.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\kefjledonklijopmnomlcbpllchaibag\Icons\96.png.WNCRY
          • Size 1KB
          • SHA256 d8b4aaca57bdd39765de5bdcca816e2b976492799a46fc147e5bc5eef9e64e0d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\128.png.WNCRY
          • Size 3KB
          • SHA256 c7c80479d1dcf75aa6fd32f76f703212224318ce0c9aa864268fddf020f716b1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          192.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\192.png.WNCRY
          • Size 2KB
          • SHA256 ab857a5c3b96c69adf2557ac2ed5a2555c35de697a3b3d0bed2f2c761b273646
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          256.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\256.png.WNCRY
          • Size 6KB
          • SHA256 ad32751b50809ac39ecc6972971517b0c581526ca2b7cea4e638c9772512e47e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          32.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\32.png.WNCRY
          • Size 1KB
          • SHA256 fd9e665ddaf01c392d41e332cc5d4b0af59a6382d691a8bbfb546a167bbebcfb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          48.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\48.png.WNCRY
          • Size 2KB
          • SHA256 50abc7edc76a047f774166355760aeb760ac621bf3e3d3fa30aecec29acacadf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          64.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\64.png.WNCRY
          • Size 2KB
          • SHA256 c8ef6f0596deca18118a19c7703994712ad4bc8b6026e51df7be4577a5b36983
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          96.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mdpkiolbdkhdjpekfbkbmhigcaggjagi\Icons\96.png.WNCRY
          • Size 2KB
          • SHA256 1e5c8cd2121099e6d73ed6e48f287db41fe802c0f6feb8273fcf577c8a6406c5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\128.png.WNCRY
          • Size 2KB
          • SHA256 044ec95f2c035ac3098fe49f824f178f45c47ae9c354365e0349688cb45a28c4
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          192.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\192.png.WNCRY
          • Size 1KB
          • SHA256 3ee0041c9ceeef4454cf144e55379cbc778d802858be772973d18c4cf68b2711
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          256.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\256.png.WNCRY
          • Size 4KB
          • SHA256 6c27c2e5f2d7f8e34f67f0fdd0a311d1d6f8c5111b989445381900bd5841449d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          32.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\32.png.WNCRY
          • Size 1KB
          • SHA256 bd8bf8167e7dab879630897509b5b8c352c0a5ee6c8677a0c7aaf9c2e938b3a6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          48.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\48.png.WNCRY
          • Size 1KB
          • SHA256 f3a087555a0266eb717294e97dc73ccea0328e01e36a5ed99377bb86d00ad308
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          64.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\64.png.WNCRY
          • Size 1KB
          • SHA256 738ac09c656314e09183ca3ad009efa37fed6bc4b98c7a49d8b5d8d14e58419c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          96.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\mpnpojknpmmopombnjdcgaaiekajbnjb\Icons\96.png.WNCRY
          • Size 1KB
          • SHA256 d4b7ae5dffd569f7003aea1db7111d386a444081766741a18c333c083dab1233
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          heavy_ad_intervention_opt_out.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
          • Size 16KB
          • SHA256 86a9b6029f91ec4d7455af56837e99eeb17082de77a9dba3cc3211ad16035aaf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          first_party_sets.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db.WNCRY
          • Size 48KB
          • SHA256 afcdf4b54fa245406de71c465044e473d29c23d95681fc59c3bcb7b39391ed96
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          IconCache.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\IconCache.db.WNCRY
          • Size 10KB
          • SHA256 b0b3c5010e9d8d69c03f4c671e0eca6632a0aff6b66da1774116a176197b7f36
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EdgeEDropSQLite.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WNCRY
          • Size 32KB
          • SHA256 6f98c24321695a0d4e853984b1c0c21f286c40e7070fbdef19924b98f73972e7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EdgeHubAppUsageSQLite.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WNCRY
          • Size 32KB
          • SHA256 c178bce0babbcbf67cfd78964e5e8401e22824ecb263c4c39e16c313cb7698bc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          128.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WNCRY
          • Size 5KB
          • SHA256 e0644831b7dcc6eeaa4636464bf4f5ed802c63f5bee04850834037ee9a1fbfb4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          offscreendocument_main.js.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WNCRY
          • Size 130KB
          • SHA256 abe59718b99c71bf0667a18ca9c0ce96735a08340dd662e2d322f59cf378acef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          page_embed_script.js.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WNCRY
          • Size 632B
          • SHA256 eb2134ce5a647cdb8590066ae5f5c39fe82582150c15cd1cdac8160f20000d51
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          service_worker_bin_prod.js.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WNCRY
          • Size 136KB
          • SHA256 7c47f0054aadd4838a79276d5d066e6248bf372e4d850b71b0eb265475c01e3b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WNCRY
          • Size 664B
          • SHA256 4f1f3544553d858850459278fb6a19011cea4dac9b856d03bb1cd35218d3995a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          heavy_ad_intervention_opt_out.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
          • Size 16KB
          • SHA256 708690f0f3fb3767e025779965ba6c0028a02a4452be58de06514e25f9930c83
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          load_statistics.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WNCRY
          • Size 84KB
          • SHA256 5e8e6e403305d8af1c7630256ec8ba4642d0d4ec9f7b4448ea58c15e7754ea0d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          first_party_sets.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WNCRY
          • Size 48KB
          • SHA256 a8ece2f62b76e2525c2f63a0aec436578d79524e1f0bb0f160e401cdffb49a86
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          brndlog.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.WNCRY
          • Size 6KB
          • SHA256 2095b775f2cda21e3017b7f1d4d29a3a66a0eb31dd08ec2503490e92ab8ecf35
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mip.policies.sqlite3.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WNCRY
          • Size 36KB
          • SHA256 6c772c1ba6f60955f0fa4c67a1b2b46a4bf93d0b2fd2c6de18cbf4fffc6f993d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          excel.exe.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WNCRY
          • Size 24KB
          • SHA256 1280fde0db8822d2f2ae6dd9099322354a4829704da0fb3542fbfed37026af4a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          officeclicktorun.exe.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WNCRY
          • Size 24KB
          • SHA256 7394a9e6bca665d701bb101e3d368e7120aa261914e184a1fd1786a171604b01
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          onenote.exe.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WNCRY
          • Size 24KB
          • SHA256 2e2ee630918a8cd84e23e068bca16257c63bbd1c34d4413d36de2dc81c84af77
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          outlook.exe.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WNCRY
          • Size 4KB
          • SHA256 ef14c30b1c394e9849bc36dd968b386e1db03298b054a2dd3a85180c68b5e3ac
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          winword.exe.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WNCRY
          • Size 24KB
          • SHA256 8e22a75b81feb1a44f754423e1a9b0739b08c21b1edf027022f7998e85a1a570
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppBlue.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WNCRY
          • Size 5KB
          • SHA256 878bacc0a2af6f430fbab2c20e839d321f3e9f06a1d3e3975588fba9198c4354
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppErrorBlue.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WNCRY
          • Size 7KB
          • SHA256 3748aa6c8739fd7f1a9206c6ce22ac24b18c31e0a9947ec7bb3ccce7a649327d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppErrorWhite.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WNCRY
          • Size 8KB
          • SHA256 f3318da21f5e99ea3a30177617f9714cbc26ea20ff9718496d4bc6701ce70728
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppWhite.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WNCRY
          • Size 3KB
          • SHA256 3b1b37c322284dfac5e87cb78be2d19e20417c9ef5dfcc0f032750d5e54cd7ec
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          AutoPlayOptIn.gif.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WNCRY
          • Size 374KB
          • SHA256 30b3c509a05d03452c8cd00cdddb02a3bb52b25e5941006d2897f5d751e4f984
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AutoPlayOptIn.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WNCRY
          • Size 10KB
          • SHA256 f59fb2ccb94c30ca24e493b216af908e65a63fd9b16f6c098f95e7fae7b42919
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CollectSyncLogs.bat.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WNCRY
          • Size 6KB
          • SHA256 b64f0f41590dfd5e5db1ac334e7f1716dffc37e9622d057f18918e6d1c6da26e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ElevatedAppBlue.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WNCRY
          • Size 7KB
          • SHA256 fb5cd8191a474f53248042c499f8149efdeaabb206030ab0d2ec3d6767525834
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ElevatedAppWhite.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WNCRY
          • Size 5KB
          • SHA256 c51228e6f37aed9f9e061cce21860edf907e75b32058202a7549d61f5c5582ef
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Error.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WNCRY
          • Size 7KB
          • SHA256 04d4cee6d17f354cebd17ab93add3a4ded40dfb7bfb44b29ebd1081c9c863967
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          KFMHeroToast.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WNCRY
          • Size 15KB
          • SHA256 ed9490f9db3e878e000942425528a35ed1e86f7e2fa763a3f63ab96e28bb5928
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          KFMLockedFileToast.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WNCRY
          • Size 10KB
          • SHA256 a86a9e1256532d61562eefbac94f0b9705de8fbdde96fd16cff7e5a6aa076eed
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          KFMScanExclusionToast.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WNCRY
          • Size 10KB
          • SHA256 31a63a375004be3bad7c3d663ca6503e5b4148638cb1bd2b5af671484ada8d6c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OneDriveLogo.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WNCRY
          • Size 4KB
          • SHA256 21e441250d330bf7f49cc2d6a7e3cc224fa3ef128a46630ab2714f3635db6bb8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          QuotaCritical.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WNCRY
          • Size 8KB
          • SHA256 2b7fed468bce56fc91c9a5ac273279da7dfbdb4e9ee0d451a21201d2132b6da1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          QuotaError.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WNCRY
          • Size 9KB
          • SHA256 855f152e89bdf5ed79542e28caad69d88f91bd280ed7db7b0a5c30c5df934d8b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          QuotaNearing.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WNCRY
          • Size 7KB
          • SHA256 9764c51a1caefc19696f9826fe0673bcda6477d762c10d0a3ddc009599887d4a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ScreenshotOptIn.gif.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WNCRY
          • Size 238KB
          • SHA256 4f867c9eb49d74bb5116858533dcb67f9f1e2f47530a065b275fd4fb55fb95f7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ThirdPartyNotices.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WNCRY
          • Size 48KB
          • SHA256 d6bf42d1e6aa54e10d918ee284c34476493c9b66c7721d6d3df76c59b1dd58c6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Warning.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WNCRY
          • Size 2KB
          • SHA256 07bd069814e358158ca45ddef3dc481e7a84aaa8255bc498906f8b294df18795
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          alertIcon.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WNCRY
          • Size 1000B
          • SHA256 9be4b17aef29358960ede83f92b0e478dc9226d1c0c04c7351b28302f03c93fe
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          acmDismissIcon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WNCRY
