Overview

overview

10

Static

static

3

mssecsvc.exe

windows10-2004-x64

10

mssecsvc.exe

windows11-ltsc_2024-x64

10

Resubmissions

13/11/2026, 14:28

261113-rta5cswx5m3

13/11/2026, 12:31

261113-pp6pcsby5r10

13/11/2026, 12:29

261113-ppaxpabx7s3

13/11/2026, 12:25

261113-plwd8abw913

Analysis

  • user interaction
    yes
  • max time kernel
    10s
  • max time network
    25s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/11/2026, 12:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    mssecsvc.exe
  • Size 3.6MB
  • Sample261113-pp6pcsby5r
  • SHA256 24d004a104d4d54034dbcffc2a4b19a11f39008a575aa614ea04703480b1022c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionwannacrypersistenceprivilege_escalationransomwarespywarestealerworm

Malware Config

Extracted

Path

  • wannacry

Ransom Note
  • Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �
Wallets

  • 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw

Signatures

  • Family: Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Creates a file in the Startup directory 1 TTPs 2 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation
  • Executes dropped EXE 3 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
    discovery
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
    defense_evasion
  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
    execution
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies data under HKEY_USERS 16 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs
  • Views/modifies file attributes 1 TTPs 2 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe
    "C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe"
    1⤵
    • Drops file in Windows directory
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4428
    • C:\WINDOWS\tasksche.exe
      C:\WINDOWS\tasksche.exe /i
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:3944
  • C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe
    C:\Users\Admin\AppData\Local\Temp\mssecsvc.exe -m security
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    PID:2860
  • C:\Windows\system32\cmd.exe
    cmd.exe /c "C:\ProgramData\bzfxgnglyio101\tasksche.exe"
    1⤵
    • Executes a command shell one-liner
    • Suspicious use of WriteProcessMemory
    PID:2184
    • C:\ProgramData\bzfxgnglyio101\tasksche.exe
      C:\ProgramData\bzfxgnglyio101\tasksche.exe
      2⤵
      • Creates a file in the Startup directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5920
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h .
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:6032
      • C:\Windows\SysWOW64\icacls.exe
        icacls . /grant Everyone:F /T /C /Q
        3⤵
        • Modifies file permissions
        • System Location Discovery: System Language Discovery
        PID:3628
      • C:\ProgramData\bzfxgnglyio101\taskdl.exe
        taskdl.exe
        3⤵
        • Executes dropped EXE
        PID:1964
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c 17561794573145.bat
        3⤵
        • Executes a command shell one-liner
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:5364
        • C:\Windows\SysWOW64\cscript.exe
          cscript.exe //nologo m.vbs
          4⤵
          • Executes a VBScript file via the Windows Script Host.
          • System Location Discovery: System Language Discovery
          • Modifies data under HKEY_USERS
          PID:1712
      • C:\Windows\SysWOW64\attrib.exe
        attrib +h +s F:\$RECYCLE
        3⤵
        • System Location Discovery: System Language Discovery
        • Views/modifies file attributes
        PID:2448

