Overview

overview

10

Static

static

3

WannaCry.exe

windows10-2004-x64

10

WannaCry.exe

windows11-ltsc_2024-x64

10

Resubmissions

14/11/2026, 20:41

261114-zgjvqsdv7w10

14/11/2026, 19:28

261114-x63m2ags7m10

14/11/2026, 15:24

261114-stchvsas5z10

14/11/2026, 11:11

261114-nabd8sfz6110

14/11/2026, 10:58

261114-m2ys6sfy8y10

14/11/2026, 03:29

261114-d2dnkacs5y10

13/11/2026, 20:35

261113-zdasna1y2p10

Analysis

  • max time kernel
    150s
  • max time network
    128s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/11/2026, 03:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    WannaCry.exe
  • Size 3.4MB
  • Sample261114-d2dnkacs5y
  • SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
defense_evasiondiscoveryexecutionwannacryimpactpersistenceprivilege_escalationransomwarespywarestealersuricataworm

Malware Config

Extracted

Path

  • wannacry

Ransom Note
  • Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �
Wallets

  • 12t9YDPgwueZ9NyMgw519p7AA8isjr6SMw

Signatures

  • Family: Wannacry

    WannaCry is a ransomware cryptoworm.

    ransomwarewormwannacry
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

    ransomwaredefense_evasionimpactexecution
  • Creates a file in the Startup directory 1 TTPs 2 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    persistenceprivilege_escalation
  • Executes dropped EXE 17 IoCs
  • Loads dropped DLL 14 IoCs
  • Modifies file permissions 1 TTPs 1 IoCs
    discovery
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound 4 IoCs

    Network activity triggered a Suricata alert

    suricata
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
    defense_evasion
  • Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs
    execution
  • Sets desktop wallpaper using registry 2 TTPs 2 IoCs
    ransomware
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 4 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 20 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry key 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 53 IoCs
  • Suspicious use of SetWindowsHookEx 9 IoCs
  • Suspicious use of WriteProcessMemory 27 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Views/modifies file attributes 1 TTPs 2 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\WannaCry.exe
    "C:\Users\Admin\AppData\Local\Temp\WannaCry.exe"
    1⤵
    • Creates a file in the Startup directory
    • Sets desktop wallpaper using registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:820
    • C:\Windows\SysWOW64\attrib.exe
      attrib +h .
      2⤵
      • System Location Discovery: System Language Discovery
      • Views/modifies file attributes
      PID:5780
    • C:\Windows\SysWOW64\icacls.exe
      icacls . /grant Everyone:F /T /C /Q
      2⤵
      • Modifies file permissions
      • System Location Discovery: System Language Discovery
      PID:3612
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:300
    • C:\Windows\SysWOW64\cmd.exe
      C:\Windows\system32\cmd.exe /c 245741794627004.bat
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4464
      • C:\Windows\SysWOW64\cscript.exe
        cscript.exe //nologo m.vbs
        3⤵
        • Executes a VBScript file via the Windows Script Host.
        • System Location Discovery: System Language Discovery
        PID:4752
    • C:\Windows\SysWOW64\attrib.exe
      attrib +h +s F:\$RECYCLE
      2⤵
      • System Location Discovery: System Language Discovery
      • Views/modifies file attributes
      PID:1636
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected] co
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:6444
      • C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
        TaskData\Tor\taskhsvc.exe
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:6676
      • C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
        TaskData\Tor\taskhsvc.exe
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:2880
    • C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c start /b @[email protected] vs
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:6456
      • C:\Users\Admin\AppData\Local\Temp\@[email protected]
        @[email protected] vs
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:6504
        • C:\Windows\SysWOW64\cmd.exe
          cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
          4⤵
          • Executes a command shell one-liner
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:5888
          • C:\Windows\SysWOW64\Wbem\WMIC.exe
            wmic shadowcopy delete
            5⤵
            • Reads the TCP/IP host and domain name from the registry
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:6092
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      PID:6964
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • Sets desktop wallpaper using registry
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:6976
    • C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "bzfxgnglyio101" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:6984
      • C:\Windows\SysWOW64\reg.exe
        reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "bzfxgnglyio101" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
        3⤵
        • Adds Run key to start application
        • System Location Discovery: System Language Discovery
        • Modifies registry key
        PID:7068
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:7036
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:5576
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:2832
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:2548
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:3600
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:3464
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:2172
    • C:\Users\Admin\AppData\Local\Temp\taskse.exe
      taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
      2⤵
      • Executes dropped EXE
      • Suspicious use of AdjustPrivilegeToken
      PID:7056
    • C:\Users\Admin\AppData\Local\Temp\@[email protected]
      @[email protected]
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:7024
    • C:\Users\Admin\AppData\Local\Temp\taskdl.exe
      taskdl.exe
      2⤵
      • Executes dropped EXE
      PID:7156
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4188