          • Size 2KB
          • SHA256 f355b142d6268946542e2349dd92230531e4e085fc87a6a01fddddfb7866a9ba
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          blurrect.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WNCRY
          • Size 1KB
          • SHA256 4d253b41c5344f9771a7061f4496839d2f0fc5cf30bf6e9fedfeb19d7521a167
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          checkmark_finished.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WNCRY
          • Size 504B
          • SHA256 fe49458f4ef3e927b06a426f6eaae60fde185c495886c5225f56da7dfffc8584
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          checkmark_hovered.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WNCRY
          • Size 680B
          • SHA256 aef5dc466add919afb41821b9b63fa023a46050a3e8084f8559c8e17edd3da23
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          checkmark_in_progress.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WNCRY
          • Size 680B
          • SHA256 8e937d1f5208348d069783722ad4ec4c7e76a11e6bfc4f1001470fe69fa2f3e8
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          checkmark_selected.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WNCRY
          • Size 680B
          • SHA256 19e4d625910ca1f1c15dac3c134dae39ac77d1bf6b8b9318e3738c35d85527fe
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          chevron.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WNCRY
          • Size 584B
          • SHA256 f1118d4b4922e1cfb7cfc6e15f60606f742da0adc9bcc636cd9a28188cd09593
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          chevronUp.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WNCRY
          • Size 552B
          • SHA256 a94f9180b38c8492313d7d54fe3623eb027a07437047c1104a78065e655ed886
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          cloud.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WNCRY
          • Size 1KB
          • SHA256 3ab37040dbdab9565db3d677828aff355764a5c9926da00d0974bb20d6c4f95f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          done_graphic.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WNCRY
          • Size 15KB
          • SHA256 e4b2a78ce37b0ff3fd5d17be9193d1c6778dfcb0c19b2639bc9297d45e0f17b5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          errorIcon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WNCRY
          • Size 1KB
          • SHA256 96b17f375bf9836f81549635682dade4f78ecb69c02bab3288cc6d7c35d0f7d2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          folderIcon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WNCRY
          • Size 1KB
          • SHA256 d35e4c48bcac8b04bd8eb672881e9a68dd92faff39de78db5fc65a502fee46ee
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          folder_image_desktop.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WNCRY
          • Size 2KB
          • SHA256 9f650f91086371880b3cc537d4af0c5f1724f094cf2051ed1b219a2c4d207124
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          folder_image_documents.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WNCRY
          • Size 10KB
          • SHA256 0348ed0cc38318eb5ba4b0c24f086b2a835d30ce12924c5f0b1e9f92bc9ee919
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          folder_image_pictures.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WNCRY
          • Size 7KB
          • SHA256 1f080e25e9d4097d5e6655fc2ad9438cb55e73f8193b024e8465c084de146473
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          globeIcon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WNCRY
          • Size 2KB
          • SHA256 6284fe8526f82bf59c455bd063d24f3b871adeacfb0f15135e8952ee9bf2dde0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iceBucket.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WNCRY
          • Size 6KB
          • SHA256 f8f6234c29dc09d4c51e06e47158e2143295fdbd0c0dcb2fbf7c61a73b4950e6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          infoIcon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WNCRY
          • Size 1KB
          • SHA256 db0886f1d956456443bfa863494edeb1efc57ad20cd602485f82e1babfab8adb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          kfm_folders_image.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WNCRY
          • Size 20KB
          • SHA256 418347be473465e7e36c9420372095f3fd9431c10d8a656d6012ba95ad10662f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          loading.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WNCRY
          • Size 1000B
          • SHA256 06df7b2421d68f528ee6a16025e60649cfee914476f207ad83527954f63d0655
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          loading_spinner.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WNCRY
          • Size 712B
          • SHA256 6fa892adcf4d9dd6873638813ce136d50808d76709159e26fad06bcf6b34c7b6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          onDemandFiles.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WNCRY
          • Size 7KB
          • SHA256 68fcc11beda90b2e76f3174d851961f271d0cb33ca8e7cf1dced0f64fa379f26
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          onDemandFilesDehydrate.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WNCRY
          • Size 9KB
          • SHA256 67a340397fd3d37ab7e8da5fbfbaab1c2268a283ae3730f8e7ebd1a276593128
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          onDemandSelectiveSync.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WNCRY
          • Size 2KB
          • SHA256 0d62c3376f41db8076708fc3bf6a7d96b2d3c24d5315c966d41d62cfd09831bb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          overflowIcon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WNCRY
          • Size 1KB
          • SHA256 c1abd2aa842141beae256b55ff22f2c4c7d2fe2b0a90944494255f81a6270280
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          overflowIconLarge.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WNCRY
          • Size 1KB
          • SHA256 454e67d8d50b55b8d743a538e61c8b89f592e872174bd469c18cf0ab663a33e7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          partiallyFreezing.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WNCRY
          • Size 4KB
          • SHA256 dfe6bd923c5b309a01a286797b6de935ae419d2fa08884970500a0f3cc7cdcc7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          paused.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WNCRY
          • Size 600B
          • SHA256 149d1cf397c88965c5e4e782a0c21ab21c87a8474f55919210fc331e4e5aa148
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          premiumIcon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WNCRY
          • Size 664B
          • SHA256 7e62a57baf61d53526c743e9e86e4cc331e6dce6bf76b0293d1a19a02d85a359
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          recycleBin.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WNCRY
          • Size 3KB
          • SHA256 a26c4c0cf33b56a005a0c7ec4f1a51a750f8eeca0f421e77166e58d6f3572b6b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          shield_icon.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WNCRY
          • Size 1KB
          • SHA256 30131fcaf518eafe49de1b9aef53db9c561e335f9be638de981889d390dfb464
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          signIn.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WNCRY
          • Size 10KB
          • SHA256 d04da85384be3d77ca4eabcc53c701c5ad0b0f9c27a3bbb6aa6e35658d3f1278
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          stackedIceCubes.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WNCRY
          • Size 4KB
          • SHA256 a4fb05b985a5d7013fe804246229ea4b7f20a51411eca756984631fa1582df06
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          warning-symbol_grey.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WNCRY
          • Size 536B
          • SHA256 250200228cd7684dae3e41f42eb6e0e73d167e5794f90312754973e164c4178c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          waterGlass.svg.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WNCRY
          • Size 2KB
          • SHA256 eb2e0199609a94dffecb57d7d20f98aaa7fe18f8093cc922284ca61a512a99ea
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-100.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WNCRY
          • Size 936B
          • SHA256 a8d6a7625300b35366ac3e7c14a4ad08ac1818ce6eff4e6baa664a30268334e3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-125.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WNCRY
          • Size 1KB
          • SHA256 3fe57fc143b5cbc741496a30103b436282eefa16b0236392eb1f2b3276dc718c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-150.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WNCRY
          • Size 1KB
          • SHA256 44315d1aeafdc22efedce9c4ca0a7edd54a4786487dacbbe21823baca0dd4cff
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-200.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WNCRY
          • Size 1KB
          • SHA256 506c1193c2dc9d60f3253ba49efd2744d26c85d98cf3418be62ae58ae50e22c5
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-black_scale-400.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WNCRY
          • Size 3KB
          • SHA256 68aae51c86f076ee8d2396646cc48003bc1ec4720c0ffee769ec916bdd8ddc4a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-100.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WNCRY
          • Size 952B
          • SHA256 2698f8e0bd261f1dd13bba97f6743c984a3c48c7f100196eb2bc5922e5e9c038
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-125.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WNCRY
          • Size 1KB
          • SHA256 1ef84dd37f279d5cf30345226a5d30ae7e7954d84668ddef9d25c9d8ed53e74e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-150.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WNCRY
          • Size 1KB
          • SHA256 f9e12515ea9009f58fa12cc72f76cfbf4538b88bab4340352ae79a900cedbed6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-200.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WNCRY
          • Size 1KB
          • SHA256 520402d3452d6bf020426228e30798c65a57abb5d9ce3e3ad2d5f3c167d4df27
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.contrast-white_scale-400.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WNCRY
          • Size 3KB
          • SHA256 69dca264ca983c238a2cff8d8625b105b5a2457576e78c91e9bc943a4f180e27
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.scale-100.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WNCRY
          • Size 936B
          • SHA256 8a2e74effbd8bc0a20d7580ad88903e0e225d11468f2f52b3872faccc03d2be6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.scale-125.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WNCRY
          • Size 1KB
          • SHA256 6dc7041d46d0f31cbd3651f00542c760c551587ecfb7c3d1d3189f801ab4c401
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.scale-150.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WNCRY
          • Size 1KB
          • SHA256 9f1109aa82515136712497ff14da1d9edec0b26ade0f65e6e50ee6e60ac3de20
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.scale-200.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WNCRY
          • Size 1KB
          • SHA256 d508d4e6b96247efd0e344742303bb119a45a1eea88da537c40e64ed05ea3ae0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveMedTile.scale-400.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WNCRY
          • Size 3KB
          • SHA256 eac5c478391f05ed6b7329d0b376fb56e9ad9d831222477dfefe046bb3531acb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
          • Size 696B
          • SHA256 fe0f359edbc7f99fb14817b5209b84b96347bb46cdd6cd1e910bedc2ac4eb629
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
          • Size 808B
          • SHA256 01241813ba47dfa2f01fd7fc473bcf85871c9e9d6e1f483f0d5570a0ac1c179e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
          • Size 872B
          • SHA256 331d2651a85a26146ef9fd99dc998cbe802dc19719dd98cf9cb3bcaf795f312c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
          • Size 1KB
          • SHA256 9e48d0d32d54f0ca0bb1233ed5dea3c60997dc5eb953359509b9f2cddb244a02
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
          • Size 1KB
          • SHA256 a3bf5c3388dcf4d937d6fb8308714a96e2a86306b5e2048d09fe1a870dcf4fc2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
          • Size 696B
          • SHA256 de50cef4c830032e5de81588693e72f619898583893173d839770ca4257d02c3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
          • Size 824B
          • SHA256 3272a46badcdf45b16a663162fef32e9b169bad19c3884fb7fb7b90b049d3492
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
          • Size 888B
          • SHA256 1ffe4a85d2103c34492b2fe033b5cc5516a9801434f079901af34e005b4b4379
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
          • Size 1KB
          • SHA256 26f7e01630d70c6133775c6f62261250e2a138ccddf4eb060984b8e40a66f468
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
          • Size 2KB
          • SHA256 0324be85a0f5cc434d3c8d1be0350cbcc69817a7560887da57d1d5e5f495fd47