Network

        MITRE ATT&CK Enterprise v16

        Reconnaissance

        Resource Development

        Initial Access

        Execution

        Command and Scripting Interpreter

        2
        T1059

        Visual Basic

        1
        T1059.005

        Windows Command Shell

        1
        T1059.003

        Persistence

        Boot or Logon Autostart Execution

        1
        T1547

        Registry Run Keys / Startup Folder

        1
        T1547.001

        Privilege Escalation

        Boot or Logon Autostart Execution

        1
        T1547

        Registry Run Keys / Startup Folder

        1
        T1547.001

        Defense Evasion

        File and Directory Permissions Modification

        2
        T1222

        Windows File and Directory Permissions Modification

        1
        T1222.001

        Hide Artifacts

        1
        T1564

        Hidden Files and Directories

        1
        T1564.001

        Credential Access

        Credentials from Password Stores

        1
        T1555

        Credentials from Web Browsers

        1
        T1555.003

        Unsecured Credentials

        1
        T1552

        Credentials In Files

        1
        T1552.001

        Discovery

        System Information Discovery

        1
        T1082

        System Location Discovery

        1
        T1614

        System Language Discovery

        1
        T1614.001

        System Network Configuration Discovery

        1
        T1016

        Lateral Movement

        Collection

        Data from Local System

        1
        T1005

        Command and Control

        Exfiltration

        Impact

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OfficeIntegrator.ps1.WNCRY
        • Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WNCRY
        • Size 5KB
        • SHA256 9a5d2a1a37d435b3cb01f5893218d011bd799c8cff691a8c66cfb7ab9f406c1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        stream.x64.en-us.db.WNCRY
        • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\CC7EE9A3-1636-4E29-AD87-CA66658FC4CE\en-us.16\stream.x64.en-us.db.WNCRY
        • Size 438KB
        • SHA256 080203e88ddb2cfe0247cbc7d559b36d9732d6c5169c720d5dc64c92a1a8d31a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        stream.x64.x-none.db.WNCRY
        • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\CC7EE9A3-1636-4E29-AD87-CA66658FC4CE\x-none.16\stream.x64.x-none.db.WNCRY
        • Size 1.8MB
        • SHA256 1a2ebc3c06fe3d6e1403fedcdba7248298c5f2519955e529e428d81bb92fc024
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        background.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY
        • Size 126KB
        • SHA256 ab3f45ff4f714f4f81602350ea477ad416dc89eaa4ae6457b018eb16a47d3ddc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        device.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY
        • Size 43KB
        • SHA256 8b27259a48eef3dfb3612ee9d9929ae8d1ba155e51c604281ebf2ba7ee14a0de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        overlay.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY
        • Size 28KB
        • SHA256 fcffe038e7c33233955a433176f9370a38a04c51c12927d38417ed0653cf817a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        superbar.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY
        • Size 38KB
        • SHA256 de5b38a22445547f908846b5759d866e695f5605726a4c2c0694357e1bee782d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        background.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WNCRY
        • Size 126KB
        • SHA256 a3ee486165b78fc3e150dd16ffea884d4783ba01a914f7f44729c0d5e419dc68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        watermark.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY
        • Size 28KB
        • SHA256 feec3f1ce303d8806174ae065e015efe26da3a6df93ad0fbdbd8b63418a3637c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EventStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WNCRY
        • Size 108KB
        • SHA256 946a26df3759e175508e7e2bdca2d92c837665927f56dc277c8ba03a7cb4b1af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EventStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WNCRY
        • Size 48KB
        • SHA256 06d97dffbdadf887ae2d34741d2275ded77484843cf712dac88380dafcf86cc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EventStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WNCRY
        • Size 20KB
        • SHA256 ce9789b56554ebd419b9bd10bdfd6bf7adf9827ac1479d28441a8554fc39d9c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osver.txt.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WNCRY
        • Size 296B
        • SHA256 546455dd5da58b6acc275364848042e140912f43896816ff7c9a00febe752c84
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        qmgr.db.WNCRY
        • Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WNCRY
        • Size 768KB
        • SHA256 6353a3ff931eb33fee4b9b4fce8cdaa2e5e838684c52792839b1b1a370d38a37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PropMap.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db.WNCRY
        • Size 76KB
        • SHA256 88e99305f48c99e9a950df32b2a461916cf7a897b59c5fd631971d56d075d5e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SecStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db.WNCRY
        • Size 36KB
        • SHA256 556c58a3b59e0b2c2ad6003581d665efb5a930ea9d243fa9cffa9e7df15c1f02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Windows-gather.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db.WNCRY
        • Size 44KB
        • SHA256 4037614dcdcf75a1f753146d0d367d523ffad7299a6ad6d48c40fdde5c3135d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Windows-usn.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db.WNCRY
        • Size 4KB
        • SHA256 715b264744b27c53cae4b6527cd983ae4a2a2ef1a044fc76c62c5749452a1ffa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Windows.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db.WNCRY
        • Size 440KB
        • SHA256 8f5ff9943b691a471c21665d9becc6b95e08787b74c3c8aedf81aa28b162f438
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RegisterInboxTemplates.ps1.WNCRY
        • Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WNCRY
        • Size 904B
        • SHA256 fd814d81ce002cddd1a5703387abc1e1cd4dff9802943f241b38637b274cfc40
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        guest.bmp.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WNCRY
        • Size 392KB
        • SHA256 8730c2cc80868e3d4a111069ae511646ccbb94183a331401971ae5dc9e9d5aeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        guest.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WNCRY
        • Size 2KB
        • SHA256 1306c9f32fbcbfef1a224b5708befb6630a1f77a85fa546a6ee561faffab98df
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-192.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WNCRY
        • Size 1KB
        • SHA256 fec7738e657dcb807499be161e9778076d762c859e69a1bf40e05914993e6e62
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-32.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WNCRY
        • Size 472B
        • SHA256 5cfee431ce7d6c9e5bba5feb46c7f639c89d0d8f464cfcad654ba6b18c622218
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-40.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WNCRY
        • Size 504B
        • SHA256 ce2e6b5d9f939be0d7f670b50a910192bfc28efbfe8a8a65a880aac341da1100
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-48.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WNCRY
        • Size 504B
        • SHA256 5fbd4017d6c31606f997ac42b6dbf71efdd6e73b12bbf232e7787a85098b3918
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user.bmp.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WNCRY
        • Size 392KB
        • SHA256 1ce954a91415cfb342b3ed67f3403b22f2924e416fe644416afb5b8d2484a139
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        user.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WNCRY
        • Size 2KB
        • SHA256 fc17193e3d59f4357f7c20993a38e73b43f7a292cdab17e07386edb68276720b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cversions.2.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WNCRY
        • Size 16KB
        • SHA256 80c69a7161f475affc8800caf57f274202124eceef0727c0bcccb5e1e0ea758d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
        • Size 297KB
        • SHA256 cbd3a011f498d6629ce77a8214dc6902d50aa931a1cc77545cb5c1dc5c79383a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {786A757B-D250-4B85-9BA7-49FCFB41FABD}.2.ver0x0000000000000001.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\{786A757B-D250-4B85-9BA7-49FCFB41FABD}.2.ver0x0000000000000001.db.WNCRY
        • Size 1KB
        • SHA256 1dc4c072bd8ac40803c0d54d988f3a4c15905f29e8b92b88ba80b9aadd4d6cf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        {DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
        • Size 639KB
        • SHA256 4010b8a0c85cc4b8bb91d338f67199f2e63417140309a63abcc13fa06f2c4cb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CapabilityAccessManager.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\CapabilityAccessManager\CapabilityAccessManager.db.WNCRY
        • Size 56KB
        • SHA256 5227917d56a1899bddaac155e46a6decc85d34c1e862a182af537496d52d690c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LockScreen___1024_0768_notdimmed.jpg.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-18\ReadOnly\LockScreen_Z\LockScreen___1024_0768_notdimmed.jpg.WNCRY
        • Size 55KB
        • SHA256 46351b53427f6d027ceb10e97deee01c1fb73ddfea5db128b792779a3e35d809
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LockScreen___1920_1080_notdimmed.jpg.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\SystemData\S-1-5-18\ReadOnly\LockScreen_Z\LockScreen___1920_1080_notdimmed.jpg.WNCRY
        • Size 115KB
        • SHA256 27f2c5d4c0097dcb7b334b52509bb0547eb59c9af696235cf34e0c144fbc3849
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        17561794573145.bat
        • Path C:\ProgramData\bzfxgnglyio101\17561794573145.bat
        • Size 332B
        • SHA256 1e43ce49a9ca055bf7ff422ee315f4623b2ef593bcbfc1fc24ad65b3c2b7c96d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        @[email protected]
        • Path C:\ProgramData\bzfxgnglyio101\@[email protected]
        • Size 933B
        • SHA256 840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        b.wnry
        • Path C:\ProgramData\bzfxgnglyio101\b.wnry
        • Size 1.4MB
        • SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        c.wnry
        • Path C:\ProgramData\bzfxgnglyio101\c.wnry
        • Size 780B
        • SHA256 0ceb451c1dbefaa8231eeb462e8ce639863eb5b8ae4fa63a353eb6e86173119e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        m.vbs
        • Path C:\ProgramData\bzfxgnglyio101\m.vbs
        • Size 211B
        • SHA256 6f1a5e33de621007556846beece6848c21d7e57f9f132697cb2dd8dd184f1d77
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        m_bulgarian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_bulgarian.wnry
        • Size 46KB
        • SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_chinese (simplified).wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_chinese (simplified).wnry
        • Size 53KB
        • SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_chinese (traditional).wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_chinese (traditional).wnry
        • Size 77KB
        • SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_croatian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_croatian.wnry
        • Size 38KB
        • SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_czech.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_czech.wnry
        • Size 39KB
        • SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_danish.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_danish.wnry
        • Size 36KB
        • SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_dutch.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_dutch.wnry
        • Size 36KB
        • SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_english.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_english.wnry
        • Size 36KB
        • SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_filipino.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_filipino.wnry
        • Size 36KB
        • SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_finnish.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_finnish.wnry
        • Size 37KB
        • SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_french.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_french.wnry
        • Size 37KB
        • SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_german.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_german.wnry
        • Size 36KB
        • SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_greek.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_greek.wnry
        • Size 47KB
        • SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_indonesian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_indonesian.wnry
        • Size 36KB
        • SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_italian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_italian.wnry
        • Size 36KB
        • SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_japanese.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_japanese.wnry
        • Size 79KB
        • SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_korean.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_korean.wnry
        • Size 89KB
        • SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_latvian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_latvian.wnry
        • Size 40KB
        • SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_norwegian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_norwegian.wnry
        • Size 36KB
        • SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_polish.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_polish.wnry
        • Size 38KB
        • SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_portuguese.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_portuguese.wnry
        • Size 37KB
        • SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_romanian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_romanian.wnry
        • Size 50KB
        • SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_russian.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_russian.wnry
        • Size 46KB
        • SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_slovak.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_slovak.wnry
        • Size 40KB
        • SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_spanish.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_spanish.wnry
        • Size 36KB
        • SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_swedish.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_swedish.wnry
        • Size 37KB
        • SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_turkish.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_turkish.wnry
        • Size 41KB
        • SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_vietnamese.wnry
        • Path C:\ProgramData\bzfxgnglyio101\msg\m_vietnamese.wnry
        • Size 91KB
        • SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        r.wnry
        • Path C:\ProgramData\bzfxgnglyio101\r.wnry
        • Size 864B
        • SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        s.wnry
        • Path C:\ProgramData\bzfxgnglyio101\s.wnry
        • Size 2.9MB
        • SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        t.wnry
        • Path C:\ProgramData\bzfxgnglyio101\t.wnry
        • Size 64KB
        • SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        taskdl.exe
        • Path C:\ProgramData\bzfxgnglyio101\taskdl.exe
        • Size 20KB
        • SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        taskse.exe
        • Path C:\ProgramData\bzfxgnglyio101\taskse.exe
        • Size 20KB
        • SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        u.wnry
        • Path C:\ProgramData\bzfxgnglyio101\u.wnry
        • Size 240KB
        • SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        @[email protected]
        • Path C:\Users\Admin\AppData\Local\@[email protected]
        • Size 755B
        • SHA256 49185bde7ba9f1c3e7329a29c2b9a55039f4ddb0249d4d91b896d1eb27d4092c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ActivitiesCache.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WNCRY
        • Size 1.0MB
        • SHA256 169205ff0df7433495dde33690808f33786181787234e64c9a3f71e01918a35c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IconCache.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\IconCache.db.WNCRY
        • Size 13KB
        • SHA256 7e3482912e010b39820b38c8db48ee9a45b09a2efc7560524ff4b16424fb5abf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EdgeEDropSQLite.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WNCRY
        • Size 32KB
        • SHA256 8bd1895174a7de6c51e4a358e119514b3d80bad304732bfd6e8c660dabe73a0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EdgeHubAppUsageSQLite.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WNCRY
        • Size 32KB
        • SHA256 ea329fb6bfa24d4606514c3a3c3886e0dd039910da48b4fbe663a2497e271ba7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        128.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WNCRY
        • Size 5KB
        • SHA256 befda78517f1d0d2bca8c8cbf7f3fb966ec0ae500d0098b53f49066eeee5475b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        offscreendocument_main.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WNCRY
        • Size 130KB
        • SHA256 33c67ca964bbc799cf1fdf11ba869a3b7c52b13c7a9600482a2cbc60504f90e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        page_embed_script.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WNCRY
        • Size 632B
        • SHA256 3a9676ca220d017c4cfe1e42aff5980a9a73bb21deefd9860183aa5212db8b03
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        service_worker_bin_prod.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WNCRY
        • Size 136KB
        • SHA256 d32e53402d91a82e23231a7ae16033b53891f52da0dbe6e445f91caead97a537
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        content.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js.WNCRY
        • Size 9KB
        • SHA256 617636af2ac9dfd806975b9aef02eef9eeccec97a548c8e6f5c953bdcead24b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        content_new.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content_new.js.WNCRY
        • Size 10KB
        • SHA256 2c04428e4bc2fb18bcdc75490763cdd1b2a47d7cdae1b2b255408490416c29e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        index.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WNCRY
        • Size 664B
        • SHA256 b412fb98f2d504632fce60e02c86678773cfdd7947ae44c5631f7d81d5befbab
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        heavy_ad_intervention_opt_out.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
        • Size 16KB
        • SHA256 fccbe17aeb8fe5ee6a67cba5149ee3e9aa0f190ecadda9b2e17ab52a95a79f48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        load_statistics.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WNCRY
        • Size 4KB
        • SHA256 e881ee5dd6fad1b99a9f92ad945f4430588ee0b90875b45b1b1d43c14f04e341
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        first_party_sets.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WNCRY
        • Size 48KB
        • SHA256 51a13eefa0473bded5eaff4611bc5e32551962b4f9af2d4353919c52b0977e0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        brndlog.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.WNCRY
        • Size 6KB
        • SHA256 8026779d25aebfef99d21db2c78f0ba3ec805276793f93f2d4940585c359f55d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mip.policies.sqlite3.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WNCRY
        • Size 36KB
        • SHA256 b9db2ab3a8da7495c1587a6801a28c8834015c743fe9913daebdcca758530c01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        excel.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WNCRY
        • Size 24KB
        • SHA256 6cf445ac768fc19d0f2419603308e2c628c1a76141464fcf312045a879e0e3d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        officeclicktorun.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WNCRY
        • Size 24KB
        • SHA256 3478271991eea96bc6c02b4502acb2ffaa43e5a76a8ace668bbc216c0a21f5fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        onenote.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WNCRY
        • Size 24KB
        • SHA256 e8c025bfd4f1ee5aab296369b780cda593c24ee4a14f3aacb6b26c0baa9eaec8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        outlook.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WNCRY
        • Size 4KB
        • SHA256 5cbb151ce8c850435ee94735e0efbd72382358fc27710cbd76ea0e811835958f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        winword.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WNCRY
        • Size 24KB
        • SHA256 36ecf24bd3881199dda80c000f10936a57ccd4f2310e43a7b409799ccd561494
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppBlue.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WNCRY
        • Size 5KB
        • SHA256 ec2a1510aac19a180015024dae94e080f3876f84e1a6cd590b6b218c3c04afb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppErrorBlue.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WNCRY
        • Size 7KB
        • SHA256 d62b30c48b84402e00e3559176cee7e5c305eaf3cf4ca1183e95f1121de1a4ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppErrorWhite.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WNCRY
        • Size 8KB
        • SHA256 3bf37548ca155731169d8d9c6d41304f6dc72dff2efdbf33b03fdca2779f568b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppWhite.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WNCRY
        • Size 3KB
        • SHA256 8a65295dcb9c5860e72e7274af2e31ebdb01ac1e62d92c3a2b8c94428ae3cefb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AutoPlayOptIn.gif.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WNCRY
        • Size 374KB
        • SHA256 5164bfb2f462d0bdd3f00d0c4a7853fd47ecfeb6ecc5cb136eccb9d79ce7de73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AutoPlayOptIn.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WNCRY
        • Size 10KB
        • SHA256 8c0ae71a44c51cf528253263e19f7aa6b1a5aba6f24789244e4306e4b2ff39e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CollectSyncLogs.bat.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WNCRY
        • Size 6KB
        • SHA256 98445bca95f0935369430a1d6886638c33e1d2b254f61e312a6e3d087843993e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ElevatedAppBlue.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WNCRY
        • Size 7KB
        • SHA256 147f22c6eeb11f4caae46703c770152b28e27e6afa23c72c0f9ebe537c43c8b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ElevatedAppWhite.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WNCRY
        • Size 5KB
        • SHA256 b4122f8f0aafb88057a91638c74b9ad0237aacdb306ca8915c06b573e4ed8310
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Error.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WNCRY
        • Size 7KB
        • SHA256 ce00ed9e74bc579eaa1851e7426d171bdc7fb5c8286522a62e801008cd324d61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KFMHeroToast.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WNCRY
        • Size 15KB
        • SHA256 674a583260522257db5724ffaa376b6962a44c3913f816c82801367a38c16e35
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KFMLockedFileToast.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WNCRY
        • Size 10KB
        • SHA256 9ca483c438e5b7de65964ee7db76186df8121dd54190ec441493d8aca28582e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KFMScanExclusionToast.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WNCRY
        • Size 10KB
        • SHA256 dd441bb0cf20d6cfa51684241fd081085fac1089d698c5571ea5f11ddc692656
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneDriveLogo.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WNCRY
        • Size 4KB
        • SHA256 9844990156725057839fc65fed87561b1916c5492a1fc0432d8f954062037c66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QuotaCritical.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WNCRY
        • Size 8KB
        • SHA256 8a81ddacce9efa922c029319c9e469d8fd705c19ee232475415ed3934838f734
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QuotaError.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WNCRY
        • Size 9KB
        • SHA256 d0d2d97e633d025055dbedca8dfd07b2dfa9ccfd7264d5594361e90834bd14fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QuotaNearing.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WNCRY
        • Size 7KB
        • SHA256 f5f9278839e6ab7015e6946f2a0eaa73f278e7481081c5ed7877bfdab3190571
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ScreenshotOptIn.gif.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WNCRY
        • Size 238KB
        • SHA256 6a83ee4b3732afc4e5eba877ea6f88692e1703a53d79c50268417b91bb37d937