Network

        MITRE ATT&CK Enterprise v16

        Reconnaissance

        Resource Development

        Initial Access

        Execution

        Command and Scripting Interpreter

        2
        T1059

        Visual Basic

        1
        T1059.005

        Windows Command Shell

        1
        T1059.003

        Windows Management Instrumentation

        1
        T1047

        Persistence

        Boot or Logon Autostart Execution

        2
        T1547

        Registry Run Keys / Startup Folder

        2
        T1547.001

        Privilege Escalation

        Boot or Logon Autostart Execution

        2
        T1547

        Registry Run Keys / Startup Folder

        2
        T1547.001

        Defense Evasion

        File and Directory Permissions Modification

        2
        T1222

        Windows File and Directory Permissions Modification

        1
        T1222.001

        Hide Artifacts

        1
        T1564

        Hidden Files and Directories

        1
        T1564.001

        Indicator Removal

        1
        T1070

        File Deletion

        1
        T1070.004

        Modify Registry

        3
        T1112

        Credential Access

        Credentials from Password Stores

        1
        T1555

        Credentials from Web Browsers

        1
        T1555.003

        Unsecured Credentials

        1
        T1552

        Credentials In Files

        1
        T1552.001

        Discovery

        System Information Discovery

        1
        T1082

        System Location Discovery

        1
        T1614

        System Language Discovery

        1
        T1614.001

        System Network Configuration Discovery

        1
        T1016

        Lateral Movement

        Collection

        Data from Local System

        1
        T1005

        Command and Control

        Exfiltration

        Impact

        Defacement

        1
        T1491

        Inhibit System Recovery

        1
        T1490

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OfficeIntegrator.ps1.WNCRY
        • Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WNCRY
        • Size 5KB
        • SHA256 8d95a018a1e7414ae45940b3694ede00d561f835e2ee68707ea094528e7a60d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        stream.x64.en-us.db.WNCRY
        • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\CC7EE9A3-1636-4E29-AD87-CA66658FC4CE\en-us.16\stream.x64.en-us.db.WNCRY
        • Size 438KB
        • SHA256 638ece29ad36d0f728300ad78a962ee2b8d0fd4cf00ce030bf6bcdce25264f3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        stream.x64.x-none.db.WNCRY
        • Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\CC7EE9A3-1636-4E29-AD87-CA66658FC4CE\x-none.16\stream.x64.x-none.db.WNCRY
        • Size 1.8MB
        • SHA256 84f5d4a930f3c478d323df8fd4c5e64dc67cc7d35a285b4e771a86f8037ea843
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        background.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY
        • Size 126KB
        • SHA256 94e212d6ca49574b6b76e3b5c0ccbc5fbb43dc63b25c626ab07882f24d8dfa1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        device.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY
        • Size 43KB
        • SHA256 5929cceff078b07dc3f1dac6fe13690d5568c19d1843a7a190415f3c86a328e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        overlay.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY
        • Size 28KB
        • SHA256 8f44d0b2050d9041833e8d5c3c04a8d0de5ce6edb1f2e65aae3133f24799ca8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        superbar.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY
        • Size 38KB
        • SHA256 22c68550dc341316739af239e4035cfc7e4b2773fd3a3d3cd01340dcbec54673
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        background.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WNCRY
        • Size 126KB
        • SHA256 7c54b8b5a0ae61183368a2bcf38972bd33a712dd35929102e3765753ee318800
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        watermark.png.WNCRY
        • Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY
        • Size 28KB
        • SHA256 23ba047e4d189b6c091d9de736f1a1833743daeadab5e75ed4d20715d58ba94d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EventStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WNCRY
        • Size 108KB
        • SHA256 2bcb83e6d4be43de38ce0507bf93e204d9bf29e018e0dbf18fefa929767d6db8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EventStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WNCRY
        • Size 48KB
        • SHA256 d7460112f3e8769d827281ccc70b6d6fb03e0497f4eb494431094f71d55127e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EventStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WNCRY
        • Size 20KB
        • SHA256 8fe1e54f10cb32901c17fb1791bd95d232cd7a842a14fe8a9526040aaaf91722
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        osver.txt.WNCRY
        • Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WNCRY
        • Size 296B
        • SHA256 515b2cf66f390f9e70e52c2311e81fcf801282fe961e83e73c1a05c790c0cab5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        qmgr.db.WNCRY
        • Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WNCRY
        • Size 768KB
        • SHA256 ff6a72be6e4ef63d57cd8a5ce7eb52900555e654f5be2c5a1573f119af155c95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PropMap.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db.WNCRY
        • Size 76KB
        • SHA256 26ddfef72979ccd479e784ec8f0c3b7bcff2e099d284a12978cfdce5603816f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SecStore.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db.WNCRY
        • Size 36KB
        • SHA256 201ce0ff3516ffc5c78219bc3e30c6c39acd1f973195487aa65364eb71c57877
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Windows-gather.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db.WNCRY
        • Size 44KB
        • SHA256 6faca30f75530512dba129cc3f696a7b8401834b46e647b047a12c0363b58cd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Windows-usn.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db.WNCRY
        • Size 4KB
        • SHA256 e73ca1a06d1149bb4951965fe7da51d01dc2137c23bd3f138d43129a795144b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Windows.db.WNCRY
        • Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db.WNCRY
        • Size 440KB
        • SHA256 8cd02f727effe6832427ffb5e48a144a45e4a7273e202a0ad21dc5083b1a1149
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RegisterInboxTemplates.ps1.WNCRY
        • Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WNCRY
        • Size 904B
        • SHA256 d246f28d9187c402f769a515c2c15d08671d09d8b8c5fcc0b1f46d2d3a07a0cf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        guest.bmp.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WNCRY
        • Size 392KB
        • SHA256 e11825aa2532d5536282dc2e4958fe7cfb384a7a4c2e9646bf101bf4c4b8b1b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        guest.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WNCRY
        • Size 2KB
        • SHA256 6b501eec3afe152acaca922bffe23c89858c3be3e3bfa447566457a44e6f6bcd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-192.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WNCRY
        • Size 1KB
        • SHA256 fd0be187d6f1967a73597e4423ee7a7ed0b57849f844885412cca6f94acc3056
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-32.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WNCRY
        • Size 472B
        • SHA256 b46453172fc8c6852dc97ea5f8ca595a36393d9f5cc190a1ca3c5935ece72d3a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-40.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WNCRY
        • Size 504B
        • SHA256 7bcb27ba4e2a2befa7c042e4aaa3dcce153879a366b2a21b60c64a44506904ed
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-48.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WNCRY
        • Size 504B
        • SHA256 e8b598ec92459ca2c62155a437a74a1d5e605573ccff2d500c31070a5effb96c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user.bmp.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WNCRY
        • Size 392KB
        • SHA256 6f5f78128bfb77fc0a983b0fce75d84fa7dee04fe9c5e70f6f3e17846bf08a19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        user.png.WNCRY
        • Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WNCRY
        • Size 2KB
        • SHA256 a0a9128c87a3a5eee90b2e836bbca2033074f58023e4cfd7d31fcd0e17cd3e4b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cversions.2.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WNCRY
        • Size 16KB
        • SHA256 a4c3c6a59740450ee77ef8ceaaccc99914204e559f70becfb7b5baeb7d10af78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
        • Size 297KB
        • SHA256 0cda7524747171603e8f7e5df4393f9d92e37be02f3b2782f884be4987611fc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {786A757B-D250-4B85-9BA7-49FCFB41FABD}.2.ver0x0000000000000001.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\{786A757B-D250-4B85-9BA7-49FCFB41FABD}.2.ver0x0000000000000001.db.WNCRY
        • Size 1KB
        • SHA256 48a86a82db72ef69e9b43b1fdbb5f379e0b9de48926c520ed0d9bee2d71bd084
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        {DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
        • Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
        • Size 639KB
        • SHA256 df3f2e1f4cd3dcc54be182bba6a0b01ff376315243e7b2a419b7351a1b173fe8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ActivitiesCache.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WNCRY
        • Size 1.0MB
        • SHA256 0fc3fe39efe2047f95b7a3535bfb1e6d19c021b3a59cadc68e7d655df676bf4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IconCache.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\IconCache.db.WNCRY
        • Size 14KB
        • SHA256 d3d0bb5d2500133cd027c857dbc33569e5543688cc9963e1a9be3f996462a6e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EdgeEDropSQLite.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WNCRY
        • Size 32KB
        • SHA256 e3ea001ffb4bfa430131429b1e6c25eead6bcfdc3d7976d6a303bbd8cfaf100d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EdgeHubAppUsageSQLite.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WNCRY
        • Size 32KB
        • SHA256 c3d826cc596a0646d19010de667a35fc52d91130f358671c2fde76249a209ba9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        128.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WNCRY
        • Size 5KB
        • SHA256 ede4d3ce88ea4e6e04a5d48e785a2045739dff8e05bf9bba5243591d1d0c8b8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        offscreendocument_main.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WNCRY
        • Size 130KB
        • SHA256 07f02bd4626e6b8082eadbad6fca39a50b56b8094213872d6224664b1fc43c7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        page_embed_script.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WNCRY
        • Size 632B
        • SHA256 5facb6c3380a75dc897e4f1aefcc1b8654f6c27f4b5314073f2b6f5c518ed75d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        service_worker_bin_prod.js.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WNCRY
        • Size 136KB
        • SHA256 8da2e379559f28e59e1c4c2b056d47389e0cc962159df76971d0ee6645ee50c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        index.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WNCRY
        • Size 664B
        • SHA256 8a0ca9396c6a05f343cd4144e21e1b73795b4342982edb577375b83d60b3189b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        heavy_ad_intervention_opt_out.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
        • Size 16KB
        • SHA256 b04e61ec88f8e7c4a927d1ba27814c40ce9558f67b999975d2fe5cd7708226a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        load_statistics.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WNCRY
        • Size 80KB
        • SHA256 bac5f3bbf063f6fef46f2ee73a76913c70bcd368c91806c30a53bb0d8ad076cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        first_party_sets.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WNCRY
        • Size 48KB
        • SHA256 ede5acaea24a2fb5170a288fb2c23a1d3a38de523d06f6ff678b129c95097ad0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        brndlog.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.WNCRY
        • Size 6KB
        • SHA256 a3cf923592b18d492f71b41603bb42391d76ed0d412cb6693f53ff0018c50a51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mip.policies.sqlite3.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WNCRY
        • Size 36KB
        • SHA256 6451ebf17bc264c966a9b3abe248bb4557b3600a3cbb5b48f68b9340b7267013
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        excel.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WNCRY
        • Size 24KB
        • SHA256 aa0a5a97e26361efb2eb4463da3a2c6d42b31e7382f72a256d13bcd07579021e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        officeclicktorun.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WNCRY
        • Size 24KB
        • SHA256 27f593b46aa577b4ff318ca310a8f066bec39c543f7604920f883a09bb99987a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        onenote.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WNCRY
        • Size 24KB
        • SHA256 7cc48a80a43e120f80014648a4afd8083c0554093119ad2a377c20352dd7cd94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        outlook.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WNCRY
        • Size 4KB
        • SHA256 b080aab200d1f2e1979e7e182b59ae2435ac9ef10d160d135229c460eb511504
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        winword.exe.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WNCRY
        • Size 24KB
        • SHA256 9a866c4bdcfb0363474c5a085333b744f58957d8be6e0f2c7a6443c5b1d4e483
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppBlue.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WNCRY
        • Size 5KB
        • SHA256 28b2e275063388f5a0122f231a1e5f71ec0b296f6b4f8001d490b90eb8599c81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppErrorBlue.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WNCRY
        • Size 7KB
        • SHA256 879924df73cec9c977c866b6473c03a1e8ef1978204dff5d9d7433ff94f9676a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppErrorWhite.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WNCRY
        • Size 8KB
        • SHA256 82f82740cb6371fa214f541ca3d433e0ee5fc551922188999977c699b5335959
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppWhite.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WNCRY
        • Size 3KB
        • SHA256 5614ce3e38b7cd2b76cfab23cdfcaaa93fe4fe8f383cf1985c3a907cab8abbe7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        AutoPlayOptIn.gif.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WNCRY
        • Size 374KB
        • SHA256 b171878938c0e06537e8f73f25289606f053df1550e609732739570515076480
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AutoPlayOptIn.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WNCRY
        • Size 10KB
        • SHA256 a8e4b7bd08936633ddd4cc650c30c4dcafe21f0aec3b02191c99ca5392a52e2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CollectSyncLogs.bat.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WNCRY
        • Size 6KB
        • SHA256 89fddd294f4002fe65692af27fd28863388d00e1525ae8627adad52f074c6d33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ElevatedAppBlue.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WNCRY
        • Size 7KB
        • SHA256 cddd1cde999fffc3a65c86b0800e93ed751c5b9fb7878cd619e125d4eb3c16db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ElevatedAppWhite.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WNCRY
        • Size 5KB
        • SHA256 d19e4bb26a51a3f07830131418edb747fd9cb48023b03777bd0e60c6ed90e7e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Error.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WNCRY
        • Size 7KB
        • SHA256 5d34ce27fe4a14242f62cff24f2e82cf02ad9cf061106c9c80b20e3868a02a43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KFMHeroToast.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WNCRY
        • Size 15KB
        • SHA256 aa6adfdc599cb054596c44c34e0f394129c47de4fa5c3c7848ea56dee993788f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KFMLockedFileToast.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WNCRY
        • Size 10KB
        • SHA256 0e6841d14eabdfb560fb2b93abd9a1dcb8066865de7e3f0b35fa2e80a1cd97ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        KFMScanExclusionToast.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WNCRY
        • Size 10KB
        • SHA256 0392a5e43f8d00dd1d3125df94706b28e293bd2c2c982cdf9341ac069a9cda17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneDriveLogo.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WNCRY
        • Size 4KB
        • SHA256 56bb24ae48f8cf4810063431405b9a2b52cb9a082e976c8b308cf479334795af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QuotaCritical.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WNCRY
        • Size 8KB
        • SHA256 6f563a0f50a4aa6efb57d68ee2d105ed96328511ed6ebdf7d5fca325235a19da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QuotaError.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WNCRY
        • Size 9KB
        • SHA256 a4496961b55776c0fbccf239bbe4bdbbf111dccb52cc4e00633bcba9d969bf9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QuotaNearing.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WNCRY
        • Size 7KB
        • SHA256 2cbe653300913654afd408ae44e772bcd58f0973336e55eb70180e4b7d981ad7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ScreenshotOptIn.gif.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WNCRY
        • Size 238KB
        • SHA256 8c7dd78af5c8317b2c64e084c8498130d76f47c4514b3badff66a7011c994792
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ThirdPartyNotices.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WNCRY
        • Size 48KB
        • SHA256 791d128056d7582e66f68c2d1eae012662ec0772dfe7cf40ec5719fbef48170e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Warning.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WNCRY
        • Size 2KB
        • SHA256 ee4e267a4edb967afe25fe7d14c599b6c75945591c401d6f66e6c39f47fe2a09