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.scale-100.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WNCRY
          • Size 696B
          • SHA256 49a75d8d3a5fa204cc5f13240a4476c6eb726a04c875c2c509c3f2f217a981ee
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.scale-125.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WNCRY
          • Size 808B
          • SHA256 5123a44acae9e98d9229d39b08e154a9abfb6929264ddc25e874bf68e0989e3b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.scale-150.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WNCRY
          • Size 872B
          • SHA256 b102ff4b18e2999a6cf7c7bfab5c7708e864bd1b5aa03fec0d96ec96550a5f9b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.scale-200.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WNCRY
          • Size 1KB
          • SHA256 0019659ba40169d86f3b9d34f1e0448513f849114134a0c751f05d7df4edb927
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          OneDriveSmallTile.scale-400.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WNCRY
          • Size 1KB
          • SHA256 0cf9d5c7e9c53407202ad9b14fa3fc745ae61d22af061300cab6b1fd7319114d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          cversions.1.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WNCRY
          • Size 16KB
          • SHA256 e6099a879839fa866e0f2655a7a094dfa616773b651cc8df71339b01e2a9c379
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cversions.3.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WNCRY
          • Size 16KB
          • SHA256 00d1b1af0e170f132b18daf06d5f71ec04b3261f7033855702243b8b299a6b84
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
          • Size 414KB
          • SHA256 ed5824c6ec441a2950f0b82259654d0e148f1238276d77948b6e38f1e93f488a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001e.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001e.db.WNCRY
          • Size 93KB
          • SHA256 bff03379cde5d1e50474cea04b858a6241c32e5c2f5ed445fa15cd2a145768b2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000011.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000011.db.WNCRY
          • Size 83KB
          • SHA256 52f7a30aeb384d46e3106499cb1ab78ecaada88c78bdf8a648c115be47467d83
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
          • Size 85KB
          • SHA256 2a7173873f60b02cb0a55538d94254a38a13180ef60e50eda367005500e4a9c0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          iconcache_1280.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WNCRY
          • Size 312B
          • SHA256 641f4375bc2e004efba4ae9501d5ff9566595bd6361f633ed46a851bac57cd23
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_16.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WNCRY
          • Size 1.0MB
          • SHA256 ab03c0a6f9f9c9e7e9edc03dd24d0b1f1304e5a0f738e3531e76781739f7388e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          iconcache_1920.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WNCRY
          • Size 312B
          • SHA256 4fd7258fdc4e2932b3d1e3ba6d94316dcdf70947763d2766f6032b9038d2df53
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_256.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WNCRY
          • Size 3.0MB
          • SHA256 8f54df5c533f88ce1fa8700bf2a3d9bab332d2caeb5a2013f8b42bf8d6867190
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          iconcache_2560.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WNCRY
          • Size 312B
          • SHA256 57ac7460e9141911c985aeeb90517c65ec59b9678f3157b4261c802a6b92906b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_32.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WNCRY
          • Size 1.0MB
          • SHA256 4873d16694ca97ba9af82c38e5f4affed643bc965958fe87d1d762ae3e3ea3ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          iconcache_48.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WNCRY
          • Size 2.0MB
          • SHA256 cb41eb54e0f585f06c9e248076d8ed6f1cbac2ce0bfd3e4614f5e281dd2f1f2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          iconcache_768.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WNCRY
          • Size 312B
          • SHA256 63f5bb55bea2c525795bfd16520132e9f6d7815f6ca634c83adb2b028ee5366b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_96.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WNCRY
          • Size 312B
          • SHA256 048cdfeb3c94bfe17d7cf9eb63a6c1608759c2bd2ffc50772767733b0b82afe9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_custom_stream.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WNCRY
          • Size 312B
          • SHA256 39294a416945c7f29dbc311c4f2a5cf65793467d08fa06011d039b0cd34c41c8
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_exif.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WNCRY
          • Size 312B
          • SHA256 607f6cb157268ccab9142ea209b826e5431d8537fde98a336a34e09cd592b22d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_idx.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WNCRY
          • Size 28KB
          • SHA256 13392201b9cca932a69726b607cbaa81ba82b993f7be7c4951cec1f8ead8947c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          iconcache_sr.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WNCRY
          • Size 312B
          • SHA256 8860f17cf05e1bdd74f5cdbfc02f0c0d04fef3d1ca3ee1541069654b8997bb6e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_wide.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WNCRY
          • Size 312B
          • SHA256 c6bde48adb2ad74ef2dc8c67bd611ce072e8bfd11794a45260674fa75ac792cf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          iconcache_wide_alternate.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WNCRY
          • Size 312B
          • SHA256 da8aed31adaf12906cb01be38edc6ffb0f5b0623453ea35d01ab0452c8b18b93
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_1280.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WNCRY
          • Size 312B
          • SHA256 3778da737686503ead8820466b1ef737933c66889b96926ecdfcbae49dc29a99
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_16.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WNCRY
          • Size 1.0MB
          • SHA256 d19298e9bebcb791a04983db41451840eb9b6befc8e8417a741823ad2fd7f2d3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          thumbcache_1920.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WNCRY
          • Size 312B
          • SHA256 8fec4587e4696cc070437591984bd9dca096169c9a3da2b0f3f63b31f7572f64
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_256.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WNCRY
          • Size 1.0MB
          • SHA256 1f64cacf9f1178acab5c59ca5db176d1386066aa32210614c2c5b52f2e9ac889
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          thumbcache_2560.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WNCRY
          • Size 312B
          • SHA256 b6b5d51560c22299c6d440493b238052664e13744305b1d35731b180548c975a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_32.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WNCRY
          • Size 1.0MB
          • SHA256 0456c077a53c7f68d2ad42cab3e3bc676ea737a50808da0b3f0a9fda7ac6c889
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          thumbcache_48.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WNCRY
          • Size 312B
          • SHA256 807f2fefc2bed2bf721d5976cd4b491ae6908dc8f32e3e3aed482b9c0f549253
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_768.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WNCRY
          • Size 312B
          • SHA256 e434c4d03bd47d89d744a1db30563d87aa3687d820f508bf26707ed6ab4c16f4
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_96.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WNCRY
          • Size 4.0MB
          • SHA256 010c12d6cc959746c2682abf3a9df4a0a7efaabd79b5e6e82447b99e473821e7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          thumbcache_custom_stream.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WNCRY
          • Size 312B
          • SHA256 83350a060676c46290c83c05749c22ad87e45d3a37c532bfa9729aea8a55007f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_exif.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WNCRY
          • Size 312B
          • SHA256 255eddec18d74ff56ead6d040829d212d1958e0303bda07c92557376d0bf4291
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_idx.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WNCRY
          • Size 14KB
          • SHA256 cda8f92f59c59aebb279595a8a758e2b34468ed0583f2540a8d9a857dfae9b64
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          thumbcache_sr.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WNCRY
          • Size 312B
          • SHA256 e9decc1a12db66d69a1a9d2558914fc40da2c3e8f6ceaf50a2de8e328b87cf0a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_wide.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WNCRY
          • Size 312B
          • SHA256 28122533410f0c36d8b00afea261b4978c9a586c3a8a83aeeb05d3a95c8eba1b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          thumbcache_wide_alternate.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WNCRY
          • Size 312B
          • SHA256 1af555a7d1bc1e6a2ced8deec4666df79d14b496101f3899cffc30f4fa9ac7dd
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          {8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OA8BQZYH\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
          • Size 6KB
          • SHA256 5954bce570131d8b4c0453de846b485a21184431dc516516412ddf7a94439d85
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          wpndatabase.db.WNCRY
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WNCRY
          • Size 1.0MB
          • SHA256 222c323a7d9ac504a1a13ff5c02ca025d91a935d2be5c0f57ca88d3132f50c05
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          squaretile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\squaretile.png.WNCRY
          • Size 2KB
          • SHA256 b54665495dbb0813b4cbea5c96b2c1741596ae5e52e2a376ea19f91aa7aedfba
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tinytile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\26310719480\tinytile.png.WNCRY
          • Size 1KB
          • SHA256 2ed47c267da06cdf39f1de2f75921c996d83816649e29520c33c71d9895a34af
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          squaretile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\squaretile.png.WNCRY
          • Size 2KB
          • SHA256 494b900092c843c32c3cd5e52e451d8bcc96c5ab895440472bf7e6fc3c7a1b84
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tinytile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\38975140460\tinytile.png.WNCRY
          • Size 1KB
          • SHA256 c6aec9a381447dd46aaecda5384aa944b206be0122071a0324e3801a3b450a58
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          squaretile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\squaretile.png.WNCRY
          • Size 1KB
          • SHA256 5ce9813d16d7c04de4385856ac060c3a8b2a2a0875e0dda15551f4cd1f56dbf3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tinytile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\6501008900\tinytile.png.WNCRY
          • Size 1KB
          • SHA256 a35ac4aa26d8076ad35e2110550e7806cf6cea647492a24b0c813675504e980b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          squaretile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\squaretile.png.WNCRY
          • Size 1KB
          • SHA256 a7442e49797fdf9cd36fe6e5858d2533e75ef8a5befab2ddb5081b0aa0ad7e5a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          tinytile.png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\LocalState\PinnedTiles\7603651830\tinytile.png.WNCRY
          • Size 1KB
          • SHA256 290bd5acf3fc468e75525f2c55b26b14e4991b70a56db0ff90656ad1ea57224d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          odc_homepagebigarrow_ltr-060c245a73[1].png.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\TOC6ZK39\odc_homepagebigarrow_ltr-060c245a73[1].png.WNCRY
          • Size 5KB
          • SHA256 5cfe7952e54819f557f33b6559fd45a91557d3c60fe21343da22f178e3ac47e3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_10[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_10[1].txt.WNCRY
          • Size 197KB
          • SHA256 5d1e71636a4a706dfa97b1d46889eecaa57e72e0a12ce4faaf280185f8efedbb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_11[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_11[1].txt.WNCRY
          • Size 33KB
          • SHA256 c687c9abef553d97d9472e7383e7cafbeb238c46cb130d52207dbbca414ed5b8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_12[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_12[1].txt.WNCRY
          • Size 221KB
          • SHA256 4d8f86b3cca881a26691a106304fbcd987436a316b3dcf44ad86fdeaebed6920
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_13[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_13[1].txt.WNCRY
          • Size 52KB
          • SHA256 091c59fa824ced0ed4d9af48f61434c4756523e34e6e2b12fbc181a71bc6062a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_14[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_14[1].txt.WNCRY