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ThirdPartyNotices.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WNCRY
        • Size 48KB
        • SHA256 4062d3b0c9daed844beff5775cec54ef355b9311773e7a05a54e2455a62ced2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Warning.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WNCRY
        • Size 2KB
        • SHA256 349e14b5ea36e041a4a14b664f6761b3dab6fadd6f484bc443c4926b8c2786c7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        alertIcon.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WNCRY
        • Size 1000B
        • SHA256 ec9366287eea01f4678fba59a95ee3e4205d939e3bca2c8376476642f8249c84
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        acmDismissIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WNCRY
        • Size 2KB
        • SHA256 e0c1a07ebd0f7020edaff00ccda952e46d340c928677a2b046404c6b8a907507
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        blurrect.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WNCRY
        • Size 1KB
        • SHA256 a6acaee6e5e77204e3183ee27723efe4c7339c3880add741c4118b342ae6dfb7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_finished.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WNCRY
        • Size 504B
        • SHA256 42cb1de501756983268ffeb3738940f9cc76c37011685cb442763b6f81f3effd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_hovered.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WNCRY
        • Size 680B
        • SHA256 23a1504a4c9b60880d23544b1b9d6049891b0214cb02c120e8530027b5ddb4ec
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_in_progress.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WNCRY
        • Size 680B
        • SHA256 c8b0491a2b25b13e0112267b05ca82a0b753733978dd096181ff2f26e908fb6d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_selected.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WNCRY
        • Size 680B
        • SHA256 c1dc48cfb73fc169107f3c19db1d99c0170512fe9277395b00033f5769e44a58
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        chevron.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WNCRY
        • Size 584B
        • SHA256 f4cc3bff7c14b469cffda321348ec70e8031398b3d2850e341398d507c908132
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        chevronUp.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WNCRY
        • Size 552B
        • SHA256 362f9cb7fcbc35bd3e353a7a7970015e1c974d3d3cc9968bce828072151382e3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cloud.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WNCRY
        • Size 1KB
        • SHA256 7abc271fa19a7ef118a80afee2075155e24f0851a776d4a369bc704d1d31607a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        done_graphic.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WNCRY
        • Size 15KB
        • SHA256 5929f2a1ef99b9e70b18931165cfcdc7884f6b33d3b236428233f7dfc3723571
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        errorIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WNCRY
        • Size 1KB
        • SHA256 a234a02b7dbaddd4a81cdaf8121c0eadcacd90e301e711f7f81e610fbfb6221c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        folderIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WNCRY
        • Size 1KB
        • SHA256 1454e705ad3216d755eaeedcbbc1b4c18f70336165f9dd27759f3ec433e995f4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        folder_image_desktop.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WNCRY
        • Size 2KB
        • SHA256 faaffc76b2e8f8a871fa636cd219985fe59ef12149820fd314474c706ac15e22
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        folder_image_documents.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WNCRY
        • Size 10KB
        • SHA256 3b362f379ca88122cee44c5920cfc8bdcd04e46ca04d5d561a4d16d76c41a895
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        folder_image_pictures.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WNCRY
        • Size 7KB
        • SHA256 7d5d8ffca993a7e593ee75ea5dc6a894adb452d613cf25af3c917405ebc71785
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        globeIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WNCRY
        • Size 2KB
        • SHA256 6916bce595c5296438a1c0d4081a4943253e4153f76c50c6baddeaf5e8c68c79
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iceBucket.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WNCRY
        • Size 6KB
        • SHA256 ac05c34aff78da6ca1f2b43d0b72fcdf6b3e055f6b83ef5952fdb28593498587
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        infoIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WNCRY
        • Size 1KB
        • SHA256 8812c5b6b0e3232e96f9716dc99c07773468b4471493ab8fbb3686c336413b38
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kfm_folders_image.svg.WNCRYT
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WNCRYT
        • Size 20KB
        • SHA256 aa830d7a94710b15566fb4f568dcd23befe4b45dd9f98650d19464503b3f0487
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        loading.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WNCRY
        • Size 1000B
        • SHA256 ca6d316c29dd84ad72fbcaa1fc43763d1ee4e95d86e8e971be9b78fada44a6f3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        loading_spinner.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WNCRY
        • Size 712B
        • SHA256 dde3f330f07c5b16cafc7ef0b020b9a7a9facf14f878b7f59bfc841c6515d3ab
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        onDemandFiles.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WNCRY
        • Size 7KB
        • SHA256 1154ffb3576049fef4e2d9e9438129dff43c84aecafb11edb58d900237b140fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        onDemandFilesDehydrate.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WNCRY
        • Size 9KB
        • SHA256 d45d98f717d3a23ba7cb8650446b390713551679d944f71a9885a674a9affc75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        onDemandSelectiveSync.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WNCRY
        • Size 2KB
        • SHA256 b38991d7312103ac5f0089225187f8563ab4db6aeb4d8d7c3c910c8eb348a481
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        overflowIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WNCRY
        • Size 1KB
        • SHA256 e28e3c92ee2b87cc9747602122e90ad518b3454cddf7c62ed6b77864fcd6bd1e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        overflowIconLarge.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WNCRY
        • Size 1KB
        • SHA256 552174c2d13abaf269104213c259b4ec513c7714d165beb826f0c0f9fbc1f59a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        partiallyFreezing.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WNCRY
        • Size 4KB
        • SHA256 72d4c6ca51dbc546130447af76624b98c8508a1e8f274ee3801d995a49f4ee91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        paused.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WNCRY
        • Size 600B
        • SHA256 a8f0d60bb6911cd6e134d2e25b41312df4cca5165d57fcada7f3adc7722c8c8f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        premiumIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WNCRY
        • Size 664B
        • SHA256 d6039e04774b584b8768500855417184ec33031601513cb23b72a31ab5f2b4f0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        recycleBin.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WNCRY
        • Size 3KB
        • SHA256 9362007a567bca2a7e957ae838855de5fb79a521bb60fbef2b5ef3f9092c46a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        shield_icon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WNCRY
        • Size 1KB
        • SHA256 fce4756cf397c10a6b2880f5073da4d655bb940536c854c30d357c18529b55ae
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        signIn.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WNCRY
        • Size 10KB
        • SHA256 fb7979aec662a6796a6c529b7af2e148b6e965a2dd308805798acc47976033b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        stackedIceCubes.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WNCRY
        • Size 4KB
        • SHA256 dad4586cd84043a6f8b44781b2a01c6db1a662f8cca2f210a6b6bb2d59285d87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        warning-symbol_grey.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WNCRY
        • Size 536B
        • SHA256 6a15b64a935fb852589d231f89e9f4e0a09efba834b23c7ac2e8bda8dc737f76
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        waterGlass.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WNCRY
        • Size 2KB
        • SHA256 c38f7894a1fdf3870eb4d721f60132e1e3971b5c0b34efb86ad4374a59e35ed8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WNCRY
        • Size 936B
        • SHA256 0c72e8945964f590fde6579e21394c5afd7dc72b910adad97f918d6eda2e37dc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WNCRY
        • Size 1KB
        • SHA256 b210484506fc7ba0169931124c28906688eef273121bbe8a2db85a409ca506e7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WNCRY
        • Size 1KB
        • SHA256 343e21f8b6678d1b578650654e3b18344ed023e045e56c1415a14196e1010261
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 f697266838bb294ff2073da105880d360b2cd6c41a3e95205d19b6c51b2e2055
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WNCRY
        • Size 3KB
        • SHA256 197092a7f7f54cbbb582fa01f15761ef625f6e6da216295e77bd385cc5b41616
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WNCRY
        • Size 952B
        • SHA256 911edf841db698e83f5163d924223930117ff5920d83e2125643123984e4cf65
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WNCRY
        • Size 1KB
        • SHA256 83a6e0d6ba1f3016084cb922743c01b4fb1bd649db31c9b00c0c9529c0a1fd09
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WNCRY
        • Size 1KB
        • SHA256 9158251f2154432d2bf2c8892170d4bd2eaee6ff7a37787b98634db23fc8b8b7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 7f756aa785417c0e315894270d79c723e2712d6d5247a2d44fd207d29b51c639
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WNCRY
        • Size 3KB
        • SHA256 968a38cf0b300c63084bb25a86e19fd6e89573b0e48f32f42967706a35944b15
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WNCRY
        • Size 936B
        • SHA256 c42d30f9a69b2da67d1c67a6f3da71a83542760b8c89b3d9413df01f5fd191ae
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WNCRY
        • Size 1KB
        • SHA256 1c0fa6957e635f3dca29dbd17a16e25024175cc40aa405fdda3e10bd6a525c51
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WNCRY
        • Size 1KB
        • SHA256 15311a607ba93dce179bb28dfe9ba25013cda7b6fe7a18e1ebe12949b33075d6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WNCRY
        • Size 1KB
        • SHA256 38ef818d0032b5887f415a622cc2d312174770b96a7eaaaa5e55ece081314ece
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WNCRY
        • Size 3KB
        • SHA256 44ce11fabe881d40b9a95aae8a03471566ad3671ef04893655591a3d1029c117
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
        • Size 696B
        • SHA256 d56d69d6466d4cd0f0e09393e6998e782b545cffc86c7fb8cce4b7269d3b5c90
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
        • Size 808B
        • SHA256 143d75285e6f04d1055fa925d593bcd484b78f0a3b65f6f126b57c01ba797c55
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
        • Size 872B
        • SHA256 c19d7005dbe04de120db3021642776fdbf896b3dc37c839492cf908242adc01d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 c00ba6227d6aa685f2e20ee1ec68d40bd1ea5b43254ffb15a16b55757f1b7a84
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
        • Size 1KB
        • SHA256 db4e05e99065c1541e7b286a3eed286df008730a13c614a6bb0340a02775ac8e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
        • Size 696B
        • SHA256 3969cdfa2c8914bf6f306f0f0df864b310251b8b5d527c8f67ec1b617063f4e6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
        • Size 824B
        • SHA256 c5448248affc37bccbdbf6ef04a1a7e5d1c2848786d3cc5a34643e8381608cd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
        • Size 888B
        • SHA256 841af7349dd361c3f7204ea102717a46c9b2c7812fc6ac5cfbba2f5c616e124e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 7f33bd4487c9f2702f10b2e41330ccefdade4bd7d85eb28607d7a46a3a713442
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
        • Size 2KB
        • SHA256 212f640fa7ea107ad6b69a3c767a23f1b90bed3254b14d9de2bde5b4ed4830ec
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WNCRY
        • Size 696B
        • SHA256 9942739d24aababb4eda0111919ddce9823bcf0a59aa16170ea6d1d8cc318989
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WNCRY
        • Size 808B
        • SHA256 9aea06ebf1d80bf329ac7b589d3bc1f0c0afc307982b5bb297664df57131c118
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WNCRY