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        alertIcon.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WNCRY
        • Size 1000B
        • SHA256 465857fcf2f4346b622e4edd6a64781d25ae5637bc9a6a91c289d6e127e16341
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        acmDismissIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WNCRY
        • Size 2KB
        • SHA256 7664c708b4ef42bc2e43b75f6ef839160bfeb168fcb11cd6b272af2d4aec2c19
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        blurrect.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WNCRY
        • Size 1KB
        • SHA256 95c23560b6c6bef16e7ee1620d48ca0291ddced65ce8efc93cca05b70ddb698f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_finished.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WNCRY
        • Size 504B
        • SHA256 8f5e8e90d4fc23ebc164d12bea8faf8feec741f7c7e5291a4120226a99587d2c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_hovered.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WNCRY
        • Size 680B
        • SHA256 8bf811b2d218a673b8bd50f650a2456176ac5eb8f1180bbb65c055a15f417573
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_in_progress.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WNCRY
        • Size 680B
        • SHA256 b70f35ce2b15bf81bc4930d94881c1ebd471af6bcfec708645cd2623efd6c09c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        checkmark_selected.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WNCRY
        • Size 680B
        • SHA256 62021537d53ab68ba1689652791d5cc0fd077798dcf0af462e6429e70185c27a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        chevron.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WNCRY
        • Size 584B
        • SHA256 116a8ef4e3cf06ae227491c7e93e2c27961683acd5f70d63c5693543cf22b1e1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        chevronUp.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WNCRY
        • Size 552B
        • SHA256 5ba33a2c9eee1d70743ac570f70f091ff794f3c40c815be62099e39658835b4f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cloud.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WNCRY
        • Size 1KB
        • SHA256 b2d90b483ffaeb27ca3f6ff2bbba6a8c9c3adabce327d04060dfe40d12ff4b54
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        done_graphic.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WNCRY
        • Size 15KB
        • SHA256 b6054c31543bec406ea857afcdbced96b8e31a2fa6b4fbf68a31c5613da6d4af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        errorIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WNCRY
        • Size 1KB
        • SHA256 d78709bee6eb470299a698009421de655cceb00a54a70ed85ff9cd9688e06bc8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        folderIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WNCRY
        • Size 1KB
        • SHA256 7da29273976abb1b640a703433faca3a8f9015c876e64e6817c0a8320a0f29c9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        folder_image_desktop.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WNCRY
        • Size 2KB
        • SHA256 18b978434ca134e1ed5c30137172e6c7d684a6f68771d1f6f1f5d2d760a81443
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        folder_image_documents.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WNCRY
        • Size 10KB
        • SHA256 a96ed6e5df193706f8b2b50ba970e2489692fd680e4464b51f028bc344ca8dd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        folder_image_pictures.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WNCRY
        • Size 7KB
        • SHA256 40b154e55dbbc7674bdb34a31b118fdc00a9bbe8a23d395a044601d641d4c9e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        globeIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WNCRY
        • Size 2KB
        • SHA256 470b3a46622999cbcba555b2721e3f99e9d5a57414af56d858f1f8e0845860bd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iceBucket.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WNCRY
        • Size 6KB
        • SHA256 bed6759b58057d74e637cafae41975bdb7cc47f7078dbed61103f681a5b50950
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        infoIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WNCRY
        • Size 1KB
        • SHA256 9b626d645a90d610c91626a0147798b3b03711419f96c376b401d9712c8603eb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        kfm_folders_image.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WNCRY
        • Size 20KB
        • SHA256 cd70db2c7bd8925417dd37ff13867d85efba0e51b8afc87ae2ac9705ea007adb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        loading.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WNCRY
        • Size 1000B
        • SHA256 069e3c577eeb5417d7f09e7e38463ce67d445e6ee9e95545dd1f083ce4db57c8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        loading_spinner.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WNCRY
        • Size 712B
        • SHA256 91f0fc333b3be3d0128d8e08c9e557477ace5fab9ca38a3bfb66cbc157b44b0d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        onDemandFiles.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WNCRY
        • Size 7KB
        • SHA256 c90470d8cf35ce83b45fb326171fae87e007fb58daa86c8020742b2dd0d2e8e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        onDemandFilesDehydrate.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WNCRY
        • Size 9KB
        • SHA256 214e781984277dedec26f76dce2e24a761eb08901536ad32112ecb3d0c6a0ffa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        onDemandSelectiveSync.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WNCRY
        • Size 2KB
        • SHA256 4a6b007240630f708691469a1673e45dcfe64249d12d1c40956ec62afc1d0018
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        overflowIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WNCRY
        • Size 1KB
        • SHA256 2f374ff643ffa01516b6150aea22cbd33c14b8be135ffd64968038620a0a7809
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        overflowIconLarge.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WNCRY
        • Size 1KB
        • SHA256 1168d2ae2d1a57ca7eca1c17d9eb7986e7e6e6e31919b8c9d6b00a6fb954a700
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        partiallyFreezing.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WNCRY
        • Size 4KB
        • SHA256 2b543ecd8e4f880b01ba31b681e60036b69cd94de5f634dd27a86e58adbfabf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        paused.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WNCRY
        • Size 600B
        • SHA256 137dbc3d37d88b34c500a03ea21fe7f19ecaed97663c4ebf16df2da3a3ffda60
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        premiumIcon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WNCRY
        • Size 664B
        • SHA256 2b215f7bfcee6a4814efa2324a0f947cfcd13c2bddfbc7e76a955aed9fba5ab5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        recycleBin.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WNCRY
        • Size 3KB
        • SHA256 11d9d258e8b5f26eb2770c179ed4178e0daf7ca76dbe175e175e9dff912fcf2d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        shield_icon.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WNCRY
        • Size 1KB
        • SHA256 04974ab51078fe76eba32d07016376cbe585295796d2044e617e483b8e05154e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        signIn.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WNCRY
        • Size 10KB
        • SHA256 00a4d4f0f884c374514d386ceb330980c9a5888fe23e10964edcae2fbc3f9039
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        stackedIceCubes.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WNCRY
        • Size 4KB
        • SHA256 a1d2405054211fd8079101c9ae9a2a67bf7d22a6c39f948d94f728490e7c5504
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        warning-symbol_grey.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WNCRY
        • Size 536B
        • SHA256 3a0a65a3a1ec050eb174e2cae00a8042d33aff51041880c9bb5befb36856efd0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        waterGlass.svg.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WNCRY
        • Size 2KB
        • SHA256 83a8569da0d4a41c8281b24914d3aa8ce315cd8d5e49841c995cf6dd7089e2ca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WNCRY
        • Size 936B
        • SHA256 1147f041ddb45c3ff86d22e233db8d587cbf2a82805bf5269a84217927ef13ad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WNCRY
        • Size 1KB
        • SHA256 e710b3ecd18ce47ec2dad6279ceb28088dc2a26b74f6a21b0c00ace1d0c06878
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WNCRY
        • Size 1KB
        • SHA256 f31885c836cb926236c2ae070b7b0ebca3a0249d7194c65ecbf38ae96a55cdd0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 309669727f7470574e2312795a07647ee993f82c7ff5d43e030b2567f58e96b0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-black_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WNCRY
        • Size 3KB
        • SHA256 7688773d6607bd98b9a2b65a7f904e94e16b10e323b8cf881e6b9a44052f5042
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WNCRY
        • Size 952B
        • SHA256 26cc9e48ab5f286289737ce2474894487de86fd53ef7f98a7af893ab022011ff
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WNCRY
        • Size 1KB
        • SHA256 32c1202f42e21723ccc3060542a441971c7bd144f539a7a1c17ecdd8915db46c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WNCRY
        • Size 1KB
        • SHA256 c74858acddd4a63b3920bb7daf10c337fdcd295a51cf6ae04988817dce68aa76
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 e3963b8c6693c09cd8a20eaac3a20a6b1d738414dbb2b81329fa9b6f38963b59
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.contrast-white_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WNCRY
        • Size 3KB
        • SHA256 d1c4dd7ffbc1a0e4c4de2f01998e282571334b2c38864e834c6450e82edc44b9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WNCRY
        • Size 936B
        • SHA256 d7348f2230702e5e7f0281726b394d366aa3fba49b470e45d90012b1d84771da
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WNCRY
        • Size 1KB
        • SHA256 89e5e4c8497505b37eda01dd44c7ebea2ef21ac3bf96532c1c97a62393ed97dd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WNCRY
        • Size 1KB
        • SHA256 ed1f7d9ce00f1b7d9f78291f5b9596ef180355c2b9701a4848158ab4cd7b69f8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WNCRY
        • Size 1KB
        • SHA256 7b4028a999d2a5dc70647d25ee3dd3e7d0d6c2645bbf7f6ae0d1d85abf71c2c5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveMedTile.scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WNCRY
        • Size 3KB
        • SHA256 2dea536c9985a16aaf1e4e59054d4023634ecbd3ec8eb7445943593515ce32f4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
        • Size 696B
        • SHA256 dd9d0d34a5f3aa5fe36794e53a606ffce84c0be06c18d8c8cf7afa7edf77367a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
        • Size 808B
        • SHA256 9ab825ace30a3b178f0c0bf3b0ce546008fb3bea876c5c9825a5a16bbc107c59
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
        • Size 872B
        • SHA256 2fcb8b621ad27d81515acf7d5210aad53598ef1540ff644be93cec8f4ee03c1f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 4f24b002467b1649bbb4c1fc7faafdc8175c61abfd2d9c3cab02133789df9f80
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
        • Size 1KB
        • SHA256 8da8e631d48304a65b1500de84f8e27a668c3ee56bb4182a26e39662b5f1f8b1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
        • Size 696B
        • SHA256 f7a9c9ccd75abf4707ae0be1ff6b4537e9dcd175eef7b272c6cccb538604aaf9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
        • Size 824B
        • SHA256 b1f5d149d3d5450c83d6c8b2c6325ed5fde72564e7996a4586b0395fb7e5b0d7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
        • Size 888B
        • SHA256 bbc2bf505f60cac12b86741c4961cf4c7dea47513b0bf8a317cb863859ca5365
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
        • Size 1KB
        • SHA256 315ec777e347b975df049bff9e167ee64a462820ea345951ccf676c266c72f49
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
        • Size 2KB
        • SHA256 8cc2788c55ac4091d1ac87c7a7c1ee7a66b9b01e5146d31af3d4aa10e6c25d0a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-100.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WNCRY
        • Size 696B
        • SHA256 48feee9710ba4742b26f883e65c86a5a68dbcaee1201e23ad44cdda5a004424e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-125.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WNCRY
        • Size 808B
        • SHA256 563123a2c5c8b155fd7899ad94366f29300dce6eac73072784c6c2198bb8a4ab
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-150.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WNCRY
        • Size 872B
        • SHA256 70a748ca5ba33e2fc362ca8d2dc25352a865f8f6b272e9032d21adf359e3e71e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-200.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WNCRY
        • Size 1KB
        • SHA256 eaf1e486c8591330b8ec2b8eec46c14607623d2295b6c87ff13a7d17d96ad88c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneDriveSmallTile.scale-400.png.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WNCRY
        • Size 1KB
        • SHA256 0173af47091020081d9e31b45d7b212b363ca6732fb0ec903fb7aefbb066103d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cversions.1.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WNCRY
        • Size 16KB
        • SHA256 21ebe659d6565844264b20c94a79770d502439a1483a8b647228ef819657b2ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cversions.3.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WNCRY
        • Size 16KB
        • SHA256 c61f7811efd85e76f053828c59e6223f7f2d87b270de72be6e7fcf5052e9bcb9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
        • Size 423KB
        • SHA256 97afde74372210c2737894ddee5c4e941194d1b33899bf540da4922660c66be8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001b.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001b.db.WNCRY
        • Size 90KB
        • SHA256 65b89f90eb409b9d40849d777acaf4387ce348d6751b3ccd0502b7e9cdbd3a63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000012.db.WNCRY
        • Size 64KB
        • SHA256 a9dd2ea45067dc01125231ec5c5dee52c7e32be8dd6067ad17f6a44fd6382434
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_1280.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WNCRY
        • Size 312B
        • SHA256 023b82345a7393b42351b0c3e7a2daca7836c5f960124dada1933cff6b40a8fa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_16.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WNCRY
        • Size 1.0MB
        • SHA256 2d2790fc07c4bced578655866863fd8bec581d81ed2c00e7165465c1f7f1aa30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_1920.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WNCRY
        • Size 312B
        • SHA256 5407dce08d0632eeefd3cbad9f6c49a79a7d0fb7d114f3e2a38be37c7873e6cf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_256.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WNCRY
        • Size 1.0MB
        • SHA256 a59e2f47854e142f311db290df19ee20b8fdd8ebb533256a0ad3574df11a8782
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_2560.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WNCRY
        • Size 312B
        • SHA256 798daf04ef063cb35e8ea8ee61a9fcd2c33559f12aa2d178f7684b0e9362e8e0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_32.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WNCRY
        • Size 1.0MB
        • SHA256 cc7cb90ac9c517451a06e22e062c130285fb48d101dab6c6a0fe54bbafced565
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_48.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WNCRY
        • Size 2.0MB
        • SHA256 b918f927f2c3197d86cdc5feb1d9fc74038b51429812e8ab575100f09ab179b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_768.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WNCRY
        • Size 312B
        • SHA256 aa484ff4eff7aa584f6932aafa8f7de759efbe6d1b5da255d1e6d5eada71b28b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_96.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WNCRY
        • Size 312B
        • SHA256 ff55898223a4e9fdcbf2b8f39dae03f8a0fdcb0cac9642400773590b8ea96b7b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_custom_stream.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WNCRY
        • Size 312B
        • SHA256 0de165eec0252e74500f950e96172d34126cd04b530a52ea0889287641822aa3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_exif.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WNCRY
        • Size 312B
        • SHA256 1af91cce1ca5cbda30e648b2b27cf56db9d6fc2e9eb1c3f14936b4549aa0c343
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_idx.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WNCRY
        • Size 28KB
        • SHA256 f3afeffae66d3680a2a5fc87908b474a23272619d2f1e3766d23a06006ac2b90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        iconcache_sr.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WNCRY
        • Size 312B
        • SHA256 d2a40c01dda65dce2025c077d473466e0a53fb6a979b9165d0f4c20c30be049b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_wide.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WNCRY
        • Size 312B
        • SHA256 25976dbadb7f7e6082d69e8b5c0afb2f4594cebb924eed15e65f9ddc76f9331a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        iconcache_wide_alternate.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WNCRY
        • Size 312B
        • SHA256 d352af491ad42a345fe04a696a746f71104efa4556e2244531161e69fc2577f5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_1280.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WNCRY
        • Size 312B
        • SHA256 d415f7f4c60c9afc3ddc8bcfad1a46426e2356eac8cc3ce10d0a567cf0a871d9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_16.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WNCRY
        • Size 312B
        • SHA256 192028ba89c3c9f5a00f61836da6ef3d9dd0d2b7d88b45cb88cdde96edf2aa15
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_1920.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WNCRY
        • Size 312B
        • SHA256 9b059ce5f54526b0e80490e06df28da2d144818799798e9e1da88284bea24dd3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_256.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WNCRY
        • Size 1.0MB
        • SHA256 ff475959b236d83a1aaea398341f532e4cd30b94a1efdeb09aa4546b01de6395