          • Size 7KB
          • SHA256 f69882511c9845612c9cf6061d9f09029266425553f71c1a72d793866b83dfd3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_15[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_15[1].txt.WNCRY
          • Size 120KB
          • SHA256 025206aa25b1a8ad244e1a39d6348294c9344908668fc1bef8862e98e7978829
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_16[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_16[1].txt.WNCRY
          • Size 92KB
          • SHA256 67fce1dbec7259332a773dff1a39636a15317d7ea84394239c7dd766af9ecea9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_17[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_17[1].txt.WNCRY
          • Size 6KB
          • SHA256 8930e807a9d3637f2566a100b65ac1e962c89ee2f2a93d0f94db51e32271ec41
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_18[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_18[1].txt.WNCRY
          • Size 119KB
          • SHA256 2802865bf4efb4918784d1214acb84a9bfa3dc82e7526d43881ad8c1281dbeb8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_19[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_19[1].txt.WNCRY
          • Size 118KB
          • SHA256 3434179d370c7f72c1e1a8a5ca8bd99e59b9c51746a971350c1c7428856a315d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_20[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_20[1].txt.WNCRY
          • Size 64KB
          • SHA256 7c756eee783dc368f02639cfa6486d7d7e094992f7c410203905dacb04d20de1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_21[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_21[1].txt.WNCRY
          • Size 44KB
          • SHA256 121f91ba671898853d5b0b651490bedf1f9f2d0f19bcb3c30cf03b2b9ba1b7b1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_22[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_22[1].txt.WNCRY
          • Size 197KB
          • SHA256 8021090c2d1295b943e335bc66c1af27f213843186a8915d6200445cca533c98
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_23[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_23[1].txt.WNCRY
          • Size 15KB
          • SHA256 efaa20e8042e878cf179e0e9913876fea809526a7a70a7d39e964c7dbe8c935e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_24[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_24[1].txt.WNCRY
          • Size 48KB
          • SHA256 cb58dcb1acf87165766b8f851cdd434095713ba261f3184dba9271165860737e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_25[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_25[1].txt.WNCRY
          • Size 39KB
          • SHA256 391e446ac69ed338e5c7dd91452a4a2290f692e042d69ce9a5749eae53adcaa0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_26[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_26[1].txt.WNCRY
          • Size 780KB
          • SHA256 33d23998a22b7f5b50d14183e0ea9dd8b3603bfe3886dad6f0837c9802f24ca2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_27[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_27[1].txt.WNCRY
          • Size 87KB
          • SHA256 3d6135ef9ca3e9c3374b845c3a847626cf7d53fc0beb76b6e2f69b1b7ac00157
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_28[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_28[1].txt.WNCRY
          • Size 181KB
          • SHA256 6ef367dd1953b60a2bddd1a147366fb6e8cfd16561a712e121396d0de5add04d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_29[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_29[1].txt.WNCRY
          • Size 17KB
          • SHA256 615df7ab9879b6f1c39a31b5393c86b870807d6b9831375a668438e94daff585
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_2[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_2[1].txt.WNCRY
          • Size 72KB
          • SHA256 f1b065556521d892ecdca9a0df385cc3e759dcfae5d82afc7cbf4a1daa59285d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_3[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_3[1].txt.WNCRY
          • Size 18KB
          • SHA256 084b963cbe6f050c18bf3312f72d2f2b669dec800acd35567240262ec0146aa7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_4[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_4[1].txt.WNCRY
          • Size 20KB
          • SHA256 4cf3b801be2ba4b57f88b8f26d55b1d2e15dc1fefbf84bb7e165f8ef1bdabb9c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_5[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_5[1].txt.WNCRY
          • Size 1KB
          • SHA256 d8361cba99946b4497d3dc1dd4b8843b5704da4d8598b935169d3011c8addfbb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_6[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_6[1].txt.WNCRY
          • Size 36KB
          • SHA256 b63eb56b7620a31d70270f5390c854f2ebf64a5e7d2efd8b1a42a0441ef5603b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_7[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_7[1].txt.WNCRY
          • Size 165KB
          • SHA256 d5eed77d6b1aee98d329514cc39e1b44480ab0aa7dea42705afd79a060d190d4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_8[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_8[1].txt.WNCRY
          • Size 50KB
          • SHA256 9d8f928f37da83896af41782a0a1a5bda19fe21cc38991a4d86d0a38f9d0e0f1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_9[1].txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\AppCache\12A95JEV\1\C__Windows_SystemApps_Microsoft.Windows.Search_cw5n1h2txyewy_cache_Desktop_9[1].txt.WNCRY
          • Size 67KB
          • SHA256 dfc8ee34c1600f252c3a5a3c54a1600d7e4f0b64b4dc1bd4230cc43030b4b3e1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          0.0.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{0a816c64-560d-4d72-92d2-a73eecdb1bc7}\0.0.filtertrie.intermediate.txt.WNCRY
          • Size 30KB
          • SHA256 da9b721c1e6a74f26eb8da1736b94c13504a193a883b87d94902abd89009ec0c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          0.1.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{0a816c64-560d-4d72-92d2-a73eecdb1bc7}\0.1.filtertrie.intermediate.txt.WNCRY
          • Size 296B
          • SHA256 ade4862ca86ff1796a2407d8399bb8e732b569cb59ef7ec57ce22e151a6b7920
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          0.2.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{0a816c64-560d-4d72-92d2-a73eecdb1bc7}\0.2.filtertrie.intermediate.txt.WNCRY
          • Size 296B
          • SHA256 410eb27da93039fce3fbf77cc4da29a3d9f5d786acb17ae0d95c23578ab0c57e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          0.0.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{896d0c42-c535-443a-9dd0-f656b829458b}\0.0.filtertrie.intermediate.txt.WNCRY
          • Size 30KB
          • SHA256 c2dcaaa8433bf45a557694a3f20c9484a6ab8bf5cad8e785c27f40f526fe9ca4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          0.1.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{896d0c42-c535-443a-9dd0-f656b829458b}\0.1.filtertrie.intermediate.txt.WNCRY
          • Size 296B
          • SHA256 dd7ef92f4956bf06f3ce85a278c82f3b54c62c4039dddb076cf3833f57603923
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          0.2.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Apps_{896d0c42-c535-443a-9dd0-f656b829458b}\0.2.filtertrie.intermediate.txt.WNCRY
          • Size 296B
          • SHA256 5c339dcb62d7944738bcbb02183af33c8fe3dbd4724ba8a4f36c453d750c9377
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          appsconversions.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3e623085-a474-4d32-addd-e19bf2387dfe}\appsconversions.txt.WNCRY
          • Size 1.4MB
          • SHA256 82c01bd389e8c24bf248e711e01c440b15eba3763ad73ff2fe513221dac59729
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          appsglobals.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3e623085-a474-4d32-addd-e19bf2387dfe}\appsglobals.txt.WNCRY
          • Size 343KB
          • SHA256 ec357a5100088a04723b7ccf291d141c75ae2b4b3e4852e29f3ad2584fe00721
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          appssynonyms.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3e623085-a474-4d32-addd-e19bf2387dfe}\appssynonyms.txt.WNCRY
          • Size 238KB
          • SHA256 cdf026538fc8496975689ae56ce025284639645b70a29d0ae1e9f1c49b741fae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          settingsconversions.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3e623085-a474-4d32-addd-e19bf2387dfe}\settingsconversions.txt.WNCRY
          • Size 520KB
          • SHA256 026fd83f7a9759525f9a3866462fd0b77c5fcee70e6f56d1423cab795889badc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          settingsglobals.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3e623085-a474-4d32-addd-e19bf2387dfe}\settingsglobals.txt.WNCRY
          • Size 43KB
          • SHA256 1594f15ce8420ccba7cabed2531acd477750b6dbc16a0b483227a54719e58441
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          settingssynonyms.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{3e623085-a474-4d32-addd-e19bf2387dfe}\settingssynonyms.txt.WNCRY
          • Size 101KB
          • SHA256 5ea0454610307bb7cec55384992647ca9285ff2b201e86edf944c624263bf044
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          0.0.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{50380eee-e9ac-4912-b8af-f3feb67d06f3}\0.0.filtertrie.intermediate.txt.WNCRY
          • Size 204KB
          • SHA256 04d035a18419d2bd74866d2805786e015f8734a6ac54f6a8942aadde30bff060
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          0.1.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{50380eee-e9ac-4912-b8af-f3feb67d06f3}\0.1.filtertrie.intermediate.txt.WNCRY
          • Size 296B
          • SHA256 89ed5133f254fd06760975848e8eccf2a9d192b5abf4d0cba470242eed084e65
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          0.2.filtertrie.intermediate.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\ConstraintIndex\Settings_{50380eee-e9ac-4912-b8af-f3feb67d06f3}\0.2.filtertrie.intermediate.txt.WNCRY
          • Size 296B
          • SHA256 5cbd4c23af97ea10f2d4066b5ae5f7939b34d558d105c44d8744fd710bcfc66c
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          AppCache134336127559448446.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336127559448446.txt.WNCRY
          • Size 76KB
          • SHA256 a2254e0e8c4a99feeda0db21f93039215e1faf2aab80c47839af39628cccb114
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336128235564735.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336128235564735.txt.WNCRY
          • Size 77KB
          • SHA256 43743b696787307c4bf690d4772b2922e290fc1eb7f8c019f7a104bfe1eb6013
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336129954231495.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129954231495.txt.WNCRY
          • Size 63KB
          • SHA256 f52d1923092dacf78f57c684cd229f8ed0638a757945dec80b43eb64c9e0d12f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336129995974525.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336129995974525.txt.WNCRY
          • Size 60KB
          • SHA256 ce282526659de8594a8fbe75df2d07035b1e55bae5ef722742c635c451298863
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336130034039830.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130034039830.txt.WNCRY
          • Size 53KB
          • SHA256 be4391fdb61572f2a3f11ad716039ce618e9b2d36466f9d599ea7d9a0ac77909
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336130038864679.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130038864679.txt.WNCRY
          • Size 53KB
          • SHA256 7897afce06493a5c2a277f651fea20fb23e1b55a3681f9bf94229463bc182e43
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336130043349339.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130043349339.txt.WNCRY
          • Size 52KB
          • SHA256 f3d75cac5b039dc6232ddcbd850a4457fca1611a44348f16e277d1cc0048e946
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336130258824920.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130258824920.txt.WNCRY
          • Size 47KB
          • SHA256 81cb122fb21078bedc4ee58637e4d546649a74d30f116a05a6b2d28abe0b6796
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336130897295586.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336130897295586.txt.WNCRY
          • Size 47KB
          • SHA256 3ff63623002c72ab33928eb3048e438e5ddd5995cec171c18cf142ac967430ba
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336136550848321.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336136550848321.txt.WNCRY
          • Size 48KB
          • SHA256 5a03a16ba222bb7766d776487dd0180fa3178f00e34fe78512103d0d26cd2303
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336137262701776.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137262701776.txt.WNCRY
          • Size 49KB
          • SHA256 7016b5faf8c44a7d04f1978813a35d3560d2cda2b31d18893535adc4f4762611
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336137563807293.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336137563807293.txt.WNCRY
          • Size 53KB
          • SHA256 71f2d05f05c5a2ae909b8ba50b5dc2896f4bde1d2f231abf3ee541f3a5aa67ce
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336138141704295.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138141704295.txt.WNCRY