        • Size 872B
        • SHA256 b9c12128833f03d5d6bf553f92ac7ab83f94833fd45739b66e7ae46a073ae983
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WNCRY
        • Size 1KB
        • SHA256 d63306cd420de709036d040e9efbc0b4d9ad16efd161876d1e8878a0081d5f2d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WNCRY
        • Size 1KB
        • SHA256 f5a25ee705f7f23a806acf148cb6a3a13ce5476939b3ef64ae4ce92ed865f4c8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cversions.1.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WNCRY
        • Size 16KB
        • SHA256 b6ae09633a9bcdce3bb6421161d22e28a427fd1021d8cfd0c44e106f3d74c18a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cversions.3.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WNCRY
        • Size 16KB
        • SHA256 5fb1dfe1fcce5396f256a289872920e1ed621aa2bcf20c40fdab2288c8dacc56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
        • Size 423KB
        • SHA256 519c3d65f63b4f729bbe85fc253eb76c12fff6d85953881d9d4a444e0a09f4f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
        • Size 64KB
        • SHA256 8480b68bdb175381150dd5afab3e3b4ab2533c0121f7db68fb4f6f070bc702a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_1280.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WNCRY
        • Size 312B
        • SHA256 bc86e5c0b3e10300ae2c11a05d0f6ff6fe96b7d08215ff807923bd92bc14593c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_16.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WNCRY
        • Size 1.0MB
        • SHA256 fee9f54e4b66b589eae64f913cd63caf5215fd45a27e751d5ee654ecba8f5813
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_1920.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WNCRY
        • Size 312B
        • SHA256 d606eab8e3d96a9085d8e78dc89d17d0e905b44485b021f626b8ff4511ce7074
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_256.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WNCRY
        • Size 1.0MB
        • SHA256 51085e535460c91e78642b7e801777fd3cb92c2e8bc7de2eaceb4f58a4b633b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_2560.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WNCRY
        • Size 312B
        • SHA256 27de256679d0a066df21e5bb46d04a0323574333034c7262c1ed11c38a8d5188
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_32.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WNCRY
        • Size 1.0MB
        • SHA256 0abbeac13e70345cb48c69270675a94b7dd9910d3cb6aa879453973c97028ab7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_48.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WNCRY
        • Size 2.0MB
        • SHA256 b31ba6d556231ac726d9d00bf42bdd7be7c7d78b773c2e7263daae7d0983578a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_768.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WNCRY
        • Size 312B
        • SHA256 af2521f6356c235bd46f7946ec22e0e8770884b0d5c73770b1975548e8bcc444
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_96.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WNCRY
        • Size 312B
        • SHA256 8d31cd6f77a98d94d385a516f417a5829ea7b1eec55f64962c3f33d3e3570d49
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_custom_stream.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WNCRY
        • Size 312B
        • SHA256 05384f75fd877bd204089def607251b6fec511a5517ffb63df76f7ffd6adca27
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_exif.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WNCRY
        • Size 312B
        • SHA256 62f825daa41f905e441af9102e340414b2cd260ec63ebab57545b5ceca6fadb3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_idx.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WNCRY
        • Size 28KB
        • SHA256 070e6a74044a22b905b09d6aecbf13f85c872c3a4edfea4cd5ab26992eb92ad3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_sr.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WNCRY
        • Size 312B
        • SHA256 fd4846c8e45a0df044b43bc700b199a82605159844918360011739b54cfe6f78
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_wide.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WNCRY
        • Size 312B
        • SHA256 afb238a5c2099e746b85375c583c787587ca854168d0f4f15b08bfcfa142f16c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_wide_alternate.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WNCRY
        • Size 312B
        • SHA256 b9e67049015f2138e3b56fbd1da158bacb7482c29830c08743382850d1bdd2d8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_1280.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WNCRY
        • Size 312B
        • SHA256 9b2f185535181f1d942d0fb6e4f05f3e758232e403232e6cd833c0bfb5869c69
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_16.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WNCRY
        • Size 312B
        • SHA256 5f51a2846eaeda4b5ff850329496f4f8baf12eb01d6af47810b92dcc4163f169
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_1920.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WNCRY
        • Size 312B
        • SHA256 adb360e97109116e1af4a8c47500a7087c694ba0868c9d7163642cdc1387d493
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_256.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WNCRY
        • Size 1.0MB
        • SHA256 e3b70681b3d0d4f850d032b662ac299a82b68c17c0919f2487f516531cbc4f66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thumbcache_2560.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WNCRY
        • Size 312B
        • SHA256 0dcc4f9fd8d8e7d5a7f478105ae7d6e457437595d62981a525db80f1dab4fe6d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_32.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WNCRY
        • Size 1.0MB
        • SHA256 f4b5e90fed1914e75d344478ec30df5541516ce07146ebc2b30364a924f5149b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thumbcache_48.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WNCRY
        • Size 312B
        • SHA256 bb0705249a81ec223ae20c339a84e6f9c87c094227e49508f607168b5518315e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_768.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WNCRY
        • Size 312B
        • SHA256 672c39b5ab67f4308fd8038c39e588d3102a0b94e8a696374bf5c233479efd79
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_96.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WNCRY
        • Size 312B
        • SHA256 0c50e3e8d95f67b2ceaf9a32f2c559a5b5adbf6a910b7e89521a91c35780359c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_custom_stream.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WNCRY
        • Size 312B
        • SHA256 596d5482a0f4add9b0367db072f98ae7f1ea3bd13b35c52c2b4e8a1360d5f832
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_exif.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WNCRY
        • Size 312B
        • SHA256 d46786e5407b85eb9211c70735beee1f9a454d3f7db7ffd32fc0ba2109442c3f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_idx.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WNCRY
        • Size 7KB
        • SHA256 a24fc90d2b2e9686e144195fbeeaa2e527ca45c787e6d26d9ce69c7dfd4e243d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thumbcache_sr.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WNCRY
        • Size 312B
        • SHA256 23db9cbd1899e9b8c00c09a51cee27b324008157348e260dbe675f0e83dffa48
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_wide.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WNCRY
        • Size 312B
        • SHA256 8b1aecf85bbed1fb08236df431388b3591cd650edb4dcd523f5b644f873f0913
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_wide_alternate.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WNCRY
        • Size 312B
        • SHA256 afdc3e478b67e83c4eaea33ba9f993a1ca20b2cbb2fb1ca02e3831630a791732
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        {8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UUSZXXV9\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
        • Size 6KB
        • SHA256 a1d1b59c121cdba0e4ead5666d1f02a8e9a259a38752857e3c1c937d4e1c454e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpndatabase.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WNCRY
        • Size 1.0MB
        • SHA256 d1bb3b2e066350ffdfb71b297672c1f6b6153b1d8636c9d14f5092e9707ea578
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\appsconversions.txt.WNCRY
        • Size 1.4MB
        • SHA256 c62528260f857639ec34de546b0779a746a3bf0328bc71338660917031f18e4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\appsglobals.txt.WNCRY
        • Size 331KB
        • SHA256 7ce0be56538f0a8ce58ea278addc31494de5048c15cd271f31bb1950d29ac0ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\appssynonyms.txt.WNCRY
        • Size 374KB
        • SHA256 b6ec648ea861d014ad290be241c0c1ec3d92b069474a16dc8ed32b08e5792a6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\settingsconversions.txt.WNCRY
        • Size 520KB
        • SHA256 b4fb4e24702d6b27c157b0c5524ec5156535e3f31fbcec2e223e9eef3c8f648d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\settingsglobals.txt.WNCRY
        • Size 61KB
        • SHA256 20886a3900a0e9ab05f6245d1f30e717d641ab426b7c721fa781d178dad1e82b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\settingssynonyms.txt.WNCRY
        • Size 125KB
        • SHA256 f7f8abd0318c118720989ed187e18a6ede8baefca1469af165dd02bc15377354
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\appsconversions.txt.WNCRY
        • Size 1.4MB
        • SHA256 c10087b9fcbe6d57d1330927d584706d909e45e0eb4676f1bea582c7eb9ad711
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\appsglobals.txt.WNCRY
        • Size 331KB
        • SHA256 f3380553b0462df4b9afbdd338efc64a001c521f2c46bd4f2f4c6fdf3abaf324
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\appssynonyms.txt.WNCRY
        • Size 374KB
        • SHA256 7b125b172f093cbca8656add784fbafb4a8d74df9ac16bc476382e0e21a1a9e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\settingsconversions.txt.WNCRY
        • Size 520KB
        • SHA256 da60b2c6173e62912af0186c41d54ed7070fdf99049aa72a2bc353d367ebd56d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\settingsglobals.txt.WNCRY
        • Size 61KB
        • SHA256 0a19f6858d27c897f63cab18224d0b4cfb02e62a0e9596b009bdc2d5617c417b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\settingssynonyms.txt.WNCRY
        • Size 125KB
        • SHA256 78f8c1cf3e290dc59a9de97b272d0618d88b8da0787dd13d06e72e91dfbff3df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppsIndex.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db.WNCRY
        • Size 1.0MB
        • SHA256 7266691969604875e46db09225c14a2c687100e8ef7d872686fb8daeb2b313ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settings.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db.WNCRY
        • Size 1.2MB
        • SHA256 4f42e908e3f23ec372055a4f465987bff9165db9f4972fca8c8a3323de5133a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SettingsCache.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt.WNCRY
        • Size 575KB
        • SHA256 efa2e1dc44d2859dd465aac6f89a5559533424ce4f591f213e4263976b17310c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AddDisconnect.mpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\AddDisconnect.mpg.WNCRY
        • Size 1.4MB
        • SHA256 9ec63cfdda4ded19bef640ecce3792e25d6f9f3f4952c7330a421b5211b3c6b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnblockEnable.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ApproveInitialize\UnblockEnable.mov.WNCRY
        • Size 1.3MB
        • SHA256 c8ebf51adac66f4de2b3ff5ecf1e4f207b15fbbd672595a8573f4ebaaef79ff2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallStart.mp4.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ClosePop\InstallStart.mp4.WNCRY
        • Size 1.6MB
        • SHA256 05f13a30e287f2ad0b7b0ef1993d7c5c9f562cb8d05d032e12feb377c7f27452
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SendWatch.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ClosePop\SendWatch.asf.WNCRY
        • Size 495KB
        • SHA256 c5a5d9e06413dad314fa7e6068320baa91221b7606d2ad85f3978128e0f9e0f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SubmitConnect.m3u.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ClosePop\SubmitConnect.m3u.WNCRY
        • Size 647KB
        • SHA256 ff1ad274fdaed21e31fbf5be6c884ddbbaa62c81b0bd5a24443b0bd5f4162a9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnlockTrace.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ClosePop\UnlockTrace.jpeg.WNCRY
        • Size 1.1MB
        • SHA256 5eaaf2aaa1a80ac2c06f7512fad6771825e4ce7c50bb2679b0620ee8b00a7f93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindGroup.docm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompareExpand\FindGroup.docm.WNCRY
        • Size 367KB
        • SHA256 05c6b5e8177fd1f501f69e15888ca834c37679fc945ce8af0d4e7f54e4a86479