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thumbcache_2560.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WNCRY
        • Size 312B
        • SHA256 123d1df774bdf6c6cbcac8b925bf362fb2284c6488950738f2320214f4ee957d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_32.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WNCRY
        • Size 1.0MB
        • SHA256 6a3ac40c1c97574b972f710d0726db1fbff2aaaf63a0b7f0207e2204ade55a23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thumbcache_48.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WNCRY
        • Size 312B
        • SHA256 2910c4d618e81dca15307b08a780344c29ae7a72202ccb59bb401a6730fee3e0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_768.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WNCRY
        • Size 312B
        • SHA256 c652c1af50bbf2c5901f3f630770513d5c8107e3bbac555e9ae8a5713f1a1702
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_96.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WNCRY
        • Size 312B
        • SHA256 ba893d2e953d693b3aee09f660dfca2039c91cb2c6628a428b539db4c6cb2225
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_custom_stream.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WNCRY
        • Size 312B
        • SHA256 6557cd14ad5fba1e077b0b85f5768c2749986ddbd7a5679f9adfd05951de450f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_exif.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WNCRY
        • Size 312B
        • SHA256 dc7bffed3a89cb8c7290f94214321f64aede712578c18170ede531349f31d1d3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_idx.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WNCRY
        • Size 7KB
        • SHA256 711e5ae9b8b86e5aae7c4a6c4e5d78f274f39cf8d7a365322bc5856ea7c59a88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thumbcache_sr.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WNCRY
        • Size 312B
        • SHA256 6d8f7a3a654265f7da1f775c5acc361a12e1f44e8b0fd73739ce0f0a2ff2e85f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_wide.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WNCRY
        • Size 312B
        • SHA256 e4471a3583676b9ba0530122577a7f0bdcfee1f79893582e5812e0d2b8f54c0c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        thumbcache_wide_alternate.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WNCRY
        • Size 312B
        • SHA256 4e1b99f84e2d214cccf88c0e6327f0662b5cad97d6f27b269c95073fdd50bf3e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        {8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\UUSZXXV9\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
        • Size 6KB
        • SHA256 f8b3cba94e6532c03c6e61dcfd4bdd23af557ef37d96f105ae6c2e070b2aed3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpndatabase.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WNCRY
        • Size 1.0MB
        • SHA256 eb7a54562450df86059b6d252b56dd17c0a8dac9dd1204689578a4d797824833
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\appsconversions.txt.WNCRY
        • Size 1.4MB
        • SHA256 a9b6761073fca89f1f3cf6d839fe03cfa8d999adaeea73e6d9a424068ee59052
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\appsglobals.txt.WNCRY
        • Size 331KB
        • SHA256 c31673c309aca9d64b1cede76518bb3d2ce66b759d4d8f3f270d4128553450bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\appssynonyms.txt.WNCRY
        • Size 374KB
        • SHA256 59031aae899d7651f49572b58ff29042aba9cc7957b0a65c9e168a6904707f34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\settingsconversions.txt.WNCRY
        • Size 520KB
        • SHA256 2c6c0a6c64bb8275ff410f30d77eb805df508e3ce73d1252fe075dfd8003b7d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\settingsglobals.txt.WNCRY
        • Size 61KB
        • SHA256 ae8184b288bb5b92cbe049262363c91ce99d3c0b78e2cb5dab698f354f611310
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{5a077a6a-3245-49e5-b409-34385052825b}\settingssynonyms.txt.WNCRY
        • Size 125KB
        • SHA256 e0b96adc5c92b2d164ae5900e3c75f9454ccbfd97a384e28bea345ba90877b71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\appsconversions.txt.WNCRY
        • Size 1.4MB
        • SHA256 7b61e45124c762cf704e2a2e994e59b9e4bee494219b1a34e7e8320584fe08e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\appsglobals.txt.WNCRY
        • Size 331KB
        • SHA256 f2da9b2dad051bea9b5737aa557989b6b73ef72abfd3c9ab71627cfb1122e9f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\appssynonyms.txt.WNCRY
        • Size 374KB
        • SHA256 37aa4c1ac7d727f4b81820fc1a892b2dfe961897dae043f2d8197ff66a21568f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsconversions.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\settingsconversions.txt.WNCRY
        • Size 520KB
        • SHA256 ff64b40b4fb8bf06e9e9e30b2a984778e78d41468aeee8e079b255ed0684d422
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingsglobals.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\settingsglobals.txt.WNCRY
        • Size 61KB
        • SHA256 52698d60c8368d51e5b807c652f4c81621f36288d4bf02e40c3cf13097dd16a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settingssynonyms.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{c6d8aa17-770f-44d3-acc9-0c128fbe7f18}\settingssynonyms.txt.WNCRY
        • Size 125KB
        • SHA256 7f7d67fa668b433f380ebe142487cf7ede82b450e4f935ab42b35fdaa23e13f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AppsIndex.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db.WNCRY
        • Size 1.0MB
        • SHA256 acb1e0a74095e7c51bc1010c9f79a071ca1802aac05c7d8dd89eb330dfeabcc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        settings.db.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db.WNCRY
        • Size 1.2MB
        • SHA256 387a5a83bbadb5f86640d5bb44c4540afe14787963255b07830f2e80c08422ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SettingsCache.txt.WNCRY
        • Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt.WNCRY
        • Size 575KB
        • SHA256 0404babf8be6be833ab983b7f966a83b09e886cf436b521ff932af36712941c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        00000000.res
        • Path C:\Users\Admin\AppData\Local\Temp\00000000.res
        • Size 136B
        • SHA256 9c3e78c5a2d9d46c65a8500120f548f14c019f422e355fd4ae242522b0df6284
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        128.WNCRYT
        • Path C:\Users\Admin\AppData\Local\Temp\128.WNCRYT
        • Size 24KB
        • SHA256 d719e5d4bdc26832e1479787e94a1f48d59c32f9f49bb1e0fb643c370fe8f846
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        245741794627004.bat
        • Path C:\Users\Admin\AppData\Local\Temp\245741794627004.bat
        • Size 340B
        • SHA256 4e25c23aa5babc853889d3e1e79bb01ca7650837b250314a8d50f2e2c4b6730f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        @[email protected]
        • Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
        • Size 933B
        • SHA256 840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        @[email protected]
        • Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
        • Size 1KB
        • SHA256 67de031d6abbd4ea3c8e491d363ed76b8d3b3215b2d12098edefa209e696757d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LIBEAY32.dll
        • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\LIBEAY32.dll
        • Size 3.0MB
        • SHA256 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libevent-2-0-5.dll
        • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libevent-2-0-5.dll
        • Size 702KB
        • SHA256 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libgcc_s_sjlj-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libgcc_s_sjlj-1.dll
        • Size 510KB
        • SHA256 9aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssp-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libssp-0.dll
        • Size 90KB
        • SHA256 f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ssleay32.dll
        • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\ssleay32.dll
        • Size 694KB
        • SHA256 bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tor.exe
        • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\tor.exe
        • Size 3.0MB
        • SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zlib1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\zlib1.dll
        • Size 105KB
        • SHA256 66d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        b.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\b.wnry
        • Size 1.4MB
        • SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        c.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\c.wnry
        • Size 780B
        • SHA256 e7c95a6e97222b3c93689479cae973c4e19da789a213a7030c3797ca96265c7a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        c.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\c.wnry
        • Size 780B
        • SHA256 0ceb451c1dbefaa8231eeb462e8ce639863eb5b8ae4fa63a353eb6e86173119e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        m.vbs
        • Path C:\Users\Admin\AppData\Local\Temp\m.vbs
        • Size 219B
        • SHA256 7fbdc49f4b4ba21949eca0b16c534b4882da97e94e5ca131cec1629e60439dfa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        m_bulgarian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_bulgarian.wnry
        • Size 46KB
        • SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_chinese (simplified).wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (simplified).wnry
        • Size 53KB
        • SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_chinese (traditional).wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (traditional).wnry
        • Size 77KB
        • SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_croatian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_croatian.wnry
        • Size 38KB
        • SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_czech.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_czech.wnry
        • Size 39KB
        • SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_danish.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_danish.wnry
        • Size 36KB
        • SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_dutch.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_dutch.wnry
        • Size 36KB
        • SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_english.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_english.wnry
        • Size 36KB
        • SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_filipino.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_filipino.wnry
        • Size 36KB
        • SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_finnish.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_finnish.wnry
        • Size 37KB
        • SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_french.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_french.wnry
        • Size 37KB
        • SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_german.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_german.wnry
        • Size 36KB
        • SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_greek.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_greek.wnry
        • Size 47KB
        • SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_indonesian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_indonesian.wnry
        • Size 36KB
        • SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_italian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_italian.wnry
        • Size 36KB
        • SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_japanese.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_japanese.wnry
        • Size 79KB
        • SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_korean.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_korean.wnry
        • Size 89KB
        • SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_latvian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_latvian.wnry
        • Size 40KB
        • SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_norwegian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_norwegian.wnry
        • Size 36KB
        • SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_polish.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_polish.wnry
        • Size 38KB
        • SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_portuguese.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_portuguese.wnry
        • Size 37KB
        • SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_romanian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_romanian.wnry
        • Size 50KB
        • SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_russian.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_russian.wnry
        • Size 46KB
        • SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_slovak.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_slovak.wnry
        • Size 40KB
        • SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_spanish.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_spanish.wnry
        • Size 36KB
        • SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_swedish.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_swedish.wnry
        • Size 37KB
        • SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_turkish.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_turkish.wnry
        • Size 41KB
        • SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        m_vietnamese.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\msg\m_vietnamese.wnry
        • Size 91KB
        • SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        r.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\r.wnry
        • Size 864B
        • SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        s.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\s.wnry
        • Size 2.9MB
        • SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        t.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\t.wnry
        • Size 64KB
        • SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        taskdl.exe
        • Path C:\Users\Admin\AppData\Local\Temp\taskdl.exe
        • Size 20KB
        • SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        taskse.exe
        • Path C:\Users\Admin\AppData\Local\Temp\taskse.exe
        • Size 20KB
        • SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        u.wnry
        • Path C:\Users\Admin\AppData\Local\Temp\u.wnry
        • Size 240KB
        • SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AssertOptimize.xls.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\AssertOptimize.xls.WNCRY
        • Size 286KB
        • SHA256 ac78c523aa636b0139d77da30f756d7301ee8490063b42777afc98327cf63a90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectBackup.docm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\ConnectBackup.docm.WNCRY
        • Size 211KB
        • SHA256 79fb805f766d2928fad7ab6e9808f45214226386caff605df72217746781235a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertToMount.7z.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\ConvertToMount.7z.WNCRY
        • Size 164KB
        • SHA256 59e3a2c9cdb4d68c474039ebc79af1f29abc52cd79845f44f84681a599c1b8fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallNew.ppt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\InstallNew.ppt.WNCRY
        • Size 123KB
        • SHA256 75e89987c874f13676c822004ba0c12c0d43ef3f9c67af33d85bd121d9564c97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JoinCompress.tiff.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\JoinCompress.tiff.WNCRY
        • Size 252KB
        • SHA256 abf8fae1e96278398de0809d571b434c24b1643340ef842b6d37dba3b1e64caf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LimitEnter.potm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\LimitEnter.potm.WNCRY
        • Size 157KB
        • SHA256 997ed3356814c97df90b21cb35ade44eaa16336532fc2aa3bdeaf34c6c276664
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ProtectJoin.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\ProtectJoin.jpeg.WNCRY
        • Size 293KB
        • SHA256 ceb55ba9cf2b255b126aeb3e1af275a080df60725ffb457f97fb3abb6df8961a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RedoImport.xlsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\RedoImport.xlsm.WNCRY
        • Size 184KB
        • SHA256 58d0971b9c573eea16f43a58d173a79b7b50509dcbf3d450d55db69d84b356ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RemoveSuspend.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\RemoveSuspend.js.WNCRY
        • Size 232KB
        • SHA256 8563039462efa6c31ff0a16563321506fa603498399cb1ea12b148f7a1bec914
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RevokeOpen.dot.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\RevokeOpen.dot.WNCRY
        • Size 170KB
        • SHA256 49c35ddffe5d55920ec5e3c304fd2a47312561136bcc7e9ba86fca36d97aedfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StepLock.bat.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\StepLock.bat.WNCRY
        • Size 273KB
        • SHA256 798e70568dff68879e484d3dab657c04220834d132c8cec3581802a7075e814c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SubmitGroup.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\SubmitGroup.rtf.WNCRY
        • Size 102KB
        • SHA256 81a582ef00665d1fd21eb203cc4e57fadd387fece285f121baa599c31bedd606
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnblockUnpublish.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\UnblockUnpublish.tif.WNCRY
        • Size 280KB
        • SHA256 b5327418abc705c2fdda2afbd2fa0fd19c11e77f919ebd40d49a05f62bc480e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnblockUnregister.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\UnblockUnregister.jpeg.WNCRY
        • Size 129KB
        • SHA256 9ba1792c47ce93cf805ad2a6859166311ca793cfbd1cb75a77d2f18870b9359d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnregisterOut.vbs.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\BlockGroup\UnregisterOut.vbs.WNCRY
        • Size 205KB
        • SHA256 840098e6b6f68d8edd9b59c85a13e9df172a5995670aadbddc94010b8a8274ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ClearRemove.docx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\ClearRemove.docx.WNCRY
