wannacry | ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa

Resubmissions

14/11/2026, 20:41

261114-zgjvqsdv7w10

14/11/2026, 19:28

14/11/2026, 15:24

14/11/2026, 11:11

14/11/2026, 10:58

14/11/2026, 03:29

13/11/2026, 20:35

Analysis

max time kernel
120s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/11/2026, 15:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WannaCry.exe
Size 3.4MB
Sample261114-stchvsas5z
SHA256 ed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa
MD5 84c82835a5d21bbcf75a61706d8ab549
SHA1 5ff465afaabcbf0150d1a3ab2c2e74f3a4426467
SHA512 90723a50c20ba3643d625595fd6be8dcf88d70ff7f4b4719a88f055d5b3149a4231018ea30d375171507a147e59f73478c0c27948590794554d031e7d54b7244
SSDEEP 98304:QqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2g3x:QqPe1Cxcxk3ZAEUadzR8yc4gB
TLSH
T173F533F4E221B7ACF2550EF64855C59B6A9724B2EBEF1E26DA8001A70D44F7F8FC0491
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery execution wannacry impact persistence privilege_escalation ransomware spyware stealer suricata worm

Malware Config

Extracted

Path

C:\Users\Admin\AppData\Local\Temp\@[email protected]

wannacry

Ransom Note

Q: What's wrong with my files? A: Ooops, your important files are encrypted. It means you will not be able to access them anymore until they are decrypted. If you follow our instructions, we guarantee that you can decrypt all your files quickly and safely! Let's start decrypting! Q: What do I do? A: First, you need to pay service fees for the decryption. Please send $300 worth of bitcoin to this bitcoin address: 115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn Next, please find an application file named "@[email protected]". It is the decrypt software. Run and follow the instructions! (You may need to disable your antivirus for a while.) Q: How can I trust? A: Don't worry about decryption. We will decrypt your files surely because nobody will trust us if we cheat users. * If you need our assistance, send a message by clicking <Contact Us> on the decryptor window. �

Wallets

115p7UMMngoj1pMvkpHijcRdfJNXj6LrLn

Signatures

Family: Wannacry
WannaCry is a ransomware cryptoworm.
ransomware worm wannacry
Deletes shadow copies 3 TTPs
Ransomware often targets backup files to inhibit system recovery.
ransomware defense_evasion impact execution

File Deletion
T1070.004

Inhibit System Recovery
T1490

Windows Management Instrumentation
T1047

Creates a file in the Startup directory 1 TTPs 2 IoCs

A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

persistence privilege_escalation

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\~SD3F38.tmp	WannaCry.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\~SD3F4D.tmp	WannaCry.exe

Executes dropped EXE 14 IoCs

pid	Process
5520	taskdl.exe
1444	@[email protected]
4864	@[email protected]
576	taskhsvc.exe
1572	taskdl.exe
3732	taskse.exe
3424	@[email protected]
6044	taskhsvc.exe
4172	taskdl.exe
2168	taskse.exe
3784	@[email protected]
4264	taskdl.exe
3928	taskse.exe
5224	@[email protected]

Loads dropped DLL 14 IoCs

pid	Process
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
3436	icacls.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound 2 IoCs

Network activity triggered a Suricata alert

suricata

flow	pid	Process
18	576	taskhsvc.exe
18	576	taskhsvc.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\puarelyyoqj654 = "\"C:\\Users\\Admin\\AppData\\Local\\Temp\\tasksche.exe\""	reg.exe

File and Directory Permissions Modification: Windows File and Directory Permissions Modification 1 TTPs
defense_evasion

Windows File and Directory Permissions Modification
T1222.001

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
3604	cscript.exe

Sets desktop wallpaper using registry 2 TTPs 2 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	WannaCry.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-560646293-820748483-2532804640-1000\Control Panel\Desktop\Wallpaper = "C:\\Users\\Admin\\Desktop\\@[email protected]"	@[email protected]

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 4 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4704	cmd.exe
2268	cmd.exe
3284	cmd.exe
6004	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	WMIC.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	WMIC.exe

System Location Discovery: System Language Discovery 1 TTPs 19 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskse.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reg.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	icacls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskdl.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	attrib.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskhsvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WannaCry.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	@[email protected]

Modifies registry key 1 TTPs 1 IoCs

Modify Registry

T1112

pid	Process
4968	reg.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
576	taskhsvc.exe
5800	WMIC.exe
5800	WMIC.exe
5800	WMIC.exe
5800	WMIC.exe
6044	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe
6044	taskhsvc.exe

Suspicious use of AdjustPrivilegeToken 51 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	5800	WMIC.exe
Token: SeSecurityPrivilege	5800	WMIC.exe
Token: SeTakeOwnershipPrivilege	5800	WMIC.exe
Token: SeLoadDriverPrivilege	5800	WMIC.exe
Token: SeSystemProfilePrivilege	5800	WMIC.exe
Token: SeSystemtimePrivilege	5800	WMIC.exe
Token: SeProfSingleProcessPrivilege	5800	WMIC.exe
Token: SeIncBasePriorityPrivilege	5800	WMIC.exe
Token: SeCreatePagefilePrivilege	5800	WMIC.exe
Token: SeBackupPrivilege	5800	WMIC.exe
Token: SeRestorePrivilege	5800	WMIC.exe
Token: SeShutdownPrivilege	5800	WMIC.exe
Token: SeDebugPrivilege	5800	WMIC.exe
Token: SeSystemEnvironmentPrivilege	5800	WMIC.exe
Token: SeRemoteShutdownPrivilege	5800	WMIC.exe
Token: SeUndockPrivilege	5800	WMIC.exe
Token: SeManageVolumePrivilege	5800	WMIC.exe
Token: 33	5800	WMIC.exe
Token: 34	5800	WMIC.exe
Token: 35	5800	WMIC.exe
Token: 36	5800	WMIC.exe
Token: SeIncreaseQuotaPrivilege	5800	WMIC.exe
Token: SeSecurityPrivilege	5800	WMIC.exe
Token: SeTakeOwnershipPrivilege	5800	WMIC.exe
Token: SeLoadDriverPrivilege	5800	WMIC.exe
Token: SeSystemProfilePrivilege	5800	WMIC.exe
Token: SeSystemtimePrivilege	5800	WMIC.exe
Token: SeProfSingleProcessPrivilege	5800	WMIC.exe
Token: SeIncBasePriorityPrivilege	5800	WMIC.exe
Token: SeCreatePagefilePrivilege	5800	WMIC.exe
Token: SeBackupPrivilege	5800	WMIC.exe
Token: SeRestorePrivilege	5800	WMIC.exe
Token: SeShutdownPrivilege	5800	WMIC.exe
Token: SeDebugPrivilege	5800	WMIC.exe
Token: SeSystemEnvironmentPrivilege	5800	WMIC.exe
Token: SeRemoteShutdownPrivilege	5800	WMIC.exe
Token: SeUndockPrivilege	5800	WMIC.exe
Token: SeManageVolumePrivilege	5800	WMIC.exe
Token: 33	5800	WMIC.exe
Token: 34	5800	WMIC.exe
Token: 35	5800	WMIC.exe
Token: 36	5800	WMIC.exe
Token: SeBackupPrivilege	940	vssvc.exe
Token: SeRestorePrivilege	940	vssvc.exe
Token: SeAuditPrivilege	940	vssvc.exe
Token: SeTcbPrivilege	3732	taskse.exe
Token: SeTcbPrivilege	3732	taskse.exe
Token: SeTcbPrivilege	2168	taskse.exe
Token: SeTcbPrivilege	2168	taskse.exe
Token: SeTcbPrivilege	3928	taskse.exe
Token: SeTcbPrivilege	3928	taskse.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
1444	@[email protected]
1444	@[email protected]
4864	@[email protected]
4864	@[email protected]
3424	@[email protected]
3424	@[email protected]
3784	@[email protected]
5224	@[email protected]

Suspicious use of WriteProcessMemory 24 IoCs

description	pid	Process	procid_target
PID 4240 wrote to memory of 5396	4240	WannaCry.exe	89
PID 4240 wrote to memory of 3436	4240	WannaCry.exe	90
PID 4240 wrote to memory of 5520	4240	WannaCry.exe	93
PID 4240 wrote to memory of 4704	4240	WannaCry.exe	94
PID 4704 wrote to memory of 3604	4704	cmd.exe	96
PID 4240 wrote to memory of 4476	4240	WannaCry.exe	97
PID 4240 wrote to memory of 1444	4240	WannaCry.exe	100
PID 4240 wrote to memory of 2268	4240	WannaCry.exe	101
PID 2268 wrote to memory of 4864	2268	cmd.exe	103
PID 1444 wrote to memory of 576	1444	@[email protected]	105
PID 4864 wrote to memory of 3284	4864	@[email protected]	107
PID 3284 wrote to memory of 5800	3284	cmd.exe	109
PID 4240 wrote to memory of 1572	4240	WannaCry.exe	113
PID 4240 wrote to memory of 3732	4240	WannaCry.exe	114
PID 4240 wrote to memory of 3424	4240	WannaCry.exe	115
PID 4240 wrote to memory of 6004	4240	WannaCry.exe	116
PID 6004 wrote to memory of 4968	6004	cmd.exe	118
PID 1444 wrote to memory of 6044	1444	@[email protected]	120
PID 4240 wrote to memory of 4172	4240	WannaCry.exe	122
PID 4240 wrote to memory of 2168	4240	WannaCry.exe	123
PID 4240 wrote to memory of 3784	4240	WannaCry.exe	124
PID 4240 wrote to memory of 4264	4240	WannaCry.exe	126
PID 4240 wrote to memory of 3928	4240	WannaCry.exe	127
PID 4240 wrote to memory of 5224	4240	WannaCry.exe	128

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

Views/modifies file attributes 1 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
5396	attrib.exe
4476	attrib.exe

C:\Users\Admin\AppData\Local\Temp\WannaCry.exe
"C:\Users\Admin\AppData\Local\Temp\WannaCry.exe"
1⤵
- Creates a file in the Startup directory
- Sets desktop wallpaper using registry
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4240
- C:\Windows\SysWOW64\attrib.exe
  attrib +h .
  2⤵
  - System Location Discovery: System Language Discovery
  - Views/modifies file attributes
  PID:5396
- C:\Windows\SysWOW64\icacls.exe
  icacls . /grant Everyone:F /T /C /Q
  2⤵
  - Modifies file permissions
  - System Location Discovery: System Language Discovery
  PID:3436
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:5520
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c 92161794669900.bat
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4704
- - C:\Windows\SysWOW64\cscript.exe
    cscript.exe //nologo m.vbs
    3⤵
    - Executes a VBScript file via the Windows Script Host.
    - System Location Discovery: System Language Discovery
    PID:3604
- C:\Windows\SysWOW64\attrib.exe
  attrib +h +s F:\$RECYCLE
  2⤵
  - System Location Discovery: System Language Discovery
  - Views/modifies file attributes
  PID:4476
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected] co
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:1444
- - C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
    TaskData\Tor\taskhsvc.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suricata alert: Tor Node X.509 Certificate Pattern Detected - Inbound
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:576
- - C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\taskhsvc.exe
    TaskData\Tor\taskhsvc.exe
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    PID:6044
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c start /b @[email protected] vs
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2268
- - C:\Users\Admin\AppData\Local\Temp\@[email protected]
    @[email protected] vs
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4864
  - - C:\Windows\SysWOW64\cmd.exe
      cmd.exe /c vssadmin delete shadows /all /quiet & wmic shadowcopy delete & bcdedit /set {default} bootstatuspolicy ignoreallfailures & bcdedit /set {default} recoveryenabled no & wbadmin delete catalog -quiet
      4⤵
      Executes a command shell one-liner
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:3284
    - - C:\Windows\SysWOW64\Wbem\WMIC.exe
        
        wmic shadowcopy delete
        5⤵
        Reads the TCP/IP host and domain name from the registry
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:5800
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:1572
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:3732
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - Sets desktop wallpaper using registry
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3424
- C:\Windows\SysWOW64\cmd.exe
  cmd.exe /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "puarelyyoqj654" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
  2⤵
  - Executes a command shell one-liner
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:6004
- - C:\Windows\SysWOW64\reg.exe
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "puarelyyoqj654" /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Temp\tasksche.exe\"" /f
    3⤵
    - Adds Run key to start application
    - System Location Discovery: System Language Discovery
    - Modifies registry key
    PID:4968
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:4172
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2168
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3784
- C:\Users\Admin\AppData\Local\Temp\taskdl.exe
  taskdl.exe
  2⤵
  - Executes dropped EXE
  PID:4264
- C:\Users\Admin\AppData\Local\Temp\taskse.exe
  taskse.exe C:\Users\Admin\AppData\Local\Temp\@[email protected]
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:3928
- C:\Users\Admin\AppData\Local\Temp\@[email protected]
  @[email protected]
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:5224

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Windows Management Instrumentation

T1047

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

File and Directory Permissions Modification

T1222

Windows File and Directory Permissions Modification

T1222.001

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Indicator Removal

T1070

File Deletion

T1070.004

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Defacement

T1491

Inhibit System Recovery

T1490

Replay Monitor

Loading Replay Monitor...

Downloads

OfficeIntegrator.ps1.WNCRY

Path C:\ProgramData\Microsoft\AppV\Setup\OfficeIntegrator.ps1.WNCRY
Size 5KB
SHA256 9ea1c9ea934fe98574eb384fd50fddb64e7e950ac8f42837b5b7eb29f752a8ac
MD5 3c24df3649a2d1243c8f20a7ad127fc2
SHA1 848580bef06436defff8c19638ed89a38a6ed2df
SHA512 918c652f9b0efbc9d93b469fb2093fdaa5b1c5288eb0e42995f36d2bfba5170b93a64c95f19f7e37127bc13b91db3d1961e2066ac117f2fbddf1004a26d40502
SSDEEP 96:ogdzqOJ/owhjZRSPJWV653VSyRaX8kDdh2CNuod06Uc/uAdw:rdzqIwesvqNFDdhxNuoqx5Ae
TLSH
T125B19F5D9B0B1A8B7743D2F5FB0D02219794633FAA63C2129CE8166349FA44F1434ECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.en-us.db.WNCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\FE52DAEC-351D-462B-8076-3B1A1723EF5B\en-us.16\stream.x64.en-us.db.WNCRY
Size 438KB
SHA256 5baf4fcf08665b9cc0287bdb92f6d45d676574d28bde00ec641866643562b80e
MD5 372f1e2764ec3e0684d54edd635135f2
SHA1 ed157be7a25e4a0ce9dff7f44506a14f20bd9b11
SHA512 cf5b9ee0ca9963046cdd6d7a7a27a0f2879a199c227693949f6452b6cf417867f48885ce57ea8c376ac0117ab6120a3a52323f9b1a7fc79567667da0877da90e
SSDEEP 12288:SASQ3oBQx0xtDQ+VRl3+7Sv72rOlNRvyxcIuO+xaGQa:SAfoFi2TNv72rO5yC/Xx1
TLSH
T1F4A4236895334DD3B633FC608E3E71E0A826B36D7F1ED963251BEDE183D248698D0562
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stream.x64.x-none.db.WNCRY

Path C:\ProgramData\Microsoft\ClickToRun\ProductReleases\FE52DAEC-351D-462B-8076-3B1A1723EF5B\x-none.16\stream.x64.x-none.db.WNCRY
Size 1.8MB
SHA256 be3a4ed1b8fea0e6280e9043154768d3bdcd9ebe07b15ed2ba529e5776b5a91b
MD5 1d4f1d5813e7ecd083d26f1f1eb9a3e2
SHA1 290a6e4d387c98fe77bd4a72d811fc50c26bd89e
SHA512 4b19b473dc1c5fceec67a67f755a7f8f8f28aea3c4ed71864b9678dc7ba62690304f903723269eb1acf5f1502f31da8934aefc6df57e6110f66ce9fdf2bafe4d
SSDEEP 49152:wJCHSIOdvY4CZuE51IlBxMQAGG98cvEDcsxfUoaCIFvaS058S:EoHXlZuAIaQAzmkEDcsd3wvral
TLSH
T1249533C2A695DDE0DC96B74C97589E8C70797C5AEBC41B008976FACB4C65C8CCA0F82D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.WNCRY
Size 126KB
SHA256 48a02bab0d422ce6f792d7cb302d08682c23dfd7a525d00918a4798fe19823a8
MD5 d8fa92b21ae550e09b96ab1238b074ab
SHA1 a00a74f26e07244dfdc52e16f9a588966118e20a
SHA512 9a9004b09d7b560c75e91aad3e90f58a496f5e66946104fbc274f262b9892259099610253d8b31fa56810cfbae608f845df1d472a428ffa40ba40129d1d86cde
SSDEEP 3072:KC25WLRnepU5t6ecz7VdjIU6Uo0/ZFGFY+j7S:9RcU5oBnI+oEV
TLSH
T1E9D313084B9D530EAB81936581ABBFC58A2D95177B7B193D3428B9098CCCC8DE61F747
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

device.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.WNCRY
Size 43KB
SHA256 77b8b62df5bcd3ea552a0e1e293b570b91d2ce40d196aec8674c58cb760cd51a
MD5 0fac35d6257f1602a54f10188dadb9cc
SHA1 f6ff66a1042964cd19904c62827de6851212aa13
SHA512 a69bba827473bf97219fe63a508b5c579eccfc76ca1eceffe94326a2d36a5f43b00428377faa9d79ba331b04330eab6ec76f82855bbfe6146673bdf9e6485985
SSDEEP 768:zAYgV9J9DRbPS8dEEg+1aKMIr/0fbLzfb/MDmb16Rv2iuAZx5IazXV9B4i4IE:cYgpZ9S8dEEPIKM+/0PMKp0vh5I8FT4v
TLSH
T16713F123378FB661462F0E8C78E9255030DCA73D6256FEC15AB19CB6CD9ADC1B907862
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.WNCRY
Size 28KB
SHA256 430d35350d315c49b35e932500b9b49777f09582439a70b5f9d5d7c0a9f8fe89
MD5 15b2f71124612364777d029a096f1535
SHA1 de4e8371d59aad5ae2ad817dfd932c100a5a2434
SHA512 c62943e2e624e64ba6b0323877c74a8f1fc6c10d577aa868dab018f36a28b3fa7d825ccdfcc4bd39ee343df591c03cb11ce0806e266e455e0c3ea62bed87e6e7
SSDEEP 768:5TJNenU7v6nOjzQQ9ivs53oCLgmnp3QBGA:5SU7hQwiv7gpQoA
TLSH
T1C0D2F109A31AB675E24FB5FB70083165C71D296FD871D05BE62142ABDB8379EC31C440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

superbar.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.WNCRY
Size 38KB
SHA256 36582785e412d326e17398cc202bfa1b0e108b27913782fda686928b95b906a8
MD5 73a7f414e3bb050a5430dd0a9d952abb
SHA1 bdb4da47afad78f727d9db37c8fbf7a21bcff58f
SHA512 504d1ef39774be1fb02b313cc636b1c7aad9b0db6ee0eecac859f6999fe64b4b637c32e121925dc20422b1b004fb1e790d2612b311cafea9ee5de32f4f4af9ba
SSDEEP 768:KWMkG7SjHQd+uhnXJFz1AmHiBBhlz9M0wxmn7x8+zxWkk5ArQ6JC:KSG7SjHQguRbz1ABHz90i7x5xWkkEQ6E
TLSH
T14C03F1320949F5A4D6107AD4A88EE6E34195A3D48165ABEDFE93177CFDDB32C4CA340C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.WNCRY
Size 126KB
SHA256 d3fdf0bf70b0191ed800ae22d468850dc0cde59de3b6922887c9ec8e3892db89
MD5 c414cdbac55919d46669c29f6f314c45
SHA1 2fb53aaaa39324afe75cabc4264f721f5584498b
SHA512 244c0a0eba7f05b16badcc5a7238fa5273ec3c2a77989a98b83d2f80a8ec3f5d0d8af02002621e454043f8dc6a6af2503cdbd55f8a404ac83e07326df0eef851
SSDEEP 1536:gAGxF71H/9w+74mGniGjIRLQ/WHXcCk+gtq39fcjVX4fJBhCC9ZRdroCPkRcItNu:gAGZVw+9Gi9uCkdzKhCCj5ItNQAo
TLSH
T1B9D3127772CFB038F2B98C954C3B454B94BE1858D937EEECA4D93115674A332E89A620
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

watermark.png.WNCRY

Path C:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.WNCRY
Size 28KB
SHA256 75d47fe89967f79bb68d9902f86afa93003211abd50cb8ff8697c68946975cdb
MD5 c0df7079c4cd40edf35dc27759e8183b
SHA1 39c7503d7fcfd534be4131803d9d5a724e1912fe
SHA512 873aa2e78b83b210e70d6955018dcc8ab7ed0285a35711c978f3c4320e69b8ff57eeac88f3789ea3039e9cae5325b224d8637b9dc70c7aea535d498da5f77afe
SSDEEP 768:PngoOwdetmJR9+r8oGnAHCdrQGq2+pVkzAA4mMjmT+OM:fJwt0yr8ou1q2+pV5jmTvM
TLSH
T1CED2E149E213A6EE4EEB050E334CFE1675B4A04A61935ED2A593225EF5034209F5BCE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\EventStore.db.WNCRY
Size 96KB
SHA256 cd4d2549d5331947893d93f089a4295911cf50dc049e74b3dee92424397b3a39
MD5 63a2ca9f2486a25ec04285cbf24aa342
SHA1 5fc083e7052e4c9f3d4eef8da9d02714826e4bf6
SHA512 01cfd3e98901fa9fa7b835b7179356db661ca172e827bd3b4ee11ddd24e8742dc5b98415fb56f7f88bd62a014a68836c809d4f67055157ceb42af91ea89aaf70
SSDEEP 3072:gS80hUNjnCk2g4FHxakLYFNjgSYGbvfbHF:gW+32LRarbvfbl
TLSH
T157A3122011321E849319BF7C7DF563F920F7EFADB1980225B892D27A8D2D257A6527C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\ScenariosSqlStore\EventStore.db.WNCRY
Size 48KB
SHA256 7fa043482f28bcae56821fc4830a6cd7b7353e682d6ac4278992c6d0bb06a6ae
MD5 5bb1d0279eb634b87559b3f9fe2dbf20
SHA1 f917ac61d76138375eb32c6d264b5b0ede5dced7
SHA512 c6d6a784340fef0a06cf60604b980ed203333d387f476f8598ea8a3983e009a0ee722b57f9c5577b016cdc6dba0537dcc94094b82f79837780d2569b2028b64b
SSDEEP 1536:mOZRG1JRw1B9wkCMBN05bxdJFVH8ST7JlFsyM5LgGh:QuyLMB+pJFVHVzsyKVh
TLSH
T110230105E673E7EF35F607661B5E0FE42745CAC4FE765A3299010BBC059C9988A2A332
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EventStore.db.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\TenantStorage\P-ARIA\EventStore.db.WNCRY
Size 20KB
SHA256 147634053edbdda62741a18bbc3a7ca693b7513965ab4d2b3943aa34e641dca3
MD5 50f15024cc29e87074c51afe9b2f0b24
SHA1 1881827e45e1f8ddb234802f7175a7a1f1cb6e54
SHA512 88f9b62645a4c68e08712f459d74af70416ba02626be1237d8ea1e61ff3498bd802fb0ecff4118faab9d35ba8b344e806ad3cc1ef016e9b7d9ae8f619b32cd5e
SSDEEP 384:XjzuoB4X0m7ted8arN3ijRK7a+Oq3UJzduJWVou8NI35BOB+bKrvirs/XbO:XjdOXBarNSjRKqhu2yNWOB+bKrusa
TLSH
T16292E1F1111A1BE589F7D0F65B45DB78490DF1C8F0A86536C6BD94C2336612878B2F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

osver.txt.WNCRY

Path C:\ProgramData\Microsoft\Diagnosis\osver.txt.WNCRY
Size 296B
SHA256 b47f5b12be2c219f7514f1977a23dc779df9122f3396a784c736ed67dfb7c5f9
MD5 83a6e59999d126055c95bc56c9725c54
SHA1 073bd0f9a4f586df4d5b96ac1cd11d2e74532294
SHA512 cb409fa6990e4ff724340c272d38f2fe18b0d0a1f930a116f1b0eab8c153366369fac98845cda9bd689582049d4621c8b0346011ebecd9c543b6e465ce42ca64
TLSH
T1B8E07D8A4C01DCAE86190FF5D28D21160A73E1D09E6CA062E6198E95968899C154E114
MD5 SHA1 SHA512 TLSH

Submit Download

qmgr.db.WNCRY

Path C:\ProgramData\Microsoft\Network\Downloader\qmgr.db.WNCRY
Size 768KB
SHA256 00a5e27d9e6ddf36ca6f800f19784ac9c9b1d4e7a4dd4a8ee11907aad20a7aaf
MD5 09128a245f2fd61bfdfa091a42abbde6
SHA1 7e34040b57b2248bf23020b7816ca7318c15e9db
SHA512 82b26471e96d366e79a3aeb735132fb45f91bead2778b792a3a42a49313297cb20d1567631249d6a142bbc42486391997efe9348a9b42c6713aa5a878d15832f
SSDEEP 12288:q8Zaom7Eqf+qNm58727WG84R89YJSlCtY8d7C6X7kWsbWxJpYLTFdIJxOeC8Vwkg:MoofhTya4R89YJSlStrsbqJpYLZUzFkr
TLSH
T1E7F43373128550A0943467CFB223979E920245B75CC6993DFF2BB5E26A0D1A7BF8B2C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PropMap.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\PropMap.db.WNCRY
Size 76KB
SHA256 6f065410956f395f01948cdb36b9af70c5976c06f75f86c15b185ff9342f001d
MD5 51f5bea202a3f42afd0c1ae687d8bded
SHA1 43eb96ab74785cb551650a02f39a5e761ed9c43c
SHA512 5ad25882b1664f5d3e7bf1ff224f04af2d806eae14f14d3a77231f2e1eded1d368177e1866d98c3c3b691cbb142109d84a2c0cc15add9047c844cdc56dd0c873
SSDEEP 1536:7tGpxasZ9nNqMQE1wB/TEgrgQsMOlsQRu2W1/FJbkuD+XB:7wpxJZ9nNHP1wdUQ+ls17Tkuax
TLSH
T1117312DFFF734570890592A1E8E0F05C834E62297535EE5FB46F167127D86321B87621
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SecStore.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\SecStore.db.WNCRY
Size 40KB
SHA256 ca221c73d82a762bcfce0ed9bd0477299c9522ab9ca796fe5c5cf26a6af7d048
MD5 1d768ad586b497959cd539de2911ceb7
SHA1 4083903de92d9131367bed7e1a0d2f04ced2f497
SHA512 bef136a4c9035705d6c4e2b49971e36aacd2fb97050226b673b6ff127f2baca7177a15020475d785fd37f807ecd9ad5044ee20a5ea9eb37bd95c44196aa9e32a
SSDEEP 768:s37XRQKxGuCeKuGMKgCzLd8rMqa4NqCmSlES8l3JQ0ntjnBwR:e7XRQNumuRKFhDqai9mSk3TjO
TLSH
T1A20302703F1630D6A336835B36AE42170EBF6F2B4C989ACD40B1B41CAB265F589F018C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-gather.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-gather.db.WNCRY
Size 48KB
SHA256 ccdc95390e905c770163db641a895000e3d7e6bbf7c52b7047b4d3a3e8af0c98
MD5 b9c4ac0b7215b734c2368c775fb6d511
SHA1 a80ddee1d4fa1f1c46849686dd7e40ca9ddcc0de
SHA512 bb40af3dfc8134ac8c4bcd91e7c31c48ef1d34903bd82bfc2e975acdeefc9cfaf9278c753c7817fa87703dd96b6505586cf7de09307323e1489d03f89af52d91
SSDEEP 768:oSpb7lM4l0H8+9UpKT7htyWRRoN3Xi6N28Q3eU6mT3vhKM1zlLIHfWQPaH1W:oSBZVl+lhIjVXi6oJ3e6T3sAyHu8
TLSH
T1E423F2813FE58BDE9CDB69494784A8C7999D32E3A3C8F12DD9440643F8F1B8C552C627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows-usn.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows-usn.db.WNCRY
Size 4KB
SHA256 be3055e543ea8f65d9f069a05c4748092d9902c544c43a76cdbed9019952c408
MD5 557616cda0401b51def96e25e10c2dfe
SHA1 9a098de15323dc5a6a7a9ce10bb47ff55625a54a
SHA512 0c063094e48514422c0ec9151f8b8cead9bdb6728ea298ef80ffde9bbe26b2efc193b0fa1aac7b3aeb3dc0e0e76029c9ebc89d053ee2311755ea4796a612a1c8
SSDEEP 96:o7yMpEjhB7awr/ElV6X2rvdjcF2kzxB4j:goa5kX2rvWAkdB4j
TLSH
T1FD918E45A3544C2AC7D6F478300EDF419687D3C73943BE01A7DD0A9A830ABA7443B0A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows.db.WNCRY

Path C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.db.WNCRY
Size 548KB
SHA256 b68ec900e5e7005fcf35c5442f4a75de9617c6f22c6c82b6be003f63fc741d06
MD5 8d4fa86c434735e284d36fc69b2f4a66
SHA1 48dad30eeaec826f91a0b3e8ff14b8cd5c5f46fd
SHA512 2f88038db6b505477a90537b6ba1e82c30ad7c9af00c6c780ceb97e9ae60de11280458d027491944bf43220d37b21149ab134d6bb72186aaa400c6354cd3708b
SSDEEP 12288:xQS3bM76p0wOrWHnHslOTtzrpHMfelIYF80czyN76JoY6OqCzm1TT1XW:tQmsMbhl1UsYoaSA
TLSH
T111C4238579DCA91F2BF23A6789B8444100F53E771E105787A9A3F48B5B0F067C4DBE2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterInboxTemplates.ps1.WNCRY

Path C:\ProgramData\Microsoft\UEV\Scripts\RegisterInboxTemplates.ps1.WNCRY
Size 904B
SHA256 6dc058cb45c7c7d45e189cab79fe2c98a1c90f6b0d9c5c913795e9e3696dfad9
MD5 fda436b6dd525736aed74d576a287da8
SHA1 a418f2ba8779b5a6531e9efd96f61c2aa8444f39
SHA512 6d40f0622716c51a4075cf510ddbd8431a1faf78baf7a3b565653ff0938b9d6975050c4ce2757cb6ab9cd1e1dbe16df0daac827b98e1cc217ed3933a1bf15d52
TLSH
T19511B32A00251B0679A26E38E1634F83A26264FD66731CA26B90BC7A8488CAA1860182
MD5 SHA1 SHA512 TLSH

Submit Download

guest.bmp.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.bmp.WNCRY
Size 392KB
SHA256 24fc583578f9dc2ad57674ed619625d90911e6dd618795074501abe1a388fb3c
MD5 5d9ff023b3177e06f4102913ebfbe84e
SHA1 ce7b104b2ff768ce283bc0fe8c9c5874a854c44c
SHA512 83d4681f17184705e864f98e370eee587b253e5268a8fba16fdd28a29f8ea9b9e75773e78e33fc45c76637a6fd671fb450fcf1b841b602f411738379aa75ec6f
SSDEEP 6144:h1EXiqmgZxAyNF52Lf3IF50F4h6wyhHr5+JBXcTPOyuQOipME+U5c2tQnRPD0WjM:h1nXgYOxfz2HrehcbOytndwRPYWjVCzX
TLSH
T14884235188F10DB02D08CBA1C7F3E2E5A3D663C3169AA0C5B70CD99FD4AE6A47917C5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

guest.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\guest.png.WNCRY
Size 2KB
SHA256 826b23cc1df95415e9adac1e0ded88e6938426e55085491ca31447041d0e7d46
MD5 0f6a6079e6fe2fa4dc1e13d3dc07b06e
SHA1 b6201e0e2ffa1f128e239c34ca80393a8ac49a97
SHA512 7f2c1cfcc9ddf05a77f8fa9cb7849847ff427c50aa814516ac5760ce9b476fb38e5e6cc3be9d711ff87eac75977723f2573040921758278e3beb335d74cf887e
TLSH
T119414C2C3C610E19B836A1B85571134580AD85DD2E2F6FCA83D55D68C95AC43C347BB4
MD5 SHA1 SHA512 TLSH

Submit Download

user-192.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-192.png.WNCRY
Size 1KB
SHA256 7e28257a28fa4b537675e9903b884da7505acd1874a7075b9ac51f104b05c7b3
MD5 fec35d296105014c552b5ed45a033f91
SHA1 761dd58ec67057d499200bd716f3bb9b67422370
SHA512 50c4ee8c9985e4d218a0f1e0a756cd2291caf55a963787c174e6849fb400fcad2d65f1aede72b1beae1f1d9637316d376a7633bab6a70d61ba4f7cf60c0023f2
TLSH
T1F111DCD28C7D9543DF6A611C156854DE0DB10EFDFE4F7564D52F117501C14C678D8847
MD5 SHA1 SHA512 TLSH

Submit Download

user-32.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-32.png.WNCRY
Size 472B
SHA256 aa5729d86e4391146d6e0b80f98c5cc56dba1b4bb1494220ba431ecc9acf1987
MD5 4474943416eb6149434a25c0702d9c55
SHA1 60dbc180c896e22097a2f797132081e9975b433e
SHA512 47fb3f54e1c8adddd9b85cc9010cef2a1faa37fc64dc9e5ce83a9a4cf1899bcf624365f8225d40c30c219f3617372e5087d578803ff3cf2e48798e07c2cb1e4f
TLSH
T1C3F0BBE6CD402905D0C5FEF394DD4AF8151177D903988C80715FDD10CD45146480F012
MD5 SHA1 SHA512 TLSH

Submit Download

user-40.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-40.png.WNCRY
Size 504B
SHA256 b197cdba8900c0966aa223812c9dfcdae413d00020c1905e7ba91b2398c4c915
MD5 df0c4bb47aff061904d605c21c76f724
SHA1 74cd1813161073efc3f85879125cb76a17da3078
SHA512 b3d96f7ac7dfb126a6609810dffdef2b134ec1443373198160e21a02fed7184ee42828ada4954f1c9e71d8e10e2c3cf2161de4f61abce2efc91180c530b1cded
TLSH
T10BF00E3C17424C29A98919BBCB4D177050022AC17B392B16178EAF64B3BC031EBACB14
MD5 SHA1 SHA512 TLSH

Submit Download

user-48.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user-48.png.WNCRY
Size 504B
SHA256 f8b38dc7ca99a1f25bb003cff5e4f2e0b3862edb997dc83526964e1475f3ec8c
MD5 c46e8ca8b7e3a063c7fb7484f5a7dd41
SHA1 c3c651d646dae6023f6c37a2010114cef28d1673
SHA512 a1df9d3d2e5c3d3adf1dc7560fb3bc39ca712448ef6741a8bcb31370574b47018ee729b69406495b1df5937184d17574320b633e7e4e91ecc4be01474e58319a
TLSH
T1BEF005629D61C50AEAC38D2EB8C87C4ED626F3EC24B455403A1E585626413756949B05
MD5 SHA1 SHA512 TLSH

Submit Download

user.bmp.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.bmp.WNCRY
Size 392KB
SHA256 05c683d2b6a2814c74810f01ae1f54fe0f24bf3813b7c58938bc6ef508881400
MD5 a8d09d19bb33b5f854a078f5d58d85d1
SHA1 1979942fa74f21586dc177e0b90f1c7bbd763717
SHA512 5c41bae2d4af73832650840748d94be5f81daf449aa3d1f35d4d020a9b349a05179ab4055ae609d7b28fa6a265b379ba3402755213fcd4090463b35bd2cf2c17
SSDEEP 12288:KzZEQhCfKvlNQqWq46lPhqzTv78TZjGRp3o7H:EEQhcayqdlPhqHT8TZjG4
TLSH
T1A78423275AAA3EBE62D539394263499DC1B7B383B1550FADCCCCB003171D8F5E6E1990
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

user.png.WNCRY

Path C:\ProgramData\Microsoft\User Account Pictures\user.png.WNCRY
Size 2KB
SHA256 dab4b3d49aa04a757390fb270c805b2ebe1f0e3ae66e881fb6a1084f5e943990
MD5 c497a0bfc46b673ddfae514f5bc57170
SHA1 4a0584a61bcb8f1bed344d087c0f246e6e076f35
SHA512 300fe4dd6a24cef765d80602dfb84a53b0f5f395489c61e04df9c1227312f699ad59a57716cd903593e37c485a70af0f4efae44872fb6a53080de9c0c9ad2ea4
TLSH
T19541F8332A8C42CBA458DAA57DC537A16AC34A344F3F3A6BC4A2754BD739C358131490
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.2.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\cversions.2.db.WNCRY
Size 16KB
SHA256 f8fdaced393bf25a5ebb55da5422d8657eac41b4c77168ba29beb7a2fe9e6597
MD5 5707f8f38f28b1055d181c19dfbc7159
SHA1 a1351753d318201929b4598d53bf32b190399555
SHA512 c80ab09477a4e2c81c2a7dfa52f90497ef2a41d16a8ba866030abf279e131620298d573e4534d615e1cba1f34a3d5f2e8f156aaa715b5ed6981bf1142ba9c0c5
SSDEEP 384:ugCdbsxjCgbRCi420CFt1mkRTU5cbCKFf6/7Rgwt3:KRijlbhFfuKO6f6zRzl
TLSH
T1D072C075C2E13F7BA332D9E9E069AB25A8279934FDAE5C106150F13435210C5EB6EA42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{18C4D42F-A4DD-4A70-ADCE-243A7E0EA88C}.2.ver0x0000000000000001.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{18C4D42F-A4DD-4A70-ADCE-243A7E0EA88C}.2.ver0x0000000000000001.db.WNCRY
Size 1KB
SHA256 fb24ed5e1d7812a0f5c8a426380c52bc18d5bb7b5cb5464708ab5b4dc3be9991
MD5 d02af35b62d775205d521b41d1dc5a8f
SHA1 dc2344557789a8c9d8ed81ab53cde5a3d1e967bd
SHA512 1e71057ca0bb0df4627f1f58ef9eec7ec1863e8fb30591b028e7d3eadf98680f057e39c43e90c91f3c3b24d3f452298498a70e3e84cac941e0ee40427daadf72
TLSH
T1AF31DA28D41AF230CBD50E6244166D701B58F19CF96557B5D3059DEBCB6036AE6C8605
MD5 SHA1 SHA512 TLSH

Submit Download

{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db.WNCRY
Size 297KB
SHA256 8f073768d286652eeffc1d3ac9cf55c033761a0771433d31fcd2dbfb279ab058
MD5 fd39e6c27d25723e8490f270757b68cf
SHA1 b4e36cb953ee0f0b75d0cf631d313d9c3b4761b5
SHA512 cfb77e34567c14f2fe060ae480d378b41db8db54c977722973b5d5d82377496e6ab272f56baac7c4ac97791fb0078534517b47def1c4eb3aa7a4ee431bd33dc1
SSDEEP 6144:Uc9Vpmwe3D+5scbNCIsMf5x/Yys7K8DfXub1hc9hJL/vj/8qM:Uc9Te3y5scb0Gf5x/H5owwP/bkqM
TLSH
T19E5423D97629B02711DFA53FE3D356C421AC121D6C23029A86F3DBAB5B29F31F0A954C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY

Path C:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db.WNCRY
Size 639KB
SHA256 91c7a2c9d6b8f0ba1a5282c599198e088df1f8dc9deec8dbadb6f051a7b1e2a7
MD5 da46b7d78c0bf387d5e68dd190243904
SHA1 db51ee352df18658efe11c6c1900ed728990b50c
SHA512 43eeacd555a40303c839bd8d4b79f01aa16be350b4e2de288d2eb007a7e8ddcbb00c92f65c104f08a289d28aab56f38cf475852fa463687046fc278dccd7201e
SSDEEP 12288:J/tIBhrWqEyr0J3PJJ/L2I/6PfFEUX4gYV5CSUbJO/EuzXym4/zD506HVAEk39G/:xSXrWW0J3n/yI6faUX4377OuDym6XhHh
TLSH
T115D433732ABE7C3943E912080A3339C251FC1D159B7A3F6267E4751BF297344E9AA325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ActivitiesCache.db.WNCRY

Path C:\Users\Admin\AppData\Local\ConnectedDevicesPlatform\L.Admin\ActivitiesCache.db.WNCRY
Size 1.0MB
SHA256 94568236678f78f4a513b97edba4cc4d866225127314dd35c3076ddffc6d210f
MD5 7dae52d7fc437dc1d37a3d2539d5e22c
SHA1 f73ef96b7be686404a05f5d064ad6c60a85ff754
SHA512 362d670e2f494cdbf97dd45ab23cc4a5c714a482e35ae953aa631b0c9f9955590499b972844547bef23c23cf089ef23bd483550f79e70c88f24ab8ba6f814446
SSDEEP 24576:DELqe4afWKcbqxhSMNxGUzTpF55upZXeDZnEfQfv:DWFL77dFfSZmZEg
TLSH
T131253385A8EF8F9AA0F24F941803B7E61405ACDF1DA4D22DDE2953760CDE3CDA974D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\128.png.WNCRY
Size 5KB
SHA256 70c1a5add552bd5b054e8839619e1b86ef883deb1803e26ca01012b1324d0624
MD5 0589ec6fedd6370c40657d207190cd8a
SHA1 dc9b1e4b7c57f6c1a5f871d4f89b64f427577498
SHA512 69effa4245f9ff0709c7fffe24327f679ff9194f422200d879976aaf5e842c76be89a347cb981be1d7363a61ae2959e26691d063cb171b3a4223ae87713921fa
SSDEEP 96:o6N+bgAcoHXLHdCzigABW3Iap37YrpJB+1iMl1229M/jWF22OPHfoB0cTdpOnZlg:rN+EAco35CGAIap37yif1p9iWFrO4QnI
TLSH
T1DBC19F62BF6DDA76A9A000C5421AA8C339F9C758490CD1BE583551370D5242E635FDE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

192.png.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\192.png.WNCRY
Size 3KB
SHA256 8932b3085b3c33ed0d43950bce3bcb95353d2f591ba53b4aa94b577e441d30db
MD5 2fee60d38072c37df6c2298b75442134
SHA1 54df8359ffa724db78d5a67bd95981bb7c3a936c
SHA512 fbafb262632db4e4a603d111225702976e075558a5ead4d5909d9d889d152dab7929c503bf5c1e8d4db45fac3552ad8df82499a6937feebfea6c5cf1ff9f217f
TLSH
T1DF615D7C658AE209CF39B902D32C72616DEC273D9F35E751AD96D523420E266BE202F1
MD5 SHA1 SHA512 TLSH

Submit Download

256.png.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\256.png.WNCRY
Size 13KB
SHA256 3e86700058dd74fba08d73873b9f83bc7ba76d0581751df0d8a7cbb2a1076fba
MD5 2034bad20e1681669c1b9ebe354ab2ad
SHA1 7db2864c932c4a20ba100a176806e7262561a7f2
SHA512 1b7e87f70cb5238af0c1e9445463ed8ef403cd44cdfa493c7156fe73adb59aac4792ec242e79845ab12f0738d195c8761e8308e48b09464bf0b04d35ca2bc979
SSDEEP 384:XdvfuRnxJZhJ1izYTu5WSQ3o1GGx6cLv6ECKijCYyjAr:pfutxJZhOzIlo1bWEQjC7Ar
TLSH
T15952D068910FE28BE5542A3A610C057C118458C36EFB535CA5CF7EEA378844B92F3A3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.png.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\32.png.WNCRY
Size 1KB
SHA256 94adfef44594a818ed5d066f602c31f207f5c17030cbf07647ffa9b127e8d243
MD5 e41eca42deccc2c29924d4774ce400c5
SHA1 a48620db3ba794aa2dc84f3900e21211d015164e
SHA512 1f0590d75276c8772048b617f451f5ca2fb37b730083ab0f5373dcb4029c0b7b9080f1a9382a6d70887905f55f1a0797fec32dd2a6128f63d19bf58a0f4a5d71
TLSH
T130413DB35C72055E793347E8AFF70FA907958865090851CC1AF076B60B4DE2CB44C2B4
MD5 SHA1 SHA512 TLSH

Submit Download

48.png.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\48.png.WNCRY
Size 2KB
SHA256 c6d0cf84e8fc6da238e29f86a5a5026e7570943c78b9dbe8b00df6fa5b5867f9
MD5 b79100dec42325e49f25395b2a557e0c
SHA1 f4c6652f7a9bef71896b7555bb3863ac39a87847
SHA512 7c1646352cd220516be8da92bf3022823db9b38473c6f16b43a941f0210f988c11f9d8ff5dc20b038c1bf7b62bb1de7b219678798657fd2cc37bd05e40d7bf9f
TLSH
T1FF514B424F8D554CABF86F26004F31964DB1FAF4385F510F297BE85649B810D600AF27
MD5 SHA1 SHA512 TLSH

Submit Download

64.png.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\64.png.WNCRY
Size 3KB
SHA256 c291dcd07c0dbf00d8ab603c44b510fae9b9e3dc34c4461858502ad0f8771cb6
MD5 26758bcef0dc69b809e8400b7bab4da6
SHA1 b6f287e4893492aa7d1f1f020b0b5e94a9754b07
SHA512 fea1f75860a02b4fd81ca808072c202fd69326e52f6c6b2ab7f2a5c07cdffb388541a6fa9a9d5eb1175ac39976bcd3497ea5ac161f39b7b275ec1b5b66c31caa
TLSH
T1EC616C2260887A3B09C3ECFEEC35D92B920E45938B3E90562CDBE1451600853F1A3AF7
MD5 SHA1 SHA512 TLSH