          • Size 64KB
          • SHA256 49c999d08e2a14d011c08608528a369665b69ca3ff6ebc9faccc7707d2218476
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336138754645357.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138754645357.txt.WNCRY
          • Size 64KB
          • SHA256 dd444d56bd2be63a59c8238384c0c547c717ea4393bff71b3c86804ce61694b4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336138808554069.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336138808554069.txt.WNCRY
          • Size 65KB
          • SHA256 e822c2aa6b52f60d6548af9f138aa2e8e72906444d853ee39ad24d44e037b71b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336139108504084.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336139108504084.txt.WNCRY
          • Size 65KB
          • SHA256 abb5bc945d4dba15eed642ebec43e7144da55883cd79621f7a4d85a3de28f991
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336140098438733.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140098438733.txt.WNCRY
          • Size 67KB
          • SHA256 3ac96f419da5e056b9a0af02ed42c64dbea19b187b410b18213db527330e1b9e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336140398413107.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140398413107.txt.WNCRY
          • Size 73KB
          • SHA256 7c8d3b09f5fb4ac3330e49a5f69439544357cdd6e3b30de2f0e278236223a655
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336140638938508.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140638938508.txt.WNCRY
          • Size 82KB
          • SHA256 f9d8d3cdda23cfcd59f18a1e5b8f4808e7f1afc324f38ac69a0510f854b3f592
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336140698154982.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336140698154982.txt.WNCRY
          • Size 82KB
          • SHA256 67aa9ba6e074249bd968f902aebb31e18e5287f8533666a5f861557825158ab1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336141032149029.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141032149029.txt.WNCRY
          • Size 82KB
          • SHA256 fba9a1487a4ac8de09cfd792a0bf726997b361989131e0973b02388054602fb8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336141315575259.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141315575259.txt.WNCRY
          • Size 84KB
          • SHA256 74bf305964979c471b1046802451e696f4b9ba190557ae8968b05f606e7d4a0b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336141615678250.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141615678250.txt.WNCRY
          • Size 85KB
          • SHA256 40b06f1f220370033f7887db6a80604418a52f9a478632d49bffcab63f69cad8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336141915634879.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336141915634879.txt.WNCRY
          • Size 85KB
          • SHA256 5f74bf4feea82e9d9ccabbb8783c4c56d992d56abba9d4328b4d139af3633ded
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336142864067008.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336142864067008.txt.WNCRY
          • Size 85KB
          • SHA256 a5c0e4eb9f300b4f37f053d352d28a9f3a59ff6e7365a0b84cd616f2a9eef2d0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AppCache134336173486200080.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134336173486200080.txt.WNCRY
          • Size 85KB
          • SHA256 ed37df7b88eb75d5402a111542c750f6f52213406776a968ef78e55a3c4a530e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SettingsCache.txt.WNCRY
          • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\SettingsCache.txt.WNCRY
          • Size 670KB
          • SHA256 4ac022449facf96457ae30fa648c52a7c1b5cec8cca2d267c533e30efa3a6873
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AssertTest.mov.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\AssertTest.mov.WNCRY
          • Size 214KB
          • SHA256 0ea8ba0e295a2bc83fe2f4f759d808dba67b29571d9964377694795df0b78bc9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CompleteHide.asp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\CheckpointJoin\CompleteHide.asp.WNCRY
          • Size 1.2MB
          • SHA256 06c6c9ca0f2b3d55476dbd8a7ab63af47ebed66c03433f1145f47750acd006de
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EnterGroup.mp3.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\CheckpointJoin\EnterGroup.mp3.WNCRY
          • Size 1.0MB
          • SHA256 18fa641748733ca47ab7a2f08710211f048d181de296f9550a9664b457e28e6a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GetPush.pptx.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\CheckpointJoin\GetPush.pptx.WNCRY
          • Size 772KB
          • SHA256 83179fd5287fd917219f3c8c4d044665c7601575187c3dcd580ef8ef932cfd55
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SyncJoin.dwg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\CheckpointJoin\SyncJoin.dwg.WNCRY
          • Size 954KB
          • SHA256 fb628db17a11d9073e7eb501d1bfc4d4450a3bbefb7b50be66eb04b5625c9843
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TestMove.ppt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\CheckpointJoin\TestMove.ppt.WNCRY
          • Size 1.1MB
          • SHA256 c22a1785e3cb6160824f3ad247c1b06efebd42d6c29e1cb6d3e02177135dd961
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnblockPing.sql.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\CheckpointJoin\UnblockPing.sql.WNCRY
          • Size 1.5MB
          • SHA256 06954d6e7d0b94a720d1cc06bdfe18fb43bff3c351a766e43432c868255fd0a7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UninstallUnblock.csv.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\CheckpointJoin\UninstallUnblock.csv.WNCRY
          • Size 1.3MB
          • SHA256 fd1e37d6ef03cce063bbb83bc5914104a2a4a0f31aced4809f20cb9445106899
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConnectMerge.3gp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectMerge.3gp.WNCRY
          • Size 179KB
          • SHA256 dc0b59d54be3f05d690e81b24e14a45ad6b66cdd54dea67deefa143a5d2d63de
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          @[email protected]
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\@[email protected]
          • Size 746B
          • SHA256 418009863199ea81e3f561cd69e7516d8a14b2010bba6f4b8fc5cef24e53c57b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          ClosePing.vbs.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\ClosePing.vbs.WNCRY
          • Size 477KB
          • SHA256 e6e4a4c0bd5bee8bc59ee52e0ba97c51b84204cf3e3e1ce3ee39e23bd356aacd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConfirmSkip.avi.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\ConfirmSkip.avi.WNCRY
          • Size 263KB
          • SHA256 e87b6ca1e208f991ac81debf89e9020f3138b96c14ddbdb4fc09f37d3f56d190
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertToSet.mp4.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\ConvertToSet.mp4.WNCRY
          • Size 302KB
          • SHA256 09c10269267769ba9888f0b5395f919762ddd90961594c180fe4b05b87ddeae2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DisableSubmit.mp3.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\DisableSubmit.mp3.WNCRY
          • Size 370KB
          • SHA256 5c3ea45d19375ff0969bdc43468d6a5d8ddf0aaecb68adb8dab9856716e848f9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FormatSync.vsdx.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\FormatSync.vsdx.WNCRY
          • Size 438KB
          • SHA256 8563abf6cebac3e5115a93fcfc0c85b6ccd4a24b2e25227dd449ed9cc240d99c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GetExpand.svg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\GetExpand.svg.WNCRY
          • Size 351KB
          • SHA256 4359bc0724798dde380170d39e58c972c71d9cef38f43c53943924d8061790dd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GrantAdd.3gp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\GrantAdd.3gp.WNCRY
          • Size 165KB
          • SHA256 2ff19f129ab8a90408b697ca60f3874f705a0c3ea2f77e85e55cf245e5b37829
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RedoNew.vb.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\RedoNew.vb.WNCRY
          • Size 652KB
          • SHA256 9a1f3b7c7cda72815f08eaeea76673c408105887df923b0e9a43301e376d18b5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResizeDisable.avi.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\ResizeDisable.avi.WNCRY
          • Size 360KB
          • SHA256 6b0e795b335a7c8341999cbc9b8921b33333c3a9ccb23ce6db06836ca2ed77b3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResizeUnregister.txt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\ResizeUnregister.txt.WNCRY
          • Size 292KB
          • SHA256 c9e84c415f1af405c97f69a1a9d4d1134c7050209d002c20711a12ffb7f2479d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SkipReset.mov.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\SkipReset.mov.WNCRY
          • Size 224KB
          • SHA256 c2f10b9abc73e3e2858b79ff2d75471c7763fac76260f56dfb3af62ab3dcf448
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SubmitLimit.potx.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\SubmitLimit.potx.WNCRY
          • Size 321KB
          • SHA256 5ca6adbd1be7cd72a21728c9248571bb5888fdf482268057c81c8f8493351028
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnregisterLock.jpeg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\UnregisterLock.jpeg.WNCRY
          • Size 273KB
          • SHA256 c5ee3d91807f1ff8e70ad99e301f77d10353e3f9e5abe4d0b89c75d34912f061
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WatchWait.tif.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ConnectReceive\WatchWait.tif.WNCRY
          • Size 204KB
          • SHA256 80acad85a4415267751c9de5c0a84d535128d6e00166e4e16ba3bdae5e2e1ef9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DebugRequest.avi.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\DebugRequest.avi.WNCRY
          • Size 249KB
          • SHA256 0d3c31e670068067a106a7229b2300a28dd8e0304e5236ffaa4fb9080c761b83
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DenySave.xlt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\DisconnectMerge\DenySave.xlt.WNCRY
          • Size 256KB
          • SHA256 e335cd0022f4f2d9fa14fa9c79619fafc0f0af9c44e43da3e944757799594bf0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LockCopy.gif.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\DisconnectMerge\LockCopy.gif.WNCRY
          • Size 469KB
          • SHA256 1afff0d231d91db56856c7471e778755bac3afe3c9099edc3e0bd99e87529a12
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StepUse.mpeg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\DisconnectMerge\StepUse.mpeg.WNCRY
          • Size 426KB
          • SHA256 eec8585cb01e0bb93704ffd7deb143ce9c4077f6da9211943902bf8a27a0b510
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WriteRestart.bmp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\DisconnectMerge\WriteRestart.bmp.WNCRY
          • Size 640KB
          • SHA256 0cf2b46990e137763b212b8f4ce13dbecfd0548568d30cfa4a10668a92e68b8c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EditCompare.mp4.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\EditCompare.mp4.WNCRY
          • Size 186KB
          • SHA256 b8f3e8777767ebbf21c4fcb404746aa397377ee3c94699de401f1c18c8f9de9c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GetSet.xlsm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\GetSet.xlsm.WNCRY
          • Size 123KB
          • SHA256 0f235151d2572a8aa9a4369ef5144ce5e8790715bb1ae543c15cdc89b2fbf540
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          HideInvoke.dot.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\HideInvoke.dot.WNCRY
          • Size 228KB
          • SHA256 55af1316c9545181a16134cb26d0f62e63f4a63a6cac23eefb84077d0e85a446
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          InvokeRead.php.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\InvokeRead.php.WNCRY
          • Size 116KB
          • SHA256 31a0c39f7e2d5032a7be25b768b6e5fe071505635845782b02e6737376f6024b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LockSync.doc.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\LockSync.doc.WNCRY
          • Size 263KB
          • SHA256 52e018c0c5bb2ccf6035d9d5f9740aafe112bcb7891b36ccefb4318c94033db8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Normal.dotm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WNCRY
          • Size 18KB
          • SHA256 068e21ea381859355536bd07705d6bd9596ee8ccd0910a782027b18eccfa1313
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CachedImage_1920_1080_POS4.jpg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Themes\CachedFiles\CachedImage_1920_1080_POS4.jpg.WNCRY
          • Size 76KB
          • SHA256 8c410c9ded22093a533edae5049ba2f5049e3c7573b516f8e2a4c5e9dd07e75b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MoveSave.3gp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\MoveSave.3gp.WNCRY
          • Size 200KB
          • SHA256 c770c0d36f9e4472f9499f4afa11a395403e04e3eaa7b74adf60cafa813a15ae
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          prefs.js.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\uug57dpp.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WNCRY