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NewPush.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompareExpand\NewPush.js.WNCRY
        • Size 526KB
        • SHA256 81abba94d767232947ef24e4207b822a49e65cddb78bc4be0bb4f5f48288985e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OptimizePush.iso.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompareExpand\OptimizePush.iso.WNCRY
        • Size 466KB
        • SHA256 bec0bcb5bab4ef65a494ea0270272ad4ebc432ff358fd3c9998a32a05fcf41c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RepairDisconnect.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompareExpand\RepairDisconnect.jpg.WNCRY
        • Size 188KB
        • SHA256 a2b5d59ec1031423178d0659949cf4dfc37e1bd1eb3b1b82bc5da34dfc3ab4c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StepImport.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompareExpand\StepImport.jpeg.WNCRY
        • Size 228KB
        • SHA256 7204af84ffb0d32454fbc34eba614c9de18645ad7c477e4c2837dc8d419bc305
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UndoInvoke.vb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompareExpand\UndoInvoke.vb.WNCRY
        • Size 735KB
        • SHA256 6cc8304d48bac8165bafc965d4293c70fcc8b3dc8a2362e2f4728a27e0f03d57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ApproveWrite.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DenyUnprotect\ApproveWrite.tif.WNCRY
        • Size 608KB
        • SHA256 5e06e98be0e46a8cb0cfa45a01bd2b00262145c3020001a579dde5a47e594272
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmMove.bmp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DenyUnprotect\ConfirmMove.bmp.WNCRY
        • Size 836KB
        • SHA256 9911bacc32f0201421955c473b9b0e3c78f7108da44837a3dc4a78521e4251d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectDeny.wma.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DenyUnprotect\ConnectDeny.wma.WNCRY
        • Size 1.0MB
        • SHA256 4e6f175da2b5685ef646a6d59abbd9d9a2a7857e6eba24b24fe4233f12f27ed6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GetUndo.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DenyUnprotect\GetUndo.mov.WNCRY
        • Size 1.1MB
        • SHA256 8a2486816aece9998624711ba27d3b48f873eb6190f29476a723a9445c3fe119
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SaveReset.odt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DenyUnprotect\SaveReset.odt.WNCRY
        • Size 988KB
        • SHA256 8b67a914425c2e965be28394c1c7afcaa103a22b70cd2e30600b1c76403a4aff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SelectInvoke.csv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DenyUnprotect\SelectInvoke.csv.WNCRY
        • Size 1.2MB
        • SHA256 0498d13bf42fc9cd0b31d4a08ba0062148824e5d36189855a0d2da633a751922
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EnterOpen.pdf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterOpen.pdf.WNCRY
        • Size 893KB
        • SHA256 fa90a8fbe858e9b2cd30a90665971847686b63952305b26fe213c48deb5747e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DismountTest.wmv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\DismountTest.wmv.WNCRY
        • Size 640KB
        • SHA256 746995339cb4d1ce51c7eb5fa55a80118531fc096f6d28e83e85bf7bf309a062
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindSelect.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\FindSelect.mp3.WNCRY
        • Size 1.2MB
        • SHA256 470c21eeef2cf29c54b86ae6b537c91de18cbfe89220cf5189f6691f5467c9e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestartUnlock.ods.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\RestartUnlock.ods.WNCRY
        • Size 550KB
        • SHA256 5beebe03eb7d5cd26643b5061786beff6e826559b9a8abd36d27de413ca9ba87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RevokeResize.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\RevokeResize.rtf.WNCRY
        • Size 843KB
        • SHA256 6e6d4db98473bfb6e693dd224ab38ec6c06e24163d8612b0ee7a85484bbf6c8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SelectOpen.raw.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\SelectOpen.raw.WNCRY
        • Size 371KB
        • SHA256 6d4749829d93ac6baa2d76ce2f1f00b191fe903883cb7404ade74764513d6717
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SelectOptimize.gif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\SelectOptimize.gif.WNCRY
        • Size 663KB
        • SHA256 ed25c860a9a868b6c85c9ee869c6461abc2eb09f9a960cb44af83fddf5b83001
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TestComplete.docx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\TestComplete.docx.WNCRY
        • Size 438KB
        • SHA256 5478537775add768e8581ff04aa2309d90981cc8d6ecc24be97506237046206f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UseGroup.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\FormatAssert\UseGroup.tif.WNCRY
        • Size 573KB
        • SHA256 2b2f9f2035462273fa058ceba5933b506115c7e2916994be16df90a29ad12e42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TM01840907[[fn=Equations]].dotx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx.WNCRY
        • Size 50KB
        • SHA256 daa6d90653fe2a3d7572ca2b3c247af4345ef3720093c1db6b1b4c7f5698f0c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WNCRY
        • Size 46KB
        • SHA256 e2971519cec05dc65761b736d53af8cf92adcb68c23a800a75969eb16675b914
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TM03998158[[fn=Element]].dotx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx.WNCRY
        • Size 33KB
        • SHA256 745f334c6c6bd31ddd020055c31a77c1a407a75dfe4ef07fc4f28d9f71be0e0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TM03998159[[fn=Insight]].dotx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998159[[fn=Insight]].dotx.WNCRY
        • Size 3.3MB
        • SHA256 0ed14f9b1c8de5afaedb24d1ce0345a8e3bb70da8caeaa3142d4e95576258762
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Normal.dotm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WNCRY
        • Size 18KB
        • SHA256 6ba9aef406ddb5f6894b5cb7a695b7c8776a336fb5a0a67243f9f04382073960
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prefs.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\d9zvs4ak.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WNCRY
        • Size 776B
        • SHA256 9a85b5b4739e401693ab066286ce0916e07c4b4b54f804047b6c62d517824030
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\j3jbeati.Admin\user.js.WNCRY
        • Size 536B
        • SHA256 1ca30a247f75c7459753457a5b188e07bdfba27dd679033c461b15de38778821
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cert9.db.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\cert9.db.WNCRY
        • Size 224KB
        • SHA256 a6d441a64de56fe8d1b97163e9635ab55e3964676d178545c5fe5879161b1968
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        key4.db.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\key4.db.WNCRY
        • Size 288KB
        • SHA256 233d0180513a190cba8d0fd1658d452aeebd1610f372dea7cf27ba0c75ce9800
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pkcs11.txt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\pkcs11.txt.WNCRY
        • Size 808B
        • SHA256 e8b91e2fddfe8db47b3f9b0507c411d3b1ec9e89bed77f058f69de9c0adbba06
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        prefs.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\prefs.js.WNCRY
        • Size 7KB
        • SHA256 f953dbd0a7117b8e43af25677336b9f51a9d737298441ff0faaddd0308b9a553
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenJoin.xltm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OpenJoin.xltm.WNCRY
        • Size 1.7MB
        • SHA256 4d4cb651ec16175a646827149f2755ec2f662f6c319b9119bd3b4f04feb87405
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OptimizeFind.vb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeFind.vb.WNCRY
        • Size 1.6MB
        • SHA256 91e0936e3cbb32824f2c04c2556abce43584fc7d65e14c5042f04515159e6123
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompressSync.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\CompressSync.jpg.WNCRY
        • Size 417KB
        • SHA256 55e2533c7dcc514675163b8ca318126cb99d2265a68f1836a52e4e7db462d138
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CopyPing.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\CopyPing.ps1.WNCRY
        • Size 537KB
        • SHA256 84c5099ea49f49bcd9116d06ff8238c01ceb5cfc0150108a6ed58aeb7a521d78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DenyRevoke.wma.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\DenyRevoke.wma.WNCRY
        • Size 486KB
        • SHA256 5e3a073793fdcefc2d53e6a92fc89fbcb257286d8e42f58f4101415ffe360a6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindTrace.potx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\FindTrace.potx.WNCRY
        • Size 707KB
        • SHA256 a9a74796b0de1a4d48c903ebca0fad25547c3c63f5e7cfc458a3d78e9bf89126
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        HideRead.sql.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\HideRead.sql.WNCRY
        • Size 434KB
        • SHA256 63377c11ac0fe24c2a0bda2c70abb2e28f8eae9cd74421c58992b75e2f48ac76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InvokeUnprotect.xlsb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\InvokeUnprotect.xlsb.WNCRY
        • Size 622KB
        • SHA256 fef1f67053cf7e44029b160dcd965a110c0c0bf55fc0af79e24b4782d055aa8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JoinResize.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\JoinResize.rtf.WNCRY
        • Size 281KB
        • SHA256 48d91b64f043ef6fe03489841e5f75685fde9162681a8927d08a2d5a2c5592cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenAssert.7z.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\OpenAssert.7z.WNCRY
        • Size 673KB
        • SHA256 a73c8b865962de171884a2c588d9127cc84e713128304720a770df1a653d5d79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RenameDisable.3gp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\RenameDisable.3gp.WNCRY
        • Size 349KB
        • SHA256 3212c8b21c1c25bfdc491da936985daadb3bd1da57cd5c296f49c364a644217f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestoreExit.png.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\RestoreExit.png.WNCRY
        • Size 588KB
        • SHA256 039996ce1a57cc11f29b669c3a54220a60c1f6a2ac878664eee880824acec1e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SearchWrite.xlt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\SearchWrite.xlt.WNCRY
        • Size 400KB
        • SHA256 fa731ca029982d4b55c5d7ca9a35706a7c0473a22d3fe4b831a6a816a3987dd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SendAdd.mp4.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\SendAdd.mp4.WNCRY
        • Size 520KB
        • SHA256 8fb45f3ac5ef2ce2792d7063b4eb00a19f76f5eb74568e885cd683de43fe95d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SendReset.dwg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\SendReset.dwg.WNCRY
        • Size 247KB
        • SHA256 57170d533e3279164d0454efc2f78d7202c554ee856fdaf13e58ca02c0191d72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SplitLimit.ppsx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\SplitLimit.ppsx.WNCRY
        • Size 690KB
        • SHA256 509133249d8a31a8af1ed1b8b5b6a88257a712a28ce138f342d4c3dc678294d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendSearch.xls.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\SuspendSearch.xls.WNCRY
        • Size 554KB
        • SHA256 b8bf1685b2dc5256aaaeff9960058201a21c63bbe558305bf9cb84d2ab45c1bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnprotectResolve.docx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\UnprotectResolve.docx.WNCRY
        • Size 571KB
        • SHA256 97c4e32daf9dc0462db9c97c017b14827defb3f990791b4d25b1bda00dec8c36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UpdateUnregister.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\RestartOptimize\UpdateUnregister.rtf.WNCRY
        • Size 315KB
        • SHA256 bce7fa7797d764f9fead90d5d5b447e06da785788ecbd388eeebf7cc347a6e98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmComplete.dotm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ConfirmComplete.dotm.WNCRY
        • Size 368KB
        • SHA256 e45e8585950e16e34f8e7699e94d7463605cfc3fbd194898df69370757aeed43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectWrite.vb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ConnectWrite.vb.WNCRY
        • Size 153KB
        • SHA256 77e3a2b654e2290e79d3381d289291caa79d9458d3b34e822a6758a76f3dda3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertToUpdate.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ConvertToUpdate.rtf.WNCRY
        • Size 184KB