Submit Download

96.png.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Web Applications\Manifest Resources\fmgjjmmmlfnkbppncabfkddbjimcfncm\Icons\96.png.WNCRY
Size 4KB
SHA256 e6184158b43e2e07393343599d7bbbf870f1d35e6e64819ac20d87b6f4d0434a
MD5 d770177649cbf3a8ed1b7b7dfab57b5f
SHA1 196491ec770c3174e86a91aeebc7dca9cbf752ba
SHA512 8fcd2d50ac766842106b88a34b26d951c5f47663ef2a0ca4afb8a98c00a1bcda1d2445a20805ae08010f97192e96a5ee09201af4d4f0dac1a427bee59d6219c6
SSDEEP 96:oaZ6ckvj2P4MFImOhuLlimTjqsG7wCAJZX:sck2P4K5OA/X7rh
TLSH
T1CE917E2A1E03BD2843DC250AD16FC989D2A72110D1CA997BC4121524F7FECED46EB93D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

heavy_ad_intervention_opt_out.db.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
Size 16KB
SHA256 cb296a7a6521a35d655c2547c743224f0478872ea8bc10c3fa95a6b79b5b099c
MD5 83ac9a3245a4d274159dcbf794c020ce
SHA1 bd919091506eb939678f77f51a394c83e25062e1
SHA512 a9a45b053c1d9455bf68b477002a295beed8013967870b087b43739b2b826a5345111153d5046ff00bff36d6dec4cf3f096f819c7214dd2e5d05f94a0a02f56c
SSDEEP 384:G0i1uPW0C8ewUyGBqzsC9/X6sMwGMlHj0LlM9zD:GrMHPewrzsC9wMNIxMRD
TLSH
T1B072D04C8FC8C8BADD1188B539B697FFBE14DC0C68960A86DA9487541F84FB7444D1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db.WNCRY

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\first_party_sets.db.WNCRY
Size 48KB
SHA256 4a8e45cd059865d49779cee7976262edaf766ce4afd6891625e1b05532fdcfcf
MD5 34e21374835da0f5df1cd9d3bb0bda3d
SHA1 b93f1391b6af31a091b3c9aaca8534f199c1ab39
SHA512 e0c1e3bbd1b3d6fe32fcf8c31fd7041607a97f67dc7f65afd86f363e6fbfdd42b0f33e78d8de2c20615751fa3ba3f506e76b9bc4d2dfc9c23976e7bd3ba20dbe
SSDEEP 768:At8xDOv1XYkUoQAx1kDWdnu2kUtuzlY6OsDEySHdHHAv5w+97oElMRYbXdZaE1Er:9EBUAXEWdnvAzqtj1HlteEEPTdnxW
TLSH
T1A923F1CB3438C4B2D00893E9B9592FD5F34C59A7BE17C2850AA510B1EBBC65CA40A5FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IconCache.db.WNCRY

Path C:\Users\Admin\AppData\Local\IconCache.db.WNCRY
Size 14KB
SHA256 a2bd8746d5a2495d1b4a77c6ef6b8dbb0d66f576673051724f5e28ca53d05672
MD5 95ffbafd9c4bfb774dd4394de0dbfd17
SHA1 f78ad0faf8c9795b910df88b1eb48065ce39c7be
SHA512 75650f0741a1cc530ff04bbb81adafbff5efbc4d546a26adc0322b6db453628e5b0de987b17f2c77fe5228000740a9a06574df5a8a25cf63cb68693e7f6e4234
SSDEEP 384:E/3TF94lm7kmVmD0jaWzakNKyo+NLSUUqU2+Mt/LgzykHyYvuie1xS:w3TP4l6FmD0jaWhc+w1eC2Vv1A
TLSH
T16362D0597C94EBFE93C296306B1C4DE6E036D8DD90C853A048371C508D61FC692AFEB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeEDropSQLite.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeEDrop\EdgeEDropSQLite.db.WNCRY
Size 32KB
SHA256 7cf963e30ad94a48d653fa4c5de89db24e8950511fd9ea87e2c3cc426dd953a3
MD5 ff4ac7e0360428348d79994f6cf36505
SHA1 f34a061560a56fbd799a0d62f4d8d5a14df13246
SHA512 539fa8039ccf6a30563c38c1e51a1cfe55a6360c29723650dd32b8863a9408946b6134076717f3a88c744ce003ef5b7a328b749222aff0075c3d278da93f95f0
SSDEEP 768:OND0Nx0fznAeSCKYjgiUN2jmrqyNRkCPHbOyRK64t+R:ORuuv3HiWyTkEg64IR
TLSH
T186E2F186238A71A48083B829BB482073D5543713FEE911BFF267F29254F87370581F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EdgeHubAppUsageSQLite.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db.WNCRY
Size 28KB
SHA256 4aa8c99b73bcc01f25cb48744c0eff078ab1503ab564ecf5f21c11cc9b59365c
MD5 3df70594cd47d52205c9532600bc1d0a
SHA1 8c53535b9a29e98738bf9383fa996ad3876dde9c
SHA512 2e5b36ed125994fc89f170bcd8f435b91b8aded745d503d0b96b73ab5be354c913fd52937c3693575901773a686dfecf9ff8d852b320bda171e9b04e05d0cf2b
SSDEEP 768:2ESI0EYtqgrTXPwqvS29TYeIGb/a35Rfvz3XIFZ3:iEYtNRub8apRnz3XIH3
TLSH
T160D2F10A84BCE3B494E15DCC4D8DD1B2C0D886708D19DA2766C27BFE67AC63686CB91C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

128.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\128.png.WNCRY
Size 5KB
SHA256 042fc3634a44ec2b29454a05b93a70de40e7025294021a6687daae61c5dedff1
MD5 11d5e21a97424dcb5f82d2785c1d8277
SHA1 fa966ab5c18b567b2cfffd68d1540900ddc031d2
SHA512 36f0b483cf2bc65e3d3cd1498533965c40138602e9599911db4c732407f130c324e7c3516ce4d22c31551ec4b671b71a8b37ba401188c686bcc481fa74cefdbd
SSDEEP 96:o0Yo9fcHCQyGJzCiyKCi5mlDHOB7P7S2SawoYeAaUgc53qkdwgINa93a8zBSiKGF:HxfcHHGiyVBHc3S2Sfoua45dj1TSEF
TLSH
T119B1B003E569C0F50244401F712FE632949EA77187D17438FE69E3E6493D50639A9E59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

offscreendocument_main.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\offscreendocument_main.js.WNCRY
Size 130KB
SHA256 5219b2acd952c41cf5e043ce085ab72d9d67e0fc93f73e174e6b6ba7537bb94d
MD5 b52b5e17dfcda145c87e0e3c409f8a8d
SHA1 e8a714d72550502bf99758baa79c004cafc0b2f2
SHA512 f2a5b8d3173fad8c15d4dee3d1fbe0bca4cc864de9dfaca85c330210bffa7aa95ee2135d10d929c66a4f874c51d0de10e21f2a976333deb45f12ec1b76bb130f
SSDEEP 3072:8GI1Yywgbvpx4jHdmQacDJW6+3tDxmbpO5vCWD869OGng+PUxIqXl:8GRytNx4jHoFc46Kxmb45vCWD8DMUxIA
TLSH
T152D3128193E68D6334CBC9F25D59D6FA8C347C13D1B7E02A6C02917A52086BBF3C6636
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

page_embed_script.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\page_embed_script.js.WNCRY
Size 632B
SHA256 1833f5d8a13bbde06b29b29deeba6026129bc1093dba183600d43605eae814d9
MD5 16b341014db6974b7d55aeeb9e6c4fc2
SHA1 c8849a3173ce1dbdad76b360a92fb05f102548e9
SHA512 7e13ce5f113821f58477faabbcb707dc6b039dd4b639dcf6986e6db0dc5c1f80f3331acca90c921b4149ceecf3b5e437c3426bde79befea59287128c785db1f4
TLSH
T1FCF068C0D753436BA916553F42047F68D74F5497C7F20618FF3246752DD50451D983E5
MD5 SHA1 SHA512 TLSH

Submit Download

service_worker_bin_prod.js.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\service_worker_bin_prod.js.WNCRY
Size 136KB
SHA256 bcb111908e023bf2d87080e1c4f9e8a5aa7985c2c0ee595224866d84539e7f0a
MD5 341c15ae406baeffa40600ec2922a923
SHA1 7a3ba90e7a5e0ab45619b0a661b64214ec060d0a
SHA512 f656945248c01d7dbe7de6a99ad59250c5224395147e6db463317c1b14c4ee33d79b9e2d504d8542ffc4e6856be6d963fc9eb331db86cd7899b07e0c9ad205cd
SSDEEP 3072:sG4gMoZUHyazBL403q7f0lQ+407ndvzth94Ty9oiB:sG4grZmbzhm7f0a+XdR7
TLSH
T1BCD313BD39FC942D4B74BD6E80221678FCF2F31CE2BDA0D2261195E561F389564636C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.WNCRY
Size 664B
SHA256 2c990876756c46634227f55d3559a939ad0c167209b8ead8f18d90af24b2119e
MD5 479f2f6484ba6804464f6d4a38f2eaa2
SHA1 d6ac4cfb44d467eee1d7ef9fd152c7cf25e97e11
SHA512 7933308e245ad259fc1f3bc7393bbd286cdba4641c8a3332ce6d1aa2216525fc4216c605bb42f857630fe9072ffcdd49341f163174d1f884056f6ce819f6593f
TLSH
T1C00188500C10F24DD10CB8A224D285957DE7D189C71470099F61511D8594200D9DE7EB
MD5 SHA1 SHA512 TLSH

Submit Download

heavy_ad_intervention_opt_out.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\heavy_ad_intervention_opt_out.db.WNCRY
Size 16KB
SHA256 e2f6b5b27f877b0609ee37195e6f8ea4d4d0ccee6fa03da6a5fb04ec2b427124
MD5 a33e885b89bda5180ba5c03114f27e37
SHA1 ae0067b62338208346fb5ff538addbf6300ed565
SHA512 9490c685d2eed03653518d49603b5deaff1331f8a6831deabbc5169dade2c5b7b80cefb098a0eff6003f8e4ccca8d9f3a9b2f9631a7c371eb259e59426f3f033
SSDEEP 384:F0P4CcgnZbFiRpT2yHwjyiY3WlD3xrb6En+0URmXYxUuUf:iACXZb9Y2qCjxiE9UR5U/
TLSH
T10472D16E3FE69C5B5449233BBF74441BD374C5811E0483F25F192A9AC6356F03A5AC30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

load_statistics.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db.WNCRY
Size 4KB
SHA256 d7cc30ca466775562907b74238b29fa378446fe33193fbc70a16489344ea0094
MD5 a2241e82a37304923d5ef835bf19c2a9
SHA1 5b06436f8c89131e8690328d643d1d3151e722a5
SHA512 5930271383de3d22ec13f5577cbd468d14c1cbbb6fe4e5aac3b31221b69cffa94442e0fb2e669d258290edbeb185c5ad29b0e56842b958b97afa4d533b2ea08c
SSDEEP 96:og3lVgyXhk1YGCzxddsgO4Wq6KhEKBuKRvIB8ErDV:Z1bhSr2jO4qkfuIIS4
TLSH
T194918EC9ABA486889D4BD0BD3EA539C1783A0DC2639B50589CB143003AA3D5C780C2C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db.WNCRY
Size 48KB
SHA256 2a87a2e020859f049de61ad1f7536d7896fa7223995fbf63555ebdc72dab8f74
MD5 65eea9252e95820523dfb82dc9423d80
SHA1 8008ab0d85475aa5997f88bb1da9ba28b021312e
SHA512 74894389fafe29f860101abb73283818767bc6d1cbc09ee1e47298b12265236bcae3c3a8a5b5a93dd3996ee91093367ccd355830c4532250a58e83689a4f8976
SSDEEP 1536:Fku3LmlfAo20LOJaUXDq+jXE2153d9H7JF6f:SqLmlYlc+jXEK3/Hv6f
TLSH
T1EC2302E32527FF382265A45C8DCEFA3C6CE5FB181C8DB73A9E9601440DBB8C51568635
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

brndlog.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\brndlog.txt.WNCRY
Size 6KB
SHA256 de668e3a9a711b06a25c8d5ea79c79c1b8b6b0bd5fe86a7c3481c54524ade1c2
MD5 363ad02857570719d830a7bebd4d50b1
SHA1 b66996af24829b424a8f189145383bd4c7ca5e14
SHA512 5e5012b5a57c117527b596fd4f5706ecc8279f4495fff4d50f152adc59c5d1b64d9c6ee395ff501cab5e705ab0c565a943a4fc46f2d1375af0d26536aec98fe7
SSDEEP 96:oUXFdzzHgbdZeslYWKa9UzAzZgtqHLHocV6PZus78M0A7QmQNdwvQgiW551Frch:BFdveRlv0+ZgoH7kZIMP7QrdgQgX/Fe
TLSH
T1C0E190EF82447FF589D4CD93B1EB51ABF4D1C486CB9685A393CCA3783578D09A039846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mip.policies.sqlite3.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\DLP\mip\mip.policies.sqlite3.WNCRY
Size 36KB
SHA256 d0057655becff7924ca9d2cbb082bf04843cd3edf86ce8a939b16ec239924a6e
MD5 5bafbc4bea5f508715f01e916a0dd3bc
SHA1 1919f0429e4614309974967cfc4488ff07378d09
SHA512 05c1f15315a8aacc15436a1a0bb1507bff7ae22c4ebda66eaf5e5db892ce84394a53cfdda2b28129bee40f83a0be58cdf6f8f833e49f5866817c146cca254978
SSDEEP 768:szH4W2J1WTCvXTwWQAFD3MG58dILvn01/U7SMvHiCrRvead/XgTV:5HJDTwAF3MG53w1/U7tvkegh
TLSH
T1F3F2E10439567462FC21AFA60D492E4CCA3D6BE3DED3508593661409AE17EBBFA3016A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

excel.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\excel.exe.db.WNCRY
Size 24KB
SHA256 a89539ff89c53f3a51cc625be79b12a2c52deb54562a9ce12a266a6752caa071
MD5 a5b6b24c162438377ef12ee2acbe0f55
SHA1 c479eb40c4dbae3cfe50b8364e12eac3a1bce5f3
SHA512 b2e1aca0f7df02fc9e27635d7cb7897e696cc253df11473ea84f6f5ae954f3d20799d182438040d687906584738c2140db24892edf188a4b8705102e94d2b285
SSDEEP 384:8VFrk318UG1RbPPF0q+iT45RgToG8WkKf6522UlxTzuIT3CTEqeyr45cQod599yM:Y5k318t1RZ06Ygyly65JoZacsEQMc5yM
TLSH
T19BB2F1C8B566F1296D0EE3D4D50EA087A7C389382C1D54054B9332867A8F36F1B93EB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

officeclicktorun.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\officeclicktorun.exe.db.WNCRY
Size 24KB
SHA256 614780f070ed3e155a74a19542b51586cfb50bf8ac02f60406f5d4334c1b688e
MD5 fc9b6644436bee4efed129933bfcc1b1
SHA1 dc750e570f1412e179d5eb28962a00f1c6116cc2
SHA512 c008dcbb51e5757b94de64775f837c5849d3d584844ed6bf9480f32df3be151c5d0cdecf59276943e8377a0c30a0ad6afad9c479125e349e6bde3c7dd16f676f
SSDEEP 384:TAwAbg3Piv0iZoYe7srqdJ1ckCJEJoDh0aOLLUawfKt5SxfS:TcbvJZ6ok1ckCNOaOLLUja5SI
TLSH
T178B2D0487804D2DB305AA1644E7D1CAF1FAEFB5710B7218E70B5B4FE58C94209BE98B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onenote.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\onenote.exe.db.WNCRY
Size 24KB
SHA256 3c25135bde920ce993d383b0b93c157e1e97d544753b3af6aea591615462d441
MD5 2469ecb930bbd09ff0def580ff7c03ce
SHA1 3cc8d7ed976bf0a2abde15b4afb0058713ccb971
SHA512 9765683d0ef1ada804e6fe560c7250bc60cd97af114020f354475c22edce7cbdd3424d6d94fd704981f0cd912b2e3de1c97d12c15ced36263c02a4a630ec4f78
SSDEEP 768:8fi18DQNtjf2dV0BwKPzHFLn0LuufGddO3+5q:8aGyhfG0Bw6TZ+OPO3wq
TLSH
T112B2E044232DF27C1A9DAEB7A0234C5BC20BDF348A224DA8425DC67C7DF24B01B4922F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

outlook.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\outlook.exe.db.WNCRY
Size 4KB
SHA256 a0a34362428517cdc86ccb8de81546bb0512b088449f3371ab961e5c62ddb408
MD5 f72eb7e98c3cd6b025ef0f159762a086
SHA1 87bc494ca40892d00c8f3d11bc92a16b833b58df
SHA512 7f04997af1f995b12e5cd03f869a35fe958a0d87d0320e44247e382c3e45625f01a4ecf0f440cc444f938d797492047538cdc6c1e031fb77abde02ce35588452
SSDEEP 96:oBEflkqANx2SKSTDgCK5XYSCvJHDJil0Y0rNpSYYofZ1e3DcJDGE:5oSS3/PMXYSCJlilx0D1YbcJDV
TLSH
T157918F756535187ACFF111B86F806076B894B2D8E905283B78F80B7755C6CB50EB318C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winword.exe.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Office\OTele\winword.exe.db.WNCRY
Size 60KB
SHA256 a8e76838a48fd6727429c7697207b4a466ce82703a195224b7a63ad2cbc638c8
MD5 acfd05a2d7de8c20c5782939b49ad4f3
SHA1 ad8e194e9364d91f59fbdac473d1d6ddd0e7ff5d
SHA512 c2b83aaa77e6732801b3b28b230c62cd558aed29066742f2d781809edaf49643fe265fcc9bec854bbeedfe34e79c69ca5683d152ed85797d9c0cefa3e75d5eab
SSDEEP 1536:xH/5d74aQXS1T5s+uHHthRkEpMLfwQKL0eFH4O:xr7vxdgHnuKMbXA0eKO
TLSH
T1C953024F1A337C4D6BE9D16099A332C78F8ECF00EB3B24455AA9229785D8D057E2DCA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppBlue.png.WNCRY
Size 5KB
SHA256 c4330ce3ba45a1fc8d964b715245764e7401b85760ed873a5c48e6a3a080476d
MD5 6c728884f71859d617e3af2c9fea8636
SHA1 7bd381767edaa9a7ff9cc2c9f733ab3de9529f11
SHA512 62b5c178398a394d0709a2a8dee12ed9e47fdabc44d59556628de43e51eb17fcbde23cf400e949866b8d994c5c5106a1c1ae97a63447684c42366b89166fc007
SSDEEP 96:owRlC2ZMVWNweWtKma6b0XpA58dxaXdbg+5BMxwAB0wbU0BFB3Kj7w2J26ulksR6:rRlxZfLkba6Q68d0xjvqfFB6w2rulpR6
TLSH
T133C18E71BEC13BAD2D4A5D9CCA0625452A1F31D1055F8ED2A90207EFA82326DEF944CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorBlue.png.WNCRY
Size 7KB
SHA256 78d3e7e3cbdc40a109c6f550368b527e6f4189cb9a5f76426109c97535fddb27
MD5 f4e21b03158bd9c3f5ba29db04bf2ca8
SHA1 908d9eba78add89daf95d440e4a89396246f3c1a
SHA512 a561615eaf0b3cb4b47317fe132547d499cb57ce766dbba7309b15c0b56616677d768658f2c0a29a12ff062ca197fe36e7b0ecec4cc0d7937b0fa839a0f3bb38
SSDEEP 192:iFwRhAw0nZmmUkP0R4iMwvDgwzj2SHWiXF3nx70:cVLz0dMwcwzj2SHWOnxg
TLSH
T1EEF1AF447F41C11DAD984C80BC0BB842E89FF059906D4E066BE5645B81CF99748E9AF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppErrorWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppErrorWhite.png.WNCRY
Size 8KB
SHA256 32a5efdfdf5acf0ba9ec89086539da517f1ad9228911d393108b1a72b857aa0e
MD5 7d37365ee77eaf9ce0693e0dfbc7b911
SHA1 67819c1c329fad30f1282317c7c3c894e981b292
SHA512 e869a93b858d5759d15720de907ec722a12c4e16fab6590d823f943632241b51468c46975e13fd46b2627368e30d8032e732d2453b6c318c1b0b2abd222e71ca
SSDEEP 192:Xx7i3coQIRii1ev9uuQ2m/ANKejQ2tvt0ngwGU:w8Eii1eVQ2m/AsSunUU
TLSH
T130029FEF4E0A233FB81DC57C2B61E86E4B15B3249E1D6708A945B8CB074D1D96A47F23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AppWhite.png.WNCRY
Size 3KB
SHA256 ff375055db824b67d26a1f61bc84e6024c777b92acd3f73b3a7472cf363b9afa
MD5 4c40b2637a61e4b5fb40afa805430456
SHA1 aa9af9dbf25a05f7c7c54530343ca5a5645ef778
SHA512 a66a733b4c97bb5bc58e6126cae44890bd6887bdefb9cef03323fe63dd5b9f4e81e496774fc51b93651b6f2d745973c9fa9ba5589fbbb64d68b05a578fbb7162
TLSH
T19E616C03EA8AC8551E1BC22F3BAF46145B76A697CF8113C36F10BF54AC76A41ED04B06
MD5 SHA1 SHA512 TLSH

Submit Download

AutoPlayOptIn.gif.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.gif.WNCRY
Size 374KB
SHA256 5a0d8b9565821f3e2db51b3166c499614db38f6c041ee31dc446f2fc60731d55
MD5 d0fbc5c238eb05602bcce6534b25bf74
SHA1 62bccf7bdc9bf4919eec8dafdd732777daa701ae
SHA512 44daa93bb834cec7de5a348c40fbf1b59c118739334d4dd8752151abc3952414e15b2b36d6fb281bb81d0182c7eb260f89d48b1099302262b1cfcbeac347ee47
SSDEEP 6144:30L9NaJA8FofhtyxT9h5IgVBRgNBkLw0FdCPvKg8+8+NrGrpmSP+vRLOuc:30LX+Ot4T90rSLDdqvKsnGmM+RLm
TLSH
T15F842391240B4693FBC00D215ED97CC16D7B28863F172968E0EBF9CE307AF6506E9E64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AutoPlayOptIn.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\AutoPlayOptIn.png.WNCRY
Size 10KB
SHA256 9267b27291a8b57431785bc13d1b25f232c725d406c60b52fb9ad0fb0597dccb
MD5 5bd1e40499b93b223883d4648781d0ab
SHA1 190d1c3f19655349307c74eb6e099272cc4eb0f7
SHA512 272cefc689f9778b72f13a7a788407ec79ad31b803b917dc302eb4cdafcfaf344ff26a60f36f96794a693c0b0fa759f2c87d8a147f800175034f6cda018a5cf6
SSDEEP 192:HylNLZyYHNtqkEP78xD5XBoK6vNezXfiM1IrqPZEW/4niS/YMbLY+4Ay:Sd4OVivNe7T1sqh25/YMwD
TLSH
T11E22AD2E4F6099D6BD8F04CCF196AD6241CB1C890B558BFD0D6A3118AF7896CFA0B5F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CollectSyncLogs.bat.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\CollectSyncLogs.bat.WNCRY
Size 6KB
SHA256 86820aee1bd7b55174deada38b21d7ffafcc3e78423369ff22619652ce3315dc
MD5 e236c26da6024cf3bddd5b0805a5fb18
SHA1 56ed0df8584e0be57360d3bfecef42fca18cd1e5
SHA512 a67b10e399e8e0092912f68d4c39eeb958db703cc3fa641a35802e62432d37b5198ea74b5c7678a1cf9a13bb5206005abc55babd478e27a565288edf5c424fba
SSDEEP 192:zY1NPHwjwBI53CxO2d0nhNIVvFALv69ux:zY1NPwc61yO2ehNyvFAT69ux
TLSH
T101D18CE8BD092A76318CE5E036745EEA10D206462F44DA6939FB8B213521D51AAF7386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppBlue.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppBlue.png.WNCRY
Size 7KB
SHA256 906ab4b29bf6f472b1a25421a10fce34396f46254cebbf199e07ceb4fb397bce
MD5 ac05deabf2c6ebd41e53cfbd741b97b7
SHA1 c94c9317293ad49d4c3357bb1057b3211b5331f1
SHA512 cb76c4ad5410741f789b60802932d3e956daf8b5830281605f6a30c197484bf482ac888e8fec9b2805c0114aaf6a0e137855268020681e5360f968de6bd5d010
SSDEEP 192:v5dd3caEOKELgVZSFYmjIddKxgKgvUlD+SX5Lfprvx:RXcaEp4QSFZjkdKxgK0UlRFfpt
TLSH
T140F190FEC821E1CA9DDE76010986D44107FA4018F553EBC2925DAD9911F7F5F63D8D02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ElevatedAppWhite.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ElevatedAppWhite.png.WNCRY
Size 5KB
SHA256 fba203543c8cd8cc72f63e8c18ed9e9b1fc90e8168311f7431596cd51740d273
MD5 fa4f80601d5bb137b0c87d7ab46cfea7
SHA1 ea8ce93f33f43e894a59fa79da2393dfa9a2a07f
SHA512 4afbdfeadcde8443216bbcb43f31ce3ce8a6a708247861491bbb5008002f1927683b4a6b5d92c4a2bcc1b28ce7b6718fc742c4c80044a75aad2df8cf53d036f2
SSDEEP 96:oioZx7Vh3qTFxlxUnLYQe2VsTo4rLoWSKDHytNzb1UdFGJPfqnX3JGWKuDXJ:y73qDl2LYQe2us4rUWSKDStNtQofqJP7
TLSH
T1F9B18CDB23328897A438F0BA16FACA01061DD0291D6F35B461ED36A79FB065D10DD9E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Error.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Error.png.WNCRY
Size 7KB
SHA256 6235c013f8f784b7e6aef44003826fba26f59ec1c913b3cecfdbfbffcb1dd2fa
MD5 54e4861f51d48722db5bf1fd181095b1
SHA1 fe2e47db2b040da835154d785cd1679880a29d7e
SHA512 d64d120bfa4b2607ceb454658f59a142c0ce437ed97f2265e70f82dbfc95c465498d938d9de89137674fb60353757197bb552ec7025ca59bb23752ec4f915103
SSDEEP 192:75h1gd/Q8p6XXRJZTninUYUFQ/drwJGsSb0:7DWdbybukQ1rmGsSg
TLSH
T168F1BF9E082BF6C13F84E75625B679E5112447A5811F43B920F4DA8B436F233E8CC513
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMHeroToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMHeroToast.png.WNCRY
Size 15KB
SHA256 d3ef39edc0cd066283d0f506edc68b353fced9e90f398315886d82d1bfb7d28d
MD5 028f10150c17d17b62dd8f3c805622e1
SHA1 884306dc93e17147e75346b215f47006282eb8b0
SHA512 6df8f4c8a86b85d414ae6090e1680dbea5556017aeec0ba797aedffc9250a9c8374d2e24380ffeb7bd91543da2ab464a5e9dac625ff985fde36952fdb270e7f7
SSDEEP 384:iqseXN2XGxYVD/NZ4Q9ZeChCkC0iMpINe25miPmTFdaYun:AawGA/NZ4Q0XkC/9maqaPn
TLSH
T10C62BFC0374C16844703553E9914B6FB1F3B17D488568CC7EDA22BF6D5A27496C8EC6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMLockedFileToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMLockedFileToast.png.WNCRY
Size 10KB
SHA256 b7565e04dcd2ddb1f91112d6c02553c9437c3350fe489f09097011517db09cf6
MD5 07af804da3fc605dc17774dcce15be80
SHA1 fc58c003a41316a624800ff969c065f22339483d
SHA512 4f4fc270279cda91ad5d60fb34c5ca372e0d12671c5a645b5d96b4edfe3622b8d69c25f7c02448e4a930ea2292f3e6b353aa29ced3d6fe4ecdfa5f9e1b7505b9
SSDEEP 192:np/VZRX21F4IgrOXHy5v1uGyrv9++5u3/iPfjyO8/Q46VKRwR:tVvXCIMSurvgXU71PRMyR
TLSH
T1AA22AFCFA00B7942E93DB1FBFACFDA63057943019E85452EB354138709C615A9CE8199
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KFMScanExclusionToast.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\KFMScanExclusionToast.png.WNCRY
Size 10KB
SHA256 6b2db946261e712bc4f9b251d1703d39ab2bd085a8e4bf1f69647c603b7520b0
MD5 5ecc918874cef27f27c6f719f49f9d0c
SHA1 dc0d53dc52e788d1de36bfec67a943529d9c5780
SHA512 56f0ab6b77fd2a234f3b15ef73019c4b2522508efc649b0245f46f934ea411909e783e5d1ad548394ac40d0f971c9f69ca6b779f63d70058b4d95fdd410fc4c4
SSDEEP 192:c1aFA2yExXYzxI0TFGjsrVheR+0PBuxaboNDzF2uR5AX7uKKrXnmRh+:8anx4xI0TCgVorIxaMZzF205QaKk1
TLSH
T1DD22C0DB9D294FF7C1FEA6B432523E9C897F2040CC122E10D9B0872583E38D25817A65
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneDriveLogo.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\OneDriveLogo.png.WNCRY
Size 4KB
SHA256 e6036e6f34f1c7abbb8c3c401170d3153b33ff45eb3355e2156d4d1abdf4fb46
MD5 4597ab55ac7c6d28f8ddc8b3af7bf81f
SHA1 ba6e6fded3a9637cbc8eba4e4369910c11ad6d38
SHA512 9f69db3e4f78c8fe196b133985a84940546c0c7e8181203ab15839cd8dab7d5a4fc18f2fa0fe30422e30551955d1ad6f9f5cac577d0988627a9f9087643f3081
SSDEEP 96:oGRy1wF6OFA6NXgkqcJQDrsX7xjY+jv3rPOmYq/6/jTDJ:zRy1y9vgvcsOJY+jKlqM
TLSH
T178A19E066BE0301C80D7E996C585911A33C57BA3525F72EE1A74388278581EE33019EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaCritical.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaCritical.png.WNCRY
Size 8KB
SHA256 4dd113970ba6c571cc95ea039d6ab813954fe46337b64e608bd7001d610deda6
MD5 8b112b6c34808ebab4b84f2be0d4ec9e
SHA1 fd3eaa273baa8139eaa7f780a868f4ed0ef0c679
SHA512 72fa9c8b0b8ca6d7c9fb7a89f0fbdf93816e21325bfa486ffd89800b0a61a99e73c778087fbea5ce3e9adc513e208f2dbb52799bb64d6d29a4292422a3f675e7
SSDEEP 192:jbB0EJgTsM2SkLTMiU3O43oUAMqZH4IHfQ6YhSE3lk95eeY6UPUO4X/:XyTSSkkiO9khnQ6Yr3Sfe56sUOG/
TLSH
T16912AF0718509A55197A005F26A2E1A324A226377CEC7324F41FA0BB53EF9FAD57C468
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaError.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaError.png.WNCRY
Size 9KB
SHA256 4d35962e39586407cfb820ac9a2cde226d0ebf86cdb5bd8e0a84c4e00a05cbc6
MD5 80dc2207d12f8f0158adbd7f388ed6d3
SHA1 d050bce39e58874a2ecacb55447ab84e7605bb36
SHA512 f00518509e552d423e811f3dbbc275e2e2ac4a1541aeb11093f06bfbb9434b20700a87fa9b183b45a69213a5680b88d2d0db78c370ede3fd4cdab8ac2666a12f
SSDEEP 192:ussb08OfXep2YKd/EGzjIR5Z/80akriKfLp7J0nJKQsXE/L:k0Q2wGHIRb8OBFeKQsoL
TLSH
T13612C0F1614BA41CE57891CA010C84B7B98F2C6AD4778ED50F2CB8E53AE52D6FCDA706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QuotaNearing.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\QuotaNearing.png.WNCRY
Size 7KB
SHA256 60f1abe550f3ab18197a88469b97d8403ba6822041e867dc9cdb1bbb188bf4ca
MD5 2ca0e1eb7f34dc25807da0da70bdb964
SHA1 a3da7f03c268909f340c8c893ac257a478da33df
SHA512 d125e61469348905d27f76c30fafdba697ae2650a5cfdcf0726d2065901212bc4fb529d1302c2828785bc7efdac6f0d4cb091995508f750338187d4fcb941d06
SSDEEP 192:GXBFSthC9G1Gzhq5hqnjOc1MmABINzDBmY6qlVKvlCJ8w5x/9f86ytr:MBFSjF1Gzhk6jOCjAidYYfKvlO86c
TLSH
T197F1AF853E2FC546A1B6F75921F76536DB1E76C741D83CF8DA704A983D071602C843B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ScreenshotOptIn.gif.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ScreenshotOptIn.gif.WNCRY
Size 238KB
SHA256 6a2628ea4b92f244fb7b893085bef5329684a394572934f26ab2f0535751ef75
MD5 fe6f37d6df4f022b8328128acf87f6b2
SHA1 4deb3301eaf51dca11f007cb65d511721826d011
SHA512 64b48aeda24b456e1bfda2cecbdfa1ee2f6f62494b0f50737c01a8f81d2c362aefde564f9393cc0747549258cfa51c85c53d7925143ef0e874a72f4b5bc230b0
SSDEEP 6144:s45qT9JIdEwbkvFVMoAbjpTOPmSiq9GhsmTD:s45qsuwbOFWoaj18mSiq9FqD
TLSH
T144342394CA2F64EC7ADBD06696B2B06CCB12D8C00E4348CDB952BCD43FB758946ADD47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ThirdPartyNotices.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\ThirdPartyNotices.txt.WNCRY
Size 48KB
SHA256 6dee3a398f9e0818b993a7d0a80ca87c984da6f332494045c7b93f82a29ecf57
MD5 7db4af0c0284ddd74c8ff95ecd060c81
SHA1 796ece35df866a049a0c01a59666d3abd7032f06
SHA512 e786f558e46fee1c2ab60f69bd3e2d5f7cdc6ac71109645406af7db4b0460e9df746224ed00cac41b52ea6f4281de6dc5288b1bfd93a19177dd3d7c4be09bbdf
SSDEEP 1536:S70Y8+AQKQDxX4NW471Dy3ig+OKfz7lWcB:S7xoYDWg4pDyy0Q7oy
TLSH
T1382302BE2DD6713EF140C2231D8745229EB114EBCF34A8CEC1725D42618B5F5EA5934D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Warning.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\Warning.png.WNCRY
Size 2KB
SHA256 a9d692a1eec467efbdeeba721afa37d6eb61be9332d60570df08baaae0a7b993
MD5 2b3a4a40da33065222e37febe13fe507
SHA1 6d53c9da9a04794ecaeddb0c45c8b21ddfbc4d50
SHA512 0110b72bd506de95e76aa2c0ffece4df0f2a75e3be196dbe234f2377caa8812bc94b67974b5892cfae859d8ce7a0bfda903c2acd6acb6af0d118bbdf33d5907d
TLSH
T190512902BB8D2F5F98CC82BCF4645B1F693DB29000C5273DB89F1DABE0D7500101A1A5
MD5 SHA1 SHA512 TLSH

Submit Download

alertIcon.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\alertIcon.png.WNCRY
Size 1000B
SHA256 7873fd614a382f62a1e6b1fcc1cdebaa77ac68eea6ec332b825915c4c2c61fb6
MD5 6ee5db20ce8f3c2138f896498365d084
SHA1 553ff176ca804a09ba9a818f4d4a28e7298be71b
SHA512 fedcffd097d56e81d0c45c4f4087bcb888f9346a9c41eb24fd73d5819f8884a2412dfb68d63230138b1c93ee8cdfb43152f69575d33e822a1c14ddc992931d2b
TLSH
T16311C89018524A06C05F0FB918B98312BFBB6099125C33C1ECC68AE108058900A8C5CD
MD5 SHA1 SHA512 TLSH

Submit Download

acmDismissIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\acmDismissIcon.svg.WNCRY
Size 2KB
SHA256 c739e337891d7670d1056661efb95a2c7cffc256156d681a362fa741969fa60c
MD5 855f763c4f59a0f6b392323d9c5f84ba
SHA1 2e951fd27f075d871be3fda891673c386b781065
SHA512 795223d8fe7ed5b7ff025e1ff03bf6761c10828b6750a53d12aad4b261a0e61c2a9b767f74753432a392361f75fbb503a854b7aa09f04d75fa1717c154ba88ce
TLSH
T1BE513AF103C8719CD630E1FB848B365A2F960788DC33E7967640109E315987B437BE52
MD5 SHA1 SHA512 TLSH

Submit Download

blurrect.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\blurrect.png.WNCRY
Size 1KB
SHA256 f8bd6207479d16dbe7060a75a704eb0b681ff8f3f3a965a146291b59358b2540
MD5 ec9d4c21b7c4771984c81b0bdb396947
SHA1 2cf3e98bd09fe043eef5392091155c9b682fbe4b
SHA512 7257b25e1a2f9261be9339e4d7b86968f22c1177447165421f180651840ea3195a4293c00faa7eb833566327734b2423c5460ab03b2e15af15a960c49539896d
TLSH
T12811B6689CC1C47EC7755AAB5504D40A060BDCB2A99C4C62A0227370858B73A2FA8DB1
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_finished.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_finished.svg.WNCRY
Size 504B
SHA256 66262ad4b867234806cce00b118ee9bd6e3c036f2b2039d23b92db168db35a39
MD5 d433ec0e1a3f9fee5b871f34f6219627
SHA1 1b8f356f8e0265c570f73927952f6fe6e0af001d
SHA512 eab74858cb28f5a2ddc7e3c4c78ff6963e3ff8ed84d294b9e8286c54187374479a0a32a3e927fb494873dec4b3b97ad9c81a1ad7d2554049d570b38b5e239fae
TLSH
T180F05479F4A21CA4C19075FB3311CF454DA0C76B88D45603767EB02132D0B970C14C13
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_hovered.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_hovered.svg.WNCRY
Size 680B
SHA256 38abca895820ca8f57a3deffded665c5102c65041510c3bd49a6ccf0dc00b164
MD5 eccba433b11a965242a76304a810cce4
SHA1 1ba3bd7248e4215854ce348f7a716a0285f48e91
SHA512 35b1c352c485be2abbabd04660faac1071062ae09534f53bac9d3a5d7c958d40fb25f15e96da4e7bceff181974d7fd5a4782853db88ba68c2890ba75bcb68ff4
TLSH
T15B014403D54B3961702908BBE1DA62919AA03D579365A411CC84D2A9922BE47CE7D152
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_in_progress.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_in_progress.svg.WNCRY
Size 680B
SHA256 019b72f03910196f1a099cf94210a9a5e5272ede2936ea657b33bab369a3a882
MD5 040a7f4905d9eafb89861d274ff3e714
SHA1 0fb7eec77daa3c8ef29156e89303a81274535933
SHA512 a386da1fbf0d0418645f18edd3bc6d331b77eaea76033a6ec6bca1ee929616bd35733d887783e7888ffedc845e9b6c4d154ce39bd3004316e5882541641b4acc
TLSH
T1F8018396622310690F7A047E7EC59D815B8749E584CD8481CF6C8469FF3AA04137769D
MD5 SHA1 SHA512 TLSH

Submit Download

checkmark_selected.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\checkmark_selected.svg.WNCRY
Size 680B
SHA256 e953f3339420158de7b73c9bcf45e8ae09f92864b3e023d9b048af7c75331319
MD5 bedb10318e6b0b44d568a007a0fc9dbb
SHA1 0bda83a6853ad8c7d69115d05876dfe00c47b02b
SHA512 3b82d3679b8d5b899b840170c4a6f8199c2cc8765c575c4989dd506f727926e17f4e8fcb816f12f4890c406551d94c1b86a5a6d03f4cb564c66f649eda932344
TLSH
T15F01D8428B08ABCA2F1428430CA0EAE6630380143FC0A19B33AC2FF8EB0151D4F062E3
MD5 SHA1 SHA512 TLSH

Submit Download

chevron.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevron.svg.WNCRY
Size 584B
SHA256 acfd55c5842535365ac3e8ed1aaeae30de3c819876704f8256e5a72f5f7d9854
MD5 f5c1cd06cd5deeb2598ab25389ee2552
SHA1 95540dd2556361ba8dd952cd4567817c8e16fafd
SHA512 9f2334f3b9e2cf7811726e76dd5bdf93f11248d37d5aa2e5ee4a43d1f49783c9fca735dc4e85797d26a7d82a81eb3a4248042ce9d256d314b3d4d193d2dd763d
TLSH
T1C4F026D97535D7C1D183DBEB00101956A3A506CBED0773F549B64914F12C191730C07F
MD5 SHA1 SHA512 TLSH

Submit Download

chevronUp.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\chevronUp.svg.WNCRY
Size 552B
SHA256 b9ba4e88c32366faa61d30dcebe52e4f4d6a631eabbafdfff39d37ec984a768c
MD5 4d5ab868fe059a00bd5550aa4f1c7b45
SHA1 09002002e53c0702673114f2b99cb3a4c3dcdaa3
SHA512 86e2c1e166e31b80d73d33249412291f72a31170429037d1963c6d310df81f6439729e148f4d7bbe189ed6afccc18462b5f15222cd05bc3cbcd53225c6e83355
TLSH
T1B1F0208A5A9FEC0CB55B1EDC5B510416F218C229AD9DB02B780FE610C9E89133D7BA10
MD5 SHA1 SHA512 TLSH

Submit Download

cloud.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\cloud.svg.WNCRY
Size 1KB
SHA256 00b1df2673c2f501021184b36f69eb9120a0308bf472ae48bc9d013b2b653856
MD5 96e4f56942c0179ec4c51080038f470c
SHA1 59349f4a30e16497944ecd32e2ae37d64409beb7
SHA512 8fc4eddc3c4c9afd9736d29b7783ff91d03410908ef7b971ea2b792a8373dfa73bba0cc786e833c8c2583e6d8beca8a870dfd3559f5d3898064c2798a1048fb4
TLSH
T1D0414E081B5534D0920E97172A81BDE437C1474F00B3DF0A878AB9265531E3652FB730
MD5 SHA1 SHA512 TLSH

Submit Download

done_graphic.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\done_graphic.svg.WNCRY
Size 15KB
SHA256 04883b574c4cf0aa1fa47996d0b3be493f6e00309c8cdeae3d71a2c1adb3c584
MD5 3341098c846498c47a8498b5fb8d7c21
SHA1 7fd2058cd234bd3e9d230dc25999ef4c279b4121
SHA512 75b1fefc58f66e973ebad4e091afadc4f4c3fe3a5085b84e9e7e16e03a2629e0a17754b1e0945af91f8187bc232d964442f8d61b44791776ff4f2b032b49a2f2
SSDEEP 384:sz50BgM5yG0WRttkGIxs7ZIb+A6E8RPmMKIyWnWgk6sv:m5W1y/9G7ZIbj6RPmznWWgk6sv
TLSH
T1E462D0784F4BAF907C13CA20B5F774B78216866701D30B2ECB5F0982352062C7D5A4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

errorIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\errorIcon.svg.WNCRY
Size 1KB
SHA256 30af08f550e2d299bd15aadd62b893687749f52f5b795532d1b61d83ebd89aa7
MD5 545d9c05e374e6fe12b767f1eb613e70
SHA1 6f3bb9092cc365a96a531bb589d981b428d3d8cf
SHA512 25762c97aab1156ce46e5e1310a8688ab20e1ec032e3ee6fc65d880186141adc097ed285e8b154519434f5299fd43066800f3f7fccbdb5d601f54872785c1754
TLSH
T19E11E91087A17BF049EBEC2D80AAAE081698977B04906EF16BD2150A756AE823475008
MD5 SHA1 SHA512 TLSH

Submit Download

folderIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folderIcon.svg.WNCRY
Size 1KB
SHA256 b1682d060969550c66241e16a65aaf102c858c3658bf0abc7254f495c251e11c
MD5 fa14f41f11583d9476fa383d46b31fc4
SHA1 82af8f5639e8cbec81f5727cc1c946441bb17e9d
SHA512 12020d2e6525c82f312a1324976315e229c0c4018299a0e88f32cc0ae3eb457042f6d6340e3bfedbed50aef7a89acf2f03443e6be7ee62b9a572f5e37618e112
TLSH
T15621B9087CB1D8231198C57F20F1EB775C57DD5D1D954D9E6040D7498BB2315808753E
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_desktop.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_desktop.svg.WNCRY
Size 2KB
SHA256 fe829d8277d5c7d81a0cfec98af0ea72f78ad2a5aa47e6f0326eba533ed2fb38
MD5 0bccb1e84f1e7d413776801aa03e3145
SHA1 98e3ac9be669ff10800c0e155b4569b4a852e056
SHA512 38f39bbd0571791f0b66b0651344292cfd8eddfe9fe0e74d85429946277bef7467f8301dcbc18da58510606c5f435bb5243c156e359d2d6109dc72b0e44d0d10
TLSH
T193414BE14897AA83FE088B8E31C14A837B5CB9D2391B24486EF95814C87DDC02897ACC
MD5 SHA1 SHA512 TLSH