          • Size 776B
          • SHA256 e314a84b46973b7ea8a5c428ba1a959a7f3fad91056963787183090d80e20291
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          user.js.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\7ww62gjg.Admin\user.js.WNCRY
          • Size 536B
          • SHA256 28b482474bb81ca6ccb30e19b88f6359bea381a03aeda1e8a29b2ed2e9dc971e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          cert9.db.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\cert9.db.WNCRY
          • Size 224KB
          • SHA256 41679003d8d1326d70f3ac8568fed2c4f7a56b706864c4a8d1a1e3636fada416
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          key4.db.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\key4.db.WNCRY
          • Size 288KB
          • SHA256 5efd195d06a7a35058859c44faa671745a4f94ad5b639b2dc7557c8800b18613
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pkcs11.txt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\pkcs11.txt.WNCRY
          • Size 808B
          • SHA256 0cd6befd03495109ec5eab7e0eb41b039426b053f70991170eed7890aa0334fe
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          prefs.js.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\bg4lcjz5.default-release\prefs.js.WNCRY
          • Size 7KB
          • SHA256 516e508e80a8b5940b0a14f480459b238ff2053de59b9ee673d4ccf02bc659d4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PingMount.vb.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\PingMount.vb.WNCRY
          • Size 109KB
          • SHA256 5154ba08a0f44d7dfdfe7293082f7bca0db5fa8d0677699a171f2449ac6c3146
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AddBackup.mpg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ReadAdd\AddBackup.mpg.WNCRY
          • Size 986KB
          • SHA256 e31b7668cec76f6144ffbbf60a4685b7aba18051a680be53a6ff92538ec09651
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AssertGet.odt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ReadAdd\AssertGet.odt.WNCRY
          • Size 698KB
          • SHA256 f7024ae6dc6bcbe3bf585dfc4c39713395a4b4dad66dcc750c0eaf8d0bbd06da
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DebugGrant.mp3.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ReadAdd\DebugGrant.mp3.WNCRY
          • Size 657KB
          • SHA256 29e0d9b0c08a107c1ba70ee0f8bca8d40b2db052138ccaaba8f4360f0a34d8ba
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EnterGet.vbs.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ReadAdd\EnterGet.vbs.WNCRY
          • Size 493KB
          • SHA256 f340ab9e968dba95778358668c722322adb410b951e3d7e311993b60fda50fa8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ReadInvoke.docx.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ReadAdd\ReadInvoke.docx.WNCRY
          • Size 780KB
          • SHA256 57d318d3a9bedd15d6c3b2fe53e9b0ee011fcfec2e99c49858f6f0221479db25
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RestoreInitialize.mpg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ReadAdd\RestoreInitialize.mpg.WNCRY
          • Size 370KB
          • SHA256 eb1a59cc0e2c0e87507edd126d9970f7a4d01a28ddb4741a5e7cee607b95f898
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ReadRestore.xlt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\ReadRestore.xlt.WNCRY
          • Size 130KB
          • SHA256 8b3ead61fe07f5ed1923bb57b82f70522b7765247653a76163ca76a7abdd4748
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RevokeSubmit.vbs.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\RevokeSubmit.vbs.WNCRY
          • Size 144KB
          • SHA256 c4a28ceb6fed3fd28223c2850b077ee0d7076c67a89c073a2e465b49133edd2a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ApproveRegister.jpeg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\ApproveRegister.jpeg.WNCRY
          • Size 1.1MB
          • SHA256 c549b05e9a373bb7984dbdab3d9cf4455dfc5b635c1b85bbd0e93921ed7473d7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ClearEdit.mp3.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\ClearEdit.mp3.WNCRY
          • Size 381KB
          • SHA256 c7b71af279875ff12704e5ecd35a52b51d3e561df9282e255cca80fe844732e0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GetInvoke.rtf.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\GetInvoke.rtf.WNCRY
          • Size 364KB
          • SHA256 79793c5e1fccb7e04c9b68ea4de6fcc9fbbd24d3efbfb04bd8c403571492bac2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          NewPing.asp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\NewPing.asp.WNCRY
          • Size 465KB
          • SHA256 1f9cfecfa5dd1b48d4500959c620b2fec826a9dcbce9a670cf0fead6dab69148
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ReceiveCopy.zip.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\ReceiveCopy.zip.WNCRY
          • Size 482KB
          • SHA256 b33498a0ad4e9c3f7269e79afdf7c299a8040b0a6531c8e173346ca4eef1371d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RepairMeasure.xlsb.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\RepairMeasure.xlsb.WNCRY
          • Size 668KB
          • SHA256 d600091224573b44b68a34fc1b3f58400b62739dbb65da632cd9c180feff329e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResetUnlock.wma.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\ResetUnlock.wma.WNCRY
          • Size 279KB
          • SHA256 5a5663b646000802520af8cb9b74418c4bf196c16102631d2c5fa9a50b511897
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RestoreDebug.avi.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\RestoreDebug.avi.WNCRY
          • Size 398KB
          • SHA256 d81425647e27d30cfbe6fdc95e31ba5cd0d8ac55fb9ae8fbef17ed03475630a9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SaveOptimize.ods.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\SaveOptimize.ods.WNCRY
          • Size 787KB
          • SHA256 15c8801e542e628ceba636d45e4589ffa8c01abefbe72eebf1ddc8bbd429f1d1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SuspendMount.xlsm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\SuspendMount.xlsm.WNCRY
          • Size 313KB
          • SHA256 5842f8cdf81ee8a534e8e2778845365a92c0d2b32139bd56aa6648304dc5c674
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SyncConvertFrom.jpeg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\SyncConvertFrom.jpeg.WNCRY
          • Size 330KB
          • SHA256 a02e29c09ed3b12232ec5a886695b2ee2d0b883466032d0f5b57acc994b05209
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UndoGrant.php.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\UndoGrant.php.WNCRY
          • Size 516KB
          • SHA256 7baa821d34771a0e9d70f91017b41cd020c61be734b1053ffbb258cbeef6fd2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UninstallUnlock.dot.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SaveUnlock\UninstallUnlock.dot.WNCRY
          • Size 448KB
          • SHA256 9da4361f4e91b71e3ed8589662fb470490e8237bb3c2f57884ee7a652b5d06ad
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ClearRead.m3u.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\ClearRead.m3u.WNCRY
          • Size 564KB
          • SHA256 503e6f6d0abb6f89a73567d891e0e31d146295e9b705bca5f47ec4fb182d2268
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ClosePing.xltm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\ClosePing.xltm.WNCRY
          • Size 470KB
          • SHA256 9658297f10b328921b06ef8bc9777331639fcc76c862d6e877720e92f28544de
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EditSend.odt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\EditSend.odt.WNCRY
          • Size 917KB
          • SHA256 425bb19cd43711c8ee1bc244aec52e41f71a2e8830695fb6a3a1f11515942e92
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ImportDeny.xltm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\ImportDeny.xltm.WNCRY
          • Size 893KB
          • SHA256 743924227e468e7d2731978b36048762fb88fbcdbf9316f06beacb51079724fe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ImportRedo.js.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\ImportRedo.js.WNCRY
          • Size 423KB
          • SHA256 1dbdf3fdcc3104139d9ccf08dc0e2da76443237293f6baf22b5948302adedf23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          InvokePublish.jpg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\InvokePublish.jpg.WNCRY
          • Size 846KB
          • SHA256 43937a25011a448373c52cb8c4f8e8ceb4cafeb6f8079baa4459a6f27b64bc9f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OpenRepair.tiff.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\OpenRepair.tiff.WNCRY
          • Size 1.3MB
          • SHA256 260da08410c23825c61084ccb79b250d542407275c17ddc33ec722b6983d9893
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PingOpen.mp3.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\PingOpen.mp3.WNCRY
          • Size 940KB
          • SHA256 8d50d890fb6ea1a998d2dbe039176e9e62b284b3722366b0c294ef7918ba34fe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PopRepair.3gp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\PopRepair.3gp.WNCRY
          • Size 658KB
          • SHA256 384deb6aeb6e6d049dfaa46e9bb69af55060e3f8db2247db5e4ef97e5952e880
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TestNew.7z.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\TestNew.7z.WNCRY
          • Size 752KB
          • SHA256 cd18a07b506e9e2087b41748e13a0d4f21cf73da2dbd038ac2164a3e6114a943
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WaitGet.jpeg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\SuspendUse\WaitGet.jpeg.WNCRY
          • Size 682KB
          • SHA256 c9b6d0a8e99139db38efbad802140ce0c3ee594502968795eb9ead3fb435bf95
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CompareInitialize.pot.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\CompareInitialize.pot.WNCRY
          • Size 138KB
          • SHA256 db72320ae7071a33d75e2687afed20103dec3a056bf788c8080b2dc12f00e544
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertFromLimit.m3u.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\ConvertFromLimit.m3u.WNCRY
          • Size 541KB
          • SHA256 e0aa7cc302e4e09cfd8e48757a0f98b03ec776a67dc91e5c5a6b9832b0b06339
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DismountSend.potx.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\DismountSend.potx.WNCRY
          • Size 382KB
          • SHA256 942977658ce71f269446b8b193d05193f288b5f999b29e70514d8ae6893ecda9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          EnableEnter.7z.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\EnableEnter.7z.WNCRY
          • Size 275KB
          • SHA256 cb9127f2f9f835d8dc944dfc36d8ae5a5263e7d238f038bf29fbc2fdb7636cb9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResizeUnblock.asf.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\ResizeUnblock.asf.WNCRY
          • Size 191KB
          • SHA256 26970e46ce5eaef95166b00c73e3dc1adef5cd18d30c11a5f5275dc79e8a621c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RevokeUse.bmp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\RevokeUse.bmp.WNCRY
          • Size 328KB
          • SHA256 b7832b5e9643debe506a6ff84f0abef080430f0b5dbf75083f4c689379e398dd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StartResize.raw.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\StartResize.raw.WNCRY
          • Size 233KB
          • SHA256 f055a6ed6c6fc9df0647a5593d352b1bafad191e722996167342f8464bbbbc80
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SyncFind.odt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\SyncFind.odt.WNCRY
          • Size 392KB
          • SHA256 b926110b29ea8a65b75eb1f97070d962813aaa42a19d65e065aa35029071c236
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TraceCheckpoint.txt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\TraceCheckpoint.txt.WNCRY
          • Size 180KB
          • SHA256 3ab279146fdbc92019fde4fdeaf3bea167ed24749199b51f1ba4a1330c169241
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TraceInstall.pptm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UnprotectRevoke\TraceInstall.pptm.WNCRY
          • Size 297KB
          • SHA256 a4ee369496f284bf0dfcf8efa360d80c3adcab18bd2f5a8912e3579541cf2cb4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AddExport.bmp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\AddExport.bmp.WNCRY
          • Size 200KB
          • SHA256 66dd372f4ce925083e1bebae28d2e50c3683b053a65348655064642bc8720750
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DisableResolve.rar.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\DisableResolve.rar.WNCRY
          • Size 127KB
          • SHA256 a74f1e09a887e35dbac959923de31126891faf70a6800c1e3e02d19fe2334db5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ExitUnlock.svg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\ExitUnlock.svg.WNCRY
          • Size 272KB
          • SHA256 b66849644d8888708057a8a3658e0f8ead4e8827cb36f9930ea585299075e123
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          JoinDebug.jpeg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\JoinDebug.jpeg.WNCRY
          • Size 463KB
          • SHA256 2635096046bde3f033b829f34d90345f7a2f65f85ca0a5d076d145346c3ab17a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OpenSwitch.mp3.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\OpenSwitch.mp3.WNCRY