        • Size 724KB
        • SHA256 0d104beb3809e6d4b3fbcead9de327d5bc0a88c56c13d18e1e1ed543b7c2667a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompareReceive.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\CompareReceive.js.WNCRY
        • Size 639KB
        • SHA256 752a8e9b82cb0bc15766af7324a0aa357217374da666948f7df6f1b2b7037248
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompareSet.xltx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\CompareSet.xltx.WNCRY
        • Size 298KB
        • SHA256 b037dd143c98b50b77158af18215b31eb45be228d6a87a6414c1b7ebab8076c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmExport.pptm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\ConfirmExport.pptm.WNCRY
        • Size 622KB
        • SHA256 0142efd073ba90e59d6db02e25038bdd868d492c8e5b81dfbeead9cf144f7fdd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EnterBackup.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\EnterBackup.asf.WNCRY
        • Size 264KB
        • SHA256 43050e5a1f69a50e0a7dbcd655fb9870b0b49a1b051be40e5061258c909b7c03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ImportSelect.tiff.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\ImportSelect.tiff.WNCRY
        • Size 690KB
        • SHA256 bf0aad6a39fb6395e9dfb83701e0dd11445f3148dd7e3e331dc2be0612b47d3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LimitAdd.wmv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\LimitAdd.wmv.WNCRY
        • Size 537KB
        • SHA256 51c908a0700779125cbc1dbd9923109750d0fcaca2f17c583dc43e3ddeeef6ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OutDeny.xlsb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\OutDeny.xlsb.WNCRY
        • Size 383KB
        • SHA256 9751659beec140135526fe194ccad05fe2a68f53263ada425750af4fbbc1a6f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PublishConvertFrom.bmp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\PublishConvertFrom.bmp.WNCRY
        • Size 520KB
        • SHA256 ceeca8d9c2df0e37d983779c3daa04dd74c6b52cdc883e233df4b2a0ee116c3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PushUnregister.cmd.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\PushUnregister.cmd.WNCRY
        • Size 417KB
        • SHA256 e7651c5c323843a9d8368435686e86faee1087228554cdab12e75d396e669833
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RedoUnpublish.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\RedoUnpublish.ps1.WNCRY
        • Size 656KB
        • SHA256 52578531ca735394a907fce6284b7bd64e667d5d7c37cd135441344230901e3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SetFormat.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\SetFormat.jpg.WNCRY
        • Size 588KB
        • SHA256 6a9586b740b5d493cba614bcc5ed35f50d13c12b339afaa5ab4041b0cbcbf6bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SplitSubmit.pps.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\SplitSubmit.pps.WNCRY
        • Size 452KB
        • SHA256 363a1aa3fbbcd595e25211afb60aa84b7e0bc5e864ae959c41fc2ead0395f33e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UndoCompress.pps.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\CompleteUnblock\UndoCompress.pps.WNCRY
        • Size 758KB
        • SHA256 1ac638a2f81a80ac910dc5f2a4a728960ee99467d67ddaff570db40a1366c718
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisableGet.7z.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DisableGet.7z.WNCRY
        • Size 1.1MB
        • SHA256 57ea05fb910521cfc5faeedbda26c17867c1d4c6917b8cbfc76bd61f88020631
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RequestInitialize.php.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DismountSubmit\RequestInitialize.php.WNCRY
        • Size 431KB
        • SHA256 987570be2e16c3e68cfcad756e5ff4eda73b0fb7fde3ab0370a04ac7f20973ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RequestPush.txt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DismountSubmit\RequestPush.txt.WNCRY
        • Size 330KB
        • SHA256 2402a11c54a2e7f76f1055bd65dcfa0eb94cb50921e382a584556ee26165998c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestartRegister.dwg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DismountSubmit\RestartRegister.dwg.WNCRY
        • Size 736KB
        • SHA256 b1e83e87778ab04362bd30bb147dc5367512b1a9cfd2fedb023f1d01c353ff9e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UpdateMount.mid.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\DismountSubmit\UpdateMount.mid.WNCRY
        • Size 685KB
        • SHA256 34aeaed7760f99d852ed09c70c6380fe3f7204d5c14e099934b0a1eafd49fc0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EnableRegister.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableRegister.ps1.WNCRY
        • Size 1.3MB
        • SHA256 fd591cddb3a898f948aa2911a8fffbbc46caea38055eea65d195a64177961ef5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CheckpointStart.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableWait\CheckpointStart.tif.WNCRY
        • Size 679KB
        • SHA256 bf5fd725e84137c7d7d22317c6133a449eeeb235cdb66071c32697f98c0a62a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectSave.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableWait\ConnectSave.tif.WNCRY
        • Size 418KB
        • SHA256 94849066259d35d13807cf2bc7e2d58144ce52e01f5e7d3a682e6f269d48294f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GetTrace.pdf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableWait\GetTrace.pdf.WNCRY
        • Size 470KB
        • SHA256 eb73863ebad37c419a155f079415945a79952f8918233359c8e8c05c0874f789
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestoreHide.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableWait\RestoreHide.rtf.WNCRY
        • Size 783KB
        • SHA256 5267ce8bf5f38006db1387dcd54beef62aab5798943dc1416a5fb74b86e47141
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SelectExit.docm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableWait\SelectExit.docm.WNCRY
        • Size 1.4MB
        • SHA256 be307de80913ac9ac4c8fcef1836b129cf2e16d152a9840a5cb10760240c8611
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SelectShow.ppsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableWait\SelectShow.ppsm.WNCRY
        • Size 940KB
        • SHA256 5cd1e078ff6af301f396d0808f10e19a55932f28e90ca0850e71635b2865a234
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowPing.wmv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnableWait\ShowPing.wmv.WNCRY
        • Size 992KB
        • SHA256 15078147e0e4b94a51d9b5e54a41cae3914689329d509f129cb247b9abbe2855
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompareMove.xltm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\CompareMove.xltm.WNCRY
        • Size 391KB
        • SHA256 64d965339b41db2262b0c1b776ee39af767f23c2d5903c58beceafe63f52b587
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompareOut.odt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\CompareOut.odt.WNCRY
        • Size 228KB
        • SHA256 6ffdc5037482a437a0502baccaff99f60994bc2c9a1fd032dd092fda2420737d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectSave.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\ConnectSave.asf.WNCRY
        • Size 435KB
        • SHA256 c6716f65765b0cd5c3a217563f78a85f6e1097dfd75d2ce52503b70fd6d10b05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertFromDisable.txt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\ConvertFromDisable.txt.WNCRY
        • Size 494KB
        • SHA256 b645e091fe9820cec069b87ab1d5bec5320f9766b8c2c2eeab24f610560df268
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GetConvert.iso.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\GetConvert.iso.WNCRY
        • Size 214KB
        • SHA256 99ed57bc85b1a763bfaa6a3820c41537ebf6863c23311c0803aac89ee61e83ac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InitializeCheckpoint.wav.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\InitializeCheckpoint.wav.WNCRY
        • Size 332KB
        • SHA256 ec7b6755834d656e1206b51b8b9df51470d9832ef45d3c84554d4df18f92c8e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PopPing.svg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\PopPing.svg.WNCRY
        • Size 479KB
        • SHA256 30c78010cef61ae970446d80dbc169187ff67cfe878753d898bb38ece79234e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RenameStop.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\RenameStop.mov.WNCRY
        • Size 317KB
        • SHA256 0fb784aab077212646056b7c14c71075ee6042362d0002445fc5b547d924be5f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartUndo.ppsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\StartUndo.ppsm.WNCRY
        • Size 420KB
        • SHA256 9c7f0821807d038cdf9c25867aec4b3caf122b78f39ac1921f7cfa5ae064bb05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StopPop.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\StopPop.asf.WNCRY
        • Size 273KB
        • SHA256 fd7528b00516d0bdbd2a7e273ae6956e2a5253a851c27d1096d9ebcbeede3c92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UninstallPush.vsdx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\EnterRequest\UninstallPush.vsdx.WNCRY
        • Size 258KB
        • SHA256 1d4656022332e03a8e89346c37c07b042aded833897fcdbeb023c2c109fb136a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ClearRevoke.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\ClearRevoke.mp3.WNCRY
        • Size 512KB
        • SHA256 ddb9973fa0184d115b4807016ee4b6c2babae96e05f016b21729747efbb69a75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisableConvertFrom.mp4.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\DisableConvertFrom.mp4.WNCRY
        • Size 409KB
        • SHA256 3fbceb5be5a2b1fda48dd6052c644f098ee8691d9c601b8df0a09403662ea054
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditNew.tiff.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\EditNew.tiff.WNCRY
        • Size 532KB
        • SHA256 ee3973d6460666c925a39eb90624d2e7e0873e9dc4ef846004493b9483837eb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JoinRestart.vsdx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\JoinRestart.vsdx.WNCRY
        • Size 205KB
        • SHA256 b3c59e6df3399d8fbbd3778c884acf1de1b35ae6a653d18e2d60fe3727946c1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResizeInitialize.xlsx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\ResizeInitialize.xlsx.WNCRY
        • Size 225KB
        • SHA256 baea50d68ec314153ff4ad7affad8d42b06f2d6c112daf82a6ec863ad3597216
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowSuspend.cmd.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\ShowSuspend.cmd.WNCRY
        • Size 287KB
        • SHA256 6767f3a1cd35271e6d7d5808041dc748729d9404d26c9ab64ec4df2f0dacc443
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SkipClear.zip.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\SkipClear.zip.WNCRY
        • Size 348KB
        • SHA256 718ce6dbcd2bdf2e99681c5a28b5f128827337ce36f9d23e66dff05beec83050
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnregisterSkip.xlsx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\GetReset\UnregisterSkip.xlsx.WNCRY
        • Size 266KB
        • SHA256 9e18525129e6fb9a5823517103d7fa66c377b9dc102738127e0d94d7d7f8000d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ApproveFormat.mp4.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\ApproveFormat.mp4.WNCRY
        • Size 759KB
        • SHA256 9e55349a14298accea272270d63329e0c56e8a01a3aa905ca09e7581040e8308
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BlockWatch.csv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\BlockWatch.csv.WNCRY
        • Size 536KB
        • SHA256 09eb642787d7b2c2f2dfaf26b5537af7361c5904d6995ade39fd1330685ab8be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompressSend.odp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\CompressSend.odp.WNCRY
        • Size 354KB
        • SHA256 e4fcdc6808bccd4853b96d8c28b62e6d9dee0d2a7c66d9d8d72edee87feffa30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertFromSync.tiff.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\ConvertFromSync.tiff.WNCRY
        • Size 476KB
        • SHA256 ba46825c8a575c8ebd5ca77d15f07b71e923c60fdb83e7f15881f2638dbe9b57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertToOptimize.dotx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\ConvertToOptimize.dotx.WNCRY
        • Size 395KB
        • SHA256 3dbad569a997e4174567dfb22fb940c417a59f0507ea8bfe32dad0ae5bfcbdd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InitializeRestart.pps.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\InitializeRestart.pps.WNCRY
        • Size 820KB
        • SHA256 1c57110b7d370f20bed2a1bc2c7d56eadbe22815bc724b85dca4caaaafbe3930
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MoveExit.zip.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\MoveExit.zip.WNCRY
        • Size 374KB
        • SHA256 babf26e4a09be18dc4a883e9dbfb05092250fc35871f4d4bbae1bb7e88a4c884
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OutRequest.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\OutRequest.jpg.WNCRY
        • Size 779KB
        • SHA256 e279e9ed362abfe4c7000092aa528a79f6bb3605568a1d8ba208ba702b9dcc95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResetNew.xltm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\ResetNew.xltm.WNCRY
        • Size 739KB
        • SHA256 d012abc59bf771d44c4d6b7ce7d22d46fe1c49d2d7c4978015d21e6d427953e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResizeConvert.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\ResizeConvert.mp3.WNCRY
        • Size 516KB
        • SHA256 1b381aa1840a2420bc1876eaba6c8480897c6c58b919f44f85581bf96624fd57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RevokeInvoke.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\RevokeInvoke.asf.WNCRY
        • Size 455KB
        • SHA256 06860a3faa98be27f39e375d20aa457bf5c4e6e3a8fb00864c60849b3dbcd45a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SuspendWait.7z.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\SuspendWait.7z.WNCRY
        • Size 860KB
        • SHA256 59c5c7032b6de069e2ddeca5fca5cab630f7c394a9de1e930c1bce3a7aed511d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SwitchWrite.m3u.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\SwitchWrite.m3u.WNCRY
        • Size 314KB
        • SHA256 2d773830749c21c5a9fafb10f06a03f7eb113aa525d336bffe038380a7a9eebb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnlockHide.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\UnlockHide.asf.WNCRY
        • Size 880KB
        • SHA256 4e0f0ea74462521a2db828d9d36a18752a74cbff4aa433fa8d79afc35f7ffd6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UseCheckpoint.mpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\HideLimit\UseCheckpoint.mpeg.WNCRY
        • Size 718KB
        • SHA256 7f055e2f0cbc2d9ff751078b32ef0ae07b67da3376b6d8ea034450e7b5504877
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ApproveCompare.pptm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\ApproveCompare.pptm.WNCRY
        • Size 358KB
        • SHA256 835f705242d93e127703e694464431c96a5ad2ef9f9936f633dee9b76997a949
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AssertImport.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\AssertImport.jpg.WNCRY
        • Size 153KB
        • SHA256 3ed942ccc7de2c22480546162bb7d44415359413630dca4add957c542db470f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ClearImport.sql.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\ClearImport.sql.WNCRY
        • Size 338KB
        • SHA256 cc3f278f7622fc07f5358ee2a8e14238c3846810c72589e9a72d6b32eb25df84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EnablePop.asf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\EnablePop.asf.WNCRY
        • Size 287KB
        • SHA256 603776519e52e3586881fefaeb26bf955191530f453773149702874e00446e61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GroupAdd.odt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\GroupAdd.odt.WNCRY
        • Size 246KB
        • SHA256 95ab9ef694b5ab41f1f3a7cc8ecc0cad4c2727d15b64b4765d8b9c8f8029c354
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InvokeConnect.mpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\InvokeConnect.mpeg.WNCRY
        • Size 164KB
        • SHA256 aa04b9cb4f292b5492a9bfb9ba2b183e21d0a72bd651ddaafc435de8b636a765
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JoinUnpublish.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\JoinUnpublish.jpeg.WNCRY
        • Size 276KB
        • SHA256 83848d350a16d6ec4f9f2d9c31462ead44a14bbd9c19a20f9af8284ae23852d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LockInitialize.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\LockInitialize.mov.WNCRY
        • Size 215KB
        • SHA256 bc399f91a294d728d4ac26a36c42b6aeba521b9184fa8670b24fa6196bb79dc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PushJoin.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\PushJoin.ps1.WNCRY
        • Size 184KB
        • SHA256 55666b8831c520faf0f10e54016d17f4ee87cc32414321ba101d46fda27a1fe4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RedoSend.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\RedoSend.jpeg.WNCRY
        • Size 317KB
        • SHA256 b9aa2292401cff8ecdc4e09693705dd5f38406042967f3173ba7edec6837c415
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowMerge.mpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\ShowMerge.mpeg.WNCRY
        • Size 235KB
        • SHA256 de2b5a51531bd5328d775cd14fad383ddf0f4cf47e13fafdeffd18e701096943
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SubmitInvoke.odt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\SubmitInvoke.odt.WNCRY
        • Size 399KB
        • SHA256 1ae6cd0b733dd6e2586b75fe452b4ba4d0e80c440b92bd2db32b791f84b8f15a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UninstallWatch.dot.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ImportInstall\UninstallWatch.dot.WNCRY
        • Size 205KB
        • SHA256 fad1d8655ca4810e9c1e7881a7a08e15f29efb352180f470014649bd105f53d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LockWait.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\LockWait.mp3.WNCRY
        • Size 1.3MB
        • SHA256 44a5b73d0071cc2ad449c420a8d8bad4cf4fc3c36a429b3cbc00a4eab357ac83
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DebugPing.vbs.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MeasurePush\DebugPing.vbs.WNCRY