Submit Download

folder_image_documents.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_documents.svg.WNCRY
Size 10KB
SHA256 762aef6b4ac208e60e07c09843c942061e9229aa2ee9ea1c5c115275eabf64d7
MD5 cb4a8af1f08b061bc95ac1c98b7ad66a
SHA1 d5ce447c274694fd631bcde3e4d5fde8e38b34bd
SHA512 57f358fb2f984f79142da436f89dc6faf4e8ac9615a9a534f15978794cb6418f9abfbf1c8fe653583b413d989986beeac2613e0aa09f3a68102c420a4cea7789
SSDEEP 192:TmzF9wLWoChWvmr91AXhkOqADjooPXPRN94COIUOde5iqkxAS/C8xWcM3:qzFMKin4kTd4CVxde5RFkxWV3
TLSH
T16832B047B94E2A3165D7C0DC799C54D11C390833F4FA2A04B73E6677BC850674A51BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folder_image_pictures.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\folder_image_pictures.svg.WNCRY
Size 7KB
SHA256 2e23654777e9102f61a39df71c339bafd9e97a2bcba9fe985c52ad0e90a8dfe2
MD5 ecb0bf7d6199fd0f28aad1df416494cc
SHA1 5cb97544ba4c33334a353fbc17d9bb03fbbaf9ab
SHA512 a4b693e1d8f331ea284798f0acc929da391500ea7a29c79fcb51cc653b2c0d33707da21f597810fcce988f86ef9a106dfcded4371c6a823f0be5470c96a672d3
SSDEEP 192:6pyYUg7hbWV5OqlCMA2arCn9kWe+czRDRi/yAMTXIhS:MyYPFWbOOKrC6jpohS
TLSH
T18DE1AE69EAE61AEFF898379F51143341B8C9374D23F41C1F29D19237A70822CA2A8394
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

globeIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\globeIcon.svg.WNCRY
Size 2KB
SHA256 f63b2b38fac1e0638b0d26f9dcab3cb031ab6471bfc3e9e3899b6bd646c62f2d
MD5 ecdab37b156664d93c968e951acbca6b
SHA1 e51d958d6140130e2459327f33d45192874cb98a
SHA512 cc6f78ca2a2fb7a37396d4b271ea1cc8f90120b5e34b0f35733afc7d2832880aaf0198960a5b2b39b6b34e56668fa1351afc87ec327ff2deb6ea7bcbe02aefde
TLSH
T132513A28EB053812A9B7D1BB03F4092C2685B2970541E0B904AD275FB865399BC5A926
MD5 SHA1 SHA512 TLSH

Submit Download

iceBucket.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\iceBucket.svg.WNCRY
Size 6KB
SHA256 1ec2e7e526fb51d3bb0d44b831674700e7d5b61324d43b6d28afa69c608512aa
MD5 13cff06ecfef1f4fb459f89793037e76
SHA1 ff2064140e110cdb1e2a36985eae65fb37c1efc8
SHA512 3c169d8d3b595195f0412b0f563deaf80e59ac2a90012ffe6ab099d540d247dc91d5d8ca76f4c1cbb4e7213f7c73c989bba131839583ac4779481e874ea7b2c1
SSDEEP 96:oGtPrfeLxaPjDHgjgeHkxzNhe/MAkOkVjMVMzUBNLsIhwz4dezlh1QvQb+S7r:RFeNaLMgekxBlDnLWNLRwueRQvaP
TLSH
T105D17E6B01696AA73305ECFE3AC786AD4895E1DCCB057321911C9E8B9679387980932D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

infoIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\infoIcon.svg.WNCRY
Size 1KB
SHA256 1d318788c559602fab5eabecb96913d4f0568ce56ecdc8c61f59f5eaaf854c0d
MD5 91b61b5db0a4d535cd6520ddb3347467
SHA1 3d147989d465ea879a50256c6eb5ea16f80ebb6f
SHA512 3ac3eef18d1da63d681a286917781a5cf7cf22f691ff146eb1879e5ee541ccc9b67a1f2184706ed7f7865b879640003c4dfcf06a91600e5a54255d9cbc4abd30
TLSH
T1E721A7FAC7A0D1D81B8E50F278A7A3E253FC49451572A9F32A4246146221400B55224A
MD5 SHA1 SHA512 TLSH

Submit Download

kfm_folders_image.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\kfm_folders_image.svg.WNCRY
Size 20KB
SHA256 911a27e66824d5a824b4d8104906c3cbe06ce3fb69cc064595d0ee8a3e5ab2fe
MD5 f95db6d48a49a05820cb78f1d57d7a71
SHA1 5bb4f122a43b89e7434dfc8634ae4699e627bc7f
SHA512 31e45e291e94fa742dd9b03495ee06a0e5854184e33840dd807cb7cee007af02d9ee9818b8506fe3a2bbb64a8d10a05f29334572c9b8afc9d271f1f265ede837
SSDEEP 384:9/w66+ojfTW51Kd7iqgPamXM0G1/gJ8cezIPZN3QFTsOTA2:e6Roja5u5gPaoM0G1/gJdezIH3QFTZR
TLSH
T1D792F1C42E96F7CB27B312AEA5F6A0FF84364940553802A8DA6F45C3C7761D6101BB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loading.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading.svg.WNCRY
Size 1000B
SHA256 d828bb8f5a319361f3ec7fec6b6bdc28ccd355c7b0d3758ee9154b5308fbd4ae
MD5 b3de917938ac59bbe325aa0bdca1978d
SHA1 f1ac8565286cf88dd3364ef76734a601c78b4006
SHA512 89fe297baea6d9242dfbd49b7be1017205a599d0038c9f3fc5b1c60e110c6d8588e742c1add28a9b438ee6801b767da90be366708b910d4f277f811db02ad1e6
TLSH
T1F7110C0E1B5D333E8966C23A0C5A02D19F0311A565C030F5EB7C65DA5341B5CD13F8C3
MD5 SHA1 SHA512 TLSH

Submit Download

loading_spinner.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\loading_spinner.svg.WNCRY
Size 712B
SHA256 ffb47bb2d2ee861952047d73d0a7eab2ad6a790cbcea56877876852ff5ecd1d1
MD5 9512f8e76d3fb8e12e6ee0b1da0b525e
SHA1 d752cac326c941530a1fd7a7a56008fc1328676b
SHA512 7fbcccf070cbc89001fe9ee35c6349b48b6e736caf18fdc4942665e90d4414ef3c5ee41e2db625c28969d571fb194caef5570bb4817c7c61ad57a3dc68a5c7ae
TLSH
T19301446DCDD5500EE4B423B1D5594405964F915325AF4C0C84A68359319182F8CE681E
MD5 SHA1 SHA512 TLSH

Submit Download

onDemandFiles.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFiles.svg.WNCRY
Size 7KB
SHA256 c88e1ab480cb6c2e790c65210c1c7231937f4828a2531817aa74fa410f3b481d
MD5 83f378d38a65001f14c02d1ec6cb4504
SHA1 abe7c90bab1de828abcaf2a268cc3f59ec7da6d6
SHA512 d72513466226cebe4648f10714c350230dd367d9e6bbc608356eb9ea9a4154134aed42c21e45dcb2709ec88edbee76c52b080f71e41314309d135a962578f706
SSDEEP 192:8Dr/FvFo3kNah2h4VsdZ9bTYqADYLa7sFhO2fw:8Dr/Yrhi9XrADYssFhVfw
TLSH
T1D6F1AE293F508C670CDD0ABE2090073C2AE4AA89963D8CB61DFE23200CED556A3589D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandFilesDehydrate.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandFilesDehydrate.svg.WNCRY
Size 9KB
SHA256 54f8d4d8b3bb194f39181e845c3191d93042e265a6e71acc6b74a80bb53f4ce9
MD5 3e6c84f67704bffa0dbb3fa4fb417b07
SHA1 bf0dd9773aadf9707a0cdbb662e328d40b4a7f23
SHA512 3b6af43cc60f4c5d1217b64bab208d8e9ecd77561b30751988ee373b09b878e0a6879ae745f9ba13dd654c24e1fc81b1a9f564188c4a16377eb2ac743b92814e
SSDEEP 192:/50Aohbfc/mhCy3oP7Al4xM5uCn70Td5/Ko++87SXt/pXABJ03EyeHXqc0U20ejd:uDo/mh0AaunAT/yo++87S9BXABBjbYn5
TLSH
T17022CF3F085FB18AAA1E2DAD358F6A91191E5115ADD53C97C2C1E400F883E5BD020EAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onDemandSelectiveSync.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\onDemandSelectiveSync.svg.WNCRY
Size 2KB
SHA256 523cdcc4fb2c71a6f457af16020722c264cd9bbe662a5dfeb59f0b776375a91e
MD5 59070c2d328b2d0219c74595f5cac0ca
SHA1 7fce00431101254870c48dd987a0f7fea639e3a2
SHA512 e57513f9e96d80b73ca7c35ea7753a23654572e942414678a0ef1d358c71e9e0e1247900171723413bc69d818684928d12628fcc7aea1b7fab0d229eb60dda42
TLSH
T1DD515C59D0FF5D7FC10FD2B6F10EA47F25279B6D8840008FF27E421B225582A804828B
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIcon.svg.WNCRY
Size 1KB
SHA256 6a1b524d57178ba7316ff50c46732bedc2d68d4708fb7265ecaa988483c86ebe
MD5 20f0a147cd29fa5a9ee7f5aa15ccb6cc
SHA1 ccdddcb3fd2f350d69362de4b6d9f4afa9a051f7
SHA512 a5d6161fdce77f9987aae2066ba35bb9dcfd8b55e98c47a4763ea0bd7ede3e937aa0ae6101844363af98527c969505623512a6376f3b0c05e30fead31a215892
TLSH
T11121B772985262C9912B52A46F1D0C4D0752DD6610BACD280F0B5E6D28FE86BA327661
MD5 SHA1 SHA512 TLSH

Submit Download

overflowIconLarge.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\overflowIconLarge.svg.WNCRY
Size 1KB
SHA256 215057150a66b357fd1fd8d40a391124410bf5dc332e1d1d8416619500760726
MD5 c9acc71ec5f96f31de1927815075d768
SHA1 8ab22bafb226fb4444bde7c1dbcd25ccd2601baf
SHA512 52b29cf4cd175ab04d6db1211e01332070178c508491a8287dc16f789602f6c1c78973c62c171148a285c4a4275bc6a23f3d729ecc502b3f2ca73379a822f48d
TLSH
T19321E6332AE518C0A403B0E2CF9F9500450F43C08BCCFFE51227E9826A895BFE77604A
MD5 SHA1 SHA512 TLSH

Submit Download

partiallyFreezing.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\partiallyFreezing.svg.WNCRY
Size 4KB
SHA256 84cd5ffafcc276719a8b2ab28c63b51ff73643ce1ffb2d2c2b8124c3c456c492
MD5 37111675199642255de062ecb8d004a1
SHA1 4a26379776dc9cdc25150f856246a8a1d6bd7c26
SHA512 5f518de432641bb2d95e9e7cfca611a255c59e271c8d073de15662b200142faec9099862ff6ee772c67412e210f2445b4b64768ef85e38e91df00cbd58558c36
SSDEEP 96:oCuRUkMFJvOrH6IGiHT/o3OSunCby21U5Ka+C:rutMF1YaIG/OdSC
TLSH
T104A17E60524FB407E95097BE5CF9622D8FB25E987B1B47E10E174C3DAAC258242E90E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

paused.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\paused.svg.WNCRY
Size 600B
SHA256 c3b02954a78581c63a3a669fca87b1c89e00aac4d97c2981e97ccbf2a4293f3c
MD5 d3cd22b1c53e9ef2193707cd74cd04c9
SHA1 13f53f71218f459e5eba571ff719137144d7073f
SHA512 97df712b2b3f306c91cd1cf15ea6b674ec0452c491f82a237d000e8934cfbcedb3aad0febc45b18a8cbe199e5b9f6d7c656e6c1b8299d861bb60df61202ba663
TLSH
T1ABF041AB0C502869C7807C6B7BD406D836530713979E760068C42891A8BA8AAFF85A16
MD5 SHA1 SHA512 TLSH

Submit Download

premiumIcon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\premiumIcon.svg.WNCRY
Size 664B
SHA256 7219e9a7b6535355abdb5e1c0bc52ac67200f66866d28a8186aa9c4362dce0fc
MD5 b124477f123af1360e40ba08232e78a6
SHA1 19549c905c4cf2456c695ff145bfbd5cf9e087cb
SHA512 6d4f26ca0403ebd15d1dcf9f4b00d5be2b9f109099db5a5c46dfbe9eeaedc2331e366a35827a594993aa319fb2bd7da10a405b643cf7ae4d1ff597414848a67a
TLSH
T1C60188B25F5714624F93F77FBC0F5D9C5473041A1649263E09D20D3EB0544A44E7C0D1
MD5 SHA1 SHA512 TLSH

Submit Download

recycleBin.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\recycleBin.svg.WNCRY
Size 3KB
SHA256 853834fd28221277b3c2f59d92b0e6fed967b3c50e27b5dc2319f3a5300151b4
MD5 954df3e40183efbc8d52578e6cb0577f
SHA1 127111215ca7f5fcc2e2960d4bdf7c09a5b0cc3a
SHA512 5b0ddb23320cbf230a1ee627f50104db16ed88a12e34ef33d67340a69da189bea34722c96749f3f9c75f06a7005aebafb174e7e7a76a57e562d4e535e360657f
TLSH
T1B2718E6F7C5422064C77F4D91661181637DC22D8B9AC323442B9624AD262FA3A4D2D3F
MD5 SHA1 SHA512 TLSH

Submit Download

shield_icon.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\shield_icon.svg.WNCRY
Size 1KB
SHA256 5475d8a5f24cf39c4ecb3e9e89d31e1477e3ab3ed0c066097f4af8a24265ef22
MD5 63290f6f4a78bd0287d2c6f7ccb70c91
SHA1 06d893ff1215481ed40d2235221806a4615701d8
SHA512 8ea3f86c4efe0240293aee50a6d066260bf03768aaa8aa5c6dd660c02323413711d3efe6742a3f1844d50f93a0a52604d4c593f7a9f38fd87592514793be4ca1
TLSH
T15F31E997977360A6C8F7756345ED6384F3260326595702B2329D066CD607099B5CC3E8
MD5 SHA1 SHA512 TLSH

Submit Download

signIn.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\signIn.svg.WNCRY
Size 10KB
SHA256 5ed39ba08c7c0b0704b3571ef8fe09b3fb379c268cc5d1b7c55913650b5e5b17
MD5 599739912214d66642a4e89a96777fd4
SHA1 bed6ea4569d7ef3d85b5a6a15a0358ee33a66721
SHA512 baca937b97ce533f3239f85ca7d37ac65a633a9e71e5332cdcacdd82b89ae78120be08eaff3d7c958ac11410287ad523847d31e23f87f6591ef874cf23da8638
SSDEEP 192:4o+N8XTitKxp7AVHxz0VNTwDn80cdBxFhRRKH9gH4hfOrWbXBONc8R:f+4T2VHxzrDE1VRKdgYQCbKR
TLSH
T1EB32D0F609C94B335EC19329AF81955E4765629090BEF074CE2B12BE35063F0D0E99EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stackedIceCubes.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\stackedIceCubes.svg.WNCRY
Size 4KB
SHA256 66c3164d1780102290ca0f89ca4b751f7e8ace6b69ad81b4c8e8ecaecae84938
MD5 daf233056f0baa79157746c4f99680cb
SHA1 5b5cc4013d2d3d219c21499a098f8dda86bb94d9
SHA512 e95cc0b945eaf5c91a0dc3f14066f9c9e0d27766309c7533b0016e4a1657d01667a4cac27bc383b791ceece28c33e6f4443d4848e95c4451cfb65739ad2ffdb9
SSDEEP 96:oZDxhUBIf5SL6/47SEOKhGCsLkAQTZdoEC8hAxFTL46CLJzAY2Tt1Qc/+:GtGEW6/OUydImTZaXF/46CNzAYMtH+
TLSH
T185B17D179F9234D9809C7EF1846C4D6CA2C2DE7DFA302040955D7AB2BAC06EE135F1AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

warning-symbol_grey.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\warning-symbol_grey.svg.WNCRY
Size 536B
SHA256 f2bd8d7fc862a71fbe870df0e464fb9c2cd665c478d0edc796eda5cf7e3ca127
MD5 5c115d57c0c3ad3036d6ee42e25f3e6d
SHA1 1894cd4eb380a20626afa32bd9a4c1c56e313ab8
SHA512 9e16765bbd8be51d4978a6e6ac8aa16bbc9b66eaa994f9737cfca329ab844dc9c77ff42c86a44d65f57510cf6ad1dda42b3a473075b4085b8bc3913ddd7f4dce
TLSH
T1C2F0209291A6ACB3C528E02A9EA89186AA032F9A8C21AA1801B70187CDC3CB45D41D94
MD5 SHA1 SHA512 TLSH

Submit Download

waterGlass.svg.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.151.0729.0013\images\waterGlass.svg.WNCRY
Size 2KB
SHA256 08d28002a3fc88c3d697b96e7e98d6c9a93fad3d59d3b0954ccf7ffc8e047326
MD5 ea733f52f7c7598430fa8b73a85ed626
SHA1 1fc5e40de61403c6cb202584f10d9674c05d339b
SHA512 af881a00a09abf883382152514826822cc217363f9d6b79296a453ce95c7b472d3f9c970a60f05659ff824807bf9eaf3d4e145155ada24c9dcb58f46d3e884dc
TLSH
T181411AEA2DC8448A85A1A4F622067472EA746BDF9753B19063F7C8C3AD4D131417C60F
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-100.png.WNCRY
Size 936B
SHA256 ae9f4a9ae26c5607f14fdd0d2a79c2a3c4f21fbc1506ff15e6d35ec504104c99
MD5 37eb3c2d271dc5181774e87a52f0286a
SHA1 5bcccdc33da1a57229422016ff922f70c7813de3
SHA512 4b63d9ce7a2f1447078b8ab06751c58c5b42f427914a8d9303a327e6ca56bc80a8fd0e5fbbf54656139c6dc8871f46d1933df63e08447eaae19a86ed96389cc5
TLSH
T1A311B7DD03ECA6C8FC7009E8900E32E3420842C2AFD743069683BD1B845B1ED5677AB6
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-125.png.WNCRY
Size 1KB
SHA256 090f04c3b06bedc672e7d2c65d2dda4f21939e46fa4dd934f4df6c9b06bb6534
MD5 019a833906077877ac09f4a133e6d637
SHA1 aedde07ea63281512bf1e3f0a24bdc1f89697ef9
SHA512 f747a4c9303546718e5a7a5e3c2226df4bc1cd6d5583038d3265930ba8b271de5672445a3fadd83ffb39ddbc84fb69e5ae68caec1a83a77681ad29ccd31a8227
TLSH
T1A221F9EC312A740894E1E2E411DC1C6081A11EEF629AAAD4E002472021361CEE794B63
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-150.png.WNCRY
Size 1KB
SHA256 58c125f8424e644c91f5336c2c48dafb7c09ab93d7a6d778391357e465d6c6ad
MD5 5c3459fcc45c1b342e1ef941a41cacc0
SHA1 ccacf5f32643a84e35d9666fe62fa83be57c572b
SHA512 3be77ab2324eaf52b7b99be5c80c30a43f8eb655c920167add89849ed56d35ac20dbf33a44bc09fd5c3c0d3e2c466b815f7d6c6cc7f5b12915298e7e3c65c3e3
TLSH
T15B21EA5543E9E745D7D5867B451263E32B0DEC52B08EEDF5D90AD40E917F741E030C28
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-200.png.WNCRY
Size 1KB
SHA256 6090c220e07081261098665d4dc9265c8c0662fe1bece8245b8660eb7790a449
MD5 e3a144583ced2c93502a4b6893a1270f
SHA1 703fda68c022a28a80f0c9b104994eea5a8e69a4
SHA512 93d07c299a67584accfe7575ae30cd4cc8de49e2a150f978843a0862584e4eaa54ccb1056ec21d9e8b9e0b2cf8700c69e232e74cb63a54f9e3577bbbfeb18c7e
TLSH
T1DE31FAA8645AD139035A8E779DD4C55083D743C58BB0E3149027364DA2076FFC593CA7
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-black_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-black_scale-400.png.WNCRY
Size 3KB
SHA256 f8ca5d6797c8e24f46ae1ca981e6fd94a5db3cdcb360f85bcaf51a57d1b5e446
MD5 a474e0c594fe224b930f05f25771d206
SHA1 55387b63bf54ed3214fc4e4785ec19b0164cec0b
SHA512 4b5b918b2c7bb892842e2ac90c9c6fe4c02d66c2d44491f7d0d6658688ffc58ad2852eec209e143aefca950b1e6e089a3636a1478d2ea08e5360f48ee894480e
TLSH
T1D7715C53E90251A031E0B82BD376FACEECFD32BB998F04856467655C31BD299583C330
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-100.png.WNCRY
Size 952B
SHA256 4f0fd13c85407f0a78e26974ddf373abc091670a505485df4ce15d3b58d89677
MD5 02793a8d6ceb0058f1f162484917a652
SHA1 20ad3aafd65246e2a1fedc9af6e7fa47c009dc44
SHA512 0e52ead4c5e586381f701ae7c2705f4abd3cab386a2d720dcba655717f342406d3e1250b7c07665d305534bee17298f366d04a1a4171f24d2a43060f43c3db06
TLSH
T17511C8507338A8C6C99FA358844BC8100CCC83981D4883B1A1779BC0639409F6D0D849
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-125.png.WNCRY
Size 1KB
SHA256 b76c443938ff5de6338e5faa5e7f07eb993c48d2ab1deab225ce4bc4fa0ba29f
MD5 6e218cd1072c68d6e0582ac68570cfd1
SHA1 223c8317d1550a574596339341e3b316480b6102
SHA512 39d3151750c769600bfcdcd2d56c257513fb6bd50be0971754b153cc103c39426138be81b261aa63a8d5bb2d9895453c140da36f145bc17c86444f6f1fff66a4
TLSH
T11621D7EB3C1096113D9C6B787152F63C42EAB28E7E821D87602131A03AB9C96E220816
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-150.png.WNCRY
Size 1KB
SHA256 bf91f5b4b30de088e8843c21d142bc3221113783e811ff6f37d2ff6ac3d3be43
MD5 f48ad6854f5a3f72dae9b034c5aec423
SHA1 56e2931e0fca64c397d468a26d22b839684eba6b
SHA512 83b7dc7de3d87da7c3bfda4311308bd27a0bf481c68d9a383738da437dc500c29bce3c6ce437f51e04b102d979f51f30d429077138eb9f94833a4bbb784cdfc1
TLSH
T14C11B925496FA313C81936387B315BE33E45B4C35E351199BDE294177685B0BC218D62
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-200.png.WNCRY
Size 1KB
SHA256 bc567e27b2cec613d859b2cd1d887f4d0196eb2e5b6a41ecbf1a9a9354d9e39d
MD5 4677f6f2c1bea5fee31a3a643c451d00
SHA1 44894646fd74a656dc9a711131f2e22314a6260a
SHA512 e7610f47a9a7a38309fa8c60d16381446d9a0892fd914e2ac47361c6eb1c616d1bda5f6c0410e4b94b20a573d2355d75a06502fc60a0d4eb40bd23da87d8e27e
TLSH
T1B4312DF780E2DF5240C44769342CBD2BA33C911D0C3406E6E8B859E5724A05F6EF5790
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.contrast-white_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.contrast-white_scale-400.png.WNCRY
Size 3KB
SHA256 e667228e3db2d30f995c5e5df49b5c187e69ceb5b0eadc328af7956bdd1c3a82
MD5 8cb6bd59213f014da320a6b6d4558c5c
SHA1 5e74795e7299d2c44e4389cf737cd4b8831964d9
SHA512 58cdabeb3bdf846fdf8b4b791f0ee716f627af308e598b350e9e13aac812d237b75d00d319e5b1b5833e58c356c97300390ed588bd2bfed76178abb86d5f1669
TLSH
T164817DCD5CB7C70774D80AFC2003B7C19219656A1B3C885B6489CBFAD22F59B123520E
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-100.png.WNCRY
Size 936B
SHA256 baf153c006dd53badd0409767456836f1e50dd073195e861fae41cc5fde64861
MD5 143e0da48895081a71bbf87a7f3e2439
SHA1 c1a894b1b4144940bee2e56bbcb82281617c4fea
SHA512 995698f7e3531d2024badbdbf5fffb77989055456dffa44e7a32eae71ffbcd75399a406a58bfaee08b4fabee0c7d9a50a0901878f7a052ea808a5b598e8b3664
TLSH
T1E611B715C0D9A1B76664DC1C802BF689DD3597B3F8CB09E8AFC7091888F0162163BF82
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-125.png.WNCRY
Size 1KB
SHA256 5972de091b7cc8065834df60d4b29050fa7ace77a70818f9f07dd303429a31e7
MD5 cfb32e0f8152a9700c60c753dc88a0aa
SHA1 7e7600ee35d3699c5393e1a6eac762711ba8c5a6
SHA512 ccc7281720a6aa6284bb2217cbd6c6a8d4c87056933e8941754e745f26b501e2c6ca94897410e05190686019de7c415c614c02ea5cec2d27de300f1f4ebae9f3
TLSH
T1F821C686CC138873E07A17A568E1BD34929A1C718CE34D92582B74E7A1FDD051948E43
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-150.png.WNCRY
Size 1KB
SHA256 ccfbcc8ed9de435be4da496d114f601927deff49d47693063ae07194d83200d7
MD5 fc35a67295b471af38694a886b84cdce
SHA1 d8199a8c11d6f4462f90feb4d025dc87df4c04a3
SHA512 4200e994b076fe74b4c73a539b757524031c3b099ae05d9758f3f2083d062abe4d3e492e3d7d21249e742727b35ddf4d5b856a49625feb5383a405672dbcd7a2
TLSH
T1A221F51C86B029C1F51182E8009F02C8BA6B5B4BE0D070BA039EDA8BFCE3827370403C
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-200.png.WNCRY
Size 1KB
SHA256 5a853cc5b185ff8703685748160666f8f9894c5c708189618fff111b67b803ae
MD5 ed3dfa759c4baafe3ed61135a3b8fbf4
SHA1 cd596afaae0d98818623459c9d386312c19bcac5
SHA512 f7d54e9b280d8e3f267ea5c8fbd3f10d978bead09522f05cac7f9b85a61408543111e9348ee895dd139ed5daa861388f3195b5cff2b1bf5c9360453220f5fb4f
TLSH
T16E313D90E02119D104A8922536F4F07EB112D8D566C0D7BAA3FC65EFD3B4403F04DC83
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveMedTile.scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveMedTile.scale-400.png.WNCRY
Size 3KB
SHA256 0fdc6367a281b13ce9bbd74eba76f6b8dae55a19f98b2b8f01ef6239446de3d0
MD5 edb0b5dc4da669473f13091ff25676dd
SHA1 5b3cc65a63bb884be47c0dbbf6ffac98be3d02fb
SHA512 8c7150f0721f7d0165f279d1de599e2d016e5a8eecec33bc9b51cf392ece7e8841bdf312d1eb202efc67123d81ce6f81e27901754e4d6163a87e7fa3e6a0796c
TLSH
T17F716E078D7308F5D54D156E045EBB770C6C3DB35847B7593E0AF690224B94F2520AB3
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png.WNCRY
Size 696B
SHA256 e6ce17911d797dd7b02046ca3d36409b6b6d5dff0d058c94131b1d4f31cd2c2f
MD5 29ca47e98493733662d41fd3014d61ad
SHA1 fa343d373762dbb6e654f611236342b3fe9f1e6c
SHA512 ab3ea77a611f8860fcb75683363925705ed5afedbe0ca87b54b6863f16f61af3977ef9205669b7d8da5b02b52ed294e2c84e43aab8a63aaa909d2f64e99be520
TLSH
T16601447BD114903EC0950AECD88655FB43F4B334613D167761ED7F54E58461D245C881
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png.WNCRY
Size 808B
SHA256 f4ec16843969c8820ff334104e7e990fa49d061d36b0b103f2a1810a8e1de9c2
MD5 6f76111ea9a54fef69cb48306e338103
SHA1 aa8df3599ee559bdef1c42e81d61c13b661b0b6e
SHA512 83f3ae1040809373eafb883c5598781c04c2c029d137cb8d2454f2bd6b3663f030a0bed5dde9123e441670589f643ee6f101906b74cef8fb430244cf9bf095c8
TLSH
T1BA01CA65095674C7001D17732890F4A7952E05F11522C1C5BE1A3012525BF7529CE9C7
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png.WNCRY
Size 872B
SHA256 ef1a4fae5e59902b45a73b058b29df77c86cef107b3dc03079108f7d14f0e1d5
MD5 c550b3d4f0b98250e2ab880f500164d7
SHA1 1b996dfc595bcf3fbef31c98fdd623929cc59537
SHA512 1462a82504aaebaba74aa4a973a4d8a8b62b68833454edc4e8cd3b74f262b0a11fffd037aec6454a8d6260b6189b368b4b87072eeb998b66d132e10da985120e
TLSH
T1FD1163430D201E43C4DC25E804E41F0E6BBCACD54F50BF51F5C94963A38D1761A18BD9
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png.WNCRY
Size 1KB
SHA256 ef45c6263a4cc2ec30e521052695405d8608e23cad6b1f89f095e1237d39e59b
MD5 7e3dc53bfa22c8ea41d64b38367e30f2
SHA1 c1b83431a1cf8fb7a98c32b412c2d6fd29de7c04
SHA512 086f87d69a713795e6bef0f7a5cf3bd4646b1cef9610da6e18e9b9584e15b5eb69ba3efa437c90a1914dd0d45bb250421962796d57cc1e4b22ae0cf96a62ee2a
TLSH
T19011B6D0EC830594A164757551BA5840C721747B9B2B75C69C164F18AE32CAACD72503
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-black_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png.WNCRY
Size 1KB
SHA256 eefe49491f84c67a59166f3510b068aa1bdd8dd450bee25f0bbcb368655fdd1e
MD5 55151d054e2fdf925b261fbdda5bcc7d
SHA1 e36ed55dae90ba21d9d3ac09de576872eb30b5dc
SHA512 27883f4dcecb82d4c44d9c65ca13c38ef6f787132a56e998d493f81109f5ea0fa7472cadccbd90b9f16c8a89b4b14ee8e00682abf62d80c34feba1b1acc3925a
TLSH
T1CA410A28A0241B37CD5EDA79D702EB115BB74A84F281F8AC353B201D894C6C316D3B75
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-100.png.WNCRY
Size 696B
SHA256 7c9df0b51330de1d50a3e78e6a1a7e12902321e68dbe09ba83df188da8def5cd
MD5 4d989578c029adbfd2cd4b1b045543ce
SHA1 a8afa615ca8e959f3e280069bdc73f04f2dc0584
SHA512 239f84833e033dc4c181a9ac6075b18732a80a7ede9c24f3f47a590946ae7ecac2e801487834b249d367a8833891db43d33272badae46a53ce099e2d79b6f639
TLSH
T1AA01941442C70304B506B2BE5AC842423A3BE301A461FB8ED488D6FE8A323AF9AC4860
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-125.png.WNCRY
Size 824B
SHA256 5a43db6f639cc5fae7bc1849070fd0708222b6521e7559c738ef047ceb854a1c
MD5 6956036edba4a9ec09d7d62c41ea25dd
SHA1 cd73a291fc9b1fa5b15966c94fc4543ffddf09ca
SHA512 2d571d478e71e4d9627912c6ee2e969dbeffacb6d447809facfbd9bfb4047c9b7f332537f3d1111ec8703caa2131735c3fe357495ebdffcac5c243893ad6995d
TLSH
T13701D6923442AB0BF2A380FC17A9B98250010E81D3E382F031EA23D51C3E08FEA2E501
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-150.png.WNCRY
Size 888B
SHA256 6d68ba6148e150c99ec914a3e962febd6e3428d73d5dbf8fe253b509208b5e64
MD5 aa3e7812ecb86cc9c3e5da3874ca5215
SHA1 5bbc5210069c3236ff1f63154d146a1a9c576f65
SHA512 6f2f0a90965aec6b44ac30d3d3e12d32a9e8ab317dc94343183ee9ac44cd46b87a1371a83c5eb1cacab17efb0433c8417b2b829927fc9eab14723b0d1ab5f43b
TLSH
T10A11E606DA4F71CDD2A093F0C950B49213EE28E85CBC687A3146C46975D406F806B357
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-200.png.WNCRY
Size 1KB
SHA256 503d6c20f035ad0a8479b934d2a65f8e7ed9ea6302219b95949195bd1e0623ef
MD5 0539f557591dad48c984e46f0b49f9c2
SHA1 1e5c9524693a2958b41203d770007d6ced2a5c69
SHA512 3bbef7b8441eea48a85112895eabc734e450a220efd0c1617f8c64b4c9a434b1178307938f52a62d31e84457bbae235ee484b569cf60336e6097239d4826470c
TLSH
T1AF11C66D5DB088E9F2D728A5AD774E8CCC8C8DE5D40400C7ABFC0AA27022D8E4641910
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.contrast-white_scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.contrast-white_scale-400.png.WNCRY
Size 2KB
SHA256 3e209b1ef79e9be8794dc73d2419ef19c77364090c4086578c0ece30ffcc973b
MD5 98002a07e9d500c5476eaa02f84be7c2
SHA1 58217487fb1f82edb13fb4ce9c488a16068835bb
SHA512 fd96cee67cc7a1d43b1667cd20bd21390b2bc97725f55946a115ec5fbdcc6fe586a6503431f487c9d5bee8071a3f27081231967718a4e226ead84a8e35384c4e
TLSH
T139411AD8389F92588685D4F11944D9B718635FA5D9FCFCCC92D921F341B4710E5D8261
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-100.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-100.png.WNCRY
Size 696B
SHA256 87991e60f63383e3af0f33a9228c0553cc8b93d5236cab65c4109b4074b46b0e
MD5 0d419937d483e8b8cad65781b0a0e323
SHA1 6ded61e0e884cab0ca5d6836f61cec00be0dd892
SHA512 2d8ed39444e3eb2b98473a1136f6baa7c52c230ffc6ed2ea61bd42f0b1bfd32065847b11f7c4dc33c0856a0ade5c5fea7b03dd2d97ca35d8493b5c3c116297e5
TLSH
T17201650701FC4675550337B97735408564D159B66594C610C19D546B584950EE0F58E7
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-125.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-125.png.WNCRY
Size 808B
SHA256 af0beac6159940b1751d0d5e7ad38c029193c8deb6714d888f63240f5b556711
MD5 0b5fcbebe277d2c32816b606696411a9
SHA1 7ac0abbbba943193e241e75edd0d8e8453c0ece4
SHA512 a77838b0226c6ae7dc2180904d67249702902bc74c474d4bd56ecd492042a2c33c37da4040c6db2a25f1d583acdd9e39c1ae33a299e0382919e8376a572664dd
TLSH
T1240181127E8298D9D2D0063EE9EF52174E23C2418C69202B9881BAAB8A28CBE9C4D401
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-150.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-150.png.WNCRY
Size 872B
SHA256 916526d180154400e6086a9790ace1fd8fded42448b85c18bf583d8dcdd25fc1
MD5 abe1c75e743b3f9dc15032011f211344
SHA1 a7083407145a8ddd940c9ff9a5165b31b3c5abbb
SHA512 4707a3a49c4199696796f08e91ef2a4dff5965f0fcf4db6a4af29781ce3ec9b627755dfdadbeb19aae7de04f87869cd98ef9db0dbc3257edb4a3479de7e3ff63
TLSH
T1961156E6115EB54CB47062FA8247D8047E8204E2E559887D3E55F211D1A14156C71DDD
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-200.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-200.png.WNCRY
Size 1KB
SHA256 1d5533581985713facd064bc0bc088f8927618fa76eecdcd16fdb34f5c61d7c8
MD5 5ce4c7eb11325d67e2153228b54c9464
SHA1 24d1cd69c498b49e02f7b810c1d67943cf57b732
SHA512 c551150fa445c9b22d795fa6b12d69d97d96d8a7c822609a5eb98ce956f8d435be8d0e5cdda9ec3b3ac98b9c231a41a7bcc0d118fc349e105b9dcfdab72e440a
TLSH
T14711F92BB353824C40A316E0E77D8B399A2748420E2717DB25528EE09BC5644080F662
MD5 SHA1 SHA512 TLSH

Submit Download

OneDriveSmallTile.scale-400.png.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\LogoImages\OneDriveSmallTile.scale-400.png.WNCRY
Size 1KB
SHA256 e742a987c9cdc94d7f8b54a9de59cf9a30b5d23ae73612373f5ea8d9697d08e6
MD5 1c21bffb9e3c27e83312f206f7698397
SHA1 6c9166f0d37f7696086085a683e2ffef717a3c37
SHA512 966a85cc48090f38ef189a0c9ead19f5cd2eb96d04a692425e986a9611d8058b7dcd41edf92eb474145ded9dbf384fda12cc71f06d48ece0262bbd9677e7b124
TLSH
T17D412A63CF0B1DA10EB84E6E2F5003DB941AC030610FC4E9C6C62CE51953C34BB1D5E9
MD5 SHA1 SHA512 TLSH

Submit Download

cversions.1.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.1.db.WNCRY
Size 16KB
SHA256 f690fea2b6ec7229ac9638738e77947a36be4d12e490ed09d8469351e7967b15
MD5 f0a4de414e1bc14e473b41e5563a339b
SHA1 934f4a02dd6fb83382797731322930623a73d965
SHA512 186117ca675b566aa42b3cf3132a38310591b27dc507e8e59bc9224b488a7b1c6358f042ddea2c8ac4a78685e6a05c4b730d98f719a14ca7fd126eb6fbce9498
SSDEEP 384:9fef+tTz3RkT1oeAJQN055+IVUiL/mMuEvOoFRmt:9fk+tTjOlMQN05sIWiSevOoFkt
TLSH
T1B672D0A486E51E10138645D5BED3B6ACAF4F2316564E3002FF85E011236AC99BEE829F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cversions.3.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\cversions.3.db.WNCRY
Size 16KB
SHA256 9953b8f35c4beb4e86c8e4544653384d874570c7a41016ccefd4d665dbf52148
MD5 9f1ceb1cb4254521c260eaa76248bab1
SHA1 932a7b40c4d1e707f1ad219cde24a944f85d264c
SHA512 1c025c1f934bdd3e6664b4953ee438068b636e9904361f2f609d77b08a9d137051067966afb19e4eaa4da5648b630889a186a076433984445a8737b7ecf4cc68
SSDEEP 384:5cdVoLoLZr0VYi6oFYBNyGFR9XZxIzaSE1:K+EZr0VtYT5DXTIGT
TLSH
T11D72D1A086BEB662D11ED16B121D5661C604FCB8CBC1D098CE71668F470C7ADCDE4DD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{03BA58C4-B905-4D30-88C9-B63C603DA134}.3.ver0x0000000000000001.db.WNCRY
Size 423KB
SHA256 7ad509fd73efc9b975971c5a2555163ed91ff3961278ba5370551c89451e84b2
MD5 bd96ad034fd2fcfd44f70e30bf899358
SHA1 04d1553854ff0aca761287b6ee8bae1ed2840458
SHA512 4deb4e9bfa782055b31e0e96e44118947f1460845cb5a40a27a178b7c5c0d8d7cdac3c539edc674e35ed58a536f9c44067774bf451e3ff4df852c79aee948ac8
SSDEEP 6144:vgPtWjtBN5un7kBlHp4mcveq2VN4WuOfFcqcclSSh8a72ae7xI1DnmyNNTy:vgPqB7un7kJXcmqM4Wukph8a2SDmyrO
TLSH
T1759423DD30F609618B205D198214A1FF0325E4CF3A2C6DD28E8FFED41B9E9993592E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001b.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x000000000000001b.db.WNCRY
Size 90KB
SHA256 c4d87fafdb1c214917fb48e4f856042820ac8bfab6cff354eded9c80ade65f43
MD5 857a70277adf36b248153f614e08f84e
SHA1 33364362feab9a2e0990593e55e77a0c733d3117
SHA512 b89de0363db865990fd1d9b927f4ae4300555ea52949e81a7a53471c44b7b71d8f770accafe38d11e7b2e98d4963af341dfddb5b79cf57a794c265ebff8f281f
SSDEEP 1536:cpi4FiwUuwIEGm8mlRrP5fphFQ4+ObsB5hzZ19uGFe/kBkSm/y/Vw7WvF:cpi4kwU9xhXD5fXFX+OIVzoGF3kSy2V1
TLSH
T1DB93125CE4C700E55AA769A34C4E752FE4CFFBB9B7599BD3BA3304298F2E5682431018
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000010.db.WNCRY
Size 64KB
SHA256 c182170e392f11e021722e7bdad1d43c4b6eeac224698ee4751411358e611add
MD5 da4a96582ada8e3d2576884c903e38a6
SHA1 8e02f5a66284455b05e65905df38d69a76319456
SHA512 f5375dfa21c04b689aac95a29ede25eb4829f5a59dee8ca5341cd0ea3ce49b9955628354be326d90416f4f45b803d50f95e5126abcb28689388226f8fca531f6
SSDEEP 1536:wlCGGejPg245DGVzeM9XjXmz/+n0UKLgsXRrtOJnsDByEnYeNr:wlWejPgsFl9XTmr1UKLXO2nYeNr
TLSH
T1CE5302AE03DDA024C20670AB46AFF472D14B1069572E69691FCF553433339BBEA78DC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1280.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1280.db.WNCRY
Size 312B
SHA256 d0397d1c3d861abafbd96cccbf5c197b125dbdac0cd3f45451d0db98ce1bc5f5
MD5 47874a060fe893552d6a58f1ed15f2ab
SHA1 720b40285a80d0646a0db3a9c6555e6714e3513e
SHA512 6aafd6d8393b468628e0d6a0d8d421c0fb546e1d531e9621c45f454fcec673f99cadbf93e83fc57b3ad15141dd91805c0f69a97bcc7485d75af449e473378fed
TLSH
T1DFE0E760D014F9C2757F43FFACC691D358178334495A35B90C4B1D82885FC533300924
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_16.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_16.db.WNCRY
Size 1.0MB
SHA256 611a85e6122e9dba35b302aaaf6f9fb16c166a9daa09b84d48ddfe0227ba80ac
MD5 5d2130b40232019ecc51240b3bd9198f
SHA1 faf869d39cd004b785dd3e93dbae0e77d23a73ea
SHA512 756bea20ae74cf35f266482b1db737a6a2733cb208b5871af452bc601b9ed4197589186b7fa62a32160e08076a7666469c60cc815d0dbc7d122ddfc9708e3e73
SSDEEP 24576:FLsYMoScgljeQ6ttPeoA2qlZZ3DgGA3cIAgeWDVUfTI6t4GOj7l7:FIYfStCztZrA2qdD7IAgv6t4GO/l7
TLSH
T13F2533E59C80AB45C4573B2BEC49E4CAEE33211A6CA0B467E1C4DAD5F8F42DD5276CB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_1920.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_1920.db.WNCRY
Size 312B
SHA256 e2a7fb87fede7a3ecc14260443c9b151d15fb2a888ac68ad107dfcf877cca151
MD5 712384b71f25889c318e1d094457fb0e
SHA1 a8589fe5f0f42aff153b1c753ecb139d8c36dc3a
SHA512 f35129e493ccdc01ccd5cb6bb14a4e2b0fd590ed63b6d04d9f7a93d5f5024c8b36afa397c4fc9096fe519a199a47023a8238696f5a5bee8c9796341350248a91
TLSH
T118E07D89052FC005D94653F55503385607D007841A9966C974D46AD121104D910D864A
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_256.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_256.db.WNCRY
Size 1.0MB
SHA256 b8f54fd9609071703160e7b89f0329d32fbb7e4a8329903f4a51051ff3212dc5
MD5 66a33b8d347d865ce35d742441ab90c6
SHA1 350f44a6ae8563818a7a7f3da09bcff0b6e26be1
SHA512 ec3e2fc854fe01d612f090b878b3033e7857412221748cda4a7138c8fbcd5704c37d6db345ef77c01d6a9aeb48efd433cf43ebebcd79e4466422dd91a0b1a098
SSDEEP 24576:xY3rS5Na3HIfKf8bZbPUpm8SusEjJah8HVyDrZ:xY3+e3HIf56p131HVyvZ
TLSH
T1C5253391616FBEB221F0895E16B43C4AD8073DAB5A8EBD05947F4D46C8BC03357B4A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_2560.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_2560.db.WNCRY
Size 312B
SHA256 56062b85374098f1cf56d6d01a8b4ca7235277f3870971de3581205a028693f1
MD5 431832b9d04afec5c8c84b7abbebbcef
SHA1 c2d84137bfc749d9d427b3f7e9d497f585925eeb
SHA512 668f6ae80fb9681e1c2601a9a2b665170aafe73aca31edf6dfa6b92367ce9a7d3d786a13330658d36fef926ee93f65ed2091561b39964e2f5a01d095fbe373c0
TLSH
T12EE07D413508C8B0EBE740F42549D5E04CF1BFE7869D681271BC6181576216ECD0A411
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_32.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_32.db.WNCRY
Size 1.0MB
SHA256 fa40b26dc41d0c834992377525c034233e5a707e83fedf20a2359f716c783aa5
MD5 ace7bd392e0f6303871b082ae8033478
SHA1 6f8e559e6657133896672ad36d2a0f24e69ddf53
SHA512 9fe3c903c9943b42b138cc892f3aca68f98a8f6837e0a876569c6809aba469cae901a6321f309736f76514fa5b02e7f0e44d42328840e0b0a5fd86e3c85346eb
SSDEEP 24576:UAoE0ff77yPuJzzwDpIZqISwc2f2TtqZ4tMxs5m5:RanyPu5wDiqIbc0mHAEm5
TLSH
T11A25330DFC11C217982D391263B93F4B1CD9EA1C04A622C960EED7DDB25E8FA11536E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_48.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_48.db.WNCRY
Size 2.0MB
SHA256 57a0ded6ab5eb33eb3f8f6ed84bac461a88d1c870432967cc9810a548fe8a9d5
MD5 529d642bd150394f366a8d5c386c5086
SHA1 0b6896252dbd5b9436c9ac5df0e3fe9f08540d67
SHA512 a7b3aebb4c091700ad4109e2ab892113fa28f142113c270be9086b0f657783bbe5f4aa498001ca747bfdcaf541afa813b62d479d34b24f4708c9880a867892f7
SSDEEP 49152:nB+ftGZ1k8buFmhluQc3v1wEN1X+mv7cDGO5evfqveT:nB+lG/k8bOQc3vVX+I7G75ev+eT
TLSH
T121A5336ED2DBC996015DEB97B0563203A793BB7C1E31214EC32EDC798D0CD062949BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_768.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_768.db.WNCRY
Size 312B
SHA256 9880905a03b1246966bfe40c07e419e579a2826a4e1f3dc8f459315f24a6cc23
MD5 55f395ef5d25d152ffdc1d47c25acdd0
SHA1 c52b79dd2b8520793f84bf86cd6a5f25c1180abd
SHA512 105140d51a9adbaff4c9f7d8fbea5d5e29d67903c2981fadc520e53912d0e92dfb345bc1c6f6410351acea4a9c05b069d905b81e35bf10fd966d9f5219ae4ab9
TLSH
T12AE0E7C7664C36D1DF5452BD56457D23124077D857F42340654F2753719C7459105147
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_96.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_96.db.WNCRY
Size 312B
SHA256 ed2a144df58b92b60a2ed440035096a4bad95f4b0768869b5f976b1ba12bbfee
MD5 37156b27ab01268f7ce1d63630ea48dd
SHA1 83459b8568630dc9dd481cb0609d2d62ddd40fdd
SHA512 866b9cbb0a4759bf28e3feda9223228f4f89a5774778f1e4f1008ad6a7f016561b4323d8bac0e42a3776c749bf5cca794d88ea0c0be45d7cd087f0c60fa9a9fa
TLSH
T14DE07D0FC0F08C11CC398A7F00899C82415F5EAA608A992BAD88434116A4C2F142682B
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_custom_stream.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_custom_stream.db.WNCRY
Size 312B
SHA256 8c3ee6371a61174631510182935356a134646dbd3db615e1896a63f3736443b4
MD5 76922559d6fd0a46daab2b8a07ee6f53
SHA1 1e1d3192beb763e480e4c4e13b884c41f9f9b47a
SHA512 1fe74ff0137c2e2721758a3b2fd6f92e4d85d9a0fd0ae94deabba52fcc82196ce2a02962b1293248f646bb689631049b80600e1e98d11f3acf38b13b8a15c6ef
TLSH
T158E07DD50A10A35AC03927F0D46D2A20B5A252CD1595188B7CD4220A2A7E7AA119485A
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_exif.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_exif.db.WNCRY
Size 312B
SHA256 32fd5db71a8a9cce45a564c94a8a250caeaad496b66897956800b6995e41ccbc
MD5 b28492e0352f79f63bd6a75437b26e31
SHA1 aef346af2c9aced7a70112095c9ccde7225f8d39
SHA512 29d548bfdedfbdb0931f81a6eef0c0017012af2cd51ce846a5d4707bf8f302db02611c8122e1ab874e4f19afb0415ccf9fc5c26cc97b6c9139980777f4c40c61
TLSH
T179E07D1909CEC3C1E849C638E2B70AD285B552FB6513DA4440611C151ECF06F5909453
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_idx.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_idx.db.WNCRY
Size 28KB
SHA256 86de220627519d805d92a631d4f3bcfd14683e4239b09b1096a9bdc91181fb6a
MD5 d0fc3fd4bbcab364323be11b4751fac4
SHA1 03f29f76e8e474f125ec71deb9ac0dc8cc5be54e
SHA512 7b3e94c7f80b5fd8b241488aad5ea0c464dfeba49b9036f0d339f407b8674160a64ac8feb822a9b2fe3b205d335209107614af4ce73879c165652d2138f837c4
SSDEEP 768:mRYC9kzr/6L3i0t/NaVATgsMjsMwoYVb8Yeolh6TVC:mRYVzr/6Ly0lNQAUeeK8YNaC
TLSH
T121D2E184DD987771360D47F3F6F7AE7A20E8182E62855F6581C635E2AF48C09EA0F846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

iconcache_sr.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_sr.db.WNCRY
Size 312B
SHA256 2a374ce059d3535ecfa675a2ce0613799946101958e0608377a4df6d99a21f9b
MD5 02f7d0d4be3cdd8d602a85b81f9a9d03
SHA1 f507ed7fe058f21daeec09b909aff6115add0e0d
SHA512 6d3472a20a27ea8624f5492facc2b1c290fffe0a1ba0276f3143a0be14447c0842bfe4f022b2e39e1d973452b1728af6340e722d33200250f8deb8b396b73983
TLSH
T165E07D1E05415690ED65D1F0F67EC5D26702A2B4DB880D7974DE111F5A9014E12D5880
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide.db.WNCRY
Size 312B
SHA256 0acdb6448a698c289d5b9dca5f9b30c70cffd354659214a281f74f084f843e34
MD5 b7a5d75cd92e7f1cca87da4e868efe55
SHA1 dff19fbec35425b90af8fc33ac56011efca33c7c
SHA512 0b8be75bf318f066c3d7bcaafa2b03559da66dca8484f3d91b7f564fa118f6d91a4f996ae4b93645010488757f478b21892dc55a5bc8f1b98f99aacbeed419a3
TLSH
T10DE07D14955DB03EF5D562B8A9428F132997D6A738299530EEC8B0A05647D8531490D4
MD5 SHA1 SHA512 TLSH