          • Size 236KB
          • SHA256 49ff5c18eabe68ea66a11caa108fad7952732905c58f0082ae50d045d6ca0c2a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RegisterWatch.rar.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\RegisterWatch.rar.WNCRY
          • Size 209KB
          • SHA256 a605459550eeb76514f81695842be2157adb72ba38eb24af02fe90b5bbaf98b7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RemoveDisconnect.bat.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\RemoveDisconnect.bat.WNCRY
          • Size 163KB
          • SHA256 a4cb176f5dc2ae7b0db4cd50ddb7c564f1e6b4c1262f6ae3ddc9b69935449650
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SaveEnter.dotm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\SaveEnter.dotm.WNCRY
          • Size 245KB
          • SHA256 6337919f78ac6efe9efbd529746a27e906131bcbde9beb2801e589066071a932
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SkipNew.tif.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\SkipNew.tif.WNCRY
          • Size 145KB
          • SHA256 bcf0ff7fadb129fac5a84f5f6a63d210fcf7dc16bf5b6f500ec29dccb089f90f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnlockSkip.mov.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\UnlockSkip.mov.WNCRY
          • Size 118KB
          • SHA256 03a7322b296b5762969328efd557b75c7dc3527e0eba6589a262c6b9894804c0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnpublishRedo.mov.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseDisconnect\UnpublishRedo.mov.WNCRY
          • Size 309KB
          • SHA256 275c2adfeac7a39175b53a085c398993aa041bf328f469ac11d9625950becdeb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DismountClear.jpg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseLock\DismountClear.jpg.WNCRY
          • Size 221KB
          • SHA256 a872544a2b8803f95ef058ee55eb66567e4f1fc71230f2baa39a71c43cd1c5f2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MountComplete.ps1.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseLock\MountComplete.ps1.WNCRY
          • Size 296KB
          • SHA256 75bf9607141d5797165c5d712b0eba2a5dba501a86a8255fd981b36072af2982
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResetRemove.dotm.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseLock\ResetRemove.dotm.WNCRY
          • Size 277KB
          • SHA256 7376a1769eb68b4e73bdac85d84e13d4b13b896857d1c4d7713299f25e82ea72
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SelectConvert.bmp.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseLock\SelectConvert.bmp.WNCRY
          • Size 381KB
          • SHA256 c342eb89d00cd34c1f86c7673eae9152ba4573ccbdc98d69fb2329aad440e4f4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          TestUnpublish.xls.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseLock\TestUnpublish.xls.WNCRY
          • Size 268KB
          • SHA256 ca8fb38369b5ccdcdd13a4488ec78c2578be7272ae373d9530571c9c0f87d0b3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UseGrant.mp3.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\UseLock\UseGrant.mp3.WNCRY
          • Size 371KB
          • SHA256 b4c3b5ea148baccc5afb7ae7be83d85facb543e84de4382621d0f64b6e2b8727
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ApproveSearch.tiff.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\ApproveSearch.tiff.WNCRY
          • Size 355KB
          • SHA256 60a57cd081af48122e3af4f88e48d06c1a41235728972b1548625215fbbb47e1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertRequest.mov.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\ConvertRequest.mov.WNCRY
          • Size 777KB
          • SHA256 280d49fec90187b9f920fb88c7e6b94ae8448c0f0116768b5baf5661a7871944
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertToUninstall.odt.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\ConvertToUninstall.odt.WNCRY
          • Size 412KB
          • SHA256 4cc90741d573797493e6e1cfa36afa45c11a85beb249328c50b581fe00d18127
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GetPublish.dotx.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\GetPublish.dotx.WNCRY
          • Size 757KB
          • SHA256 e2d6dd82b9eae593439cea2d18999de07e074e5a776d1b863397021d3fc5694b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GrantResolve.mpg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\GrantResolve.mpg.WNCRY
          • Size 681KB
          • SHA256 d5766b9d0f95aa39cf8bfc9e6a30b9aa71310f9bd31c9a69cae91dc05c52c10f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RenameUnlock.wma.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\RenameUnlock.wma.WNCRY
          • Size 527KB
          • SHA256 8a305816a6f7b6846fa0b6d21bf52bddcaa8b994f7cdaa3f5f152da2ea26ff22
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SaveSync.zip.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\SaveSync.zip.WNCRY
          • Size 451KB
          • SHA256 7dc718243f5fb8d5cba251e525d335cc3f667be4a3d3b4c40c29638e7ff94ccd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SkipSelect.php.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\SkipSelect.php.WNCRY
          • Size 393KB
          • SHA256 a3fd60e1eba5bd1cced037380d8edc1db76ff8ef2dcc91b354a591801cacfd3a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StepSwitch.tif.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\StepSwitch.tif.WNCRY
          • Size 585KB
          • SHA256 d9d735a84a8c67e5841101e3d717b7b9b30162e673cd78ffd5d06f084c98e3f9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnpublishReset.xlsb.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\UnpublishReset.xlsb.WNCRY
          • Size 719KB
          • SHA256 ee9cedf16022e4751f02a65df11782bc38d74dc1f68ced82ea7373b116faf342
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnregisterDebug.mpg.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\UnregisterDebug.mpg.WNCRY
          • Size 431KB
          • SHA256 8832de518cf2f23cf8336948b8e33278249756cb661dcd3610b7ee71e9236ff9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnregisterInstall.pps.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WaitOpen\UnregisterInstall.pps.WNCRY
          • Size 738KB
          • SHA256 aaaec32e1c89b213c36a75cad4e7be7182e21bf5a000a527a67f24885f81a19d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertShow.zip.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WriteStep\ConvertShow.zip.WNCRY
          • Size 394KB
          • SHA256 c58c1e6b23d424fe962099af9b9a04a6a8b8ee0f738d30238a8b647328a37a7c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ExpandBlock.ppsx.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WriteStep\ExpandBlock.ppsx.WNCRY
          • Size 454KB
          • SHA256 1d25926dd13cd6c6d767808f9c3e287f08a9c75830900a8ebc6ccc170b87f4a6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StepUnpublish.raw.WNCRY
          • Path C:\Users\Admin\AppData\Roaming\WriteStep\StepUnpublish.raw.WNCRY
          • Size 636KB
          • SHA256 7be67ba89c03826306bd6142c40f286db97f9613ee1e9d2822486643d4243cb2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AddUnpublish.ppsm.WNCRY
          • Path C:\Users\Admin\Desktop\AddUnpublish.ppsm.WNCRY
          • Size 298KB
          • SHA256 1392e36d5ed68ae790605507c1bb04e78685c651ce99a65446ba9b48bff5c894
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AssertBackup.xlsx.WNCRY
          • Path C:\Users\Admin\Desktop\AssertBackup.xlsx.WNCRY
          • Size 262KB
          • SHA256 10e3519c87ef99bfbb3c8d977c40a9fa65540d1eda5f5b5fd017aaafb7490690
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AssertRevoke.mpeg.WNCRY
          • Path C:\Users\Admin\Desktop\AssertRevoke.mpeg.WNCRY
          • Size 237KB
          • SHA256 833a0f6b68fb55d1ce5798ef0813c82e5537cecc07b2a0068616b443d3ad5788
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CheckpointNew.xlsx.WNCRY
          • Path C:\Users\Admin\Desktop\CheckpointNew.xlsx.WNCRY
          • Size 10KB
          • SHA256 602d34ff80a93b1b956f76a153b70d88864e790c1a1a24ebdade1b10b61ecb34
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CopyUpdate.xlsx.WNCRY
          • Path C:\Users\Admin\Desktop\CopyUpdate.xlsx.WNCRY
          • Size 15KB
          • SHA256 bb719dd0c651c47d3e8b9824ed0f3608bcae3bd07b7a7e76021f98b92705955c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FormatEnter.gif.WNCRY
          • Path C:\Users\Admin\Desktop\FormatEnter.gif.WNCRY
          • Size 481KB
          • SHA256 96002f985ca38e55115ae4881afa2ec98e4c49019814b59a368e4274c77f8b7a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          HideLock.docx.WNCRY
          • Path C:\Users\Admin\Desktop\HideLock.docx.WNCRY
          • Size 19KB
          • SHA256 f93087044552eb4d426d17eb77cae43889204d1e6b06bb960b9a9e500081272d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LimitCopy.3g2.WNCRY
          • Path C:\Users\Admin\Desktop\LimitCopy.3g2.WNCRY
          • Size 347KB
          • SHA256 53c6a725f778c1de953768a376c7e65a77d1d6a43bbe024d6c2c9fc61578eb88
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ReadRequest.wma.WNCRY
          • Path C:\Users\Admin\Desktop\ReadRequest.wma.WNCRY
          • Size 359KB
          • SHA256 02cf4989f7400225b726cc12d8aabbe7a178a5c6bd3b4275dbfab157b2cae12d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RepairSplit.png.WNCRY
          • Path C:\Users\Admin\Desktop\RepairSplit.png.WNCRY
          • Size 694KB
          • SHA256 cfdd0b04b4a9c14ae934aac43623a391bae642fc78439b547ac38910e0b704dc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RequestSkip.ps1.WNCRY
          • Path C:\Users\Admin\Desktop\RequestSkip.ps1.WNCRY
          • Size 201KB
          • SHA256 c69b7f5f6873dba47b8f790e81baf6a5743f0ae2e74aa80dba1cb3fbb94ca44d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SubmitWatch.docx.WNCRY
          • Path C:\Users\Admin\Desktop\SubmitWatch.docx.WNCRY
          • Size 444KB
          • SHA256 aa88454668672ddfb666b9bac3693135a92e6662315c7c033bcebba0d578aae8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UseRestart.ppsm.WNCRY
          • Path C:\Users\Admin\Desktop\UseRestart.ppsm.WNCRY
          • Size 310KB
          • SHA256 b31ce7724406d9f5abcde51c952e9e83e6f8ad8ac4b68770cc3c36198342b490
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WaitCopy.jpg.WNCRY
          • Path C:\Users\Admin\Desktop\WaitCopy.jpg.WNCRY
          • Size 505KB
          • SHA256 09de696aab26911f4efd80f518fee5563cde8b84bb289f701d3d911bf7b57b01
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WriteNew.xls.WNCRY
          • Path C:\Users\Admin\Desktop\WriteNew.xls.WNCRY
          • Size 395KB
          • SHA256 6c472f2b4387d98ec3fd89eeb0141d0eb5bf66810065f0a9064f7871adf81dde
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          AddUnprotect.potx.WNCRY
          • Path C:\Users\Admin\Documents\AddUnprotect.potx.WNCRY
          • Size 1.2MB
          • SHA256 ece00922490acd654ce8eafb2f8feb02ab5d4bc31637f3775d02f5f4682cdf34
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ClearTrace.xlsx.WNCRY
          • Path C:\Users\Admin\Documents\ClearTrace.xlsx.WNCRY
          • Size 15KB
          • SHA256 e04d37ef99eea6bf05bdba5493e266fb8ae1de226232245b72bcadca20d3d4b2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          FindEdit.docx.WNCRY
          • Path C:\Users\Admin\Documents\FindEdit.docx.WNCRY
          • Size 737KB
          • SHA256 3029fe7988576e6be0cef911185dbacac27c59ef95469201f091337fccb24615
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          HideSkip.ppt.WNCRY
          • Path C:\Users\Admin\Documents\HideSkip.ppt.WNCRY
          • Size 1.6MB
          • SHA256 9efc2ada57357a9c444ddeea3fd9155730c67c0f0ee888832e140fbdb552377e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          InitializeComplete.docx.WNCRY
          • Path C:\Users\Admin\Documents\InitializeComplete.docx.WNCRY
          • Size 1.3MB
          • SHA256 a4eb363a8ca6688f05d21999a6078fbce34370e9bcb3bd9d19838b661b1906da
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Open Notebook.onetoc2.WNCRY
          • Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WNCRY
          • Size 6KB
          • SHA256 b2e090184918aaa5b77e2dd6e76514dcfb2d6d2449784351d06fbbfe987d500d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OutSend.ods.WNCRY
          • Path C:\Users\Admin\Documents\OutSend.ods.WNCRY
          • Size 1.1MB
          • SHA256 d7d5df4ab051642ae9f9f504338085a64d40017615e18ffba0f13031bbaa766b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Outlook Data File - rcamhngqtd.pst.WNCRY
          • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - rcamhngqtd.pst.WNCRY
          • Size 265KB
          • SHA256 c7f6afd1a968a955ac3329d7e98fc76c452893e0a42d9881cbe2064ebdc55f2f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RestoreCheckpoint.potm.WNCRY
          • Path C:\Users\Admin\Documents\RestoreCheckpoint.potm.WNCRY
          • Size 860KB
          • SHA256 e78fd3ea63fd6740ec0759810a0374c6a906edb2904848c46166b3c4fcf6dc49
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ShowFind.odt.WNCRY
          • Path C:\Users\Admin\Documents\ShowFind.odt.WNCRY
          • Size 983KB