        • Size 1.0MB
        • SHA256 8834f045038b99c9517b0d7e6814e8f38d9364f17778319f7e558f9cffbfdc75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JoinResolve.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MeasurePush\JoinResolve.rtf.WNCRY
        • Size 1.6MB
        • SHA256 2f1bb0fb4896204566dd9d45d583302a6ddf437aa6a399853cb2d11907849d5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RedoDisable.png.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MeasurePush\RedoDisable.png.WNCRY
        • Size 570KB
        • SHA256 b386448a68c7c0443bca3f497aaa50dd9ea358c33d7f8a8f2604b43b76ed912d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RepairRegister.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MeasurePush\RepairRegister.mp3.WNCRY
        • Size 669KB
        • SHA256 6772aa84e407a579154e82b74e770b5b8c5c8be83d44bea4520e076bf3d94818
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResetApprove.m3u.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MeasurePush\ResetApprove.m3u.WNCRY
        • Size 719KB
        • SHA256 95f8915082d79c5ddd17816ec17648654c3f3a3b4fb6da3819ab84a713b3f8d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StopSuspend.mp4.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MeasurePush\StopSuspend.mp4.WNCRY
        • Size 917KB
        • SHA256 6aedeac1cd0c7d9416a026ee7021e9a38cc870aeb3ece9cdb3f1ed002679972f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UpdateExit.pot.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MeasurePush\UpdateExit.pot.WNCRY
        • Size 471KB
        • SHA256 d93a02104d171a505cbb3fa44d1b76a5860039de30dcddcf473f18e7a65e54fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallMeasure.xlsx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MergeSwitch\InstallMeasure.xlsx.WNCRY
        • Size 574KB
        • SHA256 d9d7045af4bce1eb09f1373ad3c04040de1e8134a79a32eb9da0d6d6db2931ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SendRestart.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MergeSwitch\SendRestart.jpg.WNCRY
        • Size 617KB
        • SHA256 631b4ad1d2bba6e35b0b57216c679fd78c5d65559e58b6166b1a8f92e46d2f74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SkipOut.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MergeSwitch\SkipOut.jpeg.WNCRY
        • Size 702KB
        • SHA256 43a4eb63712853dec69683428c70566e884d73d7a46d5e08cc4333ef53ba0fb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TraceClear.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MergeSwitch\TraceClear.jpeg.WNCRY
        • Size 1.5MB
        • SHA256 750c151c8be6c13d68dbd7e8a621807ece0f0f02a616f4567ac5b64ba98b5d38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnblockSuspend.pptx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MergeSwitch\UnblockSuspend.pptx.WNCRY
        • Size 1.1MB
        • SHA256 6998899863c1cbde1e45988c322a668cd77a6e9c44686c9d9c62bedbecfe525f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Normal.dotm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WNCRY
        • Size 18KB
        • SHA256 cbcd94c79809028a861b56df0e517152cb5bd976688edb1921f87c13cdffeac1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompressRevoke.odt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\CompressRevoke.odt.WNCRY
        • Size 253KB
        • SHA256 b0147683c386c43e93c4b13f1c4f14b7f0324f498dda386828ff65119feaabe6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectFind.avi.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\ConnectFind.avi.WNCRY
        • Size 275KB
        • SHA256 0470d800b2ff020d7b51b86554509ffe02ace86d6448e75ba3c86f2ca71a6995
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EnableConnect.dwg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\EnableConnect.dwg.WNCRY
        • Size 330KB
        • SHA256 8de767484c6e9cfe56a2604203377082c11d1aa4cb634087e072d145477b83b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindReceive.wma.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\FindReceive.wma.WNCRY
        • Size 396KB
        • SHA256 7fd3b4444a6c7e30bfdaf629f907dba7cccac8c385da81eae001eb73d0c5c880
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GetImport.vb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\GetImport.vb.WNCRY
        • Size 286KB
        • SHA256 5062e6706023a8325b447437eee92bfe2c745b17318ee697dc3690c14065af27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InitializeLimit.tif.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\InitializeLimit.tif.WNCRY
        • Size 231KB
        • SHA256 1dbea17c193df42352a7a2a6aa6b9ec4000004df786ea0bdb69c1e884f709ea2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InvokeBlock.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\InvokeBlock.mov.WNCRY
        • Size 363KB
        • SHA256 342903356d7f47e821d72f184196736b8bd602eb66754e6e5f407cc38fddb3a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LimitCompare.xlsb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\LimitCompare.xlsb.WNCRY
        • Size 297KB
        • SHA256 0ff2f00b29d835200805584710b3f3af9bdfa92bec5e362920e582636c878b43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NewRequest.ppsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\NewRequest.ppsm.WNCRY
        • Size 418KB
        • SHA256 f54329e567ca3b3701bcda0771f2d6b75a90b113b5c6bace1293bf0ac76cd10f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PushMove.pot.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\PushMove.pot.WNCRY
        • Size 385KB
        • SHA256 07b80290b42155c6369e84b080a539c6d8230128c7d53f2e97834ada02731ec7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RenameUndo.pptm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\RenameUndo.pptm.WNCRY
        • Size 495KB
        • SHA256 aa88aba47373e962137460bccb6284ff209c12653b72166858a9c037ddb9b1b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestartCopy.txt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\RestartCopy.txt.WNCRY
        • Size 264KB
        • SHA256 97ce131340392e11ac223f438e92a6dd1dd215b31f76db20f9d29df07f12abbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TraceSplit.php.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\TraceSplit.php.WNCRY
        • Size 429KB
        • SHA256 56ed9251832d2b5aa8bc5a1f9c68f8133e4b6a83d4e26e0f9e3a2737b9ef4a11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnpublishRequest.pps.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveAssert\UnpublishRequest.pps.WNCRY
        • Size 308KB
        • SHA256 0746b6fe1496ebd97354eb7db9e82331625e07cc5396e628b3c347eeda334cd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmBlock.bat.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\ConfirmBlock.bat.WNCRY
        • Size 868KB
        • SHA256 ad8a9d7de89b9bf1789ef4ef49e2f234f538d6f7b422563d2eca793d3c94f022
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectWrite.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\ConnectWrite.rtf.WNCRY
        • Size 902KB
        • SHA256 e78d9e01b3e6d9513883ea31405a9803862c5f33bc2073b538ea97e3c733f995
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DebugWrite.vsdx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\DebugWrite.vsdx.WNCRY
        • Size 323KB
        • SHA256 7215f77e961ac11f982a0d367beb2cb00a1ad96d2cbea82a3240738169814fb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PopRemove.wma.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\PopRemove.wma.WNCRY
        • Size 800KB
        • SHA256 be49d9dbbcf30672ebcefe65775e404f19b9251bada724c9ca58a6cc4a46d072
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResolveResume.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\ResolveResume.ps1.WNCRY
        • Size 834KB
        • SHA256 5a682e1a9a363f5f6526025a09fe653fc30ea375f9d49668922c09167259742a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestoreLock.tiff.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\RestoreLock.tiff.WNCRY
        • Size 391KB
        • SHA256 634e97377f1caf7457204c7bcf94845acf023689d15d654026ec6bfb45cea93b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowInitialize.7z.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\ShowInitialize.7z.WNCRY
        • Size 493KB
        • SHA256 62b61c1ed19c57cdedae99b209a1551c27fff1f9ba86137f57643f45eeb52b4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteWatch.iso.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\MoveOpen\WriteWatch.iso.WNCRY
        • Size 357KB
        • SHA256 18e82488733cf429d5121c6391809acaf930a4b2cb0530ea070b26af269473d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        prefs.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\d9zvs4ak.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WNCRY
        • Size 776B
        • SHA256 7005a40c9fbfc60befa2b684a05fad284f4869ce74c0c11d90f38f2cf474b4e7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\j3jbeati.Admin\user.js.WNCRY
        • Size 536B
        • SHA256 d8af7b5ee98806d0616704aae2bdcde7e82106005c61c70bf9a75636326f47ad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cert9.db.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\cert9.db.WNCRY
        • Size 224KB
        • SHA256 a11efe64c24ded2690ed5ec0895470e7db1e4565ed525c9d36fe89638a4c3cae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        key4.db.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\key4.db.WNCRY
        • Size 288KB
        • SHA256 84e1258788206d7947fea9108f3fb531f2c00cff20c0d72ed03bed8a893a1420
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pkcs11.txt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\pkcs11.txt.WNCRY
        • Size 808B
        • SHA256 ce43ccff44696fd92b7542dedf71469ce57f81a5b752993e1293a18122b84c24
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        prefs.js.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\mnjiwcae.default-release\prefs.js.WNCRY
        • Size 7KB
        • SHA256 c6a8d2f2ea51772d241722808919c1b3e7687ff3c1311ccfb5265b19f724fa2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CheckpointStop.doc.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\CheckpointStop.doc.WNCRY
        • Size 430KB
        • SHA256 2426bf65d2a1d5582a0ef47e033feb1bdcb5bbea4c559e0aec68f4dd0957dd30
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompleteResize.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\CompleteResize.jpeg.WNCRY
        • Size 367KB
        • SHA256 e117180dbe57f6f06185293968ee204ef793682417b461a9af37a3966671c643
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmImport.odt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\ConfirmImport.odt.WNCRY
        • Size 510KB
        • SHA256 ff957390925ab946a5460c2f7fa98b5d176a730b9b7e5adc1181c07658d6644c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertShow.pps.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\ConvertShow.pps.WNCRY
        • Size 733KB
        • SHA256 7d27629f4028bdedecb3367fff7a71314578df368842f480a2f4370843bf720b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConvertToResolve.docx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\ConvertToResolve.docx.WNCRY
        • Size 494KB
        • SHA256 2c1c8ddc92178732e41d969d031bacd9f3d176fb23bd73d63ae0cd28d100dd81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindCheckpoint.csv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\FindCheckpoint.csv.WNCRY
        • Size 781KB
        • SHA256 786444ce1b249d4cd4688b62f74948176c84e5731b849efa377cdf30cd27e110
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GroupOut.rar.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\GroupOut.rar.WNCRY
        • Size 398KB
        • SHA256 e903f660743550837b48abf7ac0d7dfa73b96e5e46411ff916708b509287075a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        InstallFind.asp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\InstallFind.asp.WNCRY
        • Size 446KB
        • SHA256 f6f0c616b43a0747735184ca3cc80cc3595514ff566f76e9cafbd4d385b60f96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MoveCopy.ppsx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\MoveCopy.ppsx.WNCRY
        • Size 271KB
        • SHA256 89b6d1fe79f691734f851117277555f0aa4f280df93aa13922f959f1e0f33448
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RenameHide.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\RenameHide.mov.WNCRY
        • Size 414KB
        • SHA256 49dfc041101821878086c2dd577518734ac5ef70671338d7e24a6d81b6911f17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResetUnlock.mpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\ResetUnlock.mpg.WNCRY
        • Size 558KB
        • SHA256 2c088d69a9365cb1519c3b6f0c120b254d4dc915f75c9e182594cc4698ec24fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResumeRestart.php.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\ResumeRestart.php.WNCRY
        • Size 590KB
        • SHA256 bf40c5e51072aeb5d58733c6bcefaa207856a899481f6a24009d3e64487258a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SetUnlock.csv.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\SetUnlock.csv.WNCRY
        • Size 335KB
        • SHA256 055049eb549fa6eefd40213de0359a68fe190f4e817374962697eaf101a93612
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TraceComplete.txt.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\TraceComplete.txt.WNCRY
        • Size 382KB
        • SHA256 d55b04be7b0b7abc3fe629092a031c159efb76e7bfdba4c9eb481b3221cfb988
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteSave.pptm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OptimizeStop\WriteSave.pptm.WNCRY
        • Size 526KB
        • SHA256 44c51249546b5b594ff2c639cb652051637261deaff24ddd6ffece1c282d927f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OutStep.xlsx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\OutStep.xlsx.WNCRY
        • Size 626KB
        • SHA256 49fb776986e9ac05d65d919c6800fac9cce1b28dbfc0f009b7965e8ac3d1efd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResetMeasure.ppsx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ResetMeasure.ppsx.WNCRY
        • Size 967KB
        • SHA256 1deaadfd64fb5ad32e255df926cad53948db63e35d61eea0774ff7146e0cf6bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GrantMeasure.bmp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ResizePublish\GrantMeasure.bmp.WNCRY
        • Size 1.3MB
        • SHA256 ae6904c9eb47e9136ea4e0470bcedccd272e30269e201026f9d890a609a99e8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GroupWait.7z.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ResizePublish\GroupWait.7z.WNCRY
        • Size 1.2MB
        • SHA256 9608f3ee85dcbbd2f3cb13a49bef0b4917dd3766776e518db1908fec336a3e71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PublishEnter.rtf.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ResizePublish\PublishEnter.rtf.WNCRY
        • Size 952KB
        • SHA256 409d4cf7b0a5561e199443c164deadaa6bba86a3e9506749bb474e419b5d6bea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WaitConvertTo.php.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\ResizePublish\WaitConvertTo.php.WNCRY
        • Size 698KB
        • SHA256 9186a6a23721a5a9b8700b90d43d369529d7d373759d0037a848378b3545af4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SearchRead.bat.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRead.bat.WNCRY
        • Size 1.9MB
        • SHA256 c016d8edfd783a7594d7ea3efacb0277e7033e5804c3f9bbb5702a73131f7b07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BackupCompress.raw.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\BackupCompress.raw.WNCRY
        • Size 286KB
        • SHA256 192a73b04e3d2be727c4980c0ff6cd4ce4942e7005ff0907f332844b67d3a1ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompleteDebug.mpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\CompleteDebug.mpg.WNCRY
        • Size 195KB
        • SHA256 263772e361ce78936217ad97abae6cdbf8e135f3597ecf986d82b9a4d14edfea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConnectGet.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\ConnectGet.mov.WNCRY
        • Size 692KB
        • SHA256 8a1a1473d144eb1a90193cb0cc7ffaa8cb00b2ef4fea31a06aad72a7da579ece
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditRemove.mpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\EditRemove.mpeg.WNCRY
        • Size 466KB
        • SHA256 5b1a160564da759ac61d5f0eec1384b0d86c17aaa69d7818eb5e9b0292b25418
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenSearch.vsdx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\OpenSearch.vsdx.WNCRY
        • Size 215KB
        • SHA256 0ccb9a57e2f2dde4d6eef1510f9625393eb256755cbe4633d2ec8d90c4cd521c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OptimizeProtect.pps.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\OptimizeProtect.pps.WNCRY
        • Size 205KB
        • SHA256 3e2d53173486ffd7f605a36ee7ecf7ec70317cb3f3242d0666e4aa4603ebec01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PopRename.mp4.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\PopRename.mp4.WNCRY
        • Size 416KB
        • SHA256 6a1877a339afe5df2013d016b328b9fc7a151fd31e6693172bd4b726c0d441ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ReadMeasure.mpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\ReadMeasure.mpeg.WNCRY
        • Size 175KB
        • SHA256 78eb8c8949563b31897cc8b46f3c4c1014da9f7e992249175be016ba1b9e711d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SaveDebug.mp3.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\SaveDebug.mp3.WNCRY
        • Size 476KB
        • SHA256 fa95af93989f8e8e53d06a7392f680d23d8f02ae4fa07e791c494a4843f0225d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnlockPublish.vsdx.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\UnlockPublish.vsdx.WNCRY
        • Size 256KB
        • SHA256 d324e99998881bf3d39368faf7345e2339d50d96a0b18baf407843ad8446e8a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteReceive.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\SearchRestore\WriteReceive.jpeg.WNCRY
        • Size 296KB
        • SHA256 d4ea2b15045bfb49fb52f1d9636829bb64355287fef437d3bc5c06700f6ce89c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartUse.3g2.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\StartUse.3g2.WNCRY
        • Size 1.1MB
        • SHA256 1e59f4424a0eeeddf857417586616ef0957f92c10caf73fff8a3a2cf7898652e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StepRename.mpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\StepRename.mpg.WNCRY
        • Size 1.0MB
        • SHA256 71ed2d8c91568723f64746c50d02ef28e70a5eab6a72a73406532f67af4b6787