Submit Download

iconcache_wide_alternate.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\iconcache_wide_alternate.db.WNCRY
Size 312B
SHA256 3e937cbe2754787dcd9a3b65fde97e4ac0a1bc5ff8ae629cbb7f39155daccac1
MD5 5c2881c9584181a937d403fa60c486c6
SHA1 66675e297b9858ce0cb4ba433f72dfb7ea2a77f3
SHA512 c12f2783462fb7903858800cc67cfe579749a5ee8e8743f5c9be71b4ccf6a13dff9a4a8b84013974d7895262ee0ff800ab362f1faf7c3f3fc4d09ad5d318a01f
TLSH
T103E02D00000B81F49008E0300EA2A077A5884A6E054C625F1B9E9A3267DA4441029C22
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1280.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1280.db.WNCRY
Size 312B
SHA256 1673ce1ae001d81a3620f7d606407d8436e976efbcf9873885a793caed49ef77
MD5 fc732165ce0fd30536ff5f227d7cc398
SHA1 ba97254c2ecba605ba1556513a8d36ba7bb077d0
SHA512 369e9d1585358ff765faa8ce1eebfe0677278de642d57575f0aac21ad641518f132e4f144f3f1d5d65183918d6aacc4c429cd0a0e7085ea730c429dbbe61a4df
TLSH
T17BE07D156D51E61548B11B7888655483701622C9680A21E2E2DFE00643D54EAA0AF941
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_16.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db.WNCRY
Size 312B
SHA256 9cc988416c28bcfdb341b84c56b1390614e640fb352c87ab3b2ef7755a9180bf
MD5 dce7b7bd35384545bef52bc4dc1f8f11
SHA1 c0a6c39365bcc6c8800f0a17d668e2dba89d762f
SHA512 43e5ad98ddf6ea6b425562438fa4067245e23a5f43ebae392d20b963708750222c9cb21b24facaaf2ece312c5d2d03b4cec065e9e52f322f1ad9f25ed7de3a99
TLSH
T1A1E07D24E0C459ACF7BA82BC424D6DB64779C2105D10AB85F37270310995C062DC1A80
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_1920.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1920.db.WNCRY
Size 312B
SHA256 9b839a12275fddecb8fd57f0bcc6d76442c9bae817c0f61dc279149e7c032a25
MD5 5a4dca6a2a3866fd9ffc2012fec5bb4f
SHA1 98833afd8a829db4451fa1051323ce769010ec3d
SHA512 564f8086b3ab8652a00f4ffdd556e679e47b7ded816b4f0697e1b7e2b9d59394e5297caa3fd27d8f384f7f7e708a5f31aaa844bd7f6025cf7533d5b4b08447d2
TLSH
T194E07D0499C9CF5AD235177EB126001313F88BD53EB1575C6C40CA4079515E2B40E010
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_256.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_256.db.WNCRY
Size 1.0MB
SHA256 f0e7bf4b75139ce7400197ca8076b720a7aeec5b04d733c3361e527d1e3920f2
MD5 d42df8d40d85e544af892a2f895df86c
SHA1 2dc285522bbde53d8dbc066fb6e0456d766d9c37
SHA512 dd9de01a508a533df5128d57d66078f8dd541e4202c2854b71006cccc271cd4618ea2e4900ea5bea5719651466bc4f5f0f5545036284d742cc577a6fe38b0c9c
SSDEEP 24576:s3spZADBpg4/GuIuSeuc26pAb5nKXgVsh8:sQ+zKeAvb5KXgU8
TLSH
T1F125339F4850BDCF7B81E6BC08AB29FF5126B8678A55899BC1C153FF5F30942909CE18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_2560.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_2560.db.WNCRY
Size 312B
SHA256 6324ca7208e145fa95a622e8fbc1d5ff38fe09c00038fe01cf09dca2cd3bbdcf
MD5 f25c839bd3c69298bec0923586844b3c
SHA1 8e14e9d074c645f2090e7411739a9b1d4c439724
SHA512 470c7eab3461680856f7f7ebcc5f3a4e959300d87c631a8e8c8dea76c86bf4b6b607e8b53c496f830c581f1dd18218afb90e61865e2b0a1196d473ef001dca85
TLSH
T10DE0E7575E1DC5DCA75B01FD3139781B4E75B14C1A2D57051F340507774B4155009699
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_32.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db.WNCRY
Size 1.0MB
SHA256 351c419ad144ac02ceb4dc66dc61e79ec8d4f0759edfcb3c897878a3f4ca3877
MD5 a870c986cd38759e83d0e59eb37a9acb
SHA1 eb02638209dd7ef80ef65a44aaf7df4c7be100f4
SHA512 58f070979f9a868a2b74b585c6c968e32097ba414fef3ac394b3c2f8703c00034a7524800e542a044b3feb43114448b9058469b53ecdfd2ed8622a92a3fcc006
SSDEEP 24576:ZphieMwjd8sh2/plMs85tV/S/hfYQmqpDZNqUxvu3utw//j:Zpqwp8sCpKJXqpgQmqpDZNPhti
TLSH
T13A25335892B0C38282B473111CD51581A7490C7933F59FA3987719BC9EB0F5A8BBABB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_48.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db.WNCRY
Size 312B
SHA256 66997d6f608386ff72c296d50caeadd688acf1643c5d9028e4c16d8749524aac
MD5 363edfc53283b81cf0fea412d33ecce1
SHA1 ea39ec60ae0276080d5c67e70c8aaef1386cb621
SHA512 0d8a998a00629ad0030d0e00af2d714c93c2bf0e00487d266914b3b1b0c16f4d1c24195e3be67926fcc16d2dc4bba8b94b3c3dfd8051744fee372d21d0601cba
TLSH
T1A6E07887C4115C81DC144571CDC91857564131991D376729EDCD690669D17884731CC4
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_768.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_768.db.WNCRY
Size 312B
SHA256 c2b94d5c91797d0f81cc341067ce391605278280fbf622560d24be37af761b86
MD5 b4e90138a8d53d202b5e20deeff2b97f
SHA1 7e417d0733a5077f66755b01a88d74b9d187ff24
SHA512 a256a31003a88b53d9b788771fc470401cbd3704fbc2a6a1eed297167cb8cdaae03378a5e8c79cd997474034faf4281bc861f62ea3ba1054e6e79d12fbb51152
TLSH
T131E07DB186D20131D5D489FC992112D31E198E7279C9330504F8CD2561C618CA61B093
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_96.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db.WNCRY
Size 312B
SHA256 3830c71a464a7d8c76719d04f418d6cc97bc50f2cc8d0b1a03f7fa8fd1abae8e
MD5 86e2fe1be085ede90dab907b54a175af
SHA1 5cf563ef8074a95e6f8dc4a6fb34fff78ae91aa6
SHA512 66bd88780ae982b4be4d94ddb11ad0814c6aafee1b5997884f29d200a4d9984f50cfdcb5ff9b3566bc9a07c8fbbe917c5424bff4d6393fe51761278e5e97a713
TLSH
T1BDE07D147E9C5D00C126E1BC5E4ED0C92881174901DA46E8DA5C63EA1B1471969450A6
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_custom_stream.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_custom_stream.db.WNCRY
Size 312B
SHA256 5a58b079cba76c2ab6d375b1b831486be68ca11e7bfb3c494efc317153e6f96f
MD5 43a29457a4e915e3ff255f229f82a69b
SHA1 f284ad9378859d2b60711e7541e002df324aeb22
SHA512 a28b95ed9f6c3f55a41c2c9431000b6630d24a0f6bbd74995df88a5af8eba343dfa2114de669a9502e6e1e9ca790bab4eb6b3ff6771c1859eddc58250fe5a898
TLSH
T1D7E07D43D3B9268BC87C63FDC9E770C05850379888AC1555A58428C5B7E0DE9818D520
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_exif.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db.WNCRY
Size 312B
SHA256 2a8ab49b4e59a6fb1235ef494b51bbbf819c82ca3fb99cae6b436c1475898456
MD5 2e5ab5a4681d9fcce1329744198b94f8
SHA1 5a5ce9eff3b5191f0e1275dcaad08ae9bb59c76a
SHA512 a6f841de9e080c04ae05814efa82df2064af3e3632cc4e7ad5d2f6e923c8589b40c6b33edec84f0e841ee85288e98cfc87f3906ac13df7136b2a7444575b0566
TLSH
T199E07D140606BB45D0191371C4DC10455F6327BF08756742A5964ADADAC5FC3AB79102
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_idx.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db.WNCRY
Size 7KB
SHA256 1b046c2239be5ffcfb4bf48aee625fc43e25f85e938482270caaaca96b018b13
MD5 79cdc3d61a713036ed344d27a7c8cf19
SHA1 84961ae8857b126944d6e2e145447e07bc7052d8
SHA512 26a566f4798f051616a64fab951d6d8b5bc2484db6ef86f2368c3554d0cabac82e68b1295466710e130192fd4f59090f0cb74898b28d56a4f94cfeb8e5f9ebd3
SSDEEP 192:19MezgkCpCL/EkXaSPqX3Uh4iihQj1A77w/V9:ZzzCWsSA38r
TLSH
T179F1AFC923F6424DB29DD77DC95A4604F4C997802BB436E7B6855C59302CEACA62C18D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thumbcache_sr.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db.WNCRY
Size 312B
SHA256 0c0d2e6681bad476c0d7bd2da68701af6e0bfbe84b3f1151662a99b2b51781c9
MD5 b9dfa3368c52fbb8ff6a6abb3b572c41
SHA1 8d206257203477cc7cce69811080eeb38dd83ba8
SHA512 eebcc997a4cc60fb91a734675ef48fdcc66cb7d424ac6a22256ff7c4f74e23025eebda43cd02f855c2ad58ccd13bb69e3f09f2d29ab3db285056922ac751b862
TLSH
T153E07D0D1D20A173B02C62BE9CDE556AB35A8DD19F4488F1E1C4F0D45F40945C439FD2
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db.WNCRY
Size 312B
SHA256 99ee73fb47198e17dd07b8e4312f67daba15ac9b0bc8416fd28471aec2ffe57d
MD5 bf1b857bb5e1d2e5e0fc9ee078adcb81
SHA1 fae68aaf5780de065dc86eb43ba4025bbdf74594
SHA512 976248270356409df7b37594cfdc521b498cfbfc3b4d4f00858aed1f31bbfc0a19dce317a74861f0da436bb65fb2133ce3e529f9d9795948e85abbfa7b808d82
TLSH
T1BAE07DD72896F260D4742038FC420E585C0356E55F4416A8FF76430CEB0381607A9C02
MD5 SHA1 SHA512 TLSH

Submit Download

thumbcache_wide_alternate.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db.WNCRY
Size 312B
SHA256 e995c7d0dea3f9a91f6ce7480245b3a50376df1edbbff621e9afab00a1978137
MD5 97a09c14e1ab2cae0e407b5c9a7ae0d2
SHA1 542b27d2bc5c1a7fcec6e9b543a443b59382cd93
SHA512 10b3b0b26fe2b7e5cf0f503ce27c1a97de5e01ada059e6e10f9ea7b5ddf961ef240d21196dc81a022df23c24b6d0b88680e53897437c8884912c0fc1e1337634
TLSH
T102E0E7881FA00974C627E5345D5F44F423C4859405C06A4C71971B473C38D4F945FF68
MD5 SHA1 SHA512 TLSH

Submit Download

{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\E8WK4YG5\{8a69d345-d564-463c-aff1-a69d9e530f96}[1].bmp.WNCRY
Size 6KB
SHA256 b60cc7484bb37aba2a02185714dce5bc088b26eee0d2f4211f823097ee0da539
MD5 e1fc517c7606663b4b052e95d99da5a9
SHA1 7df41286ccd7fbb26af708f2e41ee8fd3fade09e
SHA512 01a844708074b87ab3430f8f26d9066f333519523d1e59679b808175716487273d57227e96a18fd2cf0f0160ae13005e14f616139ebba3c149330566c359c4c3
SSDEEP 192:wI6PGN760AuWBHKAHLCAwHeFksGOMJN+84GqE+a:wVGR60AuWBHHHQHr5OMV3+a
TLSH
T1FEE1AF5FC51702C4BC490B638C8517347FB216D357D3D7C6ADA38F908EA6B89EA107A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wpndatabase.db.WNCRY

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db.WNCRY
Size 1.0MB
SHA256 9fb2b378fe46dd9651af08cfed1965ade65aa9780f2859e4a8044cd1b7e6180d
MD5 2a954f184dda6237ee32474fdda3f190
SHA1 3818adcbd0990c49d9eb21d9a68d0fff5910abda
SHA512 aae22890e15b33097a35d7acfda94023d2c4f4d2daa056702939d55a4a0fb66706f1eec30f64972df67a874d0ef7b0ae5db7de4f8664cd6cb92398af660de6c3
SSDEEP 24576:wQwTFARMk0CgSbRSk5s6uSAaD4IjvX1v65a3zF6RHDcx:XOYMZSNuSj4IrMaDFMm
TLSH
T16B25333B7D87C64607E571E6BE83814BDA0D808B6135471ECC5A3DFE9AAF0580799CE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{8e058ec7-2a86-4589-a13b-685cf2ee4264}\appsconversions.txt.WNCRY
Size 1.4MB
SHA256 3aad99855ba066a950c416ec52a7a83d3c3dea4bbea6a8a94441187db8fb7433
MD5 bfdc16f78dae32b1f524d079727eea5d
SHA1 109e3e77447d31e8dd468f6d95e953bb0600dfcb
SHA512 5e6d4e45fa548c68e0a2a01e5ae069beb21109f6a11e8d8dfd272a8094f90eac4e173e9d0cd0062351da65bc813aeb46c5870172ec5e8f4c769182d956e4a931
SSDEEP 24576:pJ/go2kOU4P51y0SEr0CdkN2QFLjaaJfJ1CDj/pXbbD4LYuv2ZwLB6m/MBT+Tj/Z:pZ5qY0fgVL2aw9bwjvEwVNMV+T7Rr
TLSH
T1E065337F893D53AB0472561CB9987027ED26F4508DADB4B29C4F2C52EC05E172A4FACE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{8e058ec7-2a86-4589-a13b-685cf2ee4264}\appsglobals.txt.WNCRY
Size 331KB
SHA256 216579aaa6514d2849f772c1a6a5ab5eb3f3ed19ae84b93ca253558776a2a391
MD5 a77c0a87e7c2120528b9177f04d491de
SHA1 fd477a3bf6645e7385733559ef700b86b9e293df
SHA512 fc631950c1552cab4280ebfd8f4c51c68d4e60472a030fe5f3b2d2dd0ad24817b684cbb9d8c47c798a23fa0a95c9becb808b0aac93e2d050073b39d49546fa89
SSDEEP 6144:0h5WhuKGZXSWnUtakycvT/dfpmdVxHfKTNveiEMukXQX3OySqM2yhdW7Cgf44ujL:CWhuKGtxYTrFI1CxXQk/hdWOgf4DIs
TLSH
T1FE74237FD84EDE13CD9C1A219E354944468B3B6C03EB89846BAB26E75DD66718088FC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{8e058ec7-2a86-4589-a13b-685cf2ee4264}\appssynonyms.txt.WNCRY
Size 374KB
SHA256 d9b7992b7d5b4380c937c6905e284fc04d729c7d6c1e2e7066615ba019f6b6ef
MD5 0f447824c9df7b17a97c82a8bcbcc64e
SHA1 21d43eab3215a3db786d205676d2c3734aed108a
SHA512 1bb2c62a3688c3e7717b840e538f8e89c11ac0d6ba35d5be85eee5750dd7ce0423a2741729405e1aa51b405c139568154f727e8fe2ebb41797597f1cad3e9ecd
SSDEEP 6144:crFTJCfU3GAwuBighTecHDzYQZsB8NnWFJfPDvnVLKzE8v2hECPN9exOgCFt:QTJceXwuoqecvY5j3DvVLKzEiKECPjt
TLSH
T1CD84230A78BE71DB0C768971D37093CDF525C0280BD776C9AA6E069C35924E7F40A36E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{8e058ec7-2a86-4589-a13b-685cf2ee4264}\settingsconversions.txt.WNCRY
Size 520KB
SHA256 c645f6145131602a04fd96b11edffc40ba848ef502b256ddf962555008500dad
MD5 09185647d4c15e5bc7c354d433e7be62
SHA1 3b8a3b0a2863065976cc786027134462fbedef9e
SHA512 d37bffaf4a531378a43bb37c6900678daa23bd19f0503ea234d3c4bae1c075912af05490b4e20b655139f2fb6225451576cd5452c4fcc63ac734de8999513ab2
SSDEEP 12288:6AXLJzE2b0+2IQb7EE1dQX/YfJsmNtnPxU2GBejJxF:97xnbB2IQb7R8aJsm/QBeNxF
TLSH
T14BB433569BC46402C3BBCA1FB9E61DF203E6C1BBAB10D0C3B934555CB95A8683D097CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{8e058ec7-2a86-4589-a13b-685cf2ee4264}\settingsglobals.txt.WNCRY
Size 61KB
SHA256 c8cb99e5af3cfe91f693c70aed30b300ced8b19bf1e124e398baf1e3c0183d64
MD5 3abf28e1d510105b007daa4fa9dc5ed0
SHA1 7d2b6746f9b865112c30226c03fde5892f6db172
SHA512 5f43ae0b539ccd0a0dbbd84fa47f76af88b6bfd6fb33ccf178980547d32db8d25e729e4599e5aa708aea5f15402f9fc54cce68829625d69e2d60ab9ae92aea9e
SSDEEP 1536:Z8YylZJKJUbH+Dfmn3TTxi9g2c8fYxdih58FW9VtCMx:jylZd6Dfmsc8gxdih5Xnx
TLSH
T1175302B2740FE2B2E6ECDF234581464CB9F876448B42CC195084B4F86F9A7F059ACB1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{8e058ec7-2a86-4589-a13b-685cf2ee4264}\settingssynonyms.txt.WNCRY
Size 125KB
SHA256 dbbbe9d286496b24a5babae383230dee96c0ae2f71dacde3af1f5f0389596334
MD5 0ed1db6ee7ceb01e310c54c50c55eee2
SHA1 694ec3a9b0b74eee475d30592c7254992b553f9f
SHA512 bc031a5d649646ba3060f8bc31d5be3bcd77fa64842b38e67e6fe06725be927c6e6670addcbbfec4044e516df67f0b353e3be8293a06575addd85478d5d5f61f
SSDEEP 3072:tYFWTXxH9BqY7twUyDwlVxcPU/9VEAjXY02gEVWtszD0q:SehH9HE8Hcc/FXY029VWLq
TLSH
T154C312ED7CE262F5BC0A2305DAD93F838F19F4DB4DAC082D7A102D536DA3991CA74469
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{add48b3d-9d5e-4bbc-b67f-fb98161e93d8}\appsconversions.txt.WNCRY
Size 1.4MB
SHA256 7b19cff93cf464f435a70eafd4046d0de677f50395527b5fab40ca1ec4784841
MD5 e2011da291d3c46269341fbbcdfe3675
SHA1 077680b63cf35eb52f4b2c507d56436907ebd4df
SHA512 cc65f85b22a1357372c20bef99a504bc88a781f17b9645e67288a120a32dc02e11e85c60338f58991eaa7bfcb6f4286beba48d13b6b5ae06d4c429aa9fd3850b
SSDEEP 24576:MQ3JMq1WGeb+MoVqom1qeYbzW8FVeCY3jXlymuCJ64ClTcYElwOQ/HerS17nBAE:MQ3+q1eqgonQ3j1j9Tq4YEU/Hero7KE
TLSH
T10E6533B33F91127AF998B4364381BE3C401569A6850ED39B11F0B2D4B26B4A39D6B7CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{add48b3d-9d5e-4bbc-b67f-fb98161e93d8}\appsglobals.txt.WNCRY
Size 331KB
SHA256 4a6c022cbfc75db5673689a02f8a88e42d5ae2fa6c66ca9d25248eb6b15b19c6
MD5 8330967b1b6e01f8e9a3f40fac1cab81
SHA1 5c786257c601bf3cef9e1ca904c9fe345a60f645
SHA512 490308a72144c304d18aff9f704bf96bb0597e4f9e8f67e422833babda30c28829c6376ba95d407ca7609ae467dfad52968633427194aee956fbbd95e8b71151
SSDEEP 6144:Y3O9X2I/DcZVojH8E6Cuo7BIuxsqDVaOsAobE6daUXGkR744+0GcUrqj:97R74QIuxsqDV1wbE6UU2C74LGj
TLSH
T1697423CFECA5428354224F6DDFF9AF8554240A4B11DBA9C5B9BE2E6F02980C3271C5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

appssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{add48b3d-9d5e-4bbc-b67f-fb98161e93d8}\appssynonyms.txt.WNCRY
Size 374KB
SHA256 d429b38c35d24893884328ad17f68815bc9d6122c1dc2b16c6a916eef7600cec
MD5 21ee84b9bf41baacec105bc0188a38ba
SHA1 d987c19bbebc4003c5792368374e6607371f03a2
SHA512 00343aedd8732e4529dc823c72cc552949c60f3676bdb5f3359719cb90c124f5a0f2bd9c093edcfce31edff0f3b4ebca0ef7f1c5a5571880c3c2f70156507d60
SSDEEP 6144:r5M44mdCqoToYJXRVFa6iD9/T22EC8Bc+P/GouzRE9nnWrQooDTZSDlSC0xvDXsh:VMdmpoToY3VFalD9/hEC+P/zuzRQnfTU
TLSH
T1FC8423376423EAD93688DEE275307F64F018497F393B5E877C75960B0182BA5ED6E240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsconversions.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{add48b3d-9d5e-4bbc-b67f-fb98161e93d8}\settingsconversions.txt.WNCRY
Size 520KB
SHA256 1e0959ba29d3eb7d9d81d32a5f49e9d5c9ed4390c3f2ec19eeae04c8391c0347
MD5 2c946f095d698d911480e5b7464ee0da
SHA1 385db597dab39a2ee4f29f5f921e44aea4808d5c
SHA512 28eadb01662869d624ee1716a9b4eb72bf95e0aa480061f26753ff5b8d00a98252305140a1495c16054bfd60d5cacc5176d3a3e176747844a6f617f51f596702
SSDEEP 12288:KgTxZd9bQ17hIw1cE75PS1r9HHAVK2wvlMHLVA79K:L7d9bQ17Z1ckPSFVTl+LVZ
TLSH
T1E5B423E0FE58E956E0BA7C48F2AC66A90118DB3F15CB5CDB92478475C46BDC3A60E43C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingsglobals.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{add48b3d-9d5e-4bbc-b67f-fb98161e93d8}\settingsglobals.txt.WNCRY
Size 61KB
SHA256 859c10ba799da043ec6db7ff90000ad8ab174a9d35d15da33ea7e997e4d4dc4f
MD5 3bc75e658f6e81aab5502565138b55c4
SHA1 6b596aa37ad37e04f5ec9a48fa3e6ac5a5447563
SHA512 b3d89272e4c07cc68de3c141abb1249638bdc56e372fa4707b98b54f3b1fcc5f8d263064395aea586ee3760d543a4288a2f812a6c8a61efb876f5cdaeee5897d
SSDEEP 1536:ngT3/mNUAHGjzZ9BmyXTvHi05HRTZnYUdh:6pcwBmyL3JRTZXh
TLSH
T1185302AF8A6737949BDE2620740875C1A0F6D9FCE910A5C61C0CA7EA4183EE0F60357F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settingssynonyms.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\ConstraintIndex\Input_{add48b3d-9d5e-4bbc-b67f-fb98161e93d8}\settingssynonyms.txt.WNCRY
Size 125KB
SHA256 94a7f60c037ab33b53ba1335e71ab8e4c5eea5c7dec41db3e06e7b663d177afd
MD5 4adb57e5807657d64a008609d1ecaccf
SHA1 9b2251b681b96ffdc5d3be58928ae51b8f810b9e
SHA512 f1f5a4795616e204a97236b783e42c2de63884bdcfe98fd4f827f57a2754406174587b51fe6488a0e152643acbb714b2919c7d52bcf85020b9d1290d2808f5a9
SSDEEP 3072:6ATfR81uH2RipZ+MjKHRct6oZ3xBe75pbgcDkCPWfZG:1TZ8wq6+Mj2R8hBcRDMG
TLSH
T128C3127BAACF04954BCBCE35A9B4F0DABD6DE49570C5091F38325FFD8B21022A9819C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppsIndex.db.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\AppsIndex.db.WNCRY
Size 1.0MB
SHA256 ca23b74f83f9da337a84323e80f376869e049436d1e21cb795400b56d13baa22
MD5 1aa082f12fad03b851b13da4491215da
SHA1 2ab010e4423ed1160e1832fb309a895a43e5909b
SHA512 df52cf03d54caca9588838c2f6bb04a72bd5ed899e3649f561adf77529c116b321e8a17aa19d8990914a0b119811da54dda39c9ba29347b6fd391a6916a766ec
SSDEEP 24576:dPKTwWfzgGlPFG+RYWeps20k3IQ2ldptcA5:wMqkGTG+RYe2Z/sTv
TLSH
T1033533C3E02CAEA604742F54E4C81D1A5AF4F91CDF7024A7E5C87D9ECB9B167D09B06A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.db.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalState\Search\settings.db.WNCRY
Size 1.2MB
SHA256 b3c9b260c92f79a4b45bcdb21f39cecea637773d5d5dc3f698eea5eb9eadbe06
MD5 a2018efcdb3c8161726875a42761afd8
SHA1 a51ac6f7acf4c7a1471c1ece68ab570aa47f27d3
SHA512 e9dfd06569eae166a282c773beb71d5a6e0c0d20bc1434e5283a3d6f089b72a0776e153230584be0e0c30e0b9ffe94c7747a664e5ab3296b163a4c99d15e6bf1
SSDEEP 24576:xeCuMmdOA2kwDhfpF//hyBS4WPfuAc4PeEPHvKdehrUl1DSe2JCt9ASCBXQIXLR:9uMyER/n8BtWP2n4LPHvKdeADSeOA9ny
TLSH
T1C155331633739CAECDB085361B623FF0365E1A7890FA5F02C97260506FA27AA35457ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SettingsCache.txt.WNCRY

Path C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SettingsCache.txt.WNCRY
Size 575KB
SHA256 49fd79ed315eec434248c9f305a8bd172c6848d42fbad2a3fb664a5411529643
MD5 ebf5031136d9bc7f3f0a0c9f3755b68f
SHA1 d6bcc463eafcc255efa104eff9ff5a4aaf793b86
SHA512 c2ab2fcb57675ddc5ae1edeedddf0570fbf4100aa97920e12608d09396b4b06f6d2b9db11b00c078d06bcdb94a6a2e72196e0c156d34d771996e1a94b5a24bff
SSDEEP 12288:+YUUFvV9YySh4aXGFe5mB0SdrUkdLb/TcY276z2y3zAv5FouwS:+AJYySh4aRcaShRdn/TE7Z8o31
TLSH
T1F9C423EEB3B41B3BF22B0F5A515E503BD9EBC03389E6324907D24C740A29D5757962B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00000000.res

Path C:\Users\Admin\AppData\Local\Temp\00000000.res
Size 136B
SHA256 b993f9c8b3e922acd747fd23d05567c27f3d987b4aeb85cb472a2fb04d44d266
MD5 45e87f621a2a53ce2c6aa0c7883ca1cc
SHA1 dbe2b8063fce987bcc1942e33c9ca176b169ef60
SHA512 b5ee0425a2ddd112095af50b4bd8b0d8d450adf88a464280d7a57ed059aa3d74dfc519de6bd629c4c80eaa7671c6ca1a886425a47091842127e2af44ac125592
TLSH
T1CAC004F5540C5001DC4310FF71C410157541447F71154410014343441054000CD40315
MD5 SHA1 SHA512 TLSH

Submit Download

92161794669900.bat

Path C:\Users\Admin\AppData\Local\Temp\92161794669900.bat
Size 340B
SHA256 4e25c23aa5babc853889d3e1e79bb01ca7650837b250314a8d50f2e2c4b6730f
MD5 3867f2ec82a7d77c9ffefb1aac8b7903
SHA1 06fccf19b9c498b5afa2b35da00e3ab28d56f785
SHA512 b413994e5b9f0ecb956055c7befff14845b56bb658fd8280d3213fdfa175ff76bc56e082174f2475fdf2d1f9eff618ebfd80ee2b67c091eaf1fd9c94697da5aa
TLSH
T11AE0262BF88EC26A07410247083B81FCC4B10859278BAE14C733D90828412DD7B5A003
MD5 SHA1 SHA512 TLSH

Submit Download

@[email protected]

Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
Size 933B
SHA256 0e5ece918132a2b1a190906e74becb8e4ced36eec9f9d1c70f5da72ac4c6b92a
MD5 f97d2e6f8d820dbd3b66f21137de4f09
SHA1 596799b75b5d60aa9cd45646f68e9c0bd06df252
SHA512 efda21d83464a6a32fdeef93152ffd32a648130754fdd3635f7ff61cc1664f7fc050900f0f871b0ddd3a3846222bf62ab5df8eed42610a76be66fff5f7b4c4c0
TLSH
T1D011102EAE2D72006BF284633939E457E606411F126A01B2B9578274137C1BF15EB0D8
MD5 SHA1 SHA512 TLSH

Submit Download

@[email protected]

Path C:\Users\Admin\AppData\Local\Temp\@[email protected]
Size 1KB
SHA256 d4e01cd38a0270ce17dea3c76014efb1ff27211393cbbd0de8868b00c9763357
MD5 59f0d3bdd66bdb3e4967a3bde17c9d7f
SHA1 ed2fae496fef0302e82d70995a748052a520a3fd
SHA512 5e126889b018a8ad881587c5c87240fc363dc49f1fc6f51768f603ff548f9e33aef1de6d78b107574daf63415db63b9b49dc967333b496f7eda9b670945eb237
TLSH
T13C11EF010FC71B13DD9A82BF01FB27069525FA607B479E4D92E04229187B743A948BAF
MD5 SHA1 SHA512 TLSH

Submit Download

LIBEAY32.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\LIBEAY32.dll
Size 3.0MB
SHA256 58be53d5012b3f45c1ca6f4897bece4773efbe1ccbf0be460061c183ee14ca19
MD5 6ed47014c3bb259874d673fb3eaedc85
SHA1 c9b29ba7e8a97729c46143cc59332d7a7e9c1ad8
SHA512 3bc462d21bc762f6eec3d23bb57e2baf532807ab8b46fab1fe38a841e5fde81ed446e5305a78ad0d513d85419e6ec8c4b54985da1d6b198acb793230aeecd93e
SSDEEP 98304:W5FYc9YouOquJVqrR1LlZRUT83DlJrqd+kq:WrjYouOquJgrlZ283xFqdq
TLSH
T17CE5B712E4930DAADD576F7086C9B33F19A9E9044A32CF7FDA10A71BED076C9060D729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libevent-2-0-5.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libevent-2-0-5.dll
Size 702KB
SHA256 77a250e81fdaf9a075b1244a9434c30bf449012c9b647b265fa81a7b0db2513f
MD5 90f50a285efa5dd9c7fddce786bdef25
SHA1 54213da21542e11d656bb65db724105afe8be688
SHA512 746422be51031cfa44dd9a6f3569306c34bbe8abf9d2bd1df139d9c938d0cba095c0e05222fd08c8b6deaebef5d3f87569b08fb3261a2d123d983517fb9f43ae
SSDEEP 6144:Ir2r5rFriGKbgai112Yq/5hcQTcGzAHzSHeqoftOEEdD4B2pihSpKOKm:naiV25uQTcGzAHOEW+Pzm
TLSH
T1CCE4D860D1D38D6FCC8326BA868EAA49A1B8F6444B22DF0F4F504A35DF77BC09765316
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgcc_s_sjlj-1.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libgcc_s_sjlj-1.dll
Size 510KB
SHA256 9aeccf88253d4557a90793e22414868053caaab325842c0d7acb0365e88cd53b
MD5 73d4823075762ee2837950726baa2af9
SHA1 ebce3532ed94ad1df43696632ab8cf8da8b9e221
SHA512 8f4a65bd35ed69f331769aaf7505f76dd3c64f3fa05cf01d83431ec93a7b1331f3c818ac7008e65b6f1278d7e365ed5940c8c6b8502e77595e112f1faca558b5
SSDEEP 6144:+ymz8Jq1p95avGpuO+/jUE8ADu2kNBMY8KHNygoB0+6tMqSsVwvN:+ylSZ+/jU7ynIK5Bb6Y
TLSH
T114B45CC6BBC6DDE7E80202754DFA531A0738E55052C6CB9BBF04AB3D98433629FA5784
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssp-0.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\libssp-0.dll
Size 90KB
SHA256 f28caebe9bc6aa5a72635acb4f0e24500494e306d8e8b2279e7930981281683f
MD5 78581e243e2b41b17452da8d0b5b2a48
SHA1 eaefb59c31cf07e60a98af48c5348759586a61bb
SHA512 332098113ce3f75cb20dc6e09f0d7ba03f13f5e26512d9f3bee3042c51fbb01a5e4426c5e9a5308f7f805b084efc94c28fc9426ce73ab8dfee16ab39b3efe02a
SSDEEP 1536:pEiL38qIuOFcErNX5d0tRCZiBP2DrbjgpfM2ydbv:aiLsqIHFPpdiU2q
TLSH
T1669318D6BBE6ADA3E911133F46E68319073CF6D04BC38B072E31A93A47572917F85606
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ssleay32.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\ssleay32.dll
Size 694KB
SHA256 bd70ba598316980833f78b05f7eeaef3e0f811a7c64196bf80901d155cb647c1
MD5 a12c2040f6fddd34e7acb42f18dd6bdc
SHA1 d7db49f1a9870a4f52e1f31812938fdea89e9444
SHA512 fbe0970bcdfaa23af624daad9917a030d8f0b10d38d3e9c7808a9fbc02912ee9daed293dbdea87aa90dc74470bc9b89cb6f2fe002393ecda7b565307ffb7ec00
SSDEEP 12288:hXhKnXI0Fkw80VEJtzwIA6Ouah6ESyrWlp36Z:thKnnkw80VEJtzwIAiazSxlFw
TLSH
T132E4D650E5D74DF6ED425ABD85CBFB1E213CB6400A36CFA3EB10963AAE13AC13644719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tor.exe

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\tor.exe
Size 3.0MB
SHA256 e48673680746fbe027e8982f62a83c298d6fb46ad9243de8e79b7e5a24dcd4eb
MD5 fe7eb54691ad6e6af77f8a9a0b6de26d
SHA1 53912d33bec3375153b7e4e68b78d66dab62671a
SHA512 8ac6dc5bb016afc869fcbb713f6a14d3692e866b94f4f1ee83b09a7506a8cb58768bd47e081cf6e97b2dacf9f9a6a8ca240d7d20d0b67dbd33238cc861deae8f
SSDEEP 49152:5m9/gUvHrLaQ4Dt4PC+3xhae2cQX7E5zNvQIJZW/1h4+o4:MiuLSDt2C+3baAQX7ETQIr+h4+o
TLSH
T179E5E53C8747D0B7CC8137B15606A4EE27A07BB0D4B28D1EDA6C1C48E737E66C66A356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Local\Temp\TaskData\Tor\zlib1.dll
Size 105KB
SHA256 66d653397cbb2dbb397eb8421218e2c126b359a3b0decc0f31e297df099e1383
MD5 fb072e9f69afdb57179f59b512f828a4
SHA1 fe71b70173e46ee4e3796db9139f77dc32d2f846
SHA512 9d157fece0dc18afe30097d9c4178ae147cc9d465a6f1d35778e1bff1efca4734dd096e95d35faea32da8d8b4560382338ba9c6c40f29047f1cc0954b27c64f8
SSDEEP 1536:NlN3sTKU7xniaO9ADje81EQ3aL8WNdUCqfRnToIfBoIONIOqbW+xCvETe:DpsmU7xaiDjeJL5qf5TBfgHqbdxCv6e
TLSH
T154B35DC1F68746F2CB770B7540C7A73FCA20A5028C34CEE7D28C974AD52B9626A197D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b.wnry

Path C:\Users\Admin\AppData\Local\Temp\b.wnry
Size 1.4MB
SHA256 d5e0e8694ddc0548d8e6b87c83d50f4ab85c1debadb106d6a6a794c3e746f4fa
MD5 c17170262312f3be7027bc2ca825bf0c
SHA1 f19eceda82973239a1fdc5826bce7691e5dcb4fb
SHA512 c6160fd03ad659c8dd9cf2a83f9fdcd34f2db4f8f27f33c5afd52aced49dfa9ce4909211c221a0479dbbb6e6c985385557c495fc04d3400ff21a0fbbae42ee7c
SSDEEP 384:zYzuP4tiuOub2WuzvqOFgjexqO5XgYWTIWv/+:sbL+
TLSH
T1D4655707E03F2FFDE2BE33F708C56DD9E111887A0B669933A769E299C505C50B412B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c.wnry

Path C:\Users\Admin\AppData\Local\Temp\c.wnry
Size 780B
SHA256 4ebcca6ad6794ba245839de06807e35ce2c98584e1c6f0ef40f8ee53655fc1c1
MD5 7e60819d08283e58b3f65918a5d1599b
SHA1 b1d62e0fad8d7465f2ed42082b1efe22c587bc4a
SHA512 41c7d0e4846674c3e74f839ddf76d02271dac47257e3c0d1711d537275de0b838073ef371a16428b156f575d3afa2ceaa7db58c6d770c8b979b83e3780a5ad62
TLSH
T14C0197003B0A3D00E7B4B4FB0601EE88E2320338AAE27DC2C073C820CF10272A76A428
MD5 SHA1 SHA512 TLSH

Submit Download

c.wnry

Path C:\Users\Admin\AppData\Local\Temp\c.wnry
Size 780B
SHA256 079ce1041cbffe18ff62a2b4a33711eda40f680d0b1d3b551db47e39a6390b21
MD5 383a85eab6ecda319bfddd82416fc6c2
SHA1 2a9324e1d02c3e41582bf5370043d8afeb02ba6f
SHA512 c661e0b3c175d31b365362e52d7b152267a15d59517a4bcc493329be20b23d0e4eb62d1ba80bb96447eeaf91a6901f4b34bf173b4ab6f90d4111ea97c87c1252
TLSH
T1E70197003B0A3D00E7B4B4B60601ED88E2320338AAE2BEC2C033C820CB102B2A76A418
MD5 SHA1 SHA512 TLSH

Submit Download

m.vbs

Path C:\Users\Admin\AppData\Local\Temp\m.vbs
Size 219B
SHA256 7fbdc49f4b4ba21949eca0b16c534b4882da97e94e5ca131cec1629e60439dfa
MD5 82a1fc4089755cb0b5a498ffdd52f20f
SHA1 0a8c0da8ef0354f37241e2901cf82ec9ce6474aa
SHA512 1573a0c7333accef2695efefe1b57cba8f8d66a0061c24420ee0a183343a9a319995267d306ee85084c95580f9855bcdf9dee559b28a200b27fc3cc353315e78
TLSH
T110D0A706D9CAC3AB474711431033D50CC8B10C283689AF204B51CE0C395250D5A7A142
MD5 SHA1 SHA512 TLSH