        • SHA256 4d3d61433c9b959171a3e446bd1fb15c2310392509969dd2d0c0d1d82a42d4f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditMerge.vsd.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\EditMerge.vsd.WNCRY
        • Size 389KB
        • SHA256 bafbe3f2e34376eb42981bb787b42c47d2b25e0cd72f70427ffc2cdab7d710d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExpandCompare.pptm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ExpandCompare.pptm.WNCRY
        • Size 235KB
        • SHA256 d7280d00356c97c3bd7903b1a98d732f624874e76123a4d351df9df9abda932e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExportRepair.m3u.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ExportRepair.m3u.WNCRY
        • Size 379KB
        • SHA256 9bd9044707dd86eae9f057ce1404e7fbec71740edaa0dac34785e05a4143a745
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GetStop.xlsb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\GetStop.xlsb.WNCRY
        • Size 604KB
        • SHA256 bb541dbc4cde7760c0efcd1e51ff0a19e71095217be39513233399a97f7af01e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InitializeSelect.pot.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\InitializeSelect.pot.WNCRY
        • Size 409KB
        • SHA256 75d864f5a004392fbfb2246f6b680712c350a044cb8b665e07b0f7671c010b73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MountRedo.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\MountRedo.mp3.WNCRY
        • Size 266KB
        • SHA256 a9855327c2cfdb36c7438443ca8d550aea8a998ae2b172b3eb7ee4e957f65ffd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ReadWait.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ReadWait.ps1.WNCRY
        • Size 215KB
        • SHA256 074076d962215aba7682a4da883a11a6e62ba52b99b91b2feaa2756131b93632
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResizeSet.gif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ResizeSet.gif.WNCRY
        • Size 348KB
        • SHA256 cad41dda3439bd4a932e05ca8526768b00d6c7d389ec466984b051de59e6e292
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResumeResolve.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\ResumeResolve.jpg.WNCRY
        • Size 358KB
        • SHA256 d72fcdfc8e4cc66523c557f0e840fd66998793cfef9556206c7defb80b5d9c3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TestUnprotect.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UndoConvertFrom\TestUnprotect.asf.WNCRY
        • Size 225KB
        • SHA256 02e8ed17dc11c8263ec706a07fdae081748b3aad8e4f3da4b9722b200d450ca4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnlockComplete.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockComplete.mp3.WNCRY
        • Size 1.1MB
        • SHA256 f62df7b148704e8c7249eeeda67ed7e49430c84e0766588aab3cf0f92cd74217
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmSwitch.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\ConfirmSwitch.tif.WNCRY
        • Size 526KB
        • SHA256 bb43962f3e5ccc57d34010d27ced790afc525bb3f15be34d2fbebfd019a7ba42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisableUpdate.xls.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\DisableUpdate.xls.WNCRY
        • Size 347KB
        • SHA256 2c1771320112c6080e688dee13d1cf04f4aa39741c6359208552250363f9e310
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExpandSwitch.avi.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\ExpandSwitch.avi.WNCRY
        • Size 228KB
        • SHA256 582734c9839ba7e13406082da86db3563ce7520e308e72d5e39b8e1c63e16c11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MountFormat.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\MountFormat.jpg.WNCRY
        • Size 208KB
        • SHA256 91a792b2d598b3e4bdc9f459c6be255b93569f9ba33a43e73b408e200591d8b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestoreGrant.m3u.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\RestoreGrant.m3u.WNCRY
        • Size 387KB
        • SHA256 ad82fe727b8f6a376638775bf5aa32d21bd4053fff9b3bda2dfcf48e293fd8b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SearchRegister.tiff.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\SearchRegister.tiff.WNCRY
        • Size 268KB
        • SHA256 b6d798a238db788b0619e3176753a121625828bb18b29c16bbcc2396e9aeb0bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SelectHide.bat.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\SelectHide.bat.WNCRY
        • Size 466KB
        • SHA256 9b798ef836f87fd608d8777fd7a4749bea869d3039848ceb15b91770f4a6bb5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendUnlock.ods.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnlockGroup\SuspendUnlock.ods.WNCRY
        • Size 506KB
        • SHA256 b13434d1c8bab072c028c66f097bdcae83ac7fe162c11ec7f1ca37549e11a07a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExpandUndo.potm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\ExpandUndo.potm.WNCRY
        • Size 365KB
        • SHA256 856166c5e6b7c2214e78729191b519a43552d8896c5387e10874dbefb6cae10b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindClose.ods.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\FindClose.ods.WNCRY
        • Size 243KB
        • SHA256 a19b87cfff61cbba4679dfca48215180144d4246ebce850bb17a2430198f2f5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindUpdate.wma.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\FindUpdate.wma.WNCRY
        • Size 191KB
        • SHA256 b778069d4e3e2681396031b4bc5f59122e01150fa605ad97d56fe701e7c91158
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LimitRemove.xlsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\LimitRemove.xlsm.WNCRY
        • Size 382KB
        • SHA256 3f60cc5b6f466f60a7fa74c373259b6daedaa91b0b248834a5465779c347add2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ProtectRestart.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\ProtectRestart.ps1.WNCRY
        • Size 617KB
        • SHA256 36154701769911fb71f161c236e397d72b154f2c4d57070f743b0dde50e44403
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RepairUnregister.pdf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\RepairUnregister.pdf.WNCRY
        • Size 356KB
        • SHA256 75b8ef9f066531ab4bd82cf431b0bb2a8a35ba805d64e01fe8b7d4df9467caf0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResumeMove.doc.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\ResumeMove.doc.WNCRY
        • Size 174KB
        • SHA256 096553c8c416350abca148dccbe5a01e08bf3733d87722f982b8db7b6f7bc933
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SearchSync.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\SearchSync.rtf.WNCRY
        • Size 339KB
        • SHA256 e8d11f6f988c6f808e6964ffd8ef50137b95c6396b38a9403dbfe8c12f6139cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendApprove.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\SuspendApprove.mp3.WNCRY
        • Size 426KB
        • SHA256 df74a41c39aa286a1f8330fd60eb97294848c87855febc3d3951d5b91ded5917
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnprotectBackup.mpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\UnprotectBackup.mpg.WNCRY
        • Size 347KB
        • SHA256 02db0514dafb629da111d1eeb29b4a3fd3b366661393e401bd6c32d60306f06c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WatchConfirm.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\WatchConfirm.rtf.WNCRY
        • Size 313KB
        • SHA256 0bf1a7d22d100d9adef86818a855bc6a7f2eb1045064e2ef50d220ee533e412b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WatchDeny.docx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnpublishGrant\WatchDeny.docx.WNCRY
        • Size 182KB
        • SHA256 61c45c049f688edfc3ffdab72646fdd53b4191e94aaa971785b899885dd51790
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnregisterResize.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterResize.mov.WNCRY
        • Size 794KB
        • SHA256 928101146d607fa4b79270d28a7331453f942a7a5195f7143cd7a0bfea453796
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompressDebug.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\CompressDebug.jpeg.WNCRY
        • Size 266KB
        • SHA256 2fad93b7be918a58f1271291897b00c6c1b97374d51be597234971f9dd0a3a6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmInvoke.pot.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\ConfirmInvoke.pot.WNCRY
        • Size 160KB
        • SHA256 0b7d6085691e675e4f5b3a73779ef38460dad667f6a628ebefa1165077ba0af8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DebugCompare.bmp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\DebugCompare.bmp.WNCRY
        • Size 110KB
        • SHA256 c1df1906a8de68612b6561677dc5be25e27e504bc0f296518e1d02c4cbe8f25f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisableSkip.xlsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\DisableSkip.xlsm.WNCRY
        • Size 151KB
        • SHA256 e036eba7c31e12c81151bd0ff7b1c39a914909049b80f860f23e721845ec9dd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FormatGrant.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\FormatGrant.rtf.WNCRY
        • Size 258KB
        • SHA256 f4e8531652829eeff84a2d2a3c0a9b4c3f11f0070d87ecb87fa662bef1c21914
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenExport.dotx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\OpenExport.dotx.WNCRY
        • Size 233KB
        • SHA256 b13cdd315cc8aa03ad2887c24d652910089fedbf80c2b3df58023e3f03b7e830
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ReadBackup.gif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\ReadBackup.gif.WNCRY
        • Size 274KB
        • SHA256 369149e53419cf3ebf1f6fce8633dcb6801d496647f70aadc268738e33d482c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RepairApprove.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\RepairApprove.ps1.WNCRY
        • Size 250KB
        • SHA256 73b93930bae89f173c1d01e0ce80f2da6cc92d423f1c687bb5a072c163c21c89
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResumeFind.vb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\ResumeFind.vb.WNCRY
        • Size 241KB
        • SHA256 d2e9d033f0cf72dceae54f2436b5e97e9fd7653d0622dffda1d93edf4743fefe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendRepair.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\SuspendRepair.asf.WNCRY
        • Size 192KB
        • SHA256 541050e7e1d23d757ef5f5db35cf4c7c6e4ec356cf158449deea445ea53da519
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendRestore.mpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\UnregisterSet\SuspendRestore.mpeg.WNCRY
        • Size 200KB
        • SHA256 08b192b0c69c8929d3a34b50c3be81cdff674df3dc6953189ab813f3fa347023
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectUninstall.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\ConnectUninstall.rtf.WNCRY
        • Size 710KB
        • SHA256 be57664a42426f5a8206ed0e984604aaede523c45e6af32cc4183fca79fbe65e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisableUnblock.csv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\DisableUnblock.csv.WNCRY
        • Size 306KB
        • SHA256 cb90a13c518666079695505d5f956eee25150d26c398707f92f9afb44f3249cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FormatBlock.sql.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\FormatBlock.sql.WNCRY
        • Size 471KB
        • SHA256 3ece0408f7b7c06a13784bed92d1e8eb5b39e0354852318556f0db65bd8ac433
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InvokeRestart.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\InvokeRestart.mov.WNCRY
        • Size 326KB
        • SHA256 1f1fc3ab7917c9d355edf8e1910b88bc48209485550637d170cee3566a9fcb64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OutGet.odt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\OutGet.odt.WNCRY
        • Size 374KB
        • SHA256 8265f4e48d8a670fbc9230661e33155ad3e42f5496a52cc7a1e9b843ba9cecdb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PingRename.cmd.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\PingRename.cmd.WNCRY
        • Size 287KB
        • SHA256 072007ae5453b6068e58dc02a03183840edea0eade48cdbbd71c176748193261
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ProtectPing.bmp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\ProtectPing.bmp.WNCRY
        • Size 462KB
        • SHA256 967c4093ad594c5dd7e7eac40c345aa6f1606e346cfed9c87949049679b843a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RenameUpdate.3g2.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\RenameUpdate.3g2.WNCRY
        • Size 316KB
        • SHA256 672ee2d388d7575df2ef96dcac464f39c09f774448d069883bb959bb2968ae57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RenameWait.wma.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\RenameWait.wma.WNCRY
        • Size 413KB
        • SHA256 b4c14e7c438995f2dce704e337f793ebe39a5192834affedb2df9989c36d81cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SaveUnprotect.m3u.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\SaveUnprotect.m3u.WNCRY