          • SHA256 6861468432079127fe2bb33fa0a054e24554d3873ae27fe9705a08796d221c9c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StopGrant.xlt.WNCRY
          • Path C:\Users\Admin\Documents\StopGrant.xlt.WNCRY
          • Size 1.4MB
          • SHA256 5b68612e7edb46b01d3c1f0a94eb04b80566a1ad9d9b20b4ff91f9636bdb46f0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SelectSearch.vsd.WNCRYT
          • Path C:\Users\Admin\Downloads\SelectSearch.vsd.WNCRYT
          • Size 405KB
          • SHA256 eedc2f6f4011c48408607d0eda064c42976fca47a5c10486cb56adaed116d5fd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnlockUninstall.docx.WNCRYT
          • Path C:\Users\Admin\Downloads\UnlockUninstall.docx.WNCRYT
          • Size 977KB
          • SHA256 31d75564c408b92f448af51b10d99c99473230c063b69de81ca387ec8bb4af5f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WaitClear.rtf.WNCRYT
          • Path C:\Users\Admin\Downloads\WaitClear.rtf.WNCRYT
          • Size 571KB
          • SHA256 cf960b3d72fc4c9b7dc02b3aa34122723da01bd5916cbaea7e1801fcfb1d409b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConvertUninstall.mov.WNCRY
          • Path C:\Users\Admin\Music\ConvertUninstall.mov.WNCRY
          • Size 231KB
          • SHA256 cb50ab48dd150ad3e74da0899e632173c34934a0e98f5248d2419273b9d04a48
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GroupSend.odt.WNCRY
          • Path C:\Users\Admin\Music\GroupSend.odt.WNCRY
          • Size 334KB
          • SHA256 6d5468b4b6c526a57aeb85c8587229029030a20b79a58618d05bf60c4c51567e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          InstallStop.potm.WNCRY
          • Path C:\Users\Admin\Music\InstallStop.potm.WNCRY
          • Size 419KB
          • SHA256 a8f270890c80d3f0544cff8cb7ee75560ba4e0dbfabd60fc405c1b83d0ab245a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MeasureUse.zip.WNCRY
          • Path C:\Users\Admin\Music\MeasureUse.zip.WNCRY
          • Size 353KB
          • SHA256 e48624c73afcc3fac068ca5d4725ec4fd2e4ef280c1079adfc7678c946ee93bf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          MergeGet.iso.WNCRY
          • Path C:\Users\Admin\Music\MergeGet.iso.WNCRY
          • Size 306KB
          • SHA256 74dee81d64aa934c6925993bce1b86a5570d021f24b5e9d6c05b588e8821ed6d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OpenEnter.odp.WNCRY
          • Path C:\Users\Admin\Music\OpenEnter.odp.WNCRY
          • Size 438KB
          • SHA256 ed8e2b3d556cef2fff23c8956bcea08bbd0fe96bd9f4c039128b011ee92c4be9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PopDismount.pdf.WNCRY
          • Path C:\Users\Admin\Music\PopDismount.pdf.WNCRY
          • Size 372KB
          • SHA256 80052a9ee3cf95d4aaf87ef9c0e9e48a110029d881d27a84a3854f6bbb286dd8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PopRevoke.bmp.WNCRY
          • Path C:\Users\Admin\Music\PopRevoke.bmp.WNCRY
          • Size 532KB
          • SHA256 5ab680ab09b51ad081c1f742a9e8cded7dc6503836cc778fdac717a9d56e8675
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PushReceive.docx.WNCRY
          • Path C:\Users\Admin\Music\PushReceive.docx.WNCRY
          • Size 476KB
          • SHA256 eba7039405bc4d761585215ae8dac8fc68341524536ea8ac417ef86141ba3c73
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ReceiveBlock.xlsx.WNCRY
          • Path C:\Users\Admin\Music\ReceiveBlock.xlsx.WNCRY
          • Size 466KB
          • SHA256 cbec9ebc54779721f7c27d3877250d95ea5c330a8d48aa682ac5ead5bb68cafe
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SelectCompress.asp.WNCRY
          • Path C:\Users\Admin\Music\SelectCompress.asp.WNCRY
          • Size 202KB
          • SHA256 d9fafaf9d7e1476dc40e19b70ac980df3303083f4a1d0f46d896ee62e9f4634f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SkipSelect.xlsx.WNCRY
          • Path C:\Users\Admin\Music\SkipSelect.xlsx.WNCRY
          • Size 448KB
          • SHA256 a57f9bf1a51f1b379486c8d59e88ec82d66ddbd70e233177187c7514d6c5b1d9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UnprotectRegister.asf.WNCRY
          • Path C:\Users\Admin\Music\UnprotectRegister.asf.WNCRY
          • Size 513KB
          • SHA256 6f53e97355b840bba7e32284cba4ce09289579387a1ddfae364dc02b6d081d27
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UseReceive.iso.WNCRY
          • Path C:\Users\Admin\Music\UseReceive.iso.WNCRY
          • Size 382KB
          • SHA256 508f205f538ee6579cd4d2115a45e0776fb63bf29f4335644e530400884a3929
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CloseRedo.tif.WNCRY
          • Path C:\Users\Admin\Pictures\CloseRedo.tif.WNCRY
          • Size 334KB
          • SHA256 77f1af45db4c0d9909a75e80e73ac419f2307fd34f660ef45abb3c9e8cb43547
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          CompleteMeasure.svg.WNCRY
          • Path C:\Users\Admin\Pictures\CompleteMeasure.svg.WNCRY
          • Size 185KB
          • SHA256 95afdae63669a7dafff597ef6721af9a921daa5b4e5b54bc2d6cc24517aa6fa9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ConnectTrace.raw.WNCRY
          • Path C:\Users\Admin\Pictures\ConnectTrace.raw.WNCRY
          • Size 291KB
          • SHA256 583ee87e8feb024917630bb734543564a64943a5a0785c9f46ab8dfebd2e00f6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          DisconnectUnprotect.gif.WNCRY
          • Path C:\Users\Admin\Pictures\DisconnectUnprotect.gif.WNCRY
          • Size 227KB
          • SHA256 352afef520619bebb60abda86d5b97f3db4f76912d272b4f50b382af711f4840
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          GroupTrace.dwg.WNCRY
          • Path C:\Users\Admin\Pictures\GroupTrace.dwg.WNCRY
          • Size 298KB
          • SHA256 e8624ca4633b06c976fa41e9d831842543c9e2cdb429ad4f584ecc351e0f358a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OutDebug.tif.WNCRY
          • Path C:\Users\Admin\Pictures\OutDebug.tif.WNCRY
          • Size 270KB
          • SHA256 a25ee208e04f12cdb7767b881b54c8ed755684f002b0e64e8d64eabf76a69a26
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          OutInvoke.png.WNCRY
          • Path C:\Users\Admin\Pictures\OutInvoke.png.WNCRY
          • Size 504KB
          • SHA256 086eb4a0838264b9fa15735a9bb1b5de3f71c36b0775b3be258686eda35d5eb2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PingClear.tif.WNCRY
          • Path C:\Users\Admin\Pictures\PingClear.tif.WNCRY
          • Size 142KB
          • SHA256 6fcb6bbff2b031441e6548e7b01c0761ef7ba19a50fe60dc37a597847f925d5c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          PublishInvoke.jpg.WNCRY
          • Path C:\Users\Admin\Pictures\PublishInvoke.jpg.WNCRY
          • Size 284KB
          • SHA256 651b103bf77246eec9bbe1085fadc25a6e0d1998984260474035a80c4f9502bb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ReceiveStop.raw.WNCRY
          • Path C:\Users\Admin\Pictures\ReceiveStop.raw.WNCRY
          • Size 156KB
          • SHA256 af8bb946f66142acd5cfee34b76b84fbbd1f05a517fdfa97367f227ccddcf897
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RedoSubmit.bmp.WNCRY
          • Path C:\Users\Admin\Pictures\RedoSubmit.bmp.WNCRY
          • Size 192KB
          • SHA256 1ae402565e28e5598cf1b3d7e205f78af27e25eceafa6c60a99912e9f073a44a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          RenameAssert.jpg.WNCRY
          • Path C:\Users\Admin\Pictures\RenameAssert.jpg.WNCRY
          • Size 234KB
          • SHA256 b6beb54d603a8f2a8d1d5298407aa889fe216a17129b2003193eacdbfa5765ce
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ResetJoin.raw.WNCRY
          • Path C:\Users\Admin\Pictures\ResetJoin.raw.WNCRY
          • Size 213KB
          • SHA256 42f8e12ce01c0169e4d0b51f947b4ea5f834efd461484bae0a5eede743eefd78
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SplitClose.svg.WNCRY
          • Path C:\Users\Admin\Pictures\SplitClose.svg.WNCRY
          • Size 313KB
          • SHA256 65709fd7318a76d3c42aeb87dd373707e7d5b1160a5428ed79803c3a4d2f1089
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StartComplete.jpeg.WNCRY
          • Path C:\Users\Admin\Pictures\StartComplete.jpeg.WNCRY
          • Size 306KB
          • SHA256 f9cb73c4a2bbd1c7bbc33b76d9dca72b4561d215c4ca50a9911a6a97f8b01502
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          SubmitClear.svg.WNCRY
          • Path C:\Users\Admin\Pictures\SubmitClear.svg.WNCRY
          • Size 149KB
          • SHA256 ee2d185311f0b3b4764e26bbb95fc7df75174c0ba8600449bbf5f5571a0b3f69
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          jpKCrSw.jpg.WNCRY
          • Path C:\Users\Admin\Pictures\jpKCrSw.jpg.WNCRY
          • Size 24KB
          • SHA256 e8425c1a8b7454b1a1b6aaa282b5f3f8c35ab89bb6181acfcb04eabee5ffbb6a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          210.WNCRYT
          • Path C:\Windows\Temp\210.WNCRYT
          • Size 24KB
          • SHA256 5f72c11fd2fa88d8b8bfae1214551f8d5ee07b8895df824fa717ebbcec118a6c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          71.WNCRYT
          • Path C:\Windows\Temp\71.WNCRYT
          • Size 52KB
          • SHA256 b7eab256423a0a3c3c3a6f14ca82f8f749f409bd7559c5bb9d1d80e2d4cbea5d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          80.WNCRYT
          • Path C:\Windows\Temp\80.WNCRYT
          • Size 64KB
          • SHA256 2b458c48dd20870bb817ae588b91d422cfa27e4610175348e98cdabf7dbfe76e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          86.WNCRYT
          • Path C:\Windows\Temp\86.WNCRYT
          • Size 82KB
          • SHA256 7dc539b13707e65adfc5945a3ff2efa164d0e67edab411587a6da1832fc9c31a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          91.WNCRYT
          • Path C:\Windows\Temp\91.WNCRYT
          • Size 85KB
          • SHA256 5c9c8c0832c4679d0c4ec8509c264d124115af909fcf47e82e2b3a4170e67e23
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tasksche.exe
          • Path C:\Windows\tasksche.exe
          • Size 3.4MB
          • SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          memory/408-46-0x0000000010000000-0x0000000010010000-memory.dmp
          Download

          memory/3880-3070-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3061-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3067-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3066-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3068-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3069-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3071-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3072-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3060-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/3880-3062-0x0000027DC4C80000-0x0000027DC4C81000-memory.dmp
          Download

          memory/7784-2495-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-2475-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-2428-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-2503-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-2498-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-2429-0x00000000731D0000-0x0000000073247000-memory.dmp
          Download

          memory/7784-2415-0x0000000073500000-0x0000000073582000-memory.dmp
          Download

          memory/7784-2416-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-2417-0x0000000073470000-0x00000000734F2000-memory.dmp
          Download

          memory/7784-2419-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3028-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3033-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-3037-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3045-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3050-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-3052-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3057-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-2488-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-2483-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-2490-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-2480-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-2426-0x0000000073500000-0x0000000073582000-memory.dmp
          Download

          memory/7784-2418-0x0000000073590000-0x00000000735B2000-memory.dmp
          Download

          memory/7784-2424-0x00000000735C0000-0x00000000735DC000-memory.dmp
          Download

          memory/7784-2425-0x0000000073590000-0x00000000735B2000-memory.dmp
          Download

          memory/7784-2423-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-2427-0x0000000073470000-0x00000000734F2000-memory.dmp
          Download

          memory/7784-3073-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3078-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-3080-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3085-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-3087-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3095-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3100-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-3102-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3115-0x0000000073250000-0x000000007346C000-memory.dmp
          Download

          memory/7784-3110-0x0000000000250000-0x000000000054E000-memory.dmp
          Download

          memory/7784-3117-0x0000000000250000-0x000000000054E000-memory.dmp
          Download