Submit Download

m_bulgarian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_bulgarian.wnry
Size 46KB
SHA256 40b37e7b80cf678d7dd302aaf41b88135ade6ddf44d89bdba19cf171564444bd
MD5 95673b0f968c0f55b32204361940d184
SHA1 81e427d15a1a826b93e91c3d2fa65221c8ca9cff
SHA512 7601f1883edbb4150a9dc17084012323b3bfa66f6d19d3d0355cf82b6a1c9dce475d758da18b6d17a8b321bf6fca20915224dbaedcb3f4d16abfaf7a5fc21b92
SSDEEP 768:Shef3jHdCG28Eb1tyci8crbEw6/5+3xFkbP0vyzbZrS14e:SheU5De
TLSH
T1C42399664803B245C2631398FB1BF40A662AF42D86FC5494619BC2B76FBF87EB173417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_chinese (simplified).wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (simplified).wnry
Size 53KB
SHA256 845d0e178aeebd6c7e2a2e9697b2bf6cf02028c50c288b3ba88fe2918ea2834a
MD5 0252d45ca21c8e43c9742285c48e91ad
SHA1 5c14551d2736eef3a1c1970cc492206e531703c1
SHA512 1bfcf6c0e7c977d777f12bd20ac347630999c4d99bd706b40de7ff8f2f52e02560d68093142cc93722095657807a1480ce3fb6a2e000c488550548c497998755
SSDEEP 768:SWjkSFwwlUdcUG2HAmDTzpXtgmDNQ8qD7DHDqMtgDdLDMaDoKMGzD0DWJQ8/QoZ4:SWcwiqDB
TLSH
T1283300E85C12579AC29312BDAE25F0883E2BF60AD4F5C4D970AFC2BB453EDBCD251512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_chinese (traditional).wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_chinese (traditional).wnry
Size 77KB
SHA256 5c7f6ad1ec4bc2c8e2c9c126633215daba7de731ac8b12be10ca157417c97f3a
MD5 2efc3690d67cd073a9406a25005f7cea
SHA1 52c07f98870eabace6ec370b7eb562751e8067e9
SHA512 0766c58e64d9cda5328e00b86f8482316e944aa2c26523a3c37289e22c34be4b70937033bebdb217f675e40db9fecdce0a0d516f9065a170e28286c2d218487c
SSDEEP 768:SDwtkzjHdLG2xN1fyvnywUKB5lylYlzlJpsbuEWeM/yDRu9uCuwyInIwDOHEhm/v:SDnz5Rt4D4
TLSH
T19973CDF80C066784D6B193A8AE19F4EA1C75F00161F49598B23BC1FB9A3FE65C359F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_croatian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_croatian.wnry
Size 38KB
SHA256 3f33734b2d34cce83936ce99c3494cd845f1d2c02d7f6da31d42dfc1ca15a171
MD5 17194003fa70ce477326ce2f6deeb270
SHA1 e325988f68d327743926ea317abb9882f347fa73
SHA512 dcf4ccf0b352a8b271827b3b8e181f7d6502ca0f8c9dda3dc6e53441bb4ae6e77b49c9c947cc3ede0bf323f09140a0c068a907f3c23ea2a8495d1ad96820051c
SSDEEP 384:SheftipUENLFsPzy3EFHjHdb2YG2+d18Scgn8c8/868H1F8E8/8Z3m8VdAm86a8n:Shef3jHd3G2n+p/mZrS14A
TLSH
T110031FA804426359D39323D4EB19F0493F2BF51955E894D431EBC3BA62BFDADF132922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_czech.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_czech.wnry
Size 39KB
SHA256 5afa4753afa048c6d6c39327ce674f27f5f6e5d3f2a060b7a8aed61725481150
MD5 537efeecdfa94cc421e58fd82a58ba9e
SHA1 3609456e16bc16ba447979f3aa69221290ec17d0
SHA512 e007786ffa09ccd5a24e5c6504c8de444929a2faaafad3712367c05615b7e1b0fbf7fbfff7028ed3f832ce226957390d8bf54308870e9ed597948a838da1137b
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2yG2gv8n8+8zfB8k8F8i8k1Z8M8I818E838C8A8s:Shef3jHd2G26nyMZrS14g
TLSH
T17A030FA90043A259D29313D9EB19F4492E2BF41D16FC84D432DBC2B963BF9ADF133952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_danish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_danish.wnry
Size 36KB
SHA256 a75bb44284b9db8d702692f84909a7e23f21141866adf3db888042e9109a1cb6
MD5 2c5a3b81d5c4715b7bea01033367fcb5
SHA1 b548b45da8463e17199daafd34c23591f94e82cd
SHA512 490c5a892fac801b853c348477b1140755d4c53ca05726ac19d3649af4285c93523393a3667e209c71c80ac06ffd809f62dd69ae65012dcb00445d032f1277b3
SSDEEP 384:SheftipUENLFsPzy3EFHjHd02wG2roqni2Jeo75Y3kmA31dv61QyU:Shef3jHd4G2M5bZrS14Q
TLSH
T164F243A800421359D39313D4FB1AF4483B2BF91955E484E871EBC7BE667FDACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_dutch.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_dutch.wnry
Size 36KB
SHA256 2c95bef914da6c50d7bdedec601e589fbb4fda24c4863a7260f4f72bd025799c
MD5 7a8d499407c6a647c03c4471a67eaad7
SHA1 d573b6ac8e7e04a05cbbd6b7f6a9842f371d343b
SHA512 608ef3ff0a517fe1e70ff41aeb277821565c5a9bee5103aa5e45c68d4763fce507c2a34d810f4cd242d163181f8341d9a69e93fe32aded6fbc7f544c55743f12
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdp2oG2/CzhReo75Y3kmA31dv61Qyz:Sw3BHSWjHdBG2/UhsZrS14f
TLSH
T16DF234A80041175AD29312D8FF19F0483B2BF91969F484D871EFC3BD657FDACE622962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_english.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_english.wnry
Size 36KB
SHA256 26fd072fda6e12f8c2d3292086ef0390785efa2c556e2a88bd4673102af703e5
MD5 fe68c2dc0d2419b38f44d83f2fcf232e
SHA1 6c6e49949957215aa2f3dfb72207d249adf36283
SHA512 941fa0a1f6a5756ed54260994db6158a7ebeb9e18b5c8ca2f6530c579bc4455918df0b38c609f501ca466b3cc067b40e4b861ad6513373b483b36338ae20a810
SSDEEP 384:S93BHSj2cguALeT+sPzy3EFHjHdM2EG2YLC7O3eo75Y3kmA31dv61QyW:S93BHSTjHd0G2YLCZrS14y
TLSH
T1A5F224A80045175AD29322D4FF19F0093B2BF91969F484D875EFC3BE617FDACE612922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_filipino.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_filipino.wnry
Size 36KB
SHA256 d8489f8c16318e524b45de8b35d7e2c3cd8ed4821c136f12f5ef3c9fc3321324
MD5 08b9e69b57e4c9b966664f8e1c27ab09
SHA1 2da1025bbbfb3cd308070765fc0893a48e5a85fa
SHA512 966b5ed68be6b5ccd46e0de1fa868cfe5432d9bf82e1e2f6eb99b2aef3c92f88d96f4f4eec5e16381b9c6db80a68071e7124ca1474d664bdd77e1817ec600cb4
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdi2MG2AGsi6p07i/eo75Y3kmA31dv61QyR:Sw3BHSWjHdGG2Axa7iGZrS14N
TLSH
T105F247A81041175AD29313D5FF19F0083B2BF91969E084D876EFC7BE657FDACE222912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_finnish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_finnish.wnry
Size 37KB
SHA256 1adfee058b98206cb4fbe1a46d3ed62a11e1dee2c7ff521c1eef7c706e6a700e
MD5 35c2f97eea8819b1caebd23fee732d8f
SHA1 e354d1cc43d6a39d9732adea5d3b0f57284255d2
SHA512 908149a6f5238fcccd86f7c374986d486590a0991ef5243f0cd9e63cc8e208158a9a812665233b09c3a478233d30f21e3d355b94f36b83644795556f147345bf
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2oG2l1glOmeo75Y3kmA31dv61QyB:Shef3jHdMG2l1AO3ZrS14l
TLSH
T1D50355A800421799D2A313D4EF1AF0483B2BF51955E494E471EBC7BA63BFDACF123952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_french.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_french.wnry
Size 37KB
SHA256 9bd38110e6523547aed50617ddc77d0920d408faeed2b7a21ab163fda22177bc
MD5 4e57113a6bf6b88fdd32782a4a381274
SHA1 0fccbc91f0f94453d91670c6794f71348711061d
SHA512 4f1918a12269c654d44e9d394bc209ef0bc32242be8833a2fba437b879125177e149f56f2fb0c302330dec328139b34982c04b3fefb045612b6cc9f83ec85aa9
SSDEEP 384:SheftipUENLFsPzy3EFHjHdtW2IG2sjqMeo75Y3kmA31dv61Qyg:Shef3jHd0G2smJZrS14M
TLSH
T12B0331A800421359D2E323D4EF1AF0483B2BF51955E484E875EFC7BA677F9ACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_german.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_german.wnry
Size 36KB
SHA256 2adc900fafa9938d85ce53cb793271f37af40cf499bcc454f44975db533f0b61
MD5 3d59bbb5553fe03a89f817819540f469
SHA1 26781d4b06ff704800b463d0f1fca3afd923a9fe
SHA512 95719ae80589f71209bb3cb953276538040e7111b994d757b0a24283aefe27aadbbe9eef3f1f823ce4cabc1090946d4a2a558607ac6cac6faca5971529b34dac
SSDEEP 384:SheftipUENLFsPzy3EFHjHdN26G2VSA1Ieo75Y3kmA31dv61QyU:Shef3jHdfG2oe1ZrS14w
TLSH
T1D6F255A804461359D39323D4FB1AF0483B2BF51955E484E871EFC3BE667FDACE522922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_greek.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_greek.wnry
Size 47KB
SHA256 e13cc9b13aa5074dc45d50379eceb17ee39a0c2531ab617d93800fe236758ca9
MD5 fb4e8718fea95bb7479727fde80cb424
SHA1 1088c7653cba385fe994e9ae34a6595898f20aeb
SHA512 24db377af1569e4e2b2ebccec42564cea95a30f1ff43bcaf25a692f99567e027bcef4aacef008ec5f64ea2eef0c04be88d2b30bcadabb3919b5f45a6633940cb
SSDEEP 384:SheftipUENLFsPzy3EFHjHdc2oG2WWDFFG5BwKeo75Y3kmA31dv61QyM:Shef3jHdoG2NHG5BwLZrS14Q
TLSH
T10823776408031646C15223FD9B96F4892A26F40D07FC50D5669BC3BBA7BF9BAF163863
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_indonesian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_indonesian.wnry
Size 36KB
SHA256 23e5e738aad10fb8ef89aa0285269aff728070080158fd3e7792fe9ed47c51f4
MD5 3788f91c694dfc48e12417ce93356b0f
SHA1 eb3b87f7f654b604daf3484da9e02ca6c4ea98b7
SHA512 b7dd9e6dc7c2d023ff958caf132f0544c76fae3b2d8e49753257676cc541735807b4befdf483bcae94c2dcde3c878c783b4a89dca0fecbc78f5bbf7c356f35cd
SSDEEP 384:Sw3BHSj2cLeT+sPzy3EFHjHdY2oG2pq32eo75Y3kmA31dv61Qys:Sw3BHSWjHdUG2pq3nZrS14I
TLSH
T1ADF255A80045175AD29322D9FF19F0083B2BF91969F484D875EFC3BD617FDACE512922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_italian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_italian.wnry
Size 36KB
SHA256 49f2c739e7d9745c0834dc817a71bf6676ccc24a4c28dcddf8844093aab3df07
MD5 30a200f78498990095b36f574b6e8690
SHA1 c4b1b3c087bd12b063e98bca464cd05f3f7b7882
SHA512 c0da2aae82c397f6943a0a7b838f60eeef8f57192c5f498f2ecf05db824cfeb6d6ca830bf3715da7ee400aa8362bd64dc835298f3f0085ae7a744e6e6c690511
SSDEEP 384:SheftipUENLFsPzy3EFHjHdR2AG2c/EnByeo75Y3kmA31dv61Qy9:Shef3jHdJG2cQZrS14R
TLSH
T1E0F254A800425359D29323D4FB1AF0083B2BF51955E484E875EFC3BE667FDACF522962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_japanese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_japanese.wnry
Size 79KB
SHA256 7e491e7b48d6e34f916624c1cda9f024e86fcbec56acda35e27fa99d530d017e
MD5 b77e1221f7ecd0b5d696cb66cda1609e
SHA1 51eb7a254a33d05edf188ded653005dc82de8a46
SHA512 f435fd67954787e6b87460db026759410fbd25b2f6ea758118749c113a50192446861a114358443a129be817020b50f21d27b1ebd3d22c7be62082e8b45223fc
SSDEEP 384:SXZ0j2cKKwd1lksPzy3EFHjHdI2MG275rQeo75Y3kmA31dv61Qyr:SXZ0qbjHd4G2RNZrS14P
TLSH
T12583B0A908122255D2A553BCBA12F08C5E6BF006B5F88556B17BC1BFC3BEC79C365F81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_korean.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_korean.wnry
Size 89KB
SHA256 552aa0f82f37c9601114974228d4fc54f7434fe3ae7a276ef1ae98a0f608f1d0
MD5 6735cb43fe44832b061eeb3f5956b099
SHA1 d636daf64d524f81367ea92fdafa3726c909bee1
SHA512 60272801909dbba21578b22c49f6b0ba8cd0070f116476ff35b3ac8347b987790e4cc0334724244c4b13415a246e77a577230029e4561ae6f04a598c3f536c7e
SSDEEP 768:Shef3jHdUG2NQcbxfSVZiG9jvi3//ZVrMQr7pEKCHSI2DsY78piTDtTa6BxzBwdY:SheiaDq
TLSH
T1A19355AC48238391E2A2A7CCD966F4CC6E27F04071FC0A9466A7D27B537FC0DF166995
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_latvian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_latvian.wnry
Size 40KB
SHA256 a0356696877f2d94d645ae2df6ce6b370bd5c0d6db3d36def44e714525de0536
MD5 c33afb4ecc04ee1bcc6975bea49abe40
SHA1 fbea4f170507cde02b839527ef50b7ec74b4821f
SHA512 0d435f0836f61a5ff55b78c02fa47b191e5807a79d8a6e991f3115743df2141b3db42ba8bdad9ad259e12f5800828e9e72d7c94a6a5259312a447d669b03ec44
SSDEEP 384:SheftipUENLFsPzy3EFHjHdcqH24G2ZN1EDCv3Apb0WD5gYV/S4L3rnzdeo75Y3f:Shef3jHdcMG2NpZrS14F
TLSH
T1A50330A842431395D2931B9CEB19F4087A2BF50816FC94D472DFC2B9637F9ADF12391A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_norwegian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_norwegian.wnry
Size 36KB
SHA256 cb5da96b3dfcf4394713623dbf3831b2a0b8be63987f563e1c32edeb74cb6c3a
MD5 ff70cc7c00951084175d12128ce02399
SHA1 75ad3b1ad4fb14813882d88e952208c648f1fd18
SHA512 f01df3256d49325e5ec49fd265aa3f176020c8ffec60eb1d828c75a3fa18ff8634e1de824d77dfdd833768acff1f547303104620c70066a2708654a07ef22e19
SSDEEP 384:SheftipUENLFsPzy3EFHjHdy2MG2D7mgwroXeo75Y3kmA31dv61Qy5:Shef3jHdGG23KrDZrS14N
TLSH
T114F223A800421359D39323D5EF1AF0483B2BF91955E484E871EBC7BE667FDACF122952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_polish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_polish.wnry
Size 38KB
SHA256 519ad66009a6c127400c6c09e079903223bd82ecc18ad71b8e5cd79f5f9c053e
MD5 e79d7f2833a9c2e2553c7fe04a1b63f4
SHA1 3d9f56d2381b8fe16042aa7c4feb1b33f2baebff
SHA512 e0159c753491cac7606a7250f332e87bc6b14876bc7a1cf5625fa56ab4f09c485f7b231dd52e4ff0f5f3c29862afb1124c0efd0741613eb97a83cbe2668af5de
SSDEEP 384:SheftipUENLFsPzy3EFHjHdD2SG2gA8w8OJ6868jy8/8w8m8T848f8y858l8j8yv:Shef3jHdxG2KhuZrS14G
TLSH
T1FF031EA90042A255D29313D4EB19F40A3E2BF50C56FD84D871EFC2B963BF9ADF132952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_portuguese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_portuguese.wnry
Size 37KB
SHA256 bd9f4b3aedf4f81f37ec0a028aabcb0e9a900e6b4de04e9271c8db81432e2a66
MD5 fa948f7d8dfb21ceddd6794f2d56b44f
SHA1 ca915fbe020caa88dd776d89632d7866f660fc7a
SHA512 0d211bfb0ae953081dca00cd07f8c908c174fd6c47a8001fadc614203f0e55d9fbb7fa9b87c735d57101341ab36af443918ee00737ed4c19ace0a2b85497f41a
SSDEEP 384:SheftipUENLFsPzy3EFHjHdy2QG2xgk5eo75Y3kmA31dv61QyV:Shef3jHdCG2EZrS14p
TLSH
T1A10342A804421359D29323D4EF1AF0483B2BF51955E884E871EFC7B963BFDACF522952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_romanian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_romanian.wnry
Size 50KB
SHA256 70c0f32ed379ae899e5ac975e20bbbacd295cf7cd50c36174d2602420c770ac1
MD5 313e0ececd24f4fa1504118a11bc7986
SHA1 e1b9ae804c7fb1d27f39db18dc0647bb04e75e9d
SHA512 c7500363c61baf8b77fce796d750f8f5e6886ff0a10f81c3240ea3ad4e5f101b597490dea8ab6bd9193457d35d8fd579fce1b88a1c8d85ebe96c66d909630730
SSDEEP 768:Shef3jHdXG2Cz2/vBAOZsQO0cLfnF/Zhcz7sDsYZBB/0gBjL+IU/hbhMVDtsR49P:ShehlrGR1m4dx9mjVyAvg7ouDT
TLSH
T1D53326ED08036344E3A253D9EE25F09AAD2AF45852FD44D171ABC1BA237FD6DF072852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_russian.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_russian.wnry
Size 46KB
SHA256 02932052fafe97e6acaaf9f391738a3a826f5434b1a013abbfa7a6c1ade1e078
MD5 452615db2336d60af7e2057481e4cab5
SHA1 442e31f6556b3d7de6eb85fbac3d2957b7f5eac6
SHA512 7613dc329abe7a3f32164c9a6b660f209a84b774ab9c008bf6503c76255b30ea9a743a6dc49a8de8df0bcb9aea5a33f7408ba27848d9562583ff51991910911f
SSDEEP 384:SheftipUENLFsPzy3EFHjHdg2qG2aUGs0K6lyZqmfGGHRblldORZeo75Y3kmA31L:Shef3jHdeG2lGsDOcZxbP7ZrS14K
TLSH
T1A923BB654812B245C25313A8FB1BF40A662AF41D86FC5084719BC3BB6BBF97EB173427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_slovak.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_slovak.wnry
Size 40KB
SHA256 e64178e339c8e10eac17a236a67b892d0447eb67b1dcd149763dad6fd9f72729
MD5 c911aba4ab1da6c28cf86338ab2ab6cc
SHA1 fee0fd58b8efe76077620d8abc7500dbfef7c5b0
SHA512 3491ed285a091a123a1a6d61aafbb8d5621ccc9e045a237a2f9c2cf6049e7420eb96ef30fdcea856b50454436e2ec468770f8d585752d73fafd676c4ef5e800a
SSDEEP 384:SheftipUENLFsPzy3EFHjHd4Yb2YG2gNZ8a8zV/8j8U8l8x838Z8Q808m8d8T8hw:Shef3jHdZvG23AZrS14f
TLSH
T13D030FA90043A259D29313D8AF19F4092E1AF50C16FC94D472DFC2BA67BF9ADF133952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_spanish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_spanish.wnry
Size 36KB
SHA256 72f20024b2f69b45a1391f0a6474e9f6349625ce329f5444aec7401fe31f8de1
MD5 8d61648d34cba8ae9d1e2a219019add1
SHA1 2091e42fc17a0cc2f235650f7aad87abf8ba22c2
SHA512 68489c33ba89edfe2e3aebaacf8ef848d2ea88dcbef9609c258662605e02d12cfa4ffdc1d266fc5878488e296d2848b2cb0bbd45f1e86ef959bab6162d284079
SSDEEP 384:SheftipUENLFsPzy3EFHjHdf24G2/ezV6YQUdZYlujeMQ9RXmhRweo75Y3kmA31S:Shef3jHdrG2fuhZrS14T
TLSH
T1C8F253B804421759D39313D8EB1AF0483B2BF51955E4C4E871EFC7BA627FDACE122962
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_swedish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_swedish.wnry
Size 37KB
SHA256 146f61db72297c9c0facffd560487f8d6a2846ecec92ecc7db19c8d618dbc3a4
MD5 c7a19984eb9f37198652eaf2fd1ee25c
SHA1 06eafed025cf8c4d76966bf382ab0c5e1bd6a0ae
SHA512 43dd159f9c2eac147cbff1dda83f6a83dd0c59d2d7acac35ba8b407a04ec9a1110a6a8737535d060d100ede1cb75078cf742c383948c9d4037ef459d150f6020
SSDEEP 384:SheftipUENLFsPzy3EFHjHdb24G2ZKLVdDeo75Y3kmA31dv61QyE:Shef3jHd/G2w6ZrS14w
TLSH
T12F0343A800421359D2E323D4EF1AF0483B2BF51955E884E875DBC7B967BF9ACF123952
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_turkish.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_turkish.wnry
Size 41KB
SHA256 6db650836d64350bbde2ab324407b8e474fc041098c41ecac6fd77d632a36415
MD5 531ba6b1a5460fc9446946f91cc8c94b
SHA1 cc56978681bd546fd82d87926b5d9905c92a5803
SHA512 ef25c3cf4343df85954114f59933c7cc8107266c8bcac3b5ea7718eb74dbee8ca8a02da39057e6ef26b64f1dfccd720dd3bf473f5ae340ba56941e87d6b796c9
SSDEEP 384:SheftipUENLFsPzy3EFHjHds42WG2mzGu/eo75Y3kmA31dv61QyZ:Shef3jHdsiG2moZrS149
TLSH
T1831300A8004B125DD253139CEB1AF448661BF5C816FC94E432DBC2B963BF9EEF623552
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

m_vietnamese.wnry

Path C:\Users\Admin\AppData\Local\Temp\msg\m_vietnamese.wnry
Size 91KB
SHA256 1f21838b244c80f8bed6f6977aa8a557b419cf22ba35b1fd4bf0f98989c5bdf8
MD5 8419be28a0dcec3f55823620922b00fa
SHA1 2e4791f9cdfca8abf345d606f313d22b36c46b92
SHA512 8fca77e54480aea3c0c7a705263ed8fb83c58974f5f0f62f12cc97c8e0506ba2cdb59b70e59e9a6c44dd7cde6adeeec35b494d31a6a146ff5ba7006136ab9386
SSDEEP 384:SheftipUENLFsPzy3EFHjHdW2YG22cViQj3KiG8dpcH8iEriG8E8O83Jz52sxG8h:Shef3jHdWG2+oPZrS14i
TLSH
T189932AAD46031385E2D5A7CDD97AF0EC9D15E48831FE46D125ABC4BA436FC1AF0B2E81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

r.wnry

Path C:\Users\Admin\AppData\Local\Temp\r.wnry
Size 864B
SHA256 402751fa49e0cb68fe052cb3db87b05e71c1d950984d339940cf6b29409f2a7c
MD5 3e0020fc529b1c2a061016dd2469ba96
SHA1 c3a91c22b63f6fe709e7c29cafb29a2ee83e6ade
SHA512 5ca3c134201ed39d96d72911c0498bae6f98701513fd7f1dc8512819b673f0ea580510fa94ed9413ccc73da18b39903772a7cbfa3478176181cee68c896e14cf
TLSH
T1D111EF6EAE1D32506BF24462397DE55BE602415F236A02B2B9978274137C1BF16EB0E8
MD5 SHA1 SHA512 TLSH

Submit Download

s.wnry

Path C:\Users\Admin\AppData\Local\Temp\s.wnry
Size 2.9MB
SHA256 e18fdd912dfe5b45776e68d578c3af3547886cf1353d7086c8bee037436dff4b
MD5 ad4c9de7c8c40813f200ba1c2fa33083
SHA1 d1af27518d455d432b62d73c6a1497d032f6120e
SHA512 115733d08e5f1a514808a20b070db7ff453fd149865f49c04365a8c6502fa1e5c3a31da3e21f688ab040f583cf1224a544aea9708ffab21405dde1c57f98e617
SSDEEP 49152:zUx4db9A1iRdHAHZXaTnCshuTnSQYUB/UZfCg2clOQin2h37l2Jh9iiRKpbXUSH:z/b96AdHA5XaTJvQYUBBgRlJi+rlliRy
TLSH
T1EDE5336A3718BCA0BF2652311BA232CB2C3D166DE65CC311B795E598AF93F4DD5201B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

t.wnry

Path C:\Users\Admin\AppData\Local\Temp\t.wnry
Size 64KB
SHA256 97ebce49b14c46bebc9ec2448d00e1e397123b256e2be9eba5140688e7bc0ae6
MD5 5dcaac857e695a65f5c3ef1441a73a8f
SHA1 7b10aaeee05e7a1efb43d9f837e9356ad55c07dd
SHA512 06eb5e49d19b71a99770d1b11a5bb64a54bf3352f36e39a153469e54205075c203b08128dc2317259db206ab5323bdd93aaa252a066f57fb5c52ff28deedb5e2
SSDEEP 1536:am+vLII5ygV8/tuH+P9zxqDKvARpmKiRMkTERU:a9LAg4tXPTEKvADmFgRU
TLSH
T1DF5302930E80FC8E175E42E3F65084BC2561CDD23AEDA69587254C15F73A2EC754CE78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskdl.exe

Path C:\Users\Admin\AppData\Local\Temp\taskdl.exe
Size 20KB
SHA256 4a468603fdcb7a2eb5770705898cf9ef37aade532a7964642ecd705a74794b79
MD5 4fef5e34143e646dbf9907c4374276f5
SHA1 47a9ad4125b6bd7c55e4e7da251e23f089407b8f
SHA512 4550dd1787deb353ebd28363dd2cdccca861f6a5d9358120fa6aa23baa478b2a9eb43cef5e3f6426f708a0753491710ac05483fac4a046c26bec4234122434d5
SSDEEP 96:Udocv5e0e1wWtaLYjJN0yDGgI2u9+w5eOIMviS0jPtboyn15EWBwwWwT:6oL0edtJN7qvAZM6S0jP1oynkWBwwWg
TLSH
T1C1927F0E2E6701A3F6541EB087D652E99FBD6C233AE7B2BFDB62900005E010D54E1EF2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

taskse.exe

Path C:\Users\Admin\AppData\Local\Temp\taskse.exe
Size 20KB
SHA256 2ca2d550e603d74dedda03156023135b38da3630cb014e3d00b1263358c5f00d
MD5 8495400f199ac77853c53b5a3f278f3e
SHA1 be5d6279874da315e3080b06083757aad9b32c23
SHA512 0669c524a295a049fa4629b26f89788b2a74e1840bcdc50e093a0bd40830dd1279c9597937301c0072db6ece70adee4ace67c3c8a4fb2db6deafd8f1e887abe4
SSDEEP 96:UjpvOHheaCDCNIOgTegoddPtboyX7cvp0EWy1HlWwr:UjVWEam7ofP1oyX7olWUHlW0
TLSH
T12792050E1E6B05A3F2950D32D7E212C65FFCAC2776A3A5BFCF12460814E150E94E4EB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

u.wnry

Path C:\Users\Admin\AppData\Local\Temp\u.wnry
Size 240KB
SHA256 b9c5d4339809e0ad9a00d4d3dd26fdf44a32819a54abf846bb9b560d81391c25
MD5 7bf2b57f2a205768755c07f238fb32cc
SHA1 45356a9dd616ed7161a3b9192e2f318d0ab5ad10
SHA512 91a39e919296cb5c6eccba710b780519d90035175aa460ec6dbe631324e5e5753bd8d87f395b5481bcd7e1ad623b31a34382d81faae06bef60ec28b49c3122a9
SSDEEP 3072:Rmrhd5U1eigWcR+uiUg6p4FLlG4tlL8z+mmCeHFZjoHEo3m:REd5+IZiZhLlG4AimmCo
TLSH
T19534D5669DD3912DF3DB25788000DB7CB8A76E1095321F7BB684F8EC28367E4CA6511E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupMeasure.bat.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\BackupMeasure.bat.WNCRY
Size 191KB
SHA256 5b101b0bd9842cf16c7117ef4be27f9bc3b1534fb0fc31a8eecace72bc672ec2
MD5 67b5ace0370c75311e1b43ef336b62c6
SHA1 0c2351dabb74ab5016108c507d60d743e8688a03
SHA512 186487266ed10c94d9eb266620204ac7821cd180db05f114bc4aa420e910bc17840289f88c1385cbfc62531d4a32e801cf4acf194d50bcfe24ecd5bdc8d5835e
SSDEEP 3072:QUWaBAdlED4FBvOcy+uKiTIeGxX5o4oof/h9lS6V27HueX6wR7r+0rdQIx5rN8lS:kYczu5TIFDBf/h2c27lFa0WIjrNovbm9
TLSH
T1851413F70FF8E21549BBB3D180E384538C1841EC79E9AFEA25D26A5614191372B8731B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseConfirm.svg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\CloseConfirm.svg.WNCRY
Size 159KB
SHA256 c70581cba33c0f2e898adf3908e3056a64209731cd4741d3879183d7a1f09b54
MD5 42c4fdc7f4e6d2a8340d8023f4e64e29
SHA1 a60b32967507ba30e050c2eadb742641d5b76620
SHA512 652fe130519df410a3147c5e6c4c65c981ce404adaf6c06389f423e5a7456649afa735feafb3b4df89418e8523e8b8060947baed1be2de21cf6b1c8fc47028f1
SSDEEP 3072:0owy3sTsVFiYoqsrP/1ZeTmNFdohPXhZAzO3ktbQ/4yKlJdSzG4JOJ6APi:bPyoiYCyiNFSPXhZA2QQ/FKl67J6a
TLSH
T134F313158B8AB5D4C06F03CDE7FD46AA59880BA99075AE9064352FEDD653CCFCE08F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CloseSelect.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\CloseSelect.xlsx.WNCRY
Size 213KB
SHA256 37753e686eb9e53c6dfc7e13a00783c2293e8f317557e9ffb0640bb20e279c2d
MD5 57117d272d8ff95e87734f0a5a1c20fe
SHA1 d7f6363c9d9304cbcfc2851ae6d4bbe23b26a660
SHA512 212dbb57fb0f655bd988c01eae3f44821f65d9851da9f6c163a369efb04b98aa07db26ffb5873ad6aabb0342e0e03dac0147e4a780dc78626bfa37627c3a94dd
SSDEEP 6144:CNYDC9RTm7IrmdC0Cf0TB02PJG6ZTvfvhvD:CTXYQsC0zI6ZzxvD
TLSH
T1D22423F21F10EC395080F9D7732B47C336E1A0516A9ECB3C61294AA3726EAEED527553
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditLimit.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\EditLimit.tiff.WNCRY
Size 155KB
SHA256 3d2095313212798d0e342c27123857cb44927b22b0582c678691e0d7bae6d2b7
MD5 6a7704ac6c96b9ab22f3d84cd46de63c
SHA1 7e6e588bd1ea52b2de782aa453d22003efc1ca45
SHA512 c4a0006f6bfac57f6e6845902a32ac95a58792de57eb76e89388960dea320ad0707eb5f2333db2a71916f18bb86eab8085e57cec672c65b05db3b8fd3f8a237d
SSDEEP 3072:6AvvzNikbxRiIS+V7SSfJWxo5du5oZ9egrt2ceAnoXGe1jMnlSR:TvzNiGBrFSAWi545o/rt2woXGCoU
TLSH
T188F313FF2D743964B0007FD5FF1903A5D2A92311FAA284FD3A815619314E8351B6AEEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableExit.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\EnableExit.txt.WNCRY
Size 173KB
SHA256 a72d51caa337bd23dc4af831b2161aef9124810ad4d48d401a7d1c906a97384d
MD5 7da3e39a16e640d5130261e0e541dcce
SHA1 3ab2caae0de71615bf1788c0d64b642adc85cda7
SHA512 cfff08d2a0d10ec1dea4d02d13cbb30da682caba9bd6821759bef7fc69514d86d5ca3546753a8abc2ae8fd015da1217276a1f70959d073c6b1445398a8f645bf
SSDEEP 3072:CrtOxOQGDPWcMoOMAedLBKiLSuL4I5+YGiPDbCwNBprU:Es8QGDPWWd1KySuH+9ibTU
TLSH
T1430423787C100166077702DAD86DC7A61688BAA88E1FCFD136D2AB3FA3665C47742C58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableMount.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\EnableMount.mpg.WNCRY
Size 182KB
SHA256 fb1c2c1e8424268218bacd4c7a5e35ccb1f788d901a1736de397c935c86d643d
MD5 555a112d20345261b3165fc2bc2b33f9
SHA1 0a940115b9ecfa7f832a98ad35cba6a96bc8ec8d
SHA512 4672e03d2f2497df6668925aca7082cc5d87c42946a1c544e4645d3ee5f46c218a4e67bb23c1c819baecf40bad1750daf98066d6339e6a367799d78713b1185b
SSDEEP 3072:kYmGd7YqplB/QLk+/9nvgOL2QhgznmMy3WGCb0Ss/bDNaARlgZGjnstzvrt2Pq:YGdDB/B+1vgOLBhEnny3XSsjgARGZ4nq
TLSH
T1FB041209B79EB787C48409B1233DAB790070953C4D7FBBABFCAE798B625131B8645790
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportInstall.vsd.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\ExportInstall.vsd.WNCRY
Size 119KB
SHA256 c1665d292970213b9081221e80e559f9f13161ea4ea8beae71fa8b2f51dcdedf
MD5 3d76f845c7a05c728f36cb064558c5ce
SHA1 c3d463cfd556db438a4ef1b25954f4d887ae5260
SHA512 9206e19950f72adbdf566fc3431e67ced8a4e558fa9033006751b29e47cce456314e629da1b1cbdc1558159d556ea2392ac43f63d7227d82993ade834939d461
SSDEEP 3072:oNJg1iWvgscCTMrSXcoZgouKdU+HmxZA2JTpy:o3g1jcCTMrwcDLKkZA2vy
TLSH
T16AC3128A3243DBF5807D9AD2830487B7517A9C958794F5111FBE377F18B9B800E2E5AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetRemove.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\GetRemove.ps1.WNCRY
Size 208KB
SHA256 c943297b6b25ad8725a57a72a201b681f4a17e190cd62feb7af4e7ef8d0f507c
MD5 e51b8c29479fb377ce5cf015054a4155
SHA1 88fcc57ec5be2b45396f0781ebae4c3a01e76a40
SHA512 222debe726199394ea05684a357e989e58ef71e3f847d3632d11417b6e32c77c3577db5bd435327962ae5ec777d4d66b2977c9761c371763175e4bec7640989e
SSDEEP 6144:CxCwoducHane00idC+leKjgsPq5h7q9m14dMinetfS:dZ0nRhdlzjgsP6h2m1GkdS
TLSH
T1432423175BD39F64DBE66C1D938C87241081FE82DA44242FB5D29BCF41E9F612A8B8F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GetRename.wav.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\GetRename.wav.WNCRY
Size 92KB
SHA256 be8296dce7a80ecc7468ba94adbcfede865d899252fd6385f2cce20b5a089841
MD5 d5dc8429d67840a0f6cbeec8b373bf18
SHA1 636b6a170c91d306c425fd61957be6c3bad500f5
SHA512 14512d9e8fcece5fed7d6b2b577fc2593e862e614fcbd88642748fb93a110eaa1b8ca9f001644fa18f07aa6d4cded29a32055feb6667215416649d95c347bcca
SSDEEP 1536:WSJE3QfQro/+Aanabnr4IbImB8XT4EiesREXoH6dC+DV+02a5pnXNOTbPmRD0Qxi:WSJ4QfQIXapsp8UBVKXoHsDViY++A9OO
TLSH
T18193124EB6B5857CE0536829EA0844C11076B51D5B87501DC6EF3CA3F0E3C99CDEDAAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallResume.ods.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\InstallResume.ods.WNCRY
Size 195KB
SHA256 129dede967f8010f8787560812d06fab746cd69ef0197adb6e4e69705708ab8c
MD5 6b384410b2388b442f1db7b3c80c75e2
SHA1 045234dcb7e0178e4ea3213ea0b60001d4544656
SHA512 7c4c2c604f2854518e3b8674496726b83793db5c1421f7f5b0540f44649b7f5801bfacf79512002d55246755009b218894b07968e1787190d110accf4c24d97f
SSDEEP 3072:iGdVWSBS+n1FyZmR44DK53WglpVMDvz8yTHBle+ebDHq8NUhoyT6UMQE:Jb5BS+PYmuHpmzz8cq+Uq7hDTUQE
TLSH
T1A41412C439CFA15355DEA8E45C4CA03A0E5E9F620C9AE542417EBD3C2E5B8A936CD33D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeSync.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\RevokeSync.wmv.WNCRY
Size 186KB
SHA256 daefa9ccf74b89b9503cab6a24e2596582d38ed3df50ec4688ac14174bbd7125
MD5 54acdbbafbac46ec9c383bd0af617246
SHA1 1034c020500033ef8ae7a572be958587d7687592
SHA512 d452c919a838afee213b5a427573f6ca165d03393fcaaf65f9871d433678a985f02d692b589f0c35ea33a2b09d25eb400c531faf711c0ea9f9af0ccd35d8796f
SSDEEP 3072:/uye0MjX2GfFasSdJ9dTW8t/F88vRdRB439leLmMocNSUxhF2rTXao3G/xX8JC/p:mye0+GGvsTW8ttJbB43eNVN3LU/Xasc9
TLSH
T1A114224FD3231D0E3A118E20D212D86B98B354145F47CEEADC674736A19D9AF1CB39AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestCompare.mid.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\TestCompare.mid.WNCRY
Size 110KB
SHA256 8dd86f328f4bce701ef37256050af2ac08da7ca06b45b1d42c6010a1da334557
MD5 d4d20b6f896d039087042b9cf9c7b600
SHA1 3e5bdaee94e4b8a841d79220fa12e7131034e839
SHA512 67c133f61b822650c33d7ded239623c8a6eba5b24968567df31ff5e8597a7fe6ac355c7068e11f10e1bd775b6f401bb9d4ff7257bccc560190a22b566cf8b538
SSDEEP 3072:8H0dMFfkKbC+CVYsV1BGLWuU2zayqjg42xTwaeUa:8H0dMFMKZCLV1EWudzIjcxTwJ
TLSH
T1B0B31249C002E59A45FC4299F297B00BEE0C440D6663F5C638E54F222BB7F6B74AE7E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TestOut.xls.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\TestOut.xls.WNCRY
Size 204KB
SHA256 4e5e5e4e0dfb98f4310c573f16c9fa86d857070c45acdd4c35003d65da39fdfc
MD5 442e9b6c7cafa0aed5b62ef8c46268b8
SHA1 aa9e866cf4abe2db76ee26e5ca36ee272b7dedee
SHA512 06e259ed7071ba2fe124766f52883c37d3da48be6e6ec338e6d59d8448d442afd711b834bd9290a34a4b5148232566bdf6017dec1e075cc55acb19c6cd2e9156
SSDEEP 6144:X+5G1iI7BxosLJLt81cGOTSONWvGoWxFlo/z:X+5SLptV1mOSEFlo/z
TLSH
T165242330AEE6BDB99C7E01E6047D27B26C3D0026286711C964F2246EF11D96F5D60FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseDismount.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveClose\UseDismount.doc.WNCRY
Size 123KB
SHA256 b8597d163cbdc1ea555a283e02693a7a7cebc6d781dd48eac933646ae35587d3
MD5 9f12cbdbc15386ce40874d074499640c
SHA1 c271c6ec4bb738fa6f29ff1b83ecc2d1ff84f0be
SHA512 c7e24890f110a4b456a4646ec62842bdd03dd2cb6d11c862c64fb238f7b8fa1f537a9b35eea357fb6b2a4cc4ff6e38292288dc5b8f946c88993600038916cf55
SSDEEP 3072:Qtya7k3LgIlNU5P/GnfFgD5bAtVnDJu0a4okU+ruzD3DZ+BE/pbZu:Qwa2BK/G+5QJI0ciruzZUApbZu
TLSH
T1AFC3125EC03B9A2913DCAD4D1AE0361DD7B598E8B2D53041289E18FDCC3A6B51ABE9C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveRequest.potm.WNCRY