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompleteStart.avi.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\CompleteStart.avi.WNCRY
        • Size 499KB
        • SHA256 fad9dd7564bd889338975c1b3b3fc81d04a6f3c0e9c8d0de99b72ebe15a03095
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DenyCompare.zip.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\DenyCompare.zip.WNCRY
        • Size 453KB
        • SHA256 fb76dede62cf34ea6e8fd1bfbc02470cb8811cec7ab6586a79242d4a908f5c04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GroupFormat.rar.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\GroupFormat.rar.WNCRY
        • Size 662KB
        • SHA256 3c922d453cefc4ae7f7e603bf11e2fcaddfa568688dccee436f8b3a51fff0bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        HideJoin.xlsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\HideJoin.xlsm.WNCRY
        • Size 383KB
        • SHA256 c0281c93ff04988f5195fab6fb27398afac29ceb7625bccccb41896c7bd44771
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PublishMove.mov.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\PublishMove.mov.WNCRY
        • Size 267KB
        • SHA256 e0a2437a687f260e0947e3816d4861d0487a4dc726407e33019c29646252bdf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RegisterFind.xltm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\RegisterFind.xltm.WNCRY
        • Size 592KB
        • SHA256 6c03b728afa89f6ccab087d83a08425be71ff60aee92277e6ff08caabad4519b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SkipAdd.potm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\SkipAdd.potm.WNCRY
        • Size 1.0MB
        • SHA256 e5cbef40e9191ac1d9dc0b18d5b128ef6c4c756a4cf615f8fd2e9c81a57efaa7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TestShow.ppsm.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\TestShow.ppsm.WNCRY
        • Size 708KB
        • SHA256 42aae44701b0a4748010ada017050833f7c7ee9cb305c9c810e1049ccaa8690a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UninstallProtect.jpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\UninstallProtect.jpg.WNCRY
        • Size 615KB
        • SHA256 b4aa924d0836dd763a5823fb3d40b891bc5a9d52310bf0477b583ff90389211a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WaitPublish.tiff.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestAdd\WaitPublish.tiff.WNCRY
        • Size 685KB
        • SHA256 fa52ed0f8d72593a0bbd01da6530a10111eb3e3c72df2d6ffcc21a3f1fe10e19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TestFormat.pps.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestFormat.pps.WNCRY
        • Size 512KB
        • SHA256 1b26390146c1586e328741998a578460bb720909b8c3d12f1efb0e3967ba6679
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JoinBlock.png.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\JoinBlock.png.WNCRY
        • Size 909KB
        • SHA256 abca340ce27ff6972d6356f650d16262874b5b13befa888f64c9ca2c92bc1bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LimitUnpublish.mid.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\LimitUnpublish.mid.WNCRY
        • Size 1.8MB
        • SHA256 40ee1c365b2dfd5b730f753ea666aaec35219774bc70251607a7e3760acb8503
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PingConvertTo.jpeg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\PingConvertTo.jpeg.WNCRY
        • Size 981KB
        • SHA256 ff00d4063850fc520663b4185a4f2bf3f1848c55f49061ae8a608b587be6a312
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PublishNew.vbs.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\PublishNew.vbs.WNCRY
        • Size 1.2MB
        • SHA256 56dc70b3c235d174fecff50bd522de8c64ddfc6682302a559ff5253ed4b8d99e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ReadOut.vb.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\ReadOut.vb.WNCRY
        • Size 1.2MB
        • SHA256 14b04f137ac58028d326ff18d4d841e74a06efb240a5123518b4f81fe37ab56c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartRepair.bat.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\StartRepair.bat.WNCRY
        • Size 1.1MB
        • SHA256 f6c0936e81211b93cc8b78cbc861f0f99f6c3281753ae748574d4ea4311cab08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TestSearch.ps1.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\TestSearch.ps1.WNCRY
        • Size 472KB
        • SHA256 d014bd3f246973c7bdc9d27bdbc50d994ca4bc2ffb65ea2ee4e710fee59d8139
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WaitOptimize.mpg.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\TestReset\WaitOptimize.mpg.WNCRY
        • Size 836KB
        • SHA256 86e044b2ad861841e70f282b98f42b6339b6605e9eaa76ed83e2d3af6813baf5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WaitSplit.bmp.WNCRY
        • Path C:\Users\Admin\AppData\Roaming\WaitSplit.bmp.WNCRY
        • Size 1.2MB
        • SHA256 86d2317bdade1cd4b717d15ff1ba7f45899cd8605d5a5897e040dc3f88b97fd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompletePush.bmp.WNCRY
        • Path C:\Users\Admin\Desktop\CompletePush.bmp.WNCRY
        • Size 291KB
        • SHA256 f8e1116cda4c811da8bac98e4e6e67f590cc4c970dd3a31aa14ae962a53cb257
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompleteSkip.docm.WNCRY
        • Path C:\Users\Admin\Desktop\CompleteSkip.docm.WNCRY
        • Size 143KB
        • SHA256 30fa7c250206f32cde3229567cb533f99311f9225335873f311d46bbcf6e6df6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FindPop.rtf.WNCRY
        • Path C:\Users\Admin\Desktop\FindPop.rtf.WNCRY
        • Size 250KB
        • SHA256 8154cae81f678d31c50b736dcaf2d93939cdefc494eaa7992ab645ed80eef229
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        GroupBlock.xlsx.WNCRY
        • Path C:\Users\Admin\Desktop\GroupBlock.xlsx.WNCRY
        • Size 13KB
        • SHA256 61af55489795b5f4fd152bb34adae601281548f3d8d7b99b1e459e2c47899cd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ImportConvert.avi.WNCRY
        • Path C:\Users\Admin\Desktop\ImportConvert.avi.WNCRY
        • Size 127KB
        • SHA256 c7a4152c879a9903bf43e8bd2b354c5dc9f770934be275f04efde3e2df0be2f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MeasureHide.csv.WNCRY
        • Path C:\Users\Admin\Desktop\MeasureHide.csv.WNCRY
        • Size 241KB
        • SHA256 f23845a92cad76afecf27d41f8ec5afbae29aa71b29a04655ef45f642c34c237
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OpenRevoke.xltm.WNCRY
        • Path C:\Users\Admin\Desktop\OpenRevoke.xltm.WNCRY
        • Size 258KB
        • SHA256 99fae698b9eb3112d19945ba7e04684600e117d42f5412b23a5b3439bce1c24c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SetDebug.wma.WNCRY
        • Path C:\Users\Admin\Desktop\SetDebug.wma.WNCRY
        • Size 102KB
        • SHA256 53159124b24d687a6d5b2b33630c72f77bf01291537f6422fe35ea4614cf464e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TestNew.docx.WNCRY
        • Path C:\Users\Admin\Desktop\TestNew.docx.WNCRY
        • Size 16KB
        • SHA256 1cf6162ee26f45df9f8d0d2c5bf09e7443e8e01f4ec4a26454d710ff1ba2a340
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TraceResize.sql.WNCRY
        • Path C:\Users\Admin\Desktop\TraceResize.sql.WNCRY
        • Size 233KB
        • SHA256 31772b585afe44d0a24f7d3b151a8db0571719eeb31cc567e408e6ae0f571985
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WaitRestore.dotm.WNCRY
        • Path C:\Users\Admin\Desktop\WaitRestore.dotm.WNCRY
        • Size 266KB
        • SHA256 736cdebddca526368e3e35fa5d5a87fb31f44bfeef8d980337023610cd3d9fe1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteClose.xlsx.WNCRY
        • Path C:\Users\Admin\Desktop\WriteClose.xlsx.WNCRY
        • Size 217KB
        • SHA256 a924de8b0bafd8ce6b2744d00f3866f9c9100f94612831f093ece8e346d6da51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WriteRevoke.xlsx.WNCRY
        • Path C:\Users\Admin\Desktop\WriteRevoke.xlsx.WNCRY
        • Size 12KB
        • SHA256 e8efb1e7bbc16815651c9674c8978e2fb245ad40f98ea4da204bda4ea77a39c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ClearOpen.xls.WNCRY
        • Path C:\Users\Admin\Documents\ClearOpen.xls.WNCRY
        • Size 503KB
        • SHA256 02a2bd83de1d2e8b1e2f4e1e839380291b4f7309185f2b0f466a524cc5dcbac5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CompareReset.pptm.WNCRY
        • Path C:\Users\Admin\Documents\CompareReset.pptm.WNCRY
        • Size 533KB
        • SHA256 44cf555bc7c53b462deffb6c42a3a7fae6b7cd2d449acc4be3d5ea80b4767c14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ConfirmEnter.ppt.WNCRY
        • Path C:\Users\Admin\Documents\ConfirmEnter.ppt.WNCRY
        • Size 681KB
        • SHA256 5f3ba22005388345e7c8584f21cfe6392dc23eada428077bbe873f2169d1bc84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisconnectEdit.pptm.WNCRY
        • Path C:\Users\Admin\Documents\DisconnectEdit.pptm.WNCRY
        • Size 888KB
        • SHA256 7cfcd96175571fa80952df37457c48935a03a0b7aa4e43f761ba4a3c1cd0958d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EditResolve.odt.WNCRY
        • Path C:\Users\Admin\Documents\EditResolve.odt.WNCRY
        • Size 740KB
        • SHA256 ea3e5956eaebc2bcffe5b88a4662056fbe898740cecbd271e7fda4def5122a3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExportGet.pps.WNCRY
        • Path C:\Users\Admin\Documents\ExportGet.pps.WNCRY
        • Size 563KB
        • SHA256 6b670ad8de2183f1a86583a5ee9642231522345e89944826de4c4aa332e63990
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ImportLock.docm.WNCRY
        • Path C:\Users\Admin\Documents\ImportLock.docm.WNCRY
        • Size 711KB
        • SHA256 0d5b2e93e6ad3cc3bd26e213379aa48e4f023448b7774d3a716fdae6a7b0486c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MergeTrace.xlsb.WNCRY
        • Path C:\Users\Admin\Documents\MergeTrace.xlsb.WNCRY
        • Size 592KB
        • SHA256 95282d48e3037351af8af4b7a2d5d1876b71b20ca57c5c20e38d0d827a0226d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MountMeasure.pptm.WNCRY
        • Path C:\Users\Admin\Documents\MountMeasure.pptm.WNCRY
        • Size 1.2MB
        • SHA256 cab9365b0667e248f83c24e407c500f460186c33053b3245d8ed5ead1756795a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Open Notebook.onetoc2.WNCRY
        • Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WNCRY
        • Size 6KB
        • SHA256 74cd6d9cdea2ef399bc8e6d5924028dece3ea3394d3a5a1f04cb3967bc307284
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OptimizeBlock.vsdx.WNCRY
        • Path C:\Users\Admin\Documents\OptimizeBlock.vsdx.WNCRY
        • Size 770KB
        • SHA256 b242e6c8bac757c5f81c7a3f2a305bda4fb85c637818a311b981007d20dbf8f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Outlook Data File - ezlqmhjsoc.pst.WNCRY
        • Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - ezlqmhjsoc.pst.WNCRY
        • Size 265KB
        • SHA256 363aba974844aae4976dba4ba98e274ec9802cb8bbe2a0b043270ebd5956cfa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PushUnregister.odt.WNCRY
        • Path C:\Users\Admin\Documents\PushUnregister.odt.WNCRY
        • Size 355KB
        • SHA256 2dacff2efbf9fadbc9e776e8b390adcb43e60489dbf12372b2ee853395d8fb9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ResetConnect.ppt.WNCRY
        • Path C:\Users\Admin\Documents\ResetConnect.ppt.WNCRY
        • Size 651KB
        • SHA256 3a2f206689bc1f84de579954f6a539d5b79a8aa4136c48d18fb5509caeaa2204
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowFormat.doc.WNCRY
        • Path C:\Users\Admin\Documents\ShowFormat.doc.WNCRY
        • Size 444KB
        • SHA256 5772cfc7acecce0997f3b687d32873e28441ce31c9c5d8ebd7df240ad77bc766
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        TraceMount.ppt.WNCRY
        • Path C:\Users\Admin\Documents\TraceMount.ppt.WNCRY
        • Size 326KB
        • SHA256 a359eeb286ab0c3949beca23c4aed5d7e2aa368314acd3085df64da9483751b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnblockConvertFrom.vsdx.WNCRY
        • Path C:\Users\Admin\Documents\UnblockConvertFrom.vsdx.WNCRY
        • Size 414KB
        • SHA256 3ff7c7652671a766df17ee72c2f39117cb6821987a30c918e653874aadb5dd92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UndoPush.xlsb.WNCRY
        • Path C:\Users\Admin\Documents\UndoPush.xlsb.WNCRY
        • Size 859KB
        • SHA256 d37f738a3f1ea299b0ffec2f5495f27085b5a8c66288bbfc82c8da7e77797285
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UseRepair.xltx.WNCRY
        • Path C:\Users\Admin\Documents\UseRepair.xltx.WNCRY
        • Size 474KB
        • SHA256 738a72f696286ecc468d3ac71cfc80da31260b373d2f9a62e78d96effdb9967f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        @[email protected]
        • Path C:\Users\Admin\Downloads\@[email protected]
        • Size 933B
        • SHA256 840ab19c411c918ea3e7526d0df4b9cb002de5ea15e854389285df0d1ea9a8e5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        @[email protected]
        • Path C:\Users\Admin\Downloads\@[email protected]
        • Size 240KB
        • SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ProtectResize.ppt.WNCRYT
        • Path C:\Users\Admin\Downloads\ProtectResize.ppt.WNCRYT
        • Size 1.1MB
        • SHA256 cc30aa5bd376c9664c229e63325b9d01a332be0b36be89633a20e239f6fdd435
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        AddUnprotect.ps1.WNCRY
        • Path C:\Users\Admin\Music\AddUnprotect.ps1.WNCRY
        • Size 306KB
        • SHA256 667171b3dd124caaea09e6a643f4add68158fcca546795f5e4385d17ab5f0f44
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DisableAdd.xltm.WNCRY
        • Path C:\Users\Admin\Music\DisableAdd.xltm.WNCRY
        • Size 272KB
        • SHA256 3c145dd51736ccc1410a1a6a45709f97f460111253efc8fe8cc58dd27325fc9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ExportSubmit.zip.WNCRY
        • Path C:\Users\Admin\Music\ExportSubmit.zip.WNCRY
        • Size 145KB
        • SHA256 7a2d0a2dda3295671e29552402d1703f6256189e01c32d04eef486e85a8428bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FormatBackup.odp.WNCRY
        • Path C:\Users\Admin\Music\FormatBackup.odp.WNCRY
        • Size 198KB
        • SHA256 277cba781d83d55dbf1d1f0b0d74d3d03b65e253b427e96b5369ac6ce2dff824
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RestoreExport.xlsm.WNCRY
        • Path C:\Users\Admin\Music\RestoreExport.xlsm.WNCRY
        • Size 266KB
        • SHA256 74686c103bf186906f67ce1ba05b78b556d120ffdc4b378d133904f37b5bde56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RevokeSync.dot.WNCRY
        • Path C:\Users\Admin\Music\RevokeSync.dot.WNCRY
        • Size 320KB
        • SHA256 fd56a3f207b086799747f5ab577a0b036535a8dbadd40616bd8898deb0cb863a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SelectSearch.dotx.WNCRY
        • Path C:\Users\Admin\Music\SelectSearch.dotx.WNCRY
        • Size 245KB
        • SHA256 5b2ff7003a046c7877dc545b5dc68d4ba0c1c7ad96bd0f3a9f25d16615864c4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StepDisable.dot.WNCRY
        • Path C:\Users\Admin\Music\StepDisable.dot.WNCRY
        • Size 158KB
        • SHA256 4e3aa37f3cd0b3e101069a75762c3d1a0dd73ec51dd417a5ad39cd8654a4264d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StopDisconnect.xls.WNCRY
        • Path C:\Users\Admin\Music\StopDisconnect.xls.WNCRY
        • Size 360KB
        • SHA256 da8455b9314be1a0b9b731188b067692c29d37f7be2e1664e10357a0d0b57a6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SwitchGet.xltm.WNCRY
        • Path C:\Users\Admin\Music\SwitchGet.xltm.WNCRY
        • Size 138KB
        • SHA256 5c285aab1497d441bee2b0c92a763e07d95e0fdee035a4849e9e19c1d0284bfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SwitchWatch.pps.WNCRY
        • Path C:\Users\Admin\Music\SwitchWatch.pps.WNCRY
        • Size 185KB
        • SHA256 8e862a2df27e241bf7d80e436f236350a66b6f9285803e37814f3a4d83b416d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SyncPush.wma.WNCRY
        • Path C:\Users\Admin\Music\SyncPush.wma.WNCRY
        • Size 131KB
        • SHA256 ceef852d011073b620bfa77ed6904d37189606fab7b8e4246ac68b074c04c9fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnlockSync.wmv.WNCRY
        • Path C:\Users\Admin\Music\UnlockSync.wmv.WNCRY
        • Size 219KB
        • SHA256 3202d9b385ba6015276f367978c7ffea7a42db814e0ddab8429b841106226652
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UnpublishEnable.js.WNCRY
        • Path C:\Users\Admin\Music\UnpublishEnable.js.WNCRY
        • Size 340KB
        • SHA256 fc058d918589269a1bf5a70d52cc693bdb9283aba8df600fd49e0c9259c47aa6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UpdateResize.xlt.WNCRY
        • Path C:\Users\Admin\Music\UpdateResize.xlt.WNCRY
        • Size 225KB
        • SHA256 4370279feabf068750fb360177d461ed01f0b2c1f2b2b9fdc5b25c2449419b12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MeasureConnect.svg.WNCRY
        • Path C:\Users\Admin\Pictures\MeasureConnect.svg.WNCRY
        • Size 460KB
        • SHA256 be0f32ecc698d9d8389bdeae2a06f65f1f305d0ae5bc5bbc90d251da311a194e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MoveSend.jpeg.WNCRY
        • Path C:\Users\Admin\Pictures\MoveSend.jpeg.WNCRY
        • Size 432KB
        • SHA256 38b78c41466e241ef620e0e9890a48b79a9cfcb9350bb41b1ec9b89f94f90e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RegisterUse.dwg.WNCRY
        • Path C:\Users\Admin\Pictures\RegisterUse.dwg.WNCRY
        • Size 655KB
        • SHA256 dd14b62a37a6dced843211664096ef6f8ef78789972321f8db9f353b5cd6ffe1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        RemoveResume.dwg.WNCRY
        • Path C:\Users\Admin\Pictures\RemoveResume.dwg.WNCRY
        • Size 571KB
        • SHA256 e482a592896c23d67e1c9ee9677dfe163c1190b01d85a099f99f818b7ff6702b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowStop.png.WNCRY
        • Path C:\Users\Admin\Pictures\ShowStop.png.WNCRY
        • Size 376KB
        • SHA256 581305b54fac58341cbd53bfaa493d5c427acaf98c55f77c35ace831be07aefd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ShowWrite.bmp.WNCRY
        • Path C:\Users\Admin\Pictures\ShowWrite.bmp.WNCRY
        • Size 1.1MB
        • SHA256 721444f5cb5b64eb923f700756bd5c459e0bb6515c8e494ccda97f89a73f4028
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xHNXCGUt.jpg.WNCRY
        • Path C:\Users\Admin\Pictures\xHNXCGUt.jpg.WNCRY
        • Size 24KB
        • SHA256 1e88fff7f2dfebcdfe89d62dec1f1c49c73397f9adfbad7bdc68a8d49a02394f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/820-39-0x0000000010000000-0x0000000010010000-memory.dmp
        Download