        • Size 442KB
        • SHA256 1b9e9870e1d6e92565f696a01da726a66f567a255bdca4487c81f2b899d0d3e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteReceive.txt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitPop\WriteReceive.txt.WNCRY
        • Size 335KB
        • SHA256 8f3a9b4d511b1d624c174efeb1edd429f021503a64d8e399e6c6fb01b906f91f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CheckpointDismount.xlsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\CheckpointDismount.xlsm.WNCRY
        • Size 541KB
        • SHA256 3aa33ee06d3646495e3f026084fe79b61cb7db2d91a03d2bc7a219f56ba3db47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RequestSubmit.potx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\RequestSubmit.potx.WNCRY
        • Size 464KB
        • SHA256 759a143849c849ebb39a00525c4ef8e2beae201c9d8361230ed7fed1dae5177b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RevokeExit.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\RevokeExit.asf.WNCRY
        • Size 290KB
        • SHA256 092a52db8478d50bd7086311813b44346f70d50f969a2c7c60e176dfea96f988
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SaveOptimize.ppt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\SaveOptimize.ppt.WNCRY
        • Size 831KB
        • SHA256 07ff5334b54396e6f4de81f86e934f17bd3362a4534a37c43f0d181ef74bc797
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TestRedo.wmv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\TestRedo.wmv.WNCRY
        • Size 657KB
        • SHA256 720b6bb9b434084f0dfccf6965b8922849f03b606105fb48a34b6e2a28068f27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnregisterStart.csv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\UnregisterStart.csv.WNCRY
        • Size 677KB
        • SHA256 76b3eea05a30ae13b8e52fd1fc8b70699eb49c341375200a556f7917f9a68b7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WatchDisable.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\WatchDisable.tif.WNCRY
        • Size 387KB
        • SHA256 d0668d0ffe162be4b9e913bd744d652801f481dbb4ccd83ac44fd8364e787222
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteShow.png.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WriteReceive\WriteShow.png.WNCRY
        • Size 599KB
        • SHA256 f4e9ff663f836a4ef370915f90e1162890145e5e525fae13cedd1e4ee0b60612
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompleteEnter.docx.WNCRY
        • Path C:\Users\Admin\Desktop\CompleteEnter.docx.WNCRY
        • Size 18KB
        • SHA256 f25d1f9b7b049bc3688ee23be37722f3de16ac61a3203cc142f7a35493b43072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertFromSave.gif.WNCRY
        • Path C:\Users\Admin\Desktop\ConvertFromSave.gif.WNCRY
        • Size 500KB
        • SHA256 2233ebf81a95b2b6acd1a650cf92d359dfa81b409510cb750a1c838626a524d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisconnectGet.tif.WNCRY
        • Path C:\Users\Admin\Desktop\DisconnectGet.tif.WNCRY
        • Size 433KB
        • SHA256 5de52472176be4a8f3027dac4e83c65ff0a2b4f1cfaf10c76eaad1094cb3cd0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditOut.docx.WNCRY
        • Path C:\Users\Admin\Desktop\EditOut.docx.WNCRY
        • Size 14KB
        • SHA256 24081ec4d4038115edc6029a8d57088b2123430f764f7e5d0dee81d943e41395
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PublishUnblock.potx.WNCRY
        • Path C:\Users\Admin\Desktop\PublishUnblock.potx.WNCRY
        • Size 216KB
        • SHA256 7bbdb8c0fae867b247bde0759fe1fbf760802dc79d566e73c641d67d4cd692ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PushInvoke.pdf.WNCRY
        • Path C:\Users\Admin\Desktop\PushInvoke.pdf.WNCRY
        • Size 316KB
        • SHA256 64648797fed5f4b0890982d7803c0b44fc7416c83a22fe03a271d17ca11bf29b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RegisterUnlock.ppsx.WNCRY
        • Path C:\Users\Admin\Desktop\RegisterUnlock.ppsx.WNCRY
        • Size 383KB
        • SHA256 321a261c77f8ee207e50c5d80c90c0a68b8434486f120c1988e8899bed641c2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SplitDisconnect.bmp.WNCRY
        • Path C:\Users\Admin\Desktop\SplitDisconnect.bmp.WNCRY
        • Size 250KB
        • SHA256 083c97fde1fe7b2f60b875ba7dc838eff98732f523c4b7a7f2a7db894cb40de2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartNew.xltx.WNCRY
        • Path C:\Users\Admin\Desktop\StartNew.xltx.WNCRY
        • Size 533KB
        • SHA256 989850b3ad588ad206b604ef43f5b84e2d3811f27ba4814dce71c86b39bb5793
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendExport.3g2.WNCRY
        • Path C:\Users\Admin\Desktop\SuspendExport.3g2.WNCRY
        • Size 400KB
        • SHA256 69a6d18c265f794b008b1c2c3d9a32c4bbcb0fe930f175b18cd4b4bf6a86778e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendPop.potx.WNCRY
        • Path C:\Users\Admin\Desktop\SuspendPop.potx.WNCRY
        • Size 416KB
        • SHA256 bb6ba9d193ca08894bf1b61612e2d97b1b07869c8c25594e07e40a1125c9ba94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompleteSearch.xlsx.WNCRY
        • Path C:\Users\Admin\Documents\CompleteSearch.xlsx.WNCRY
        • Size 1.1MB
        • SHA256 48cd5e36879a761e178e248a05c6ab50169c37309987cc9f0e4688bd46cf845b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmJoin.vsd.WNCRY
        • Path C:\Users\Admin\Documents\ConfirmJoin.vsd.WNCRY
        • Size 1.5MB
        • SHA256 a512d8ad077d7ba5dac64cdc37a22bf22890f0e913817b620a94ccd2bb4fbf73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DebugInitialize.csv.WNCRY
        • Path C:\Users\Admin\Documents\DebugInitialize.csv.WNCRY
        • Size 783KB
        • SHA256 4a1a5b1f3dfd01931a7fe747d2bd41b894250eb620b071ddcfa211f1050d5dc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DenyTrace.odt.WNCRY
        • Path C:\Users\Admin\Documents\DenyTrace.odt.WNCRY
        • Size 1019KB
        • SHA256 bd3639f2bb36eb0c81f17ff7556afa9391db963c21b81f27578f3039c004a300
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisconnectRegister.pptm.WNCRY
        • Path C:\Users\Admin\Documents\DisconnectRegister.pptm.WNCRY
        • Size 2.1MB
        • SHA256 d9ee0235c0579cf172d79791cf06debd244276fbd170df069400ef59c84681ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditRestart.docx.WNCRY
        • Path C:\Users\Admin\Documents\EditRestart.docx.WNCRY
        • Size 14KB
        • SHA256 a5a554c4fb591d14155f0d9517fa744189c29da5c07da31427a90598cad84ea0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExpandShow.csv.WNCRY
        • Path C:\Users\Admin\Documents\ExpandShow.csv.WNCRY
        • Size 862KB
        • SHA256 5e7186eee3d8f2d0641badff3195b58a86b8760f7a1979f777d196858036d065
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Open Notebook.onetoc2.WNCRY
        • Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WNCRY
        • Size 6KB
        • SHA256 e47e4ee490dc7b455942f473acb44809c9d613e3e451b43f77b4542caca4bdd9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenResume.potx.WNCRY
        • Path C:\Users\Admin\Documents\OpenResume.potx.WNCRY
        • Size 548KB
        • SHA256 bf11b8c565f125bfbef8763d7328c8d82204cf99f0ad53051fe88f43167ffac5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Outlook Data File - ezlqmhjsoc.pst.WNCRY
        • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - ezlqmhjsoc.pst.WNCRY
        • Size 265KB
        • SHA256 ee82c91b2beb70bf0d56ea32af5e0872d0daf5f60214fd87072c86545ab0e612
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ReadCompare.vsd.WNCRY
        • Path C:\Users\Admin\Documents\ReadCompare.vsd.WNCRY
        • Size 940KB
        • SHA256 3ce24c694e9f4d6b9a2bb7ebe2de082ec4dc684d88c82682136557eaeec55a59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ReceiveTrace.xltx.WNCRY
        • Path C:\Users\Admin\Documents\ReceiveTrace.xltx.WNCRY
        • Size 627KB
        • SHA256 fed8d6644573f209605edd506878c79d93f8e268e6425d7fcc33b7d5ab8154fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResetEdit.docx.WNCRY
        • Path C:\Users\Admin\Documents\ResetEdit.docx.WNCRY
        • Size 18KB
        • SHA256 d6f247ad13701ab39993dfc86f7260f2e3281ccf75661414e09b6c51aa1f5a10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SearchShow.xlsx.WNCRY
        • Path C:\Users\Admin\Documents\SearchShow.xlsx.WNCRY
        • Size 11KB
        • SHA256 8e68f2ff89fe9e19fa23595d9916b0451b20fc5e2c30402c08c2b010a62f82f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SendOptimize.xlsx.WNCRY
        • Path C:\Users\Admin\Documents\SendOptimize.xlsx.WNCRY
        • Size 10KB
        • SHA256 56fc64e6a99ec6151eac3f41638738d722d9b08439b876db6ef81b13a62178f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UseInvoke.xlsx.WNCRY
        • Path C:\Users\Admin\Documents\UseInvoke.xlsx.WNCRY
        • Size 13KB
        • SHA256 563c64aa1f118bb40003be3c5c38714ca7c1f459b4d761caea4a32c8f71e15ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WaitInstall.docx.WNCRY
        • Path C:\Users\Admin\Documents\WaitInstall.docx.WNCRY
        • Size 1.3MB
        • SHA256 b67c26c9f3caaa6d463ab93ca55f1c40f7b1ae7ae93a5e80812e3c98b9e1ee8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WatchClose.xlsx.WNCRY
        • Path C:\Users\Admin\Documents\WatchClose.xlsx.WNCRY
        • Size 10KB
        • SHA256 34aaf78237e5acac008fc6d2e9bef44f3531b084a6c7ec8fb32e837fe5394066
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        @[email protected]
        • Path C:\Users\Admin\Downloads\@[email protected]
        • Size 933B
        • SHA256 840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ClearSet.docx.WNCRYT
        • Path C:\Users\Admin\Downloads\ClearSet.docx.WNCRYT
        • Size 460KB
        • SHA256 ef655aa6cbf533e6725d45ad5cf5d18ff7aac684697be9d8d4d06d1f56a2b836
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SetStart.docx.WNCRYT
        • Path C:\Users\Admin\Downloads\SetStart.docx.WNCRYT
        • Size 480KB
        • SHA256 f5b8f0228a6d31b9f9c09d8857c40269e5343dd50bdd432c2b5a00c74909366d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditSubmit.vbs.WNCRY
        • Path C:\Users\Admin\Music\EditSubmit.vbs.WNCRY
        • Size 302KB
        • SHA256 6bdafd2642301300bd58cddc120db46b09b2e480e75e4823bbe8c193628930d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResizeUnprotect.bmp.WNCRY
        • Path C:\Users\Admin\Music\ResizeUnprotect.bmp.WNCRY
        • Size 271KB
        • SHA256 ea277b4816adc73ae5f453eda739285a728086785b11898068b6e55faf702670
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowFormat.mp4.WNCRY
        • Path C:\Users\Admin\Music\ShowFormat.mp4.WNCRY
        • Size 621KB
        • SHA256 2ff5b03687ae431ab983ab84aec79e75b24c6ffba2d56077b21c0bbac97eca5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UseExport.pptx.WNCRY
        • Path C:\Users\Admin\Music\UseExport.pptx.WNCRY
        • Size 366KB
        • SHA256 d0c7af1be32a68b4f47c750cbf4713164c7ec64db682ef65cf6bf0089529f5ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindBackup.tif.WNCRY
        • Path C:\Users\Admin\Pictures\FindBackup.tif.WNCRY
        • Size 440KB
        • SHA256 8e0e2af785a34f7f11dc3fe843469f8c7cea360a5e38b3c7c6c87caac8461392
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OptimizeResume.raw.WNCRY
        • Path C:\Users\Admin\Pictures\OptimizeResume.raw.WNCRY
        • Size 220KB
        • SHA256 fe8468bfe5870854ff5d855f03e0b7a008a09fc19f65d1f819dc98bbf67fce5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PopMeasure.gif.WNCRY
        • Path C:\Users\Admin\Pictures\PopMeasure.gif.WNCRY
        • Size 320KB
        • SHA256 d33ec731c1c158e0a4beaa01a0c01a22b26945a24674d62f39bf40ce64d583e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UndoSet.svg.WNCRY
        • Path C:\Users\Admin\Pictures\UndoSet.svg.WNCRY
        • Size 300KB
        • SHA256 1c09677b29571b077914782fed277881df95db314d7c6d3047388efccb77e60a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnprotectOpen.png.WNCRY
        • Path C:\Users\Admin\Pictures\UnprotectOpen.png.WNCRY
        • Size 280KB
        • SHA256 810a8267cb555e75dcce0e00fb72c1e59435cd29b659f004a9df46b4df268a25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteRegister.bmp.WNCRY
        • Path C:\Users\Admin\Pictures\WriteRegister.bmp.WNCRY
        • Size 260KB
        • SHA256 18fc7adacf76d46aa97d8d8eb4973934ec9c97c85f24335941c2cf79da863555
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xHNXCGUt.jpg.WNCRY
        • Path C:\Users\Admin\Pictures\xHNXCGUt.jpg.WNCRY
        • Size 24KB
        • SHA256 0bc1c21265881ecaf324c1366e3d2de34a02e0cc3c88aa0b91d6e5b64e26d903
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tasksche.exe
        • Path C:\Windows\tasksche.exe
        • Size 3.4MB
        • SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/5920-47-0x0000000010000000-0x0000000010010000-memory.dmp
        Download