Path C:\Users\Admin\AppData\Roaming\ApproveRequest.potm.WNCRY
Size 264KB
SHA256 bc38cf5805caabe8b3b1ab89b252bb63fc96060d196307e5b681a5ef9034f306
MD5 a8acfb3b630373de06e92e60ce183843
SHA1 f3e9c210a9b44b7faef93928cb85cfbc72974dac
SHA512 f38492c21f3c3ad268c9028fe4b99ae6adacb7a2c93079a445779ea97f9d81b077910ee18bca93fb923ec1cc35ca485595309e255333016fa83e9665168cde75
SSDEEP 6144:D650NHivtwECbP8cNI2OnD7Cn1+BNheOvMJIzLEatneXKjgFWu:K0NHItwbbP8cNI2OXA+8OvwIzLHtnHjq
TLSH
T1B6442353C22A06D2A351038B6D3F69764EF3CC2911FAB761C2290DD54E2BC25999EF6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatAssert.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteMerge\FormatAssert.png.WNCRY
Size 1.7MB
SHA256 136d659a7fe5f73d707b744d18e4bd4d43c92c190601200f6b321a4449106706
MD5 7eacd099964a421e8198cbc1a8874af0
SHA1 6a6b1911797e374d12f56c5097233a92da28abb5
SHA512 ab001f17c9ae160b3803d34866a8043515a5e26edfe3b5789ba024443fc3e7bf01a4da024ff792ca30f7324c6a478a2484b2bb8af299b94d333b0090742a98d2
SSDEEP 49152:X0xTyUjafRtavSNYFWjHQF6Rz9ycXl+8ENx3:X0xTnOf7adgLFtkvNx3
TLSH
T16D85331DE0D641D2B8A241AC3EE1FD4162683F986994C46BC7FC5E47F6C8BB05A1887F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectInstall.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteMerge\ProtectInstall.vb.WNCRY
Size 1.5MB
SHA256 5483e874d75b2a1bcf3a8fee2d0a1d5ad8b1b56b1705ebfa450829d48d34d21f
MD5 e1ec7dad1e518688359b9cdc6fdd48bd
SHA1 c2e737f307b760a79b37ffdeb6f0786db2e5e552
SHA512 2550195fef005437e822032864d7d9a944f69507444ab2aae446bc1b34a5ed67640531063a7b1f88a03be50b266e15caf5d9d4263152873d1076e097ac3c9e14
SSDEEP 24576:0wbhcjfy41AbRccZ5/oK4aN+yGFF/qIvg4RZh/pT+x3Uq6q06kUkWV7q:0ySj6yAl5/ox5FSI5RxX3z
TLSH
T10D65339568D106C89EB08AE59FD295EAC8C84C8F4089CBCA101F5D680F7D19FFFC17A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoDeny.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteMerge\RedoDeny.xlsx.WNCRY
Size 1.4MB
SHA256 2436096abfd435907805291de367169b823ba0f2c70ca8d719a900ff2f322ce5
MD5 c69097aa8dbd260754387acf7d832580
SHA1 6917e176748888ac1ea5fc34727b76eba4cd24af
SHA512 eb969c2a0c8e1b8a7e1fbd947c2e10a45513bc2bac687c31838b066d76fe18bb23b0144e6c0c16af0a624a31e7ecbf145d78ac522d95806e6e30a763d5ad1ced
SSDEEP 24576:MFShO7K8UoeWKFuTEUKBT+iUK0NVY7Y2PoubKjHAq0iXLnx7cX+EVDTWOSS5PN+z:MV+8WXQTRK0yf7Y2w45Abx7cXLZWlMQ
TLSH
T188653327A9B0CBDAC204180F5EEB7971DE7457AFA8BE1354FCC184BA61C4144F6E835A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveGroup.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteMerge\RemoveGroup.jpeg.WNCRY
Size 2.5MB
SHA256 69beef73fe7c1a8797f6ec661326d8e0d11935acaaf8aa960ec6c99b36f0379d
MD5 c43966cb9a6f75fa0177df177e53f62d
SHA1 a432ae78771622979ac2bae2fadf6485dfe2c5e1
SHA512 29eb6ad9aab147da9218640d958f8b2ec91e822acc7caac6f21a90a17d8e39499def2908abb8d5b797779a194455ae91e31cdb66b8eb290f54550969df690400
SSDEEP 49152:w75db/I3uwb9m7CHrAP/0fristLrHR8oLDaURFQbZ6JgctQ8yjbO0beV:wddM+wWCHrfis5rHm+Ge+O1YPOHV
TLSH
T144C533FD5D600DEC790BC2D75222F7DDB0850AA83876D9FCD278E1414DF296AE0282A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartInitialize.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\CompleteMerge\StartInitialize.odt.WNCRY
Size 1.8MB
SHA256 bc126ff2e07230788dd8a951a2a876ab26605448a2951467ba6219a28d9fd69d
MD5 055085e80e23d9fb7e85144db4a7fd60
SHA1 01fab81a26821b973c3d78cb89ec16e731aa9a91
SHA512 faba20a4331aab8791f64a8217c289015dda06fd179c216b584fd9345039826c7d6042539ad20189c527a0e52860493c1a5a74bb95c3b13f7dd42aa4aab8251a
SSDEEP 49152:zx57V+NIaJtxi6sosYp+jqnl5pdrivQqALn7ybBz9:zx5AlJtApon+Kl7dWv1LBz9
TLSH
T1E485336FD5F203733482541F20CE5B7823A6784C24A6D1B0EA2BC55F7E7BF922A45CA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearExit.dotm.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\ClearExit.dotm.WNCRY
Size 696KB
SHA256 146a935e9fae758e5d0630c1fde9dd8872dd606ed4cfd71e2627fee1152b389b
MD5 5dd2ff0c27a2d0849d186d1e84f72229
SHA1 9b84ec89567d74769d4a791c577efa379fdcfa6b
SHA512 e809cf7949b06c29232049e6be2f64894cd98698e76f6cefa47eb9071f988b6e8657c93c7047ed83665fc9f7e7cc695bee4fc4cd79ebd1e421c5db8743ff1d65
SSDEEP 12288:NohD1Fe5vU0hX3r9iyg8cTsanYiLVDP4N6cGJIWkc9bWNAvJEm60PwcXuKp0mwyw:+FYLX3hi188s32VBV6NAub0Pw6WWjuus
TLSH
T131E433D25B0E433CBA3908263BC6CC15B9499608DB0CBCBE91B94ED0C5F256B6A47B57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearExit.pptm.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\ClearExit.pptm.WNCRY
Size 677KB
SHA256 35d6b37f88c57e1aa7a3d415a5880d9a8d1a49c49144854f4fce24ab74efbfb8
MD5 64310ed87dad30b1f7f0f434af85e7f5
SHA1 a9093558c81dd3b239c286c9e744370e0856981e
SHA512 dfe069836072705f3b695a2169a5f843d497a51cddea69ac69abd636be2040632bb4b0ca693afb4c19b3c9bbc34a57d44a2c5195349a81c15ff9ef9c2e7337cd
SSDEEP 12288:k0sBKo/EkTmdAezQQDOfZDA3EGseoMQJ1ObmMUB601P/AWm3tuLAgY:wJ/XmtsQAZD0EBVZVE6/Aj3tgY
TLSH
T14DE4338B5A22ACACF0EDF65003696E080548EAB05D4E57B2B1567721FADCC053DBDDE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterReset.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\EnterReset.wma.WNCRY
Size 735KB
SHA256 f474f44aacf3dae2863723755fb73a86cc6a1a69b6590532b3e8ad144f6e8b6b
MD5 6b26f17b8056cb1e4e39c0de91dbe2b6
SHA1 79139b0a961457502ef8fb02c75b501cef535cb7
SHA512 5f93c8c1cf2e5427b815ecf9d0c5f6ebc7a38377fda8a2270e35fc3ab39105d9d01e3881f62525ab03db06ad498287b73a54fad7739d573db198c7d630c3b148
SSDEEP 12288:UOcTKwuymbMZTvjKGybcJCEs6U60MVDCcZd0wQxk6MLe8qTsFF5R6tKjGS1j:ULTEymSmVIJCD7OKBxPMQTsFpjGS1j
TLSH
T14FF42300960A16FCB7485F090F7CDA3424BF4EC4B6919E58B90EC25ED01EA9374F2F9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantResume.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\GrantResume.txt.WNCRY
Size 715KB
SHA256 d73356b321c6c2af7d5c3de94a9326bdfcb871ae1f42a01c46d00bc8bff820e0
MD5 7d660c9e9e25d9fb2c63fc37f981a183
SHA1 834331e3c3b8822e2191d3d39be04128002ceea1
SHA512 a717a6af83797ae420e695d48684cb2ea0536ba219b8e58bb9d0b5d6e99c23371e6fbc339540007d9603a0ff46bea455a0e9b5a3179b7f8345d2648d0ea40b92
SSDEEP 12288:cNc+gkLuphW/zEXdtjYGETHeTjxGqDOqTHqcq5uGXwV8y7uFhNXX8KjqRh2TB3mR:yXyC+xJqkxJZ7qcq5uoi57sxsU1mR
TLSH
T10EF423C5568FADE9461D2C2AEBB84EC95C09DB185B69AEE5BF4812FEE4D3C04404C4CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenConfirm.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\OpenConfirm.wma.WNCRY
Size 406KB
SHA256 31fe7716edb88eff1ba15b66eca744df7728db895a5a2699112b98a344c7385d
MD5 40ae684ede36199947e35a786e44852e
SHA1 d9f9bf8db4d87b87b15832b7725d4ff99b52b6a0
SHA512 c04838cfa16cd36593606ec6146e8fd0b4b7e56723c65ca1a1ad3c5ac0dc2e24e14a25d0a345f19ab3a2efa962e002316dd1ed72607d4698c444601afeebb120
SSDEEP 6144:2lCYe78dtf7HupVZNDkX5z2yOV+Ei0A5XKYxkaZ/ckAgt0QH7QQgWqZ8uGa+05Oj:D7+f2DWtOV+Ei3XKUZ/HD26TggK+05Hk
TLSH
T1369423DDB478CD0C24A734EA6D69CF5983A48095C93AD171FA24F58A135B0CCE7BB943
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeAssert.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\OptimizeAssert.ppt.WNCRY
Size 309KB
SHA256 e21037fc2099db39042aabb5b77699966613f46a85cf1a3f07efadbbb08be750
MD5 02190d941e674d0aff206680789fde18
SHA1 e363ad68038faa7a42a1aaf655a7a480878915d2
SHA512 81042d41b9c3d7e799072e08693bc0365912ce5b7591641111be4873c9cc0199a16a01759a1c849df24f18964259a9f632ac2f6e2873dadd6c475e5434fb2058
SSDEEP 6144:QWEzpxky5WO97m3ONaJ6VaEk07TIdTgZbPof4eHMGExQR6r:ipxkhOI3OkJiazgIQg1H9EaC
TLSH
T1736423BED48079C169D69377BD8305A5EEA08D5C83A7C461E70B3E32F79A46C844F970
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetWait.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\ResetWait.txt.WNCRY
Size 464KB
SHA256 ec44e0ac47c83c59f74d1284e4a7c1993618ef57ed1ec6e6041ef94fe98aeb69
MD5 5c92493b6673322669deb7d70e9f8c3c
SHA1 59849e8e9f414a9213b2c07546bef29d3f3eca74
SHA512 99c5dc05a2e6ec5abab108d110465397d833c548652284c65889b2ca9acacedbc4f5895d529aa5f288e6546e703d659c3faae536904506e419ce4c3ad67a38ec
SSDEEP 12288:BD6ZsxBgdZxzblzbL12eshvMx3x6uxBce75abC/g:x4sxBgdZxzblR25vMTNBce754C4
TLSH
T1F2A4236FA9C37E9B0763AB8C2BBDCF86C489DD72BE90F84B042151965E450ADE0D4193
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeMeasure.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\ResizeMeasure.zip.WNCRY
Size 773KB
SHA256 6864886876e3251ce39cc9608ab1229822e16b54e2dc58b57d3a4ba98b1ca025
MD5 145c89a525ad8ad6960f6fb339e7eaf5
SHA1 a76bd41fc86d605ab4d33ec71591fccb090d55fb
SHA512 289a1c979f421d2eb98c65dbd6929b83d61535b64c3c87dab0ad2882444941d081765cb7d6eb79c447c93a185b8d793eae4fddd9ceb25f22a85ec442b671a4d4
SSDEEP 24576:pFygFG9wqx56IrS6YsuP4bBv4NuZ+wxShD26n:m4kwu56IrSpsuP4bB9RM920
TLSH
T1C2F423B4C19C7514AF53201A7BCA2B4F9F2F7FAA0755F905524A2C2CA0B3527AC5A36C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchMerge.pdf.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\SearchMerge.pdf.WNCRY
Size 619KB
SHA256 a55c9c279825d0ba973bac6a8515347de0da4570153fc7d83acd19e411aed0f0
MD5 6237edb2df449740f13c1549ed4cd6fa
SHA1 696413688848090b6c124368a41ca64e522bca4b
SHA512 77d5c1a63ac33b693078854583f6134a445044e34a18d8f1f6d90b4defac021d23d0e307189ed23b57134cccfcfcfcb6e6ec87cc7e24517d0f04816bc9159546
SSDEEP 12288:ct/AWXou2Zm/Te9cgOfR9+fIjmkAKxUGVioOWHQtUwwh6QrbUpdMYHGh943m:cpd/2Zm/Te9cZkfIWKVUMwt06Z/9c
TLSH
T134D4237364B47FAAB05B8B55B91E9733D371715B39008AFC1421E32960F0857A6CFBA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitPop.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\SplitPop.mpeg.WNCRY
Size 599KB
SHA256 41cd98eb141d5eb9e092cd1b14da9a9aa881a4654a4b6db0d928a5611fa803e9
MD5 661dfa1478900a4bd25a495dd1708387
SHA1 d78d17b7610e8723fa05f3c4b8a0af44f0796acd
SHA512 65b8b3f0a343009b0f11703812f13522c7b45025d7c48fda909d28e6d3c5be56533e95eb460ebca5707404d7c596bc7e7f4f1d09680c26e687f8ddd8463ce2d1
SSDEEP 12288:x3lHk2oKtfPoBEJ13g3M3S/ZIR5tLpftUK+bgQ5lu3YQMwLHzb1:TH+igGQc3S/2HHaK+bgQ5cLH9
TLSH
T1CED4231B2D1936647DB1FDFE8A236C20489721F5E18DC1810AE7A3677203F9F9E0599E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncCopy.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\CopyBlock\SyncCopy.zip.WNCRY
Size 387KB
SHA256 69c99f2201526c59665b5c8a4c2a4497a2fad62bb31e58327e379154789c636d
MD5 172a4c7696e604181b2c51d45265df7d
SHA1 139a5ab6a64bbcf6bb0d37c30a194078920fd837
SHA512 7450519865039420d7748b8d787e9bfe53fe91c7ab7bb5a58b9c3ab284c7e8c7a525b438367fce470b7315154ecfd39c35fff41cff87e3fc20e84c2fe460bbe3
SSDEEP 12288:DIRSIahvEwi68hto6TxTuCCPTDhjeFneD+SOwB:EahswL8zTx4edeVB
TLSH
T1188423CEE5A7F93E485A2EFC0C9D30A7058BC68897B6D463F402CE52337B46616489B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportRequest.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\ExportRequest.gif.WNCRY
Size 187KB
SHA256 75fe0bfc01e9c62e5c7a66988b32d60e9e90794873cc6db3e4195287bc13dbe3
MD5 67dd9c34f093a91f61e8dcd5923956f3
SHA1 f3b5fdf5dbe9b6a3c9950d6330e8a5a4744b10ee
SHA512 ae938e87915ae5b54e550e0f2949e3d3d8d2807cf2597f4a01a1397fc763db4e8dae1cda4dadf13f9e3e7e228ee6200bf3d7bfb853c1c0a540b45d94096f2160
SSDEEP 3072:NuFsgtixHn6hyi0zB38DdjALuRRh1g5NYORSa6jfZD8zgTNZ5zfYYNyPIKdBSfz8:IqgtixaQzaDdNRkNpOb9fYYNIBI8
TLSH
T1F11413818DEA499FEA5704822379FB0CA1DF5679207DA4E73B46E4EC3065540A0EE3FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompleteBackup.dot.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\CompleteBackup.dot.WNCRY
Size 367KB
SHA256 1e4a5bf86f9f05aed690adaf6981f0989a719bb6c556d4a570853a3326a016b3
MD5 b3e3b8b28ffdfb365b3ae65f8e1c06ed
SHA1 642f2c82872c70756d9586a2e18bfe7a2723eb6a
SHA512 02486c6e21e7dbe226eaaade3e59522344f49719f840b57b0e2aa1714073d3b2cd0b2346b2900c3d02bb1b644e2c4c2336d2d2a676a77a038468f12649049bba
SSDEEP 6144:P3JUTg+CAh3QkX/NawfQ/XGLBb/IuZZiEt2KE2dAjCwVw07uDT/d5GZZY2vHCY/7:P5Uc+C23QkX/szMBb/IuriEtl7RwVwxO
TLSH
T1D28423FED72CA3F8DA4B27A0AE9C8FB6A587FDC27404625149D13214BB07C1C454E66E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertFromInstall.sql.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\ConvertFromInstall.sql.WNCRY
Size 295KB
SHA256 d514010c8dbe8f7c3eadd671b2277bcda02c997831cffd779842386f1edf6cf4
MD5 909ceee0e927086901aa5d123b38d1f7
SHA1 ef683650be50d224c778c4c5b2f615c8654ec25c
SHA512 7fe31e3b254fe1bfb57e7067ebe0ec9c0e6ff66712cd243487f930716e9d4660b475de69084ac1773cdea0f8e97ddbc849ddb01b0512790b4ff84b3ac36ace68
SSDEEP 6144:hCip1W3b0L7FxKbFO1UJUnpv/AkxbnYzWje6yjMn19UUYuJxpd8:hluw3FYFO1QUlACUWje6Y09qwxpa
TLSH
T11154232DE5C3D76B3AAB4E4507A11A68B2FDF31F94260E817E834B543E250B6D4434B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantPing.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\GrantPing.wma.WNCRY
Size 336KB
SHA256 ced99ba220e7a2bc0b605dee27edcd38c0b0ee5b3dd8b8179446a4eb7f6a23e0
MD5 b997da2a37bd50c7766c06d552e89ade
SHA1 3d468f71efe53725e1fa2ac762928b47d7ff5d8b
SHA512 e55e701ece08253eda4364b6bbda8622cc4add2799433d7c0040298413862f6a7307d9ed6d1ce4f397a0d799dcb010a30832570e06583feb2ec40b90ee9a55ac
SSDEEP 6144:FcxCj0mewl1LjzOYBh1YaA1g7XEjOrz70Ah7D/tAqfeDma4Ua9PpeGRSSc1PqNk:6xCjxewvL/D1+grrpfKqALaTzr3m
TLSH
T1CF74236B32641F5BDAF28FE22E925430BC193A5229E4D59E90703401753C4FA667FA4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinAdd.xls.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\JoinAdd.xls.WNCRY
Size 672KB
SHA256 cd60bcccc9563b5e2313722d85e534a81a51ec5895b03949cf8d4d7eaffc334f
MD5 f5d6b5f5f47de14d2eb51f55c876cd9b
SHA1 db53b00f2f346b031d5c4d6a60a43eae50cf6dce
SHA512 3cd4783b7ff56ac65d3a4e03794bed7c10f728b85a650b3bea2cb07d474a0e3ba69910ce3f9f2055c9828a881722f7135e55307f6dc03377ddb652c3efdd27d6
SSDEEP 12288:KbpA+PXbMf4zpIO0mL2GvKgmDY4Jhp0c6HqiuyRJ5runxSgjiIlvdRXr/:Kba+ekpyP+2jN0c6Kiu6en1jJVd/
TLSH
T162E433C43E7FE5650623AD2DAA982F5204A6582634C9D87F9D7CFCE30335069E528CE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountStart.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\MountStart.mp3.WNCRY
Size 388KB
SHA256 d93675f6045d430c7e1a795bb8eb2c4330fd0a72061c7e24bf2805831c2a6091
MD5 04af66b650204c104c55e0f9172e36f2
SHA1 25b98371141a576c700700e64d1796c1abe9ddf9
SHA512 87e701e22ca4805af1a6d25a963f3050ed1782b70222b87f38a1e36eccc35ebf8e1b8163485e801ef221729a07053539a05662ac130734a127cfa81f927f051f
SSDEEP 12288:rFQ5JdlFf4OJZF1GkhB4Q1SaJ49akF6MK:cdTQOJR7h445As
TLSH
T125842356C55178F386C88B6210B35A0325375F22619EDA8639173BFAFA1B6CCF025F36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveUpdate.rar.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\RemoveUpdate.rar.WNCRY
Size 326KB
SHA256 be9d511357637a45b4ae7dfc0971d4b5b344f74ccf075bca9c40d828d5bae080
MD5 e7de79897f0b4200c6d61226cccfc7ed
SHA1 002c9172112b1a9ce2cf2a5a16110e9821f1e2b9
SHA512 92dc8b6c5a1f3d7bdd40fe17d570e894376579aa584cb17605066b257f26f73b149e1ee1f01c899116d421f1e9ba5ba58d5ef2c7f61136b9ace9e217c39260b7
SSDEEP 6144:TBR46CCzwA1LwrL3g4toiT3WZyV9EWkx5bdx2FIplD2CE7clNC6JnmN:NRpCKLMdFT3W89Eh5bmFw92CEAlPJnmN
TLSH
T12C64230EE4067BF6E8EA48AB704597CD1A0C3454AA173B1B684FFF8DA547D9C16439E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestOptimize.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\RequestOptimize.wmv.WNCRY
Size 398KB
SHA256 e57d23f11ff8840118fd8ce64cc6b3d12db9bdfd013a6813005f1e2cf37ca2e5
MD5 1cc9fb6bae917bbd01071a0cd6363943
SHA1 06b7ce520b4fe66aa2034a339e58a51fd65be48b
SHA512 1bdbb4e60201f19a2fdb2b0ee333df95ee1dcbc6fff824b16fd3d63274bee5824930c74f95bca17939d554cf28822900360565a9ce720eb9bda0624c609b3b5e
SSDEEP 12288:HMbs+OxTmv0ws6xexkqpt+m8HgoqNgaYtEU:HMbs+ObWgkG+Pb+gaEEU
TLSH
T1629423B44A1EEA12344EA0C65ED44CA0E62DB0B6D112E84D5EE9E0F2F05D6C79D4B2DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterConfirm.potm.WNCRY

Path C:\Users\Admin\AppData\Roaming\GrantRequest\UnregisterConfirm.potm.WNCRY
Size 315KB
SHA256 ef4bf9bf9d74365ee1ed8684ad963e37178684f664cbd6d5292dd00e72d3c8bf
MD5 177a413ecaa579c9c80450af0998f7c4
SHA1 c27f6c93df6f273596123e71d7cec35b9122eeb1
SHA512 8e6a03c8853c4ce269a365882f0f076bd9a853d73f428e144a6f1048e337d2089cbff872ae26e3b45573863a57697ff57f6f14ad1fca30e5d2585a9b78d288e6
SSDEEP 6144:Pgmw9oZnKMDwaVn2MwN7TTRil5CJiw+72eUKPtbfOJVFySPzVbzzksvtSJ:oLotKMDwk2h7TloUBgtbfOLFySblnTtQ
TLSH
T1146422974118F893F739AAD64B30C9E59AE071FEBDC4D297E3103526E42F816CF1909A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeEnter.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\MergeEnter.mpeg.WNCRY
Size 495KB
SHA256 85b89f6f73393aaca9f256f080644977d800ab0cf050bac26a5d77aa4b562cc4
MD5 b19c4f072eefac560bb966b92eb3062c
SHA1 2a85967305760c28e61ab84561d6d343f3557b8d
SHA512 10de5179ee52f421bb61713f36018d10e3e284f40ff100a5599de70445b28eee80cf695e26ac9c718f464121998c087f0f3cf1ce495ba16d0866c25788c080c1
SSDEEP 12288:c8eyrejUYLZs83fVvuTzErmjt29o/h2mA3XCe1f2xmWRafvChZPSwZz:c8eweQYLZsCfJl629vuNx+fvChpSwR
TLSH
T1C1B4233199ADBDF2172120FF3FC64A8C49162DA17F836939AB746C9E9F412538F2441B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TM01840907[[fn=Equations]].dotx.WNCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx.WNCRY
Size 50KB
SHA256 f60eb3fcf43743c9f3aaae263c2d4918725c734bd056c21f978abe586f3509b3
MD5 32b1d3e2651f55d52e60cf7b44c48e2e
SHA1 feb8aea7f6c45f14e4a2aec4b9921746fa19b4e0
SHA512 a37b535a9b1dca34bfd3b77dfa20d2dd28ab41c7af9ed1e6f037a6afe90db7daa995ee389269d4463e4ce938e3c92a33db6951bb441c38bc732589e33b69cdaa
SSDEEP 1536:eV04mKQ/uHfrAtQDP9h9ZkUNfMY9DWYiRS2SAP:eVG1Ifr1D9uUNF9HAP
TLSH
T1B53302ACB33CFBDB59A596BD315BFC316108C0E763458A0EDF535078845AB69386B08E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WNCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx.WNCRY
Size 46KB
SHA256 06371ac494e4f643133313769beeeaeefface4774c7ae18b377c69008e6ff7f5
MD5 c77c3e733819a38419359346685dc73c
SHA1 8ec1636961f84db8d521216703eed9289591aadc
SHA512 d9b9bc0d156fc3010bb1d86de3647947dabf6860943e30984c8c91f41b60fec22d3a354e50c8361ecfbe78ff42598707042b8f751fbb4b6e62d09e62408114cb
SSDEEP 768:XFDZCenzl7Ko3a7u9S4E1JzPpI6yr32ug1QvqABZbpLurDOoCm8MBONOdvohnUPI:XBJRxE1pPXyr20BZturDpbONOqhnEKn3
TLSH
T1792302A7C5478E5EE1761CAAFDC0DC6FE999AEF025F435C0862C9A1910C6373726DCA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TM03998158[[fn=Element]].dotx.WNCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx.WNCRY
Size 33KB
SHA256 78582797df343f0ebb4d2748047aa97c1550d0b31ee66d8d338ef4d8bfa25877
MD5 a9a75fb8d6f46edbf9f6444766478d18
SHA1 4c1f40e37be3673fb9c64731977329a6a61ea06d
SHA512 d529d166f1624b003719c5b2c31942245a856e0284e731e1f74e8335667f8c6b76115c614cd596086138f4d8e0eb3be8993a39b292b61022f4b0cb413e91e4d2
SSDEEP 768:CVvBmDIDZH6FvQJ3YvUZxFR6unajuPdwvcEl6Kpnd6BUpUZaziH:CVUIN6DvExoKdwvj6KpnoxZazI
TLSH
T18CF2F157B0C62857CBB47DE1DC82668A9A37E40F7315038889EB0175EB626D50DEFBC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Normal.dotm.WNCRY

Path C:\Users\Admin\AppData\Roaming\Microsoft\Templates\Normal.dotm.WNCRY
Size 18KB
SHA256 7d9c6758eceb8cd5548fec1dea4a7ca270410c70776d122ee4d8dd43c3ecf12c
MD5 73d66b5cd7c10adb5e2002d22d453521
SHA1 3900321d52cbbbae47f90cb846a60d3891f4c27d
SHA512 fe7555f15fd74936350bb57f049e75027b5763fed80144f69e4b5a3226d57c5f04bea4c1e6493342b69a4fe4064eeab3acad433dc249264c97967ff00513b195
SSDEEP 384:8lSFyj6Q7OCb5VfmJGmfseyImqBwii5CrETnudfElMIbdJ38JoOmqhw:84M6QxVfmJ3nNmani5kETudsbLMzm5
TLSH
T11A82D0E43250A0BF95EC1633BB69A221F5F117D0AB80D8A6881D820B4E7791B723B5C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Background Tasks Profiles\7vpys50q.MozillaBackgroundTask-308046B0AF4A39CB-defaultagent\prefs.js.WNCRY
Size 776B
SHA256 fb5cfd540b8862f17df57fefbac273bac8648f9b8787207a90e90308e070296d
MD5 cb17c6edcf4fd0dd1319045e36f6ea1d
SHA1 ba1a8e7ec7757619c2a0807b4e152da003ae88de
SHA512 3f078e30f6e8e32ae7b38f73c9f2e5ff9fdf230f965a32f8134d1460503d3d160dff25e773f5f4c7dfaa296c3382b4e5dd2e5b472ce005f2f875baea6b595ec3
TLSH
T11C0175FC47CAF94A91E21475C9D7A1F406595CE0370811939BEC0F53C9811134F4541D
MD5 SHA1 SHA512 TLSH

Submit Download

user.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lxx0n8to.Admin\user.js.WNCRY
Size 536B
SHA256 3345a97c758d30909c4b52c9f45ba5b7896833bc7cdbf7803b849e9a55aaff78
MD5 4684a0a91da09b3d0c085bf9ba486c38
SHA1 ef7997d5f3a91a3b0f57752e8457952e076e76bf
SHA512 385a88d6a803a0129b8efbf90fc2441291109721d23baafc7312917fbc984bc8e4b52603300a5c3b8c815df8a405c81b23241db575e45bfbc4e9c1ea03f21ce1
TLSH
T176F0753B069ED21FDE53807E63A40106B9278C214ECA040EE641E02924FD7E0488C4FC
MD5 SHA1 SHA512 TLSH

Submit Download

cert9.db.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\o9575aad.default-release\cert9.db.WNCRY
Size 224KB
SHA256 08ee086b2308a4fa917f37f3b416c014b0432afe824a31fdc7c3cb96ae757afd
MD5 84a5df22534a4b614b9e04c655ccc5ef
SHA1 0cfc030a984b8b9b798db593d7249f05fe391f18
SHA512 6e788b6394448ff870a41df1e0ac1bca376fc29c55fd60ae7a85e44f71acf931022aa233edd9aeda3bcfc03a39f6d43315b1c1a8bc8498a43778a89f531f170f
SSDEEP 6144:C8RFljzgKNcKBYMF0jOZvkk/oi1tThEWFOV:dXzNdPFeQAGtZU
TLSH
T17B2423344482A0B381EE755217E1EBFD5AEF3F873534E2756AB0C62F0D20615B5ACB89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

key4.db.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\o9575aad.default-release\key4.db.WNCRY
Size 288KB
SHA256 22d44bf9ec1c2ebfe4eeb9a028a72ffa12c9ed5e2165e873dda4389547237403
MD5 bc3fa4b5d273f31998360596edc7093a
SHA1 4274a6a46df8218edda61596529a5c08f9c9096b
SHA512 016410551a291369923d1083ea494dddc26561e2d40b96a5fbcc3901ca1a0fb6c416b43698a96fceba2822f006a58af57841fc7bee0402f13afe1e2423a67cbc
SSDEEP 6144:kO1AZ1UFwkS8KL+/xQWGXWak9qd6yca3oYp/fv8v:kO+imkkLwak9qda81/fv8v
TLSH
T1AE54234E66D89F12061F9FB409328F1C18A8A197CCE25BE22C476F54D1AF856DD0F2B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pkcs11.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\o9575aad.default-release\pkcs11.txt.WNCRY
Size 808B
SHA256 33c845f95d2cb791610ac9a7ad85cb8509643ce099422300d337dbe51cd04198
MD5 75548548eecc755a8e2b35a39b3177c4
SHA1 93682758310d4271e780c5e671be0da24e1a2d48
SHA512 32b50234f8812b3a384c66925367f921c63f83e15a48ff68f2ce69b68e207e6281a3e630c01f266d4fb38210b6bf22f015f89461a856d0ac420bcdf2e1a966eb
TLSH
T1C30186D419434415D38DE2785228E4983738A40DEF506A9E9AE5171F1A593ADB0952E2
MD5 SHA1 SHA512 TLSH