        memory/2880-2167-0x0000000073410000-0x0000000073487000-memory.dmp
        Download

        memory/2880-2156-0x0000000072BB0000-0x0000000072DCC000-memory.dmp
        Download

        memory/2880-2164-0x0000000072BB0000-0x0000000072DCC000-memory.dmp
        Download

        memory/2880-2162-0x0000000073550000-0x00000000735D2000-memory.dmp
        Download

        memory/2880-2161-0x0000000000A70000-0x0000000000D6E000-memory.dmp
        Download

        memory/2880-2165-0x00000000734C0000-0x0000000073542000-memory.dmp
        Download

        memory/2880-2158-0x0000000073490000-0x00000000734B2000-memory.dmp
        Download

        memory/2880-2166-0x0000000073490000-0x00000000734B2000-memory.dmp
        Download

        memory/2880-2155-0x0000000073550000-0x00000000735D2000-memory.dmp
        Download

        memory/2880-2157-0x00000000734C0000-0x0000000073542000-memory.dmp
        Download

        memory/2880-2159-0x0000000000A70000-0x0000000000D6E000-memory.dmp
        Download

        memory/2880-2163-0x00000000736D0000-0x00000000736EC000-memory.dmp
        Download

        memory/6676-2153-0x0000000073370000-0x00000000733E7000-memory.dmp
        Download

        memory/6676-2132-0x0000000000A70000-0x0000000000D6E000-memory.dmp
        Download

        memory/6676-2151-0x0000000073610000-0x0000000073632000-memory.dmp
        Download

        memory/6676-2154-0x00000000732E0000-0x0000000073362000-memory.dmp
        Download

        memory/6676-2148-0x0000000000A70000-0x0000000000D6E000-memory.dmp
        Download

        memory/6676-2128-0x00000000732E0000-0x0000000073362000-memory.dmp
        Download

        memory/6676-2152-0x00000000733F0000-0x000000007360C000-memory.dmp
        Download

        memory/6676-2150-0x0000000073640000-0x00000000736C2000-memory.dmp
        Download

        memory/6676-2149-0x00000000736D0000-0x00000000736EC000-memory.dmp
        Download

        memory/6676-2131-0x0000000073610000-0x0000000073632000-memory.dmp
        Download

        memory/6676-2129-0x00000000733F0000-0x000000007360C000-memory.dmp
        Download

        memory/6676-2130-0x0000000073640000-0x00000000736C2000-memory.dmp
        Download