Submit Download

prefs.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\o9575aad.default-release\prefs.js.WNCRY
Size 7KB
SHA256 1598140a1810e69ca641e2d1e1ed819627d734d12e50287b01f6fe5625efd832
MD5 ed757564da2f43a211515bb3ea42cf4e
SHA1 0d2ddc5741fbd918cd32f676dd935415c4e2880e
SHA512 7a8e3ec8fe9fef14e0bbf599e70458bbaacb86321ba90f2bdc1c82368db5cd6385a5481f7b1a483f76f98949b416e8f54e9b6a908adbf9d7c0544307eb100900
SSDEEP 192:FTA/RrhNXrPpUCSGm3xR4dpkrckOa3Zhxh:FTAdHqBR4v/a3Zhf
TLSH
T161E1AF9927F018EF22200BD2D4BD44DB6360FF602F42A55DA464B87629B6DC57BAF032
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoShow.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\RedoShow.avi.WNCRY
Size 242KB
SHA256 d568aac240b4beddb40588015e727daf654bc23ecb66cbaa8e26cb7a3f202792
MD5 9b0b1eebe6497d1b0088a796d8718368
SHA1 6980db9eb4d14ba4267832231b9b8abb4abade81
SHA512 a5fd382314d9e085c1c8496e63aec215126091513b63815dd9a760b7341eed8db773e552eacd1efdefca16319abf6789a34906f836bcf52ec255936c2ecae4ca
SSDEEP 6144:209MYsqC58fgoDi85qBQI5oakjt0HzM8OGvFSKJ5AnjTFQDVOR:2O6qC58/i8WQEkCIuvZJCj5GOR
TLSH
T18D342363EA15B64C5CD34770C779B90EE0D212ED87EAC7FE8E178A01107B91138E9792
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RegisterMerge.mpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\RegisterMerge.mpeg.WNCRY
Size 330KB
SHA256 a1b2a25f90c7af910a1294844d17f70ced3e0df9f72ca5d8c36a59ac42238b9d
MD5 d381147a0d75dca2b286ef5359e1c828
SHA1 b51bdfff541737632cad99dd9582efafdc998a43
SHA512 068bc8176c7740a23df91378c3ec666687fba1b55f3babd1d3194d1a8fcf2433a0c3753f21b1d6877eed7e25151ae007e1e5282545568f71d3bcb3e13f06fe8c
SSDEEP 6144:UpvEaClnzN9A5+EQy6t3ljvOniecNkGYtGfLwdA6N60+0:Q+zjElcj2nie2FoGfJN0
TLSH
T19574234AD40BD6B1B2665EDC661BFED15F08A1AB77414ED42C0FAEB54CA0D87848B3E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeSelect.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\ResumeSelect.tiff.WNCRY
Size 275KB
SHA256 a6037ee3a14baddb6dd714066512550f919d5939f57dc84266496f378a2522b4
MD5 6306cb69f911f1cd60aa59d827c4da3d
SHA1 3891fcf4ad7c43bb646952edaa5518fdeae98d43
SHA512 c6abc582e8710db9abd1b34edde2160657c59785b7ac94efd33e92a9a8ed458f5a9e8f7a75583a91a38ad962f1b2de72c63bb08d2029f4c3dfb37209a55ae837
SSDEEP 6144:cbm25twtx1/MI7GExWe43xK3/83I8rbMpFBEhcl3+bs:cbm25+MeceWKv8gpzE2Mbs
TLSH
T1DA542368B68FB644E14D3A61DC6D53E3683FE48FA2CB7E7403EBE061276C062118D5E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearPing.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\ClearPing.iso.WNCRY
Size 360KB
SHA256 23f2f06d9201d50334899dcef0216aee1835ad1637c119e2e60d19b4114ab25b
MD5 54d04b26a947841406994b35d1e1ea5f
SHA1 57b8724a810c0e6eea60c607ad18124c7e35c8b1
SHA512 521a350a38f28c43081b130b2f74609cdc4d09e2aaae27480f2253ce8332ca2e2c7a599db65b9c0da8a27c258ae41756e2cd2ae200eed2e83eed5e6ec3b6ba56
SSDEEP 6144:gh/ezj2R/JTu0XzSwstBg9+3lENwU7hryT9+aErGvEJqtyzuX25yQVxiReH/2Iv:UezjQJ7+jbg9kENf7hryT9+af+qt3mPv
TLSH
T1577423A5110EC592F91F3F92DE36CEA63E06C340B1365935B4E1778E99837793D48CA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountRename.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\DismountRename.jpeg.WNCRY
Size 210KB
SHA256 92a295e7b4d431d93e191c0df3f8dc28be4d148725d9d8cd51ffaaf44c4a334b
MD5 11aebec9c4895a02f47ebfe8cc6729d4
SHA1 fafe5c574a4171d84abb169563bfc47738859f2b
SHA512 1777301e98f899d5cb258b170ce63be09906a60827b6c9d0b7c7f8ed09459e4417e56367be33b128c52c11a628b17c6bdec70ead806bc86faafa250dde90e5ea
SSDEEP 3072:O6OGRK74hPgMKjiW/irFJCWYLYvu0VMdOgGeI+qIgOMs2LsWYkQozqW/0fWm:O74hPhBJCWYiFGd9hqjO/2LsWRmb
TLSH
T11A2423F91832797EEF57EC98A2C75DD3A30BB0E64A01BC57898353B2D6C4175A89078C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterRequest.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\EnterRequest.mp4.WNCRY
Size 170KB
SHA256 f460e1e7790c854b2c218499b38141415beac2adab1115928593622b9631c51f
MD5 f179466bec0b5f554b227abd437da584
SHA1 bcc6baadd554df11fe9349fd5284ff439616ace1
SHA512 6392e31c1419c043e74df057a89544ed51292281a9ef54af0b8b88ae8ddce793de5a1b9cf8c8f041c5bdd04abe2ba36bceba3e8d4959597cf2822bfe5bfc156d
SSDEEP 3072:OLVwH8T00Y9nXDkXY2OeA/rR5dFzPvHvSJbRnw413u7LXgBZAa71LijlfBrg:OSHG03XDkoc8R5L/8RwbvQ31LwBg
TLSH
T1FC04239194FCFDF1E8ADAE6C87DA1B28B5015DA8E046108DD29AC68EF343DDF81D3419
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitDismount.xlsb.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\ExitDismount.xlsb.WNCRY
Size 440KB
SHA256 1953c534aee5fcbef1246db2d25717f47ecd00bbffd90f5696c1f7ab10256070
MD5 cc66700dbb1412aaac8ad2baaae5c04d
SHA1 8835d064f9574c91cf0e5da10828b1202bee0c62
SHA512 9b2713ecebd2225b056c8eb89e26a154fe68aa4e99345a6f2877afc6ca8c7c4804ddcf7c615b34a9a48ffd1066d6a2577fde82f3a029bc3c3af79fb0be0b9265
SSDEEP 12288:OBf6KwQkJ2MEFBXA9HspXgIAf3f1sVa//hDI6hM:Z5Q5puHE83fSVaI6hM
TLSH
T15FA423E522DFAAF118250E60873C9DEB5A288489DFE1F2F07579725987AECC47F01607
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FindStep.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\FindStep.rtf.WNCRY
Size 230KB
SHA256 707253a26faf69bdd9e7057874b6bd4abbbd020fc9439eac0b6e8924646d0926
MD5 9e2c065756b1dc025232f3c8b48c5996
SHA1 71467cd4d1855d88ca2ee7d183edb0b0c65f33c9
SHA512 5af817f6c029aeeeca5ac7ac1274d6d1eebd8a3cf66e4e073b7ee2c2e8b325c3521dc58976f2b70651d5e650bfc55dd35aa934ac2abc3ac301af048f29b770f2
SSDEEP 6144:KyqM4pP9MW3VFTomh+uA5FQyoQgJ6PkFyyVyRcn:KRNpHh+tQXHPryRc
TLSH
T18A34225A4514CAAB8FFDC4A21770192BAFF1D10E3CD7A9E2E487F69B879762120C1325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatComplete.raw.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\FormatComplete.raw.WNCRY
Size 390KB
SHA256 b8c959f5bb9f748a50b9aa89de15d85d28be1b2b4abf83968392508a39dba477
MD5 f7cf68d5230fe32a03d98de053a28087
SHA1 e0dd5c8d44e2dc378d51b63361d714c9680733c0
SHA512 2619c334d243bb50fb0174525691a699173e93b4426b621072b4a48bf63f879ba79dc80bd4cf48705b0cfacdb526bc5cb979420d821da6e92702a7faa2bd8d2f
SSDEEP 12288:JUYdzsZ5G12chSiNJZT+mR7WrFfOmXg0gt8:g5ysiN/imRyrFDJ3
TLSH
T1938423446BB9EF86794101A48188A965CC83F22E9E679C1FD01779C437BEE2F6F042D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportPush.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\ImportPush.jpeg.WNCRY
Size 460KB
SHA256 5d68d376653e53a50d39901ad7e292215f15ab78ff0951264616429ddc7a8611
MD5 d71d125dbcc5654f8974f1481f23d8e0
SHA1 156bca51b2086b1ffe6b96a76543cc3eb98c8782
SHA512 8f039428e021c99ee72a040283d3311270fe5f68e9cca76d972be12196c79d93ffd36f77045b85373b065effd8dc7373096284b7f5e9f34e8e0ec43bf0407645
SSDEEP 12288:P2jj4axa7l2G9JG8xGKhVZqbUh3/dHpkJHPEteJ:Pdax299JG3KhVZlh35pYR
TLSH
T174A423E736561A5ED42DF06C34D4C61FB22BBE1591E06ED07A2D04E207312F58AAD1FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallRedo.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\InstallRedo.rtf.WNCRY
Size 290KB
SHA256 0e450f1c5db68dcddcb8b292e46ce8d249c0f2123066b2df58c5493d234d127f
MD5 b18f2b753c0bfa267b7e993b0aadffa9
SHA1 0bfa15e2e91bfebb32a66badd108c6df4f10628e
SHA512 2bd29a47aee36b2dc144e63362e161a1e312b62c7b6f747759d0992feddf21b0ef23798cbf66ea930228d9c11e6c05aa7af189de86883a35cf7a0b1ed9e56b69
SSDEEP 6144:hqGjWhmHkc4+NREDg1jOPrkqu0mjNGiIa66WP5/YhbbvNjl3:VjWwEcnEpPrkim0iI4u98H
TLSH
T1EE5423D4CF86A3B9338F62F06EED454F9A167C411A296203F6DC60697D1E2ADE391073
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectBlock.avi.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\ProtectBlock.avi.WNCRY
Size 380KB
SHA256 493430b025b18a4983dde38706064d1487cecb9f44b6c38dc963be7cea40260a
MD5 f340ed479827f986fe6b6f23177c4655
SHA1 2e34e84c52cda574a134e3016f4a1ac9717280b9
SHA512 74d205a11a71b8b60bf93ae83e95b439c0415a9e56d7b3f8746f0b82c740a4a9353d03557f949ce937fd64548fcf2fb54b66d7ba1d5b4571ac062e97c6d1ea8e
SSDEEP 6144:y/sAUht5lCNCYKIOt8OSYKEhgkJ2Dtzu769ZnWXDHZxmRCXKeTdrbhvUDL1eD:yUCtmP2x+g++4hTd/hmL1eD
TLSH
T1968423AC367994F2952DDCBF1D930F906DAE9EE009A42766318D3E548DB12C6EF0187C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RenameDismount.dwg.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\RenameDismount.dwg.WNCRY
Size 430KB
SHA256 ddbcfecc58abfc48dc1e19e354177307c84d36ba5019b1a44223f0a8f92310ad
MD5 8d897a9691f641c38e0aa04a9ce6038d
SHA1 22907e5e35bc50c6f57f5fa5049ebf85340f40b4
SHA512 3063eedc1f63f9a33814254c0fc169102235b90e7a5c6550c27687f9223c03dc070e0de55ced8f168da2c22dd2ae69a6fdafab88e3fefbef1aa6c04fdbfedd5b
SSDEEP 12288:e9dvjUCb3rVFgRYpgU0fz2at3xbzfmFR/lT:UdvjRVFdgUmz1XfiRNT
TLSH
T140942329064FC518473A0EF791538D3C13917ECCB59AC242F56DBF5246ACB2EBA922CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveAdd.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\SaveAdd.mov.WNCRY
Size 450KB
SHA256 226be1e73433acd067b2b824ada077cc1c085680f9fe03dd7eb58bc16ae84d35
MD5 36261acf991d65b984583b5d7aa85b14
SHA1 c2d5a9b3337ce8a267a1d4290dd7ee0a05bd73cb
SHA512 7758214bc6ffb2847972f3592d9013b03493dd2d195e369220b1edabe2ea3857a11021ef71501fabbd4b60ec09709634ddba35fcf2d5b576e0381214acba98c9
SSDEEP 6144:MuQMys0br188HX+t9Q1aznBbJb1ypa5E1Oc8aG9jz5ah/29g/tm9R1tKDNWFl:/n0br188s9Q6pG2Z9H7m+ZxCNWFl
TLSH
T1A5A4239B0C23D903E812A8398DD1ECF608BA45FD051162E2546DB67E6BDA0F448FE5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendDisconnect.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\SendDisconnect.xlsx.WNCRY
Size 220KB
SHA256 79dd6afb7dea1ea6507beb79cc37a4e0ad334ee3a0df1737dfc39cd93572ff9a
MD5 7fdd49b0c8a3a152e83fa19f225bb886
SHA1 52bc99a28fadb2ce97b14708c76ab6cc2cc0a570
SHA512 fc0ec409d8c91f6633cde5c3e91ca51251e6ba4b69af0986df6577bf41ed1a4a56506492a6c174d78775183d47f1be495f843af9b13c13e91f5ed8ad6c0ebf04
SSDEEP 6144:Tems7K5dkp+jj1L0h23kBsPYs4+COKxszAO1FH1j1:SmsO7k0BL223kBsPYslCNtu51
TLSH
T15C2423E121CA47D61AE0B1428714AC3FB6E54EDF845A7C7F2A1994CB2E86A07C7FC741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockRename.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeSuspend\UnblockRename.wmv.WNCRY
Size 190KB
SHA256 a0e11c41c3bdc082858fc984fa9effeeb3e1e33c67b1eff56b481ae8cedcc70d
MD5 0dd79878842054ef08aabc2946d04481
SHA1 9fb87ff59225a908c9c631893c21a65f4fb625e4
SHA512 fb8d7bd497e0bf8721e439838725241744887bc314c6228d82037238b0e9d9a677c26bf994f03428083d9328b8bea0e620299fd69e949e9ff5ad3d5174209f98
SSDEEP 3072:rxe2+vz6RCFJ7d0dstnJRkKDWmS11sojzP1/4TO398ngPod+ypIwawZzWWPOG1Qc:rxILHJ0sojDJ4C3yngu+4VZz4G1ldtR7
TLSH
T1681423E41B4394B85F112B3D525D4FA2EBCA0B0F984DD4159EA5CB4E3E26054FA3EEB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddTest.cmd.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\AddTest.cmd.WNCRY
Size 338KB
SHA256 9426fd95db3f5de334667df1e1f8b56b508251fbdbd713d2634e50b69043d073
MD5 afa41b5da14551eff91ddcc647943ff3
SHA1 992409b906ba4c7214d0a92bdc4db5cf533205e1
SHA512 9a55007bccdb25414fc3dbfec8fb7cf74a652484aa824ad2e2f7f53c69f6909ea2a5c4a8a687a0a6d1c3572a5db587bd6ae1259c0e462ba48c333a0397af3c3b
SSDEEP 6144:FvLVGdcYhk6gQnkOl33tmJtScNqsyh/dxdqbrsFyHhcHccC2jva1FidX/QXcgEB:F3Yhk6kOlntYPH4/pqbIIHhcH71jvsFM
TLSH
T1F4742383136E88B85EB82F4FED6324C4AADD949C9C74D82575FF0186FCA520AB71571C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearEnter.pptx.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\ClearEnter.pptx.WNCRY
Size 559KB
SHA256 a72ad29357e3826dceca3ada409c26832bacd896294835c358f57d1fdfed6615
MD5 6f55089fd9042235bbf1d73a6fdf298d
SHA1 223e12114cc0b35d63eb7bde73717c66e8ac7bbb
SHA512 64b562f341729a13a0c7cc6961968162f9ec441a3d7073bc28bdbbe43b3e05f1209370a44969dc663e5e4942efe317b8cc62046ace648470ae359676b725ce43
SSDEEP 12288:Uyy7WAuY4gJ4VUP1RN7sXoJdRgdZZDBFV7r8Cb4yuw/:9xYMQiYJdRgtV7ICbKs
TLSH
T1F9C423673521F29D03B3B4FB8B8A5ABD57D928B912C9D625B04F6FE97004A9D7C39300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressExpand.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\CompressExpand.mpg.WNCRY
Size 377KB
SHA256 0ddc59ecbfcda5f2f58758b990c62e29d366fe29dde6ca069142da1c85ff65ea
MD5 1011d00127d40cdcc15d7ae822275901
SHA1 803535304b5d54c508a3308c45f35423fd96d688
SHA512 5401daaec110e44b64559770e297ee5728d61862a38047648477f64abb2e4ad86849b6d8de3c587bbe4801e7b177ceff72a20a716dbedf772563b7818c2bf660
SSDEEP 6144:p7ZjkbIaKqeAqRuiRuV+WIYHN+cvFK86dIO2ok5RpyUsf3RJzb/129OZ5jF1m2Uq:p7GbrKOYkgWIa+oK86dv2ok5RsUsf3Hn
TLSH
T1BA84233B6CBDD47AA05D2B3E175EF4CE5AA1C2ED61380D5B8DED58CA1A12C8F84C8531
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportRedo.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\ImportRedo.png.WNCRY
Size 507KB
SHA256 2a3ff31c28efa44d1cee1bdb0aed16de2342bb111042e59b2b5cf80e2d8d062f
MD5 054bd83493c79071885a30e1defd0027
SHA1 5cc6411c192aa56f35ce0ffe9a0645c7cd76a95b
SHA512 7a79b462a37612b6b13feba53f0bb33196227310955b8120f05371fdf5fac495874fd1c5d2ed2da20c941a6a254554e134caa5d1ac3c6524f1724aa04180625f
SSDEEP 6144:JuebMmBOTM/RYrPdG4IJ32qB+C+m+a0BAApJzv6myV1kGUDo2d0tw29kfhS/+I5:JueQ+3/ygFF2E9qF6eDc+0fkfo/F5
TLSH
T1D8B4239BF49D1B3CBDD303D065B8A9B25B84120962FC06D2606EBF6ECEC5C65F0921D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JoinRestart.pptx.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\JoinRestart.pptx.WNCRY
Size 468KB
SHA256 f28aa9ec07781247b03d747a7d1362b8c7b580dffc547fa01307bf21e3f6ac32
MD5 fceb14a9a3ce71dbd4e60724b329ff11
SHA1 16571ef0e24ad3ecf6858f66e58619a13f33ebb7
SHA512 4ee5480d26fe5dab05fbf456f927fd132fcd8b14e86565024c5509a968d1714261901d7484514e98182ef31b169d725fc87a03bdb981c49ca97a61b8e9b59c25
SSDEEP 12288:7M56VU7SccsXkZRf9p3vRzUlyYpZOoRtCkxJeOP7jNHLFvH:I56GrcsezvdlYpTeCem1HRH
TLSH
T153A423420B1641F6652F205FAB6D171383F27329ACA04D3AFAB374D129BB51ADDE3139
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopHide.pps.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\PopHide.pps.WNCRY
Size 325KB
SHA256 bc5be1f90d0157462ce539224636a6b1b5cda125b711176877192cf3763f827f
MD5 6b872e3b78d6ac181800c472a08dee8e
SHA1 16bc20d375d547ec010aecf0645c10d1c49b5505
SHA512 1e97f6cbf9de20b30752b1d1165c456b23b0874fb9e9849eae306f07ad0f38604e4a9270fd2178d2e250c74ff3e779facc0ecc9dda11f2b2bb8c00b7b277ed74
SSDEEP 6144:A8/SJR4NKWiyR8PfBhkR+hqeiz99UzY0zGqJCZI/opfurFSTjGgQjuKd5:A8/SMQWiOUBh2+GkYBI/0MouZ75
TLSH
T1736423694BB9E1CBD7CFC486313E14BE6821733BE420A6B3D2293C9CD8856E6F00C195
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PublishFind.potm.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\PublishFind.potm.WNCRY
Size 598KB
SHA256 ee186ca3d02d9888e9953096a596006714984b10bfa5f7b5a7e822aead838dc2
MD5 0ef7705dec8242e0851cbe70a05a6b2f
SHA1 e5756e45091711460fbc5beae4ce42d95b3b59a8
SHA512 d775110fdab97e33db77911726548d169b9dc861947dfa87def74d7ef2d8f74ca464309f59b146c9f6b8fee18f6dc9034f03ea3552f0d3684a1123be53e4bc6a
SSDEEP 12288:izRcsGyz7FyH2uNEnNDKILcPtZOUA4mZaBCPdpDol97x1QqK6l6f9gHZj:mQy/FYKnNDVQtO4mH8lXCUA9mN
TLSH
T1ECD4230C73CC8312DD7D4C687B79AFA25B965523F62D199B61E144E923207EBF0EAC06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushReceive.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\PushReceive.bmp.WNCRY
Size 416KB
SHA256 1bb03e6a88134a126e7b55e655e65a5b2c1e64ad9e35ea6a25241d97fcb5fb03
MD5 fde1dba817f6f8855e4e444671b3645d
SHA1 6d589eadfe6f0e83048b7852751d77216ae94330
SHA512 5b44e3ff80b57b48a2dc753bfe379be1844d887e8a6cabde7db9a5ad3afe35ee00687dfb89df54c72e976c03868f1a9a7b63502182a9ddb8eeece9ea21a9d2a3
SSDEEP 12288:uZ8KsagTYC1d+EGi9k2XazqowImb9OgPMU:iPNQdcnPuoJ4LkU
TLSH
T1F694238B7055AD70C88C0E757BFC2145F4BD8DA9E52D3A321245F2EF928B41CA6AF960
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoWrite.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\RedoWrite.rtf.WNCRY
Size 351KB
SHA256 750a12e9946e3e1ebc398beae03d067f7ee246937a2f59de58f381b8ae93f2ad
MD5 7cedfa96a0d1729b912b6489b98016bb
SHA1 c18cea77e85aa3aeeac8cd255a801527d44c24fb
SHA512 6d0491e0593f32825dbc44b1c74e72bca58f15e75807d58cac44e412bffbb15a02c2f571c3ea104438ccbaf1e63d8ef26ba6ebb5e4e4351ecc993da02a521b36
SSDEEP 6144:MRf2BOKwT+L6iggVe31nOtV/6LxuNYuO1Ca4iOXCrzw0EPVLlni1gsFY01XENC1L:au8KOVZG4TAeP2FPfn2rFH20ZKKvW8J5
TLSH
T1677423449EC1BC7105C22EF5E935C989E4CA3F75D81D3728CAB3A4E2D62163E690CB27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResizeRequest.js.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\ResizeRequest.js.WNCRY
Size 585KB
SHA256 f253bd4bef6b9b97f09c7f27a60803c6a64bf51939795cd79b58fad3c6006e08
MD5 e7009b6d6f9f55a7db5838acabd767f5
SHA1 278f145ef0fc019dd29c09377f9e5a6c7d0ae1c6
SHA512 c71284a3a2a679a40fc49873fd4430a091d6f31c77b232c4ad5f68d91121539c7f9cf181f4ede6c81773616d83143af4ee605ce564039faf57456248ed14f6c6
SSDEEP 12288:1FWjM8ognSt8i6Vw75As1rpPlxjawJ9JSlyGNhxvF7omTo:1CzDXwlrpPXjawJ8yGD7lo
TLSH
T168D423FE683273BC60CA51027046184D9CD8A7C658FF1AEFC93457A5EDF305949AB0AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchExpand.zip.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\SearchExpand.zip.WNCRY
Size 533KB
SHA256 7ecd5dd613ca3f87465f4470a8dd0103f213f2cfbd16169b5f43cfb056e16d05
MD5 9fa47fa16e981d22d35f807efa3af393
SHA1 32dc970b9ad554f282933dd80c1b4d49925f24f5
SHA512 1543858e731ee8017d08923a9e96598d16040cd10e9873e8d5d18ddc6e9ecb69df0828789fb8599aac2c149695ebd3826b493f08a211ea3502970401221ef8a7
SSDEEP 12288:NmSbwlkPUVo0imlw/MIlbRPWWbAvUgO2NuqkKhlH2VSAgR3tOTA:Oxo0imO0Q17AMgO4ujKLH2VSAgXr
TLSH
T1F2C4237F56EE72553BFDCC5A0F00A110DBAB5E1A2AAE5940C50AA1D39CCC7D9D00AF9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowImport.xls.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\ShowImport.xls.WNCRY
Size 390KB
SHA256 38637203d9283b53c62fb2d9d953ee70ad0b86f865987b7150135b0ad5483151
MD5 a41d9b83515c9347b3318c06f269a2d5
SHA1 b54aaf93f6a5bbc0920499c8dffa62273d1922de
SHA512 d1dbf36726a8b4f3a7fae62a1af15920331eda71906c72a0c3e19ed7aa87a50f0caf8ea8101a1903a213a912fb5fdcf3d65071866cdfebfa51cf038c3f0dc9da
SSDEEP 12288:2G2Ec5eGIh1xooYnR6spTdDhF9kITuPLl/GuAx0Fbo:AILpQF5DOIiPLReF
TLSH
T15E84235C243000CAFE1F6D9DA830246D899A55831F5998796371A703BB57EBCC5D31FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockUnregister.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\UnblockUnregister.gif.WNCRY
Size 260KB
SHA256 3abc2bcd7ec228a7c9a420966481ebe0772c546f17f11f0d0a7b259b3ec6e303
MD5 e8a45bd7c863dd591e8c468ca83f871b
SHA1 4c337355a05aca90cd72d089de1402d9515194be
SHA512 facd9f15ea50f084f2aff86d0552fcb12153f4af154989fa55cc13921bd9dad0a09e5181d598aedb4c9062a814703805ec414664555dffd4293a49071e6d0a37
SSDEEP 6144:HDU+uuDKpgkr+9/c1Pv2B2WVE+EE/4XKyNLSTqz+zkoMWp6jgv6SRBs:HoOGpgU+VcZuB2WVE+EEjyAqz+ztX6jJ
TLSH
T14644237E8454BEE268F8677BFC75935FACCF3EB00E0D63ABDE21995605620435988231
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishCompare.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\RevokeUnpublish\UnpublishCompare.mp3.WNCRY
Size 221KB
SHA256 f48dad3e76df6409eb829b8bef9a80a206b442bd4967671153c7c2caf8c3a7c3
MD5 7261843de97f0539681280994eb1d604
SHA1 57d47afd5faff27d3037b3678b79332460e4fe78
SHA512 31918d589c5d5052dcf6e7bb5a547bf85e0f9112c8aa868d8c81f8ab0b3c3193bdd414f342c5801e3281338584d4184671aeb003e391e4f2d920aeef75e8567e
SSDEEP 6144:Lfwgo/z/zIIIoUfeX9XAKiSCKc37fAoRVtjgmS:Lfw9jkx9eXNASC5bvBgH
TLSH
T1CF24136C4CDDBA750E3CD937F7350C4A0F287EC0859E94986BB35AB4E99058D6BC206D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SaveWrite.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\SaveWrite.tiff.WNCRY
Size 451KB
SHA256 3fe8d5eb5548e1fff63cba1e3855da767b13297de8c6ea4884fff2287567ea30
MD5 1bc3b13ae311df8720af57c88f88c82e
SHA1 73abc77c85aaab43a71a8648c5a1b2a7fdaa56d2
SHA512 20192d7ece201e47c4499e3a4c67e6bceef148df9fcfe48a4cadbb979c60b57387b9a08f2b6659b1d0f756fb17cf53924fa66276eb22ce38cacae427e17431dd
SSDEEP 6144:bWpQmi9ec8hNUyadcCcRSbXOe8PunL3ZWWZD7rcXgmHaiSswOqUye6sjrYZPa9dI:YQh9V8+dVZoWLZWW2wnlZ4e+Epvs0
TLSH
T163A4234BB7CABCD0D90C4ACE56D37B868537333A476499CEF293AC2C4C14C861A97369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipOptimize.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\SkipOptimize.iso.WNCRY
Size 429KB
SHA256 44c8cc00ee234c61f7e15bed794db130045f4bcb712791d2fbf999cc53d9c885
MD5 226bd45f0b54a7afd9bd069b0ad8b304
SHA1 b636063f0f94d3c262b13d5a4603627ab9d1fc1a
SHA512 a7e523d1459064284f8524e9b771c45f6839582ee41d065293cba40a5730bdd5585912900bd5a0070433c275027f63131db87a022381a156b35f878fb75977d8
SSDEEP 12288:JzaXf0GCYf6q1/R6/krB8vZzruXO4WVE/DkavcQSPPz8:JzOfrfNOkVWuXO4sE/DkgSPQ
TLSH
T1CB942332719F85C4F2453318727CC22ED5D9A6AE8A725552BC88697107F3F2318E6FCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertResize.iso.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\AssertResize.iso.WNCRY
Size 230KB
SHA256 0dbae418bbc24903ef3d7e4b816ef36ee8faa573ddab5ca2a9fea1fbe9a4991e
MD5 8c9164888a1f740ce572670d1d0c3866
SHA1 700d44865b698bf5c28296874cd9f149d510f6bb
SHA512 0865d3e8089c4df7bbbb2ada97f97d1260bec292eade77cf37cc350a0bdc62881d2f143f2ed8610445f011b932349d44545353a98337559bd00026ae54b577f0
SSDEEP 6144:e+961/YjJR5NsL+PNJkbtnqyxBe/NwxdO5:eSaYjFNsqlJkbONeA5
TLSH
T14E3423D31534B0E15B7EE50AFBB57ADDAECD00B7AB2F3B542B14045A46A02B0E31B0B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearRedo.m3u.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\ClearRedo.m3u.WNCRY
Size 212KB
SHA256 f3205c98d40d4f02051a80d849c92c4e6a064d2c40fd77db96ed9933608e57e8
MD5 280839bc9e3d9c4739fe43fab9f3f9e6
SHA1 23473f3828229dcafab54d99d70c7dba0c87e0f5
SHA512 3cd895f3606bbad5656070d4c5a3b2e4482bf0c55ca60a65053b66352e2446fe918065def2e4d49f2bdf5cd0ec0627c7e2a6a2ae5e6f798e86e4356742d68d40
SSDEEP 6144:M6nTjVSxmYZQnw5xww6UD/E8UTbqEbswLL9L:MATpSxHZQnwLwCD/EzTmCxLL9L
TLSH
T1D62412273D303B4466DCC499ADDACE6131953E83B8CAB624A69831DD6F4CA6DD8C0D1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompressInstall.tiff.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\CompressInstall.tiff.WNCRY
Size 122KB
SHA256 d21f97cf62197b726271c97a4f4dc27bd43471f6991265e1f112aa732f15bdf1
MD5 93df4c887e0716947e2d827d33820e2b
SHA1 e8035560d464dfb28464074546800045a0e633f1
SHA512 487af1d6f76b823744d1ddc246392f0e0b708bc1fc6078cbe9258e9a373fbb5640f6ee5149f881f26449bf19ad2db79c704188451bd67046c06a0ac34302d986
SSDEEP 3072:ZUmTz3KteeL7ByjuRoI8YfIL+KP3PPCgQoaqaNaiox:bTwL77uI8DCs3v9aLaiM
TLSH
T1C6C312BD1037502B98DF21B258F23F72D4721EB21D968E8F562D26013AD5DE82ECA0E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableCompare.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\EnableCompare.wmv.WNCRY
Size 188KB
SHA256 c39ea843719a04ef00ecf7272eacb579c184b80dedd39d55c3668fa3fc94c0d4
MD5 de1877b8ca847ad578b0690419915386
SHA1 35b665606284d849fc6a1cdf0ec2edd9c7cbfc5f
SHA512 19405932872023a955a6568adcda90e9997d3874ffcf2da48147dd916f99a73847dc9f90aa47be0a71672c1d8c0ad0c34c08ebf132b2c62ddc7b7a3e0d2169c0
SSDEEP 3072:SXnTWLNR6se8hQ9xiPRbYmFCRTunIgkp7C4xcQy9NDg06OwuQHnLNXwmAKm:SXyLHZZQ9xaFFCRTunIgkxC4xcQ6MMwY
TLSH
T177142338A1D486E045139C6BFCCCEA5FA4E51C2CD856B6BAE2735F86844DB8C30BF056
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatClear.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\FormatClear.ppt.WNCRY
Size 158KB
SHA256 38130cd301e898a04c54bd065b464826511740fa73d687d9aff4665a1bb54954
MD5 8cd880c6a017fa1e93247a934ce939e3
SHA1 6ee970105334aad7f4507656e1108f87b32dea16
SHA512 bb88315ce1542fb32ddb0a0532dd39bb3f52c4743b8ef2f4efb9bbbbbb95cbc8764aed3e074cec0d90df9dc4032170d532790c0dd08ad733c0605bb2f8963b35
SSDEEP 3072:LEkUPt01YGlc+ZLff3hW++ZbPp+300jwA76GnHqNa9/9bvuKwC2TH5M:Bc61YMLnRte+k0pBNV7uKwCyHW
TLSH
T1FAF31285C47224A30BC01B9DAF61C956552BDDDE5B33389200916BDBB258C45E36EB3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ImportWait.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\ImportWait.png.WNCRY
Size 254KB
SHA256 17d8e6c7e4310807af3a181f58864bacec9da01affd465a732b61444afa029f2
MD5 7572bfa1f4a4d7b940cb06e592b1e461
SHA1 104db4c019ba63f764c6e80ec9e071785500d3d0
SHA512 2df1f97095e7ee88efb411fd7c7667b9a0cf51b1e866fea4dd4e246f22bd9eeb05734a93806b4995c310b26fb8a9e0abc214a73093848d324b06815c6a897153
SSDEEP 6144:Zdf5UTka0AsQE6SRjyT/N9tBfEmIeDw2AVFVRdMk8Jel2FSH:ZAAa0TQELRjGFJEmIeDMBueR
TLSH
T1DE4423979BBE817B0B4C8DA7868D1F6CFE456D5F00BC61225047C9A6B410ED8B6C2CC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectResume.mpg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\ProtectResume.mpg.WNCRY
Size 272KB
SHA256 16bea68d8da1bb3ebb33eb26882de16fd21c74100dd98646ccc200c39af95098
MD5 1a136a7c3846234bbb8beda52f654999
SHA1 f33406f6ad1103e484d167845cfe1f4f564d7042
SHA512 575bac2b3aaec1aee1297101af108d3c3b2a6e40da02ca63a1143514cf71d67b789d09f482f0f21453d03c41eba4a62a300088faf8db941bf184cc3b01b968d2
SSDEEP 3072:FyZU8AxDTDoKVHcr05fts+/FDZLtbP4gDIjXPjSKM/SiOwPu8tdu0TkcfDlTMkoO:FGMYKxcA51F/7JC7FM/zORSZTt6C4BTy
TLSH
T1FB542380B8786574603349F162D5D35CC06E868EAAACB3F9168F8ED504B47709EBCE7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendUndo.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\SuspendUndo.ps1.WNCRY
Size 436KB
SHA256 9c7aea0344d7cc23084a281ba847c324f6527e18c5efc69aba8e30966f2633de
MD5 f3765b3fad5d34ce694b973c1093cb34
SHA1 0f012b554028b9d34fdc2b1cd32e091cbc885c51
SHA512 e212424f062eb24e366acc9abd02d4b48e32f9e5a8ab901814a354d0e7f22d710f453ddaece222b888ea5a11302af6b808a929cbeeebfd8ee9d482575c687a76
SSDEEP 6144:uKN20x7eJ5x2G6C5IqYG2iFPdmH8C5KPhNeqT83t4f6sr9YvxMrNeZDnB89Pv:uKN20xaTf6sVhtM5+C+Cc9YpaNeZDQv
TLSH
T1C29423A0D5F30DA8A00D00E47FF6E96A2D29CB4A61D51ECD63C77A44707F9E1EF06A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchOpen.odt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\SwitchOpen.odt.WNCRY
Size 278KB
SHA256 09151b88daac77fc1c90acf171ddef60cd5ea1c8e7e5b150980fa8dec4699a46
MD5 7fe50329b2ce9a66657e23204bb07ada
SHA1 4b8d7cb20855a8d20c88902d6844229eb8ec2a11
SHA512 5d3794e81acb31bb96437cf2161b4d4624ca8df7681c5a6468924e9ff63168fb46dad1a21949ded3d16a794d7f332132dd5164401da0d29fcc461a696e910dcb
SSDEEP 6144:2c3vKyHYtJGFYrZsZg7sUL0VF3K9l7Q4enc43Aa1rN04wCHd37GU5NW7BRa:RvjHYtJ8sZs27sM43vq4wkGSNWdE
TLSH
T13C54239F7BE60270D2F38816E0E4D2B85E03F9821BB9D4C933747A5791E638744B7A52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchInitialize.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitMeasure\WatchInitialize.xlsx.WNCRY
Size 110KB
SHA256 0ebb02814157b32bade26cb7a4b304bb3268eb1127188283eca106139f9af308
MD5 707c51663b10080fe5d788fde6aadd71
SHA1 7c12b48b4c4e4a8f75dc973c22cd857f4b195b86
SHA512 b7c3fbdcbaf63de69e149ba85d0ee98ab4320aa30a76e6fa3ef04aede6113bb4b55b567ea18a48fd8424645b43dd45bb18224b8a4cf19b3fec39a9315f38c4ad
SSDEEP 3072:P6Sz5rcDe3lAz8AdraExGyGKwgzal6G7tUyz:P6Sz5rcq3Sz8AYEx5GtNv7S4
TLSH
T109B312C3C864279ED0A2357C514CA4306FF62919CD4E09BA3FB3ECD5168841D76BE8AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddSet.ppt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\AddSet.ppt.WNCRY
Size 613KB
SHA256 08e9f628cadb9c2a89297f621901a10e9b77be572a6168781a8fb4b4c4716fc4
MD5 7974fe2159e3d9fb55ce5b31095bfece
SHA1 2583e264f7402b0bbc46ebbedd5c2dd212d81bb9
SHA512 3f80d8ded0c78dd120a7c67f62b279bdbf8bba6aeaa3605fb6d71ef8311b0148c95996864beb8b110669ece33fcd3c48281894c2458662e39233fe9fa8a80282
SSDEEP 12288:CNINXkkzvAsbakiZHbsgFyA4RIlmdai97gw8V+8TJxCqUyFZ:CRivAZHbsS4XwgEnV+8TJfVP
TLSH
T1E1D423CDCC81E172E2E14BC566C752364A934D86C18BF9FA3B840B9DD57C42E292DA37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmSearch.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\ConfirmSearch.bmp.WNCRY
Size 331KB
SHA256 37842b7ca7f311d78c9cf85f9301374241263da7bf19a05f35c66b3b8f0d3ea6
MD5 faee7db77ce2472ccd3b2e644e48a641
SHA1 d2295be34473075143ce54d91fd0d7281f829020
SHA512 db22df710530f49cd853e025045978dfbe6288c677648e7dfe8b676d3ab0ec9c27be171cc4f77e59d63e4feda45dbd1239e9cc5de202da2777e4cf58003ff5c9
SSDEEP 6144:43g/RiuNS5qwWD17lTie53j62ek3F3kt+MBCLowry+296nn2Y75nmTOtidvI:QPcywu7GF0tz6TyBs2Y7Eysdg
TLSH
T1667423EFA1771CE398C2C19D81C5635FBCA341B2FD46C0C29B543F7B299C96A211A719
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugShow.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\DebugShow.xlsx.WNCRY
Size 303KB
SHA256 7352a49f213f67600732f68f4e9f5c37c52ed82a7b87f357a92e83c686ea5385
MD5 da0aded1fc4f14943bd017624f36d08d
SHA1 7d48938a268971815f99a2f5f085a7211f686eb1
SHA512 e3da36cb08c43371f5e45441ff34c7d9b67b107833255b80f407f077df14af3d609decb8d8fce785b1afb5ba4ddc716a04d82a83eef5a8e16f3e4186d7e89023
SSDEEP 6144:HsYntOejHkPuHHD+94/VGLJO2C+E1dncFnSwEtSsJ:BntlTkPMj+e/0LJO2nWq0LSsJ
TLSH
T1F36423B1AD3F3A18E61E598FE10D702500AFC0E656064D6FFC66F9F6900A9279F2D934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableApprove.txt.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\EnableApprove.txt.WNCRY
Size 359KB
SHA256 ff675b38f51d5b4abe4f74974e9f9b08e77b68ce0170dc2b69301248ff291b9b
MD5 aead015f26bd8f0f231c67e251df4392
SHA1 a729f9314e94f20d9e8789c06f1006b93961fe4a
SHA512 82c2129c0a3b69d2d1f41289f05bb770bd0cc97a4bf5e0cf929487ecbddadac81704816c95f8cca863c02216be29ccfbc5d612205e178bd8862f748830631ac4
SSDEEP 6144:I34ycKdPM0jycygkbF5KCAq29KNkDajAD2QcxsMayX2BsrXQpLHb8uaWRE8Li3GN:+cKxMrgeWCAq/ICdayX2Wgdb8mi3v8
TLSH
T1F074233B386A96D075102DFF9C365EEBA50BB4415F74CE39530CB3921853FA76227A12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExpandRequest.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\ExpandRequest.vb.WNCRY
Size 275KB
SHA256 d3dd205fe235a513b646a0719773146771cc5f685bd15af5d116f9d08aa8417e
MD5 9216de7a3be49f3e7bb85b9426ba0f79
SHA1 1fff207b2c645f7185eb49d6548b4fae7d74b354
SHA512 490ce691f6bfebee8fee83cbae0d760f0749a01b050c0e6642a335788d123e8e7e2cae5cee492fb8d3db368c01932bacac7a9781311903423e853195e738e125
SSDEEP 6144:GS6SEe/TUb9pnl1V9fGSYzfGBEyIvpsaqYLwjCuYA2AqLPdcSVWfjTy:GSjEe/GreSKGBlIvpsaqYPNrKS
TLSH
T1B854234476E82BFFCE071A7FB4EE5E8DAE03125B2AC3C6915D165E038C57B4B0685924
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallClear.xltx.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\InstallClear.xltx.WNCRY
Size 388KB
SHA256 6ee3dda8399b5ba07fad468bc07a847bef1b671bcb3c5785e118d0616fff09a5
MD5 494b0822c0cf56cf0718e2738563c0b1
SHA1 4e11bb75e9442c816495bf830ee83a158c162e30
SHA512 34c33c3d903d7d4e15959b4b90c3051574bc706a9f5186f91da8259f79e56e036613977baa7fdcf4574cf792de46800f5d49ffd66b9fa849d03ac159c356b2c2
SSDEEP 12288:snX28lN5xSSj+4btp8r/P3M3KShHRT8Kp:snGmN5ASS6p8r/P3eJH51
TLSH
T1FB8423C09F560469CA05370D256FF542A513E190E12B4E8A7DC72F226C4EEBECD668BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallDismount.pps.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\InstallDismount.pps.WNCRY
Size 486KB
SHA256 a13fc315fb7d2b0e762adeb886b92ec88a8a08939e2424e3fbfcb2e8e53e5895
MD5 30b0da3f61854b540f380b5accae4044
SHA1 296e1e2ab3958dd29e9044d6662c49c4ba2b84d5
SHA512 ac1922889c172a67ed3bfb251b68dd33477c58e7ba8fe576869119b953b381291df091c8eaeaeb8da745ac47a06196c2f5a09c844ef24cf09b25738ed2a2fd0e
SSDEEP 12288:OnjaFiIV8HmaymlckzM5cWdlSxFbivGDDlk1ue/Y:On2+maym2Td0xFbi8lTH
TLSH
T195B423AC4B19493CEE4C226C50B99A75FBA6B2C0E7983BDA3F1520DCFA857D4C4105BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitUpdate.jpeg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\LimitUpdate.jpeg.WNCRY
Size 374KB
SHA256 2aa2e8cbf4807d557192f0260cc3f9ba3d266fdb91e784fbde62a76dc2925ce5
MD5 ab3bd79e45f0120e9612cd5a94929b02
SHA1 eae7df4ddc41a014291d415fa4513c2c430c1940
SHA512 64f7bbca9aafffda35b30cf16533d60eb131bc52e40d0f20ccc31b94c5dea5fef03999c6ab874b375688efb8ced62b85b4c84c26103a079e8677c07abffddab1
SSDEEP 6144:KUPyTvPqfM00yI5FwYyeorndVaErzLdER+XEi+KQE2nz/8LODF84mW:KUyXqfx0yI0YgrdVakXa8+KQE2nr8LO7
TLSH
T12B8423B7EC7499444E8FB1929122C79C650BE081E26310BA9B21CD57939CF333AE9E1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountMove.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\MountMove.bmp.WNCRY
Size 402KB
SHA256 49766a5c90edeca189afe4f92fc1428a2f800739b2e9e63b24865b3602e48ea9
MD5 da8b65d020016cc439bbc03f96558528
SHA1 444c643d88e47f28367bed3688bb44f2e7aed37c
SHA512 21a9ac78d0327d172ca6150f6707176888841d2cd25743f9d5987d6a4ce0597334db211d9d42706051cc1dba19277a3bd34ba0e2d502a24701d1ed0bb379d63a
SSDEEP 6144:DNIykRbM0z8aH2oajg5SMEMeCtnzCKo2MjKRGRkq/c6r7VgwfEe2AymqYi8UBwqf:BOq0gaWoasrEMpnzno/jW/qU6hsBrZHf
TLSH
T1379423E493CDC4067A124D6F0EA31114D5519532846FAE58F6F3CB0532EEB5FAA0E39E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProtectBackup.png.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\ProtectBackup.png.WNCRY
Size 515KB
SHA256 4e303e9147cfc5cb253f2050e5a174a18e3ba5f29b741e241c49f5c14e5d604b
MD5 5e7cd32a2b5503f56ec2d01a16fe2e11
SHA1 08caa43f7026213e4ed686e6fb04552c293fbdf0
SHA512 e270a2fdaccb04bbed2a2cfdfff02c981b210f68c29608a0b760eae5947bf32a50aa65df065107add7e4dc015ca4d51ff4d91018bada9db718ff65e298e500c4
SSDEEP 12288:/ogsZeprQ8Q6+AoWgCeXUgIa6ATf0Q1E/zPnm0VflY6N+:/ogHhHB+2qY/AVeLPm0Ru6N+
TLSH
T17FB433A6E229417675D3EC3933F832F614049AD6552F0B80397BE9984847F0AF2F1F5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResetRegister.doc.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\ResetRegister.doc.WNCRY
Size 458KB
SHA256 4443472fb0ad0aa9a6357e8806569d4e67c9b73826b0ed9dcdbd5a20555096d4
MD5 a1f92cad88af3870b23470cebc424023
SHA1 fd0cfa5c28b5c3ffe734627d275b4481ad045907
SHA512 07462ad5eb061bd4a5d35acac44c7dc98e8bfe67cf1cc7efd6b84e12096e69ee6cded7cd4475e58406d0f31a821d09854433d1247d7619745c80b1b1596bdd3c
SSDEEP 12288:QuAS5rfU8Xe3w+i9ZYGPS+QAr2MmRiSeY9Mriwzyn4NKXwibFCOvx:QkphfF9ZY7+KvRi+2rxQk5ibFjx
TLSH
T13AA423E4A753055D478886C38883BE7DB2C28E28032F29D5FC817C6E56B29F1D6871DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeExpand.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\RevokeExpand.gif.WNCRY
Size 345KB
SHA256 11c67fed57a6b3f9e7c0a41b8b7e113e2b5b65feb0b09bac39c84f96a6b4ba58
MD5 0236008278370a5e657f788a0335a311
SHA1 3288ff83a25bed795d0f3a0a9643cd7ad677fbd4
SHA512 1585bf15b1141d43b11617a228430dd07945d9cb7ab794c45aeba795e81ac2bbc36e930264e02729186898e0d8221e9ac5e3d047b657732d86269f99515a2558
SSDEEP 6144:+j5trHj3jDcDNppW1cgIA0H4tvKiY6rPcKkYxIn/PhSWxMbUoLXptDkhDE9xhq0O:+lBj3jDyNi1cgqHkvwsU3zBSdbUoLXpG
TLSH
T18874233CF8CA1B867A7955488C7200A137B764F57EDABC181D83B6347DD38857861F2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchRestart.svg.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\SearchRestart.svg.WNCRY
Size 599KB
SHA256 6361da69ed1de0a8c89ba8b7203db2a89543cab2443a81a8dce9d125a7f9a962
MD5 4defcf70eed9ad5ed7047e17a7db65cd
SHA1 4368ae7c52e8b15991ed602be25d4f1f3642ea8b
SHA512 0e0a5f36b6d9f128b6e6c71b613baeaf5c4ab7d75c547a7872352e0721221f7da512c94f63e3e58bc11679fb296d0025aa150b1f8885a514b82aafc5a3321f92
SSDEEP 12288:1ihGCEjke0cP9k5W4dnRcIAKekSK1QEiqIwbDBLL7Hizd91qZJI:1lo5CkzMBK1l3tDF7HO9qI
TLSH
T15AD423558C270D6EDA8EC31B70F568E3EDD59F80811705AC77895F8229B9FBA0FA8701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepPop.sql.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\StepPop.sql.WNCRY
Size 444KB
SHA256 98d0e0e957a47c76473368b08dfa824b67db0d57083291d0239f72add3aefa9c
MD5 c7a77c074d3228642d5aebe3cd149d5d
SHA1 4841292202ed2b933b31cbdef0d2eba9dde49ac9
SHA512 628458fa6ccc855cf3915b8d3dbe6c6bc34e2ad0d84c6ff8dff77b82e86231f2f616c25759a3120cffd211cd48028278697719023d66e518c4978012d838464b
SSDEEP 12288:vRrV9iDDyryUNkQrDAKEyLtjfTUDcmTw/FIw:5rV9emyUNfrDAypjfgFTQFIw
TLSH
T1E2A423F04E214C74C1D71D25C8501EFE8356822F21A2F1E85BD74D65E3AEA3D85EBE8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterPublish.mov.WNCRY

Path C:\Users\Admin\AppData\Roaming\SubmitOut\UnregisterPublish.mov.WNCRY
Size 670KB
SHA256 8b15c02fcd565a5bbea8aa6b43794d090b07bc4f102bea759abc8b96cdbcce60
MD5 7ef9e360886403419631e89342c274c7
SHA1 54b058266a45ea4e41b2a3b1a3227542639ae13b
SHA512 dac1b21985cdbc87ffc49cc95f8e0ebcf2d87a42e62c8052547a52056a6b44d4657b2d657633643093981eba18ded5a52c9483343e0b690f39c3817cc26d2ba0
SSDEEP 12288:enxm9K92xngF4VkzugcyBl7fH+KhDGsHKZ+QU1s2c5qnJEEybMYNI4rrO:e89KIXVquj+hfBhyCSUs2c5mlybMsPO
TLSH
T1AEE43320FC141F1F3C4D9488BA67296095E252C41944E6A7BACFE6396A4FDCF278BC4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncReceive.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\SyncReceive.gif.WNCRY
Size 440KB
SHA256 59660b17d62cf08223877f71721b7eb69b9cef80ec55b9475841cbb0082bd897
MD5 c2b948c9ad4516512cf649e727b2d641
SHA1 c2f413298fc31b702f5f7c98b40407cfb1c29622
SHA512 21ca5242e709a399a225181eac189a7a331df89e1b72900659a4b81b476af397dd0fb5bc6e3cc53483bdc3d403fa9eb8bc118358e39e01d634c9af020012cf6c
SSDEEP 12288:uL+Jtk9i0Wzdyb4CWmQqJWs8krP0aRGzfDZMEKSOtLh:uL+Je9ewt8kr/gDZ1KSO1h
TLSH
T1B9A423483D37881D574CDEBA988AE6FF03A0F9BD1E2EF19A20591B900D6D1036570DBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertComplete.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\ConvertComplete.vb.WNCRY
Size 204KB
SHA256 7deb289afc1c8488fbd76bd019fe1a14e605eeece00a70b31c2151f2124705bd
MD5 0bd82149b0271b101607f9853f4b0b8c
SHA1 4b56aa4ab5142961ec363237bef23f8c3b9c064f
SHA512 aabc5d03b01546eaf8cef7a8aa69cc2eb8105eeb3eb16dabeb823ec75cd2e92bb18394776b9fe3b06bcdb6f49633b0124ad52c00759dc3ea823c0274bafddc5f
SSDEEP 3072:8Uaea1HqKD5V+TJtYgQHPzx8J/eupUtao5EAvlNHCfdNljcmXrvdyz461:tae0VD5VKUgW7xWV3YvlNHC1Xo8vdyzv
TLSH
T1DE242304C9780F3FC846F5E5A9B9AB7C3773086086C7835A666FE4F26291109BDF9079
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisconnectStop.rtf.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\DisconnectStop.rtf.WNCRY
Size 151KB
SHA256 345b3099c90826a197e893c2d6233de7744d86130e2b4b2b5e250cedeadc2b16
MD5 77ac03f336567d5b66d3ec6d99770d27
SHA1 e93d78c732cc4d318630852c911ec0439a850335
SHA512 036786921b4f35ec6296aeb7cc74730bbf0a6ba2ad57d6ac60f9e28cf545cbe77231053a90e4c0debb3750d2e6138535ba11a8015a0e0c63dd77c324e82d2500
SSDEEP 3072:dUxs1BroqJ6gVk8eRGJgOg+uD86bfBjb3Js:dH1Mg28ekJ7gjVJs
TLSH
T10AE32286D0CBAF587858D8679C751CD1523B3F501A363AE692D793CDE8279ECD00CDA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReadRestart.odp.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\ReadRestart.odp.WNCRY
Size 121KB
SHA256 0383aaf6a8fd49e86e0ae5c155540c6e70a3479c9d59295f2d443566b3ad58bf
MD5 cee78ff5d0331de001ce57d0ff73b4e6
SHA1 7caddcad1b8e9f79b50bfda6442514675931eb1d
SHA512 050335aa098edf034ba3aff7926bf6373a4e1319b4c8c1ba2234f5a21e7d3dcdec0e819a4b1edeb110b2e7399129905d892043cba514b903251eee1fdd85c77b
SSDEEP 3072:TJKi0rI2Yvepr6iWFGPtaNb4QOx6w4ZBrRqRf8i:tKi0Tsehb44ZxOrhi
TLSH
T152C3122CBD20D9C93ED9E75963AFE61EC94A03446A26A0416B4F4FC1B6033F7CC94A17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SplitMerge.mp4.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\SplitMerge.mp4.WNCRY
Size 166KB
SHA256 ab1c2f2d43777957aa97a5f5b3adc9788358c669b7befc1b1a27d8a5914e25b7
MD5 3cb15b841356fcb00c935b7a76fa5ea9
SHA1 3849ffc56c7ecfa2d04b9c68a03ee84d5b909f67
SHA512 2c84d967c05ecc5c8186628d909051199615595567b4848a0e6bd5a22b038916df670f7e43b10932c3409920374d37723cace1ea1670061a4b49bf27cf90a927
SSDEEP 3072:eINiqaBhn5FUwaq9+kbGLLsi9g9KNXkDLCwBss/DzUNvtXulS7WyHrRuu:e4ijhn5daaKh9llECwBssUNIlKUu
TLSH
T14DF312B4C7A2C947B004803AA2E1F61279BF842D3465DED7197D6A88977FEC85F5308D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopLimit.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\StopLimit.mp3.WNCRY
Size 272KB
SHA256 26f8861b13b5e758ea1981272d1d8a6a4dfe2d9c74a820ff36f601c01d475065
MD5 755b0621e0dfc560dde3cfc80b87da3d
SHA1 3891b08ae3cbee42dec8fb343c2aac537eb606df
SHA512 5c7e367128cccc4d5d34144f0e468b163b2c209faecae41db1b6fb2ff1bbcd7d8d5a0dda5eaabcd9e78597aa72390686fa38c77ddedb3886b2e87ce2df94c5ce
SSDEEP 6144:TVAsvU7Ol2lg14qKsW4zzw7ZR4r6eNsSy9+5KaF+N/OyMSF2m8:Ta+kOpZlfw7sCu+N/X5F2/
TLSH
T1DA54236D5CDBE0D21E2E2AFF1E010B6FF924B1323D8A3758763854ED2B8491957A0B45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchPop.vsd.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\SwitchPop.vsd.WNCRY
Size 144KB
SHA256 f0ee8f6d4b03d932ee0c60286a3b09f4ea158c39834f14a7c7a81fbda171259a
MD5 3252a052d43cef0a96da7f90a12b2cc6
SHA1 49dac5054d1c8bdc5baf49f1d3bc333d83e19ee3
SHA512 65a41e51efb8b797b0598ee1fd78f7a8373116029c800e2575e78be1bfdd84a3a168e21c0eaedee2f4b0ca455cd0ae04ca2fdda152203250dba1b7b54fcc2bae
SSDEEP 3072:ZrlU5J+IXcskqgQyRjuR7WI1dSc1SU60nLVGFDJd3lYgQWFTvtp9bKg8hfmP+Dds:ZuGCg/juR7W0dSUlLc9dO9WfchfmP+D2
TLSH
T1C0E31259B0E96C50C185D5CBD28C15C9FCA2CACC2C7903B222661E71772A1D3FADA77B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseSuspend.xltm.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\UseSuspend.xltm.WNCRY
Size 159KB
SHA256 b4f02bc9eb9ebc0d102c1aa78c127ebb970f32f255215e1f9db24dea2c321498
MD5 652b49604fc1bb4fb6300aa0ed864fd5
SHA1 b07044d5d9616e4b9d7375761022190e0ca63ca7
SHA512 4797087a9284771f8bd12adb63b39cc35687f9565d1bc8c71e316a5743dd00c8482e145719a7ff34db2afb61c927781efed89742e9c2731e05107c6b081a983f
SSDEEP 3072:lupl2SN4Trx9rG8Pk3UB64VpgA28QXSIBuxS1auKsgu4X9/2YmrZwCaUaMR:lulxMpNPko64VPO+G7cirZlX
TLSH
T13DF323E8C3DA0800D1FD151AB5703AD5E83DB1C9C38A61FE056A3347664FE75323275A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchOut.ppsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UndoRepair\WatchOut.ppsx.WNCRY
Size 250KB
SHA256 594eccbb5a8b1295619b00f17ee17174fe375f0fd575aa07dfc12edd13d4b9a6
MD5 d659e3eb2cdadb9c7390d2b8ed308f81
SHA1 7a1a664e4343fa9d149413ec468e5a0c94b1a0c3
SHA512 0eafb2513261651453c0feb6adc12d33e7475a1987c339e6f1771ac22dcb4cc848975999ef7940c7e9556540105bb9e720c120da2db254bd20cc8c5ee3293e30
SSDEEP 6144:NRBqfJQ0n+Dxas0xLdbTEITIHiUtHwRoe+UZwXYG7dAm:NLaJQ0n+VgpVTHTGiUtHwnZdG5Am
TLSH
T16144224C12C08B2B54E29E7B896BC5FE4700705FCA0AC5651AA6E9B47B27C707F7E8C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterNew.xltx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\EnterNew.xltx.WNCRY
Size 405KB
SHA256 b4ca4ec40c2ddc2f8ee1521b4107322ca2018d95f5cba97bcd4dae3a9ee78d1e
MD5 eca219c28ab47161dad2b24c6bfe861b
SHA1 79eef6f37eba4d36cfcc5b50484bf8206e0b5392
SHA512 d9b4e18260dab729d045e82ca9f56c47c790c864ba2a06adb024d6fb0a5858a8ef54f15bdf44fb4f5d1b720ca2ef78b745e7cc2e6470abf10c0d4af7ad274bea
SSDEEP 12288:55Q/9VHHZA4+4lHVLtTUMrEiMEUrnLt9z/r:5ifl1hNoR//r
TLSH
T1EC942357AA1A8A1BAC178B27E326B3095FA3468CE4FAD107CD61C313FA62D45C3751C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterOpen.3g2.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\EnterOpen.3g2.WNCRY
Size 553KB
SHA256 832b6f979f668066362306c3b199b0064cee9a15dd99ccbfd3754fea4097a9d6
MD5 67fd7f581a1e692990855919ab808222
SHA1 bf0b4a1d7a186c5221fa9299eb063f7d91b2aca3
SHA512 9d24d9a377142a27456c090e9bd6dbeaa0718af36ec629533df818fcb47944b38e37d1ce23c6979a6af39a8edc0bddd6025baa1d6e143809f3defbd720f648e9
SSDEEP 12288:mj8ekbHiPh/0Ajq9qasB3Thvtg1u0d1QYtzvIkJgC:asHiN0AAql1TA1Ht/7
TLSH
T18CC423CF0C8DBABC4B198398B26AF354259D3491C8A753C5627F843EFAA654C4673C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatRegister.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\FormatRegister.ps1.WNCRY
Size 602KB
SHA256 51f8dfc9af7f95ffef9766ef33b53b9795198c2a11ead16ee6272cffd20ecda1
MD5 6056aef0bf1cf8dfda8c873ea70aaad5
SHA1 736cff9b4feda2f302d5caa3f21e8b53aa855f15
SHA512 df6032e4d9c8a43fcd9cfef910cca71e952c821bccd3773860306bdc04dc1f01043a59e8fb56743a619daa424961675f01632283305c60a6d48ddbd731b5fb85
SSDEEP 12288:3rvbZfITp4CXWg4PC3t3NKP9HUTKMr9NUCiFBRlZEQRUHeNRvZrM4bNsHr:3rvdITKSfQqtSU+MrntABRtUHelrM4Ir
TLSH
T10AD4231161585048031907F1A2CF9F5A2DEF1453382AB5AB6F7EE8FEA0AFE61C9D3311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OpenShow.mp3.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\OpenShow.mp3.WNCRY
Size 307KB
SHA256 625d3abc5cd1a217c48472907d925bb2f9c8f6484c06bb5f00c191df14aecedf
MD5 b316118256b754ffcfe760ef137e10f8
SHA1 294a30889951a7a690d6d63c26e0780231e79763
SHA512 57ff95a5fed91e130c1b2009bae94cedc39ea333f877a8be5aaadc21c81ca6511631d9b983d65034034698377a70e6d4ee492006e1197eb8b02fc56f3f8017a5
SSDEEP 6144:d6TvZ3nc4zuKz/4KXVS1cg2ZYoj+iftkmMpmznKuZuzkPtpaBLHLdQyW:dEvZXcZEfg2eonlSmznKGuzwQe
TLSH
T1D964238205D022A1C80D64BD4EE9DC06A5F61B81E5EC5FEFB552D6328C67FD28D0E9F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReceiveUnpublish.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\ReceiveUnpublish.vb.WNCRY
Size 700KB
SHA256 2ba90f219f9473fd913ea54fe07b05aec430f9c78aa79807ed1ef031ff3a811d
MD5 555e74ed2d2994ed19ca5a702c3eb9e1
SHA1 5b98081668dcb3f078c4f053561be36adb9b8ee6
SHA512 2a2732e4beb22f8e5ec905a1d4183e558d4124fb3e5425d815339288e7d733fafdfe860619d70cbf10cf7f8a7a26a7fb9865a01a551cf6e8830bb9f309fdd35f
SSDEEP 12288:YZ7rKMuvuFqEtGTdu5fTwauj1JtJTgC4vRIoVv30nk9Fb2C3BsaNf4GA:ESMuvTEtGTdKJuZnZgC4KO3FwCKaNfq
TLSH
T12BE4239FA13337A040E9778E6CA8323F1EF356B49344962176E25890783AFE1C8497D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeSkip.xltm.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\ResumeSkip.xltm.WNCRY
Size 774KB
SHA256 68a878163d6f23599fc42491485c2e7bd8dc328e1e5fc73f33e6070df77816e5
MD5 0e346ec4ed5434acfc5a8328dbc875e3
SHA1 ef0ccdb0a50616036ed63f3c6e295c0a651e4570
SHA512 ce865fcd16939cc31b85d76666e65b233325e347a866e640a9f0819d762e8e09392363a9789d8dd0434f6b25737286e3fe83eb9dfc4f28381c7c259d84c3af57
SSDEEP 24576:9blJlgzMdLux5X9NkY4+LvZdnGkoCvE1vtb1Hx+:9bl7purXXZ4+rnGV4YpZx+
TLSH
T1A9F423DCDA414221EF3D6E04A3387FC77E892A1CB38956D580856ED1873AB7A2079DD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StepSuspend.csv.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\StepSuspend.csv.WNCRY
Size 381KB
SHA256 5e63239a7cc033eb45ec005e54d2d85da75776bcd6f0d5ec7afe21c9501ca5cb
MD5 cc814e726f95951b5e32a788db6a75a9
SHA1 13bce355e58cac43fb21871a5645e949952c88d7
SHA512 42adbccf6ba333655301cded442d533c7537434b22bd01dd23190441b6c9af8d6d9a20e322cb99eac5c9ebba0d4a2b29a11fd76aee05934b35d78713dc6259ac
SSDEEP 6144:AuQS8qQ+zXE1ihdvgDnX0dQZPNMzqTBLRdSWHMRUlmet/Ci0KIOZ0B5acusavUEo:TH8F6dv2nE89tvSWHC1et/ME2Cu
TLSH
T1578423B1A58D13556EF26E332C73FCEF70A90E5230B8021697BCDA4677A6765F048235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitClear.pdf.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\SubmitClear.pdf.WNCRY
Size 651KB
SHA256 17f2f8a2ac487349f5d2687bb795c3b81680e9b06e403c542ddc643cb2deb67b
MD5 20384a23a5dc74d6ef36db03f1d63e4a
SHA1 e4bcbbee3b6a3f4846729cfdb9fca09fb1306231
SHA512 e9e7bba2dc319155a128907d798ae096f8d7edc475f193d79bc414c0d436f22a2f34a4279f47bd445b2d401e4e58f79eaee253ec00aa8ea9668542dca2028eaa
SSDEEP 12288:w5b1jXAaqu5ti4/ttQ+2ETjPnQCXVUGPVkmqeluOkEwnN5/D7YGucyoNt5p57JL3:w5xrqui2ti+Vj/73PpMOyn3D7dhyuz5B
TLSH
T131E42309831500DD6FCCEE5B30839DF1E251D5FEEB8982BE35849532EAE8F2DA656D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendSubmit.xlt.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\SuspendSubmit.xlt.WNCRY
Size 356KB
SHA256 4b654761a34b02eaa295c2dbde92bae48df65a80d1659fb5c9c60aaf3a048652
MD5 c7cc31ee05adc6f8be6601b0bed6f763
SHA1 d1be187a29d25a75ca48e732e253f46a1b35513d
SHA512 b10b5f1ec4d631a351e7e3c08254c948517141e23ae73afb7288c66081777c94d3e0523471b8c61a43d36bbc3f28013e3080815d3057bc7c55de0f6b4e6c5cc4
SSDEEP 6144:O7v6lWZkSegbGV6Msl4XqzLbKMe+kGcp8192bTzZYO8BweWQZP1Fd6R2W5ZgQbi:Oepv6MXm/9e+kZ81o6wRQZP1Fd6wSm
TLSH
T13C742320CEBA88074DE511774BD29374BD6EFB2D2AECCA326557A8966CC78389317704
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaitAdd.rar.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdatePush\WaitAdd.rar.WNCRY
Size 332KB
SHA256 815ed2ceaa0d2c99a0e142d1ef1beedb7d2aaff8aae7c72d98af04f6e3fe56df
MD5 77b5bd60c1b784e0fa6c40b36493e7f8
SHA1 048020eec006c612cd209a8563ce4a0655daf5ed
SHA512 7d2d9434397290769d4571bc81f35207d6e455af09a2d14b68412a5b639df60705610fd9be8cb3b391c11e525ccc3e507631c384cc8a74428ee65a9ba1cbd7e5
SSDEEP 6144:jghq78B6k6V1/0q1uYvyM0s7LSya7ZTSvnuZiU9oDEjsR5UnOATgBQ4a:0hq78Q7171uYvy1s7uVcnuvOEjvFES
TLSH
T1C87423425FE1625638027EBE144E5658BF6684A7C4CDC3C1CDC0282EFF386A78B56D76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AddTest.ppsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\AddTest.ppsm.WNCRY
Size 287KB
SHA256 58cc30b13f161f59a8abb8c15905002647da6376f22721f1ba251f911300e984
MD5 345471435f87592b6be0bfe34b46706b
SHA1 a7ebfba7636491a2b2cfd52768bc8787cfc6cbdc
SHA512 caf40893dddd94a0abe23bbe83d60ede8377017a8e70f3e7788368067c3c34e83e974ebda1a6d818646cef4ea970caaa52b34f1cc3df4e06e3925e52be1031ee
SSDEEP 6144:R4rCvjK8r7tMUns9eWaC8SRhlh5GgIDWJcQycSx7RU8giaAVt2:lrXt/SQDc7SxKTiaA2
TLSH
T1135423EF94C3A4570CBBB18729691670C37EA67484FB5210D4A2E2F03DCFDD196266E2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveEdit.ppsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\ApproveEdit.ppsx.WNCRY
Size 372KB
SHA256 1f5efc4b6adee0d66757c209e5726a09b026eaf78ab85ad5c2daeb531062c5a7
MD5 380457e41e9254f0eccdc9795e948661
SHA1 5606dff28ddab5e8c1e38f911f2398b9014ac3bf
SHA512 b0d7b1ca22ef71e41b453860a9d4f41f0b86d6efcf74e664e42f6712fe3e8d117c30aff1d9a359959d0a16180c2ba088143706881c3c5259c5bf4c9a650a1e5f
SSDEEP 6144:qpThrb26ErbGbUWh0+ofvahwpXvlERByCrmq3njeAiFYDGyf967J7KyaRHHnjE44:Whb2/bBP+ofvaWpXvlERByCCbAiFoUdx
TLSH
T10D8423A85F83EC9B79AAB0A134E2E4C8F9B831A4C446084F5D35713FED32D9255F5287
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CheckpointMeasure.wma.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\CheckpointMeasure.wma.WNCRY
Size 671KB
SHA256 36187142a0770188b3068498dcc7dd743d296b0928ce00c0d983c1f7468247f0
MD5 da03f4c3e3f2a3f9c3096d5e50cd8be6
SHA1 e62ce2637355cbf2afccc5b44a52a20e2131e0e7
SHA512 6360b3c51861eaacc7f1de89764ef8c098be650744a1af1f6ae634d1a74af668af1f003d8db1536225df56d56a0b81f955a0ba37a7fec3342688c4a7259260f8
SSDEEP 12288:CTr97QM+n02l5rjtfQl3oV6KD0bnB1UtjotjsITar/OjmMR8JQ0k4Zs:m5D+061jVQx46ggSotjs4A/aR4RZs
TLSH
T1BBE423521070CB3364EBF318E474D3AE8CF5D92AA1D02F4FAE94DD45FA655FC88A4622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ClearAssert.ppsm.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\ClearAssert.ppsm.WNCRY
Size 649KB
SHA256 27e736865f1fd8eb0ff7e63cdb9d7fec9c03e0456871bad28cb1bbaeaa84607d
MD5 efa7103c43fce2b3e6cb7042e690c485
SHA1 dd9505f5ec0c3030abe05941c5ef7a6eb009e32a
SHA512 a9d601eeaa1cf465a8f347ca78688e0bd30ea4237182efe362631e8622d5a0fe20e1f6d8355aa5bf06f684359f4b28a588b4fb580b5750a0a64894e2c6d5fb69
SSDEEP 12288:VFNofwxWlstnpseMf9FOwPJiZpe18AQgdgt0fzkFdREcUwBgCBTq4P:VUYxWlstCfjOwPJqYzdXLkhEcUlCBT9
TLSH
T1B8E423366209F4768EAF878522ACC56EE26ED7AB37D3F180C59C55385FD8743802F624
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EditCheckpoint.ppsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\EditCheckpoint.ppsx.WNCRY
Size 266KB
SHA256 f0759701df5084f8e886f1f63d55bcbcb4a92e442bffa566a691e429648bcae3
MD5 f4caf41597bb7bf867ebf2d758348106
SHA1 3d498aa3b70b3a68f8a83ff00151000aed56bfab
SHA512 0e9d57e16edbaa4d6e4230a5ac28b7e0b47b0ae4acb953971c2902249835c4c1d42b82c1d7803aaa11eec5108c72dff00e36c4e1813cfda845f8d0bbb8bab600
SSDEEP 6144:8AzK0tLytVzMgDpciapb7itqRIWA63wesFQCtnxQ:8AzXytt9DpPapiEUesSCtxQ
TLSH
T1424423E275D21CB4B0214E82B967EE3D2243F22FCFC01A8588DE74BE66BB2463947555
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupRead.ps1.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\GroupRead.ps1.WNCRY
Size 309KB
SHA256 341a2b9ce12e0c148a949a9953034b7a2e22d8d855f0dafb8a6a135b960d32b6
MD5 02bf4e5f83d4c4051a131289b5c11659
SHA1 4fa645ec417abb64a2b461f51c780d825a927228
SHA512 5602b5f1e27d7d320a43cf426425863b0faec7811958d7dc0742f0b1beaa1189b79e62026dccb003d43d2f36c04973ef18f1cf061e4f880fe42d8d39a74e8fe8
SSDEEP 6144:P92Y3Tg54ugYwd7n5MHpKGCmrLJZ5bQflumM+efljeEi/Qj:P92Y3Y3NyT5UKGHrKp58l6q
TLSH
T17964236D8F285B356963BFBE88200486564864096FA32977D423C03DD8DE7BE647B32D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GroupStart.vbs.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\GroupStart.vbs.WNCRY
Size 436KB
SHA256 d76b92ec271177cc0a42582693951d5bcae67180cfc672b7c014c6e86fd81717
MD5 ded9b30e3f80cd258961d94ea67873e7
SHA1 2e9dd08827a3c7b858eb5f7bdf7da0cb5bd40288
SHA512 f47ca0c1dda97fbb01a82fca31fbed73766de8f95f0aebf1ffb1cc911cab058cee9c0906128117c1555493630070397991fcc41331ba6efca9002d601bbe0f66
SSDEEP 12288:N+NRKl26Yqzxt1GJL5LMZAkcc+Y5POnCw+pJ+y3xjz:p20zxbGJL5wzNhOCRpVz
TLSH
T1FC942389211C038C2F14D3790AD7AB9975B9EAD2E4C71F5EA697EB7C180FCC4E11E099
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemovePing.bmp.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\RemovePing.bmp.WNCRY
Size 543KB
SHA256 30a8e6903e278ff50fd07cc2a05073fad556a87800f4179bdf48669bc6209393
MD5 e6e442fa803e772dfc9f22d999c84b2d
SHA1 4f13e6aeba5bdc470fd5b42c1208cbcaa773aac3
SHA512 da4fe395f8c3ed98b5c45bf76f5a3ed3b10053ae426abb67e52bd8813786aff2e9467fca8a935676cf2828260e0821c63232c8405b1c605e3afdad18e8fbc1fd
SSDEEP 12288:92hWrmxHCZ3tSf3RkcjpJg7P41YwE8IuUkFz2pBpZK6qGJ:9lrmxQ3tSef7PCYwE9uJMpBDtvJ
TLSH
T17DC42304B73FE9531B03574B617A18982D70B3A7C14BA8D6D8E9990E05DCE4EF0AF1B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResolveSplit.xlsx.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\ResolveSplit.xlsx.WNCRY
Size 458KB
SHA256 210a24f92b396611882cd370f497a65ce0f073ab563763ef07f7ca42c2cc112f
MD5 c8181f3c70a458351d67f264f1143188
SHA1 606507567384259639de74d143dcfcc2941a00fa
SHA512 6380050e2087cdd98c5b5d0b4dae2ca41ea9a38b1589d4d4828e5b09d3f1d1886bb15138f6875deb5e13f2cd21fd8cd938b3bd492c8edbd9e712499c4ed4c5c2
SSDEEP 12288:jysq7EL9P8noBh1c/OOviRk5RSra6VMXK78h5K:jgW9PUOhbOv15R6NqRh5K
TLSH
T135A4237B80FDB36D21BD009C873671929B5DFCDA7C0045DB3978361E5B86A832A53A87
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitShow.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\SubmitShow.wmv.WNCRY
Size 585KB
SHA256 1e3797d6d048536902dbcf37a68ff989eebc5430ae3c470fd598909deeb28e5e
MD5 e4ceb4f1cb8d844db30e0ce0b51dd41f
SHA1 8f479ec0daa0771768af7a49f173c80b0afceb03
SHA512 92366bea44105836af02ff260fe2959580435a0c55aed4ff5e8d096505282a0d1751f0175d459123998a811a278372f8eb08a47994678911118cd4f2fcb22a50
SSDEEP 12288:hjgGbcFnv5K4sM4aIyD13T+vgyXy2LClHelDTpkso95Ma:h0Ge04sXoEvgyi15Zsy
TLSH
T18DD4237B358DC89D025E0F3B5390BC6A32499CBEFD5C1F9D9C3C95CC0805A0AA5B68E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchUnblock.gif.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\SwitchUnblock.gif.WNCRY
Size 500KB
SHA256 d0fd383dfa712914deab951765f731acd6aea09794e436884711d37cf5c6fe1f
MD5 2c7c9c9e1cedc06dcdee06ea1dbce9aa
SHA1 2d842b709844bf5207136b9a36200bd5960de040
SHA512 765bc6f7358e3185469ed3691674c9b2b62d5f182fa0a6e429e89bd75a1a3bd85b42e0def05d2ed67951494694614421a8bd8fcb721083b17dc97b95af5b11c0
SSDEEP 6144:1WtjRqwcnh0SKrFoPd058RDzcawgTTzSDlzyWQ8+Pq5Ye2cHw6AFk7z9V5VXqa9d:stjRqh08DQ1g0lzyQakYHf66UHXFs5e
TLSH
T199B42319D9D5CC8C1B09226B123FCB49F5E0BA8B8CA5380F1E0915538DB37ADEED196D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TraceShow.dwg.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\TraceShow.dwg.WNCRY
Size 415KB
SHA256 94e7b7be1cbaabd53e44aa2302213675f20df0554070bf8daee83a0853b776ef
MD5 da935e2b62a07b0b99cbf8e6ef0c658e
SHA1 9b8f9547eeef73f06c5f5d360b9efb06173059df
SHA512 6509546ecfc4b9e8faef53c157178fade80af9ed21f28f1ef39d3d6fbffc96d10438afa81f127ef4203cee0fdf9f9fd19f071b230573ad7c3a96509b197866b1
SSDEEP 12288:Rm0tYd0BD+oNBdydHlvR63+Y6HAGgXlOKeOh/BuTIm:RmGYd091DyLqegGQlOh
TLSH
T1CD942384B7FF79FCD9B6BCBEEDD6E1968299041450EA1090CFB77E8687586876323040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseTrace.vb.WNCRY

Path C:\Users\Admin\AppData\Roaming\UpdateTrace\UseTrace.vb.WNCRY
Size 394KB
SHA256 61098dfbf3245aeec3af894c2840d0ebb2e631b2878236f0ec53a5ae241ea1ee
MD5 8ebbdeb67cca3a7eee44e207659eeeee
SHA1 d5fc0e899a7a57dd957c1fb7e87ec7f4ae608d36
SHA512 b02e0543ad7a2b0ae5b598336112333dff46a606e3cc2f09a5d06fc1c14741b7333f75eaa5f2561ee6ade878908b513718a6ea9c4aee3e2a087ef95f5489bc58
SSDEEP 6144:E320UIskM83y41eK3IyVPMLlj0cxVmbwi8JQt80G9beq5rN4ZqDm:+4jMi41LYyPQbVm0i8mp2B554ZqDm
TLSH
T1628423EB22C51639A34568B0F2207EF8553D091E8B8F64FE7C0AB2B51ED6734691ECD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UseEnter.wmv.WNCRY

Path C:\Users\Admin\AppData\Roaming\UseEnter.wmv.WNCRY
Size 693KB
SHA256 e5d59629c0bf48afb77988a40906c8bc8d42a38c18358cc0fd695f9f14274001
MD5 e62fe1fc2e19a9745b6ab84116206b1f
SHA1 cbeda3bb5757a13f7bca9b842502052266b9d15f
SHA512 ec7939e49d6dae3ac8c2756225acc41aa335d7011559a83e28fa23dd1512d460e6834c144fa56526a2470054047ba15d1f26caec4c97ae47d8b7275f185006fb
SSDEEP 12288:cJoZ5UCTJWHWviNllwL0TFn9kISrMMaEwhpJx0imqYwubE3p9z5dZhttGebvQWNC:FDUZ2vgllwL0nkIRMaEUpH0NqRubCp9c
TLSH
T10AE42319D1832D9C5B0A65AAA63184B54CF0FAD4DED576F738453F4C820ABDD2F3222B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertBackup.xlsx.WNCRY

Path C:\Users\Admin\Desktop\AssertBackup.xlsx.WNCRY
Size 11KB
SHA256 cd34ad276ac5003770ffd8910756a8e8e8dec33d8a2701f7150c24f6408a8709
MD5 089bea8c223f51c2d59f57332d27fe21
SHA1 1d1b7acd444cee0ddf5e8d85cc1b639d6b5d961a
SHA512 1fb835d48f2b20a2031e0868d7c87ea83c8f4eea61508056e9ec0f4fde6d044f6faf0a61d9dffa050a32f76d1f3c32c1d80c1c9077c0378648313abe9d1dd601
SSDEEP 192:Y/CKc28XxcIJzbWAHj+/GpMQV3mIAh2xWH2Tqcd0Gp//OuEmW:kCfNXxcIJ+vPQVXrdTYGp/2vF
TLSH
T10542CF807A5AC5018D0E6F8BAE8C3151DC78AFDA34D2DB29E2EC1EC57F17D961900379
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompareUnlock.pdf.WNCRY

Path C:\Users\Admin\Desktop\CompareUnlock.pdf.WNCRY
Size 665KB
SHA256 c55bb90b4cabf08237a1e3dc9c86093ca6640616dc71c15f575effa5a1c56feb
MD5 1f10ff39482e6ee1b2669481176f9512
SHA1 f600098bfab7f1001861503538396df381a283ab
SHA512 a47535df3cdfcd34c2102005a86e87ef7181f57980bd623aa4a1a299bbb385238043e0475f505c2c9a40c4e7aac0bbfe838ff179e44a4f95092e372bfda2d42b
SSDEEP 12288:beJwDdhE9GA+FDUwwwEHEjUMxAoYQSfFmy2sXA2IkRSR0DcF7IL/aZCv:KivEovFYMAoYQky2IkJDU7ILSZE
TLSH
T112E42397B6D9BA956D30B8AC9584C0F52DF16C323D157FCA7528CF504DEA884F062C8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConnectSync.docx.WNCRY

Path C:\Users\Admin\Desktop\ConnectSync.docx.WNCRY
Size 13KB
SHA256 b9e184ba34d6cdc0a30ca606baeb1409aa2d0efada8c28bf4a9277ae3e68f4a0
MD5 fb1237dc92ea63397655416330f3ece0
SHA1 e7e37611fae3abbd4c48ff487c6516d356f556f0
SHA512 3f4311c2189df2ab7e573233363e23f934165d7f041e242964f7c1451526e570a03062b43c2943f15e2f47168c281901fc1ad75a9abcfe345cc6652d84b8f49a
SSDEEP 384:88JfaTZhqL3WGnQFQ9DqBg0He4LLWYcBEuxosJny:bJWhqL32ub0+4LynEMrJny
TLSH
T14C52D109063809016C4A507DAB746FB4AA120F9F4E45592AD04A6F757E1EF0F6BBF160
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConvertToRegister.xlsx.WNCRY

Path C:\Users\Admin\Desktop\ConvertToRegister.xlsx.WNCRY
Size 16KB
SHA256 447c2e54b6210aa06ba59b45f8bb09578944026a2d544981a70097837cfecb61
MD5 19be68b72b1bf9d3615e5246a2f3919e
SHA1 e761e855ed11b2336eac0421900ec6f3060cb9fa
SHA512 53b97925d763482db2f564184a1629ac0ffac06adec328fdf55bd1541bf163ccccf2b0d54e8dcc51430fb205beda946ef3804aa16da10f908893b1daa870faa5
SSDEEP 384:wIrCY1ZupYmekkylQ3nlO/3xZ8xmaKhVCTNfTP6VvWi9A5:ww58Yme5AQXe38mam4NbSVv9A5
TLSH
T1C672D1A50037829B7B33EFC1365FBFA09D20D69A7CBA42685151CF3AA785334F210310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DenyOut.xlsx.WNCRY

Path C:\Users\Admin\Desktop\DenyOut.xlsx.WNCRY
Size 9KB
SHA256 516d3258d639192b2faf58b5a0d854f9065b3a43b06f292ac2bdcb7cacdf70b7
MD5 8989fcba65c3643da66fb37165c0fc9a
SHA1 15a968be342a4d71d95a3fb8166471a6815380ea
SHA512 0c059004b5d743ed22c028ce372080234b3ea95fc92b9e794212b829e6e25aa7825a15f650dac8347ce3d79c4d37007fe2aea5c82a8390a3ba422282481f4265
SSDEEP 192:NpSZ7A1ZcxSBDjYJKo/M6ZtbhJjpAClPhCbH3XN+a/iU+HKXcoXe9uGW2e1zaPw:NpV1SIda/Jt7aC/WHHQaEKJXAuGW242w
TLSH
T1B222CFE028047E4EC57568F7A3DAE79FE80A6FC12841508D0342ECF9820CE258085BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnableRevoke.docx.WNCRY

Path C:\Users\Admin\Desktop\EnableRevoke.docx.WNCRY
Size 13KB
SHA256 1cdb7aa996caa8482b6ae42d678abcea24d6a989f8676b3d6453580a0a95aa44
MD5 7d0ed727e1b3ea88701c16ca3b65c79b
SHA1 9951829511de9b950bf90b8fb6a422cfd071a062
SHA512 e638c845ea5f972918a59ae0c576611354ac87228e0f9a4bda6a37019ff91b622d5655bcad06a329dd47284327e2760ca74590b30fbe806c507a767ab262888a
SSDEEP 384:1UHiHakW/CvIu8ZL8+U0n0Wi20oBg5uHzKQ:2WofvZLh3t1zBg0zKQ
TLSH
T18052B0FD6F8E0F637C869052D659AC51AC4354894842EA4C8FBF44D72066376F1EC9A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LimitConvert.xlsx.WNCRY

Path C:\Users\Admin\Desktop\LimitConvert.xlsx.WNCRY
Size 12KB
SHA256 3bce4dff7a4272ef3a732bf15efb61e24fceb3a7fe29e96d2f7f81f82507bf85
MD5 498a097f271e989430af0c78b579c4b6
SHA1 bc79d428863d106d521f5b837e016a0727538a5d
SHA512 b8a36a703bafa6b55b371e84dc806fcb316b81535c1daf3e5b3e8a031366129c473d18a8caf53cf3242869af84f0637c308deb43767dde0f0e319639dffcc6d0
SSDEEP 192:s+2ssEvC256k11nyX/vkLoblv9BLQQ6G5hmRdrpkwn0Ko2p6RuTtJUh:sh2vABbBLp6CmXlXnBoHRuPq
TLSH
T1D242B081A00E40FBC72B763411A636375856AD9A1A12577A50FB4CEE13D201D89FBFFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RequestRepair.docm.WNCRY

Path C:\Users\Admin\Desktop\RequestRepair.docm.WNCRY
Size 632KB
SHA256 a386597fcc0f075abb890a3002a2fbb4db3a39cb559e1d2e8827bcc011bb23fd
MD5 48c12043f61381a16d81a792c16bb990
SHA1 cfc573957faeb52ee7bcdec655a96092b0c4d561
SHA512 d68ff250361be884b0409574db7cd2169b35d839f9be9ee5c8323d524298950e8dbd472af0fa4c178823a707775a1f706bb08448d26e88a1f38786d2646f6c35
SSDEEP 12288:j/Y6rC8Qj6VsngVTAou9SwA903QUCjy/2bM+GA7T1M:7Yf8Qj6VuoTA/Sw8vy/It7ZM
TLSH
T174D4238F6506CB5169A923897C9EC5EE98F87D38AF18021FC8931F2612DB475613F9C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowConnect.potm.WNCRY

Path C:\Users\Admin\Desktop\ShowConnect.potm.WNCRY
Size 932KB
SHA256 2ac60efb0c4604b35d683686d7afa9cd1d1b27a1865c50ea651fa5ea7ca54bf1
MD5 ceb2e3d0380c96f8448d5ebd642d41c3
SHA1 8cae9122793f7d5a22760d260d65f6e8348f58c1
SHA512 477e5eea825bc3fb1aa99e92c7ff740714e7a48e851e4446af9480311670952e175260500adbceae67c43668f31e45c32571b420828999b42eaef3994c0b442f
SSDEEP 24576:LRnQlkx7LkMejq08xnNkvs+D97BizcID3lkHbGJa:LhVxG8oCcNr
TLSH
T13A152323C35502B4CB57B4251AD2CDF63206DBFB5288A43A3E62B6CB9E947870B7534D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowWatch.mp3.WNCRY

Path C:\Users\Admin\Desktop\ShowWatch.mp3.WNCRY
Size 1.3MB
SHA256 1509da39ba2e6b0f99de1c81034dcac21403e846884140785787c872e98a6e0a
MD5 5bce935c8422dfc100eccc2d550b9dcf
SHA1 d8f187ae75afa43c10163a81d86ec604ec490aec
SHA512 adc170546148aa61d2029f09b64a0aa8b442a0a77fb06293f1941b447f8a784d3c254ae35b2a9b429222d0705f0d9ac5b9c15ac97aa396e25f9c986b5ddd0c96
SSDEEP 24576:HAeB1CxAyeYDThH0yh3ztAUBx8bjS7rXoZLH24hbHzz/anAx:gWCxA/YHN0ykUBxyjS7rXo9HhbH3
TLSH
T1E85533CEB90D2269955CA61FE18CA019E6061FD6513CD3BEC1ADB47B84D32C0FCAD4B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StopUpdate.svg.WNCRY

Path C:\Users\Admin\Desktop\StopUpdate.svg.WNCRY
Size 732KB
SHA256 7202d1edcc48eba4af8250fd7df7c40639efc8db74e0387a5f1b89950d8592d3
MD5 1d2bf58b98b9446d8fa24f673817ff4b
SHA1 d8e7f947279d4bbad57968289476774385ce9697
SHA512 8ca360d39c84b5dc8b089f1811a47f905acd9606ff63542f6f1f118dbe27c0a944e0da54553204b98f1be283e73446a61a440dc59d9fb5889d3df4b663a91b1d
SSDEEP 12288:lKFjuxDQsfEuqdaiOkhwKJ/kPIgzqSwKtv2J7a2VtmPmTWhek3KBD:YFmQsfEuqwRKJ/kwQYEs7a2Vtuh1KBD
TLSH
T1F9F423FCDCC3426DC71B49AD4BF99E6280C724AF5F516042C3E50E27A8A84577A7AF60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendUndo.pptm.WNCRY

Path C:\Users\Admin\Desktop\SuspendUndo.pptm.WNCRY
Size 865KB
SHA256 600a8c0fc397413ac18a19b473bea8b31973f6af375c9d1efaa1dd9dcf539ca4
MD5 10a76966d3f48493fc4fa41f1783c51c
SHA1 df23dfad9cc9b1e5769009195fc10942066ca7c3
SHA512 7519bb1581ef68a6d9b4d6c3997d0b36444c477193225767696c07e28a9d146069f43ddf582cf94bd20b13f93fb94d72bcef6fc04ac88c3b0034f5578bf5dbed
SSDEEP 24576:ndrN6nhKmpBzvbZ4X7959jpMI5ntcoAmYgLevN:drUnhKGTbZIn9ftcBmYgCl
TLSH
T1E91533FC05150219788C3D768A5CB862F30C4A0676F8B0A4EC9D75DBDAA1DDCF7A2E46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GrantResize.doc.WNCRY

Path C:\Users\Admin\Documents\GrantResize.doc.WNCRY
Size 766KB
SHA256 7c03accca19437bc45ac25732e54238ffdbc6fe9414cb069534c93e415910b6f
MD5 a870f83773f1faac2c60c84e6c061e8a
SHA1 563facdcdbd486ed2b2e8a96c15fad2909e336c7
SHA512 f59229e2469d786848b2d3ea3558a80aeb702f1f9caf079f2fed6331761d3364349f11ac52c77001f74e0a43a1e68c7a41f8f2e6d1bdb0adcde5d99deab5372d
SSDEEP 12288:tHNRH0dkPASj6Vz5oRXdYrXb90DnwGEPJJr1PggABYrJ9A7H4y1fBS/LJOXkpYQC:RNRCkPASWVz5EXdmGcGEPPr8BYrJ6dfh
TLSH
T160F4336FA4D0F112159150EF3F51CCD9E106C4F7C940EC1662926C6B96CAF2FAE22E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewUse.vsd.WNCRY

Path C:\Users\Admin\Documents\NewUse.vsd.WNCRY
Size 459KB
SHA256 30b8b8f4c34252a830617cb684e8ec82e8f7f4b9e919c8636f48e44a8f5dde2c
MD5 9267ee2908e2da0edf01fcb938456d4a
SHA1 f67c05dc434e50a0cba9f807508facca09519058
SHA512 7eb4470650d7aea6f9d0a749dab36b8ad59b7d578bfda987987d5539fa4955702b5ed0a2c58987e7c818397a6fa5410053a827b188453a47570eba6b38236cfe
SSDEEP 12288:9XwqZhPMMzbvneQSzJFAoKmIZjnzxMs5MIsHfVjH45CoU:9XFZVKKZ+1/VT4koU
TLSH
T120A4237BC800F670D3FE62CEA886366A19F6F191DBA520E3148A03A75BCF764D19059D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Open Notebook.onetoc2.WNCRY

Path C:\Users\Admin\Documents\OneNote Notebooks\My Notebook\Open Notebook.onetoc2.WNCRY
Size 6KB
SHA256 39eeefe295c1c39b5e114c736c24216f846df32a5e04e359e9dc331911aaffb7
MD5 4046b8b920a978d17be5c9864a27bf89
SHA1 4814c633a4ee4f40675059a7a18e76d231caa316
SHA512 957443886b865a4bec9a007753583873c6fa8e63f0fb89f7beffb8b0b6f6485540b773a6072778f0cce8d30ca4f60b3c4c6e6d226951a7b56562202d3b1a7a01
SSDEEP 96:o3Ob8tdAizbhn1qurxqVEZ/ddczHFARkl7x56gDS4gibfVLCpxj1jov3LC3mK2/A:Lb89zbhnVgkDcz2A7ighTycv7XrqlZ
TLSH
T1DBD1AF009EF73E0E021D333EF65A20A36A8A79418D00309DAD2DB87ED0F5852629D04E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OptimizeUnpublish.xls.WNCRY

Path C:\Users\Admin\Documents\OptimizeUnpublish.xls.WNCRY
Size 902KB
SHA256 f334857aece97dd43aa8233a44e5aa823c5ed7a8f89bca85973229659cc41150
MD5 787ed3dd69b051120d166ca340233820
SHA1 bda1f223ba8ce31f78729eda6b515acf466a1249
SHA512 694675cadadd169d17076aabfe67aac13fff849ef63a77a141cb259e02cdbcc65d75ef99c2b1832c80e64ec3ff8786ab9d9f98322bfac2e553adf9f4d49bc0d6
SSDEEP 24576:JXwOktLHSTk6IZw/TQthDTKZdN3hxavJxGo1oTF5qy:JXwO+LHSI6IZwM+ZfavyoWf
TLSH
T1C11533778CBB32C0FA1CC4880F1C87553FE666C3E236552626E055B7BAF1AE16C195CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Outlook Data File - htuxzbksja.pst.WNCRY

Path C:\Users\Admin\Documents\Outlook Files\Outlook Data File - htuxzbksja.pst.WNCRY
Size 265KB
SHA256 2591767a665e6bf0940269d6956890d6db2844161440e4b9621272ad376a2b5c
MD5 5706b73029997164d40b58ee777a3a05
SHA1 97304a9ed1e890b63fcdd64ff00ce673a3bb6e7e
SHA512 5202f28d5becae92dbafa1668020a21ea16489a6c3c748c870cd91a8350fc99b00fc5f7090ed0ea2ac6db81307a929650c8cdd5f992aee21708caa6de2050173
SSDEEP 6144:eOibu4+zzZseoSkjI2jTzjsDU+gbSLRcpmnTiWHC:qJ+zzGIks2jTX7/WlcpC/i
TLSH
T11344236E869031C72D9E170F5BDC95B8503CE28A5820B4C6FF64E7F9BC6F4EA05A9205
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PingConfirm.pptm.WNCRY

Path C:\Users\Admin\Documents\PingConfirm.pptm.WNCRY
Size 868KB
SHA256 6a7bf7d35dda3cbf5670e5b4a12a219b7b2c4ae43a97e71ba0fc37715ccc4da5
MD5 53e03c085db98e1a5f542e74778fb41a
SHA1 04bad69ffcb92f240ed005462abfb565ae320613
SHA512 ca072bffea05963467f88a7309d7940d092d95edf544f861132c84122e2048caae300b6a423c0bbd406d9fb747c33f4a2763a7a465b5ba25bb0d345ed26a16da
SSDEEP 24576:kioxzq+NF6PMKk414OWqpi8KpX1TqD7392Plwa5Uu:kzq+/w6cZc8KpX1TqDJ2PlNUu
TLSH
T1D6153306EC2E52AE204A75AB3D7BC33747406FA4627BB1D5C2D85DD7BBED502B20A431
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RedoDeny.csv.WNCRY

Path C:\Users\Admin\Documents\RedoDeny.csv.WNCRY
Size 732KB
SHA256 20dd02125724e30cd6bab3785b99a35fccd2b17769011a801319687798286643
MD5 bd1713d290c4a2b732b08f9f8c42874e
SHA1 4ce28ca79746a18672fa505f74280ae0e705c1d7
SHA512 c426e7a0097ad21d0549bebf6685d9a3864562968861ca65f79e236c91847506f54daf3a67d6e5dd9e48a79649fda23a061596b66ac420817f56708a4106e67b
SSDEEP 12288:8N1HWns+c2uiTlSZ0YerYIf4dCqRlgYyp/EKnbKRIDAW7XA88wpkR9G7CPUUHvik:8Uc2hlRYw4dlRlgaKbKRfW7X38Mky7Fc
TLSH
T1FBF423072F588883BE75CD8E8BD6573D0C593B7B463A326FB4653CD346A0542ED99036
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchApprove.docx.WNCRY

Path C:\Users\Admin\Documents\SearchApprove.docx.WNCRY
Size 17KB
SHA256 0e008f344a4f82194e76e47ba7023b4d4500b8c169ed65f5d8cd5317c7b0750d
MD5 cf1f5e7768698d189263bf714d0314f5
SHA1 f4efda8870c49383d564d6fd77afea746bb9975f
SHA512 7d8f761a6342aea0771caf9f9162964dc849a599d87271676215d12ad02b59f7a50ce89245dd7db224084956e68971b474cf6f8d000d3dd996c92a550aebcf5b
SSDEEP 384:8Hp0/S9codHwD6mraPo9C1Y5jvzBbSlMS1ADe5fXISDkYjWngqkqEq:OcodHwDXePo9Cy5flSllADeZDvjWnZki
TLSH
T10482E083DB17446EE48A57E100C13534E0D539B3C17A25A892BFC6BA9528FE4CEDF812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SearchSwitch.ods.WNCRY

Path C:\Users\Admin\Documents\SearchSwitch.ods.WNCRY
Size 834KB
SHA256 372249e9e4c6adb29acc5e3071cb331998d837545610bd6a4bcc27de77139f70
MD5 98c4981b07a47d20e5dbdd013cb93287
SHA1 b29400b46689ff3800791a1c43e62ed62e996b61
SHA512 45c1114578e300576d4c4e987d2b8714c2dc17b8cb4d245b80c8ec8383f71e822e9b224f73c21e7fac7aec22fc4242c8c9b4d6b4ea242e9fd46b51e93e60d75c
SSDEEP 24576:qIqMfR6TX9Prybkvn5zWcBuosOscHxgzUOX3dap5:Go6JPr2kkcBdMdndo
TLSH
T15405336E94FC15C73709A87454EABFCE81864A14F0C73E37686141FAAEF8914B7990E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchOut.dotx.WNCRY

Path C:\Users\Admin\Documents\SwitchOut.dotx.WNCRY
Size 357KB
SHA256 dfa3575b0036d945ab5b33c16cfd4639f841d804e576ea6611ab969d059c7ba8
MD5 12f8e66c414fe38d4e152d8c30bb495f
SHA1 19ed5080fda803077321853d8097b9a2d1746a2b
SHA512 baaba3560a675ae1108fcde8561ddc0702b0a9cb1c22c88b3d474413ecf1d97c4f0c504e8f7ef3a7b3e0494fa53678974a23ad1609aa638b1e4bae3112212ec2
SSDEEP 6144:K7TvfCXdVRBx0DLAblTFQCCJxz7wcQAQRy0xYlrbF1K8+ftCTFNEz5:K7zcIuhFQPxz7wyQRymMb3K8+ftCTDEV
TLSH
T1D1742391D765DC7945CF690B048BCF85B0AA946AC4E9CFFAD0F9D4CEAC004CB8169B83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchRegister.dotm.WNCRY

Path C:\Users\Admin\Documents\SwitchRegister.dotm.WNCRY
Size 664KB
SHA256 84acbb1d9b086b1742050cde1f3276a88220df5cc48b462e4a3bff4c46ba2e56
MD5 4b6b44e64a70d3178eeeb8b6500b48dd
SHA1 eb47b1e4b24b12265e39818ecb3580d6e92f715c
SHA512 2697952b7e367d2b874864774bf6be0d68b793c01b07dfd793a59f07504ba17181854465366cde56b1bd93fb2d9c3f4df4807e49384b10bb3ebf4f8b610e41a1
SSDEEP 12288:GyNF7f9XTrug6ylLR5eI3WhR7RbkP17aslec/RO3/W3tT3Je0wAB3:GuBfxnFLR5rAkPxflG/8Yg3
TLSH
T195E4337C5C620E3FD09D891D8A3F9F07712666C18C1F8CF9618635628AEA3DB4E7961C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncConvertFrom.docx.WNCRY

Path C:\Users\Admin\Documents\SyncConvertFrom.docx.WNCRY
Size 12KB
SHA256 01b447c0c3b103631c0254fb0964ea7edb3cb0a99c01e6b25eccd126a5e7f754
MD5 30ddbbd42def745caf2542d28d6720df
SHA1 56ae7876807b5c86ce0439087c5a5b31ddf69215
SHA512 644173df9a7ceb89f3013901bb53a8b3305478317d66a9fb1e2647eba18772b085a7bdc5e6b365725baee810d2d81e33079c9e9f032d1f2f3854fea895dd4c71
SSDEEP 192:hd/2jNDlcUFMqFf5VmOzpefFbvaO6V+9N4CymyJGa1pn+dzkTFEeGxJL5sQGOoa2:3iNuvi0bL9KlNGa1XFE5tGfPmXq83IWu
TLSH
T17742B06B324AEEC9724E17D0FB81AD2F821656B8271837D558B70D87D9C5982B305D23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnblockRequest.dotx.WNCRY

Path C:\Users\Admin\Documents\UnblockRequest.dotx.WNCRY
Size 1.2MB
SHA256 983131c746172755d3b78da5ffcb7ed0397b18c0eda9ad08c3c915b3f6a09752
MD5 5eda6c99eff746fe365876b1fbcbcfb9
SHA1 1f9a16bd8e7a2f57bceea1391cb856e0ea4a42a8
SHA512 dd5cb8521ab5c737877dddf1b916fb7d0af898533f7b6b01a4457879dc12e7bfb45633e794b125aeaa877886875d6688e45ae50f6ff22ae27ecd6b298e65af06
SSDEEP 24576:laXTNAesL98YwHiC2pxxQCQfE7bB/8KZ1+manrOnKLzc36oB:laZ0L91wHiC2pxhQCT1+marOn7qA
TLSH
T12E5533D40C03A27F54BF9F18CEE865AD65B2C5A52C318EE160E0A574E33FA36CB95D81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterConvert.docx.WNCRY

Path C:\Users\Admin\Documents\UnregisterConvert.docx.WNCRY
Size 17KB
SHA256 cc0fc3fb38b2ee2d186f73ad1ed5dbb9b05ef48bc27250ea0220cccc5d8cd224
MD5 79287c20ff6c4c8eee531655fd3ea7e1
SHA1 7c149756991771f6065188e8d00caf7705d40300
SHA512 455004a5306d638b15e18abfc8aa52635c7879e99366e84850dacac1ef6333a10103c1e2edd37fa2caa35c2056d1ffbe736738c1c9141d8c00327d9b9127216e
SSDEEP 384:E/Tum0bmxKNyyMcHGi5iOcSzGh6V1Texqang7WmEBxVAEQ:LMxKNyzyoSzGwD4ng7WmWxQ
TLSH
T1A382D0D31B945CB1647F8A9F0DB12087CAB137A1D201D96A8869509F2C5D77F814CF23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchStep.dot.WNCRY

Path C:\Users\Admin\Documents\WatchStep.dot.WNCRY
Size 425KB
SHA256 2412d3e47bee84b97308b821be8dab0642a2c1c27667dfea756ce7d479a6046a
MD5 8cc531259e40b6de0e2fc844aa40510c
SHA1 d6356cd3e8647a71289e11e5370178e1b86ca161
SHA512 42e63635237dfda564239752283c325367cff56cd1ff95f6cfb8496d91388c2c3b2748e3410d66a75125af5e0efab07c5b007f75073c5620914176b14854e2c4
SSDEEP 6144:Pr4Gq8GM0FwuPxdLXYytDx2akZvLsN0L9fhBXm0vrEUA6v/JlvIV04V/f:Pr4KeFTFD2ZY0L9fm0DpQVF/f
TLSH
T16E94236299AF6DC3253799A711E7D214FAC83A70F55B130141D228FF436F42F98AAC1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

@[email protected]

Path C:\Users\Admin\Downloads\@[email protected]
Size 933B
SHA256 0e5ece918132a2b1a190906e74becb8e4ced36eec9f9d1c70f5da72ac4c6b92a
MD5 f97d2e6f8d820dbd3b66f21137de4f09
SHA1 596799b75b5d60aa9cd45646f68e9c0bd06df252
SHA512 efda21d83464a6a32fdeef93152ffd32a648130754fdd3635f7ff61cc1664f7fc050900f0f871b0ddd3a3846222bf62ab5df8eed42610a76be66fff5f7b4c4c0
TLSH
T1D011102EAE2D72006BF284633939E457E606411F126A01B2B9578274137C1BF15EB0D8
MD5 SHA1 SHA512 TLSH

Submit Download

RequestDisconnect.docx.WNCRYT

Path C:\Users\Admin\Downloads\RequestDisconnect.docx.WNCRYT
Size 1.4MB
SHA256 80938d81e23e68dc4305c4c55242fbf556425d80ec29224e57be3437fafcf3e0
MD5 414b78738384f81dc3f451905c7e6957
SHA1 2c54b2d326d32e8678bec658feb542b686aef435
SHA512 a9d90722caf6d11298f993256f2a08298eeb5c37446ef6687d5a714ba231f8013797b6ae2948775f13ec5c6ea9b6aad11d9ec553f1d23cb614b3c7e487d904da
SSDEEP 24576:x8T1uhXcWAM4BrAk+Umpa9bsDJtWw/K9iWYq8KjCUS9UHBZi3anzIU31LI5CF:dQlf+NldtjIG9UHXi3yXL5F
TLSH
T1876533621F7E2F1AD56311FE69ED091F8B79853F83C6148645E6318C26BB40CA337A39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RestartHide.csv.WNCRY

Path C:\Users\Admin\Downloads\RestartHide.csv.WNCRY
Size 738KB
SHA256 08096311c98b322713bd33cebaf89efaa49618ce4bddae4c6a6571be527d3d0d
MD5 aa6553504740c903d9e33b640e9d808d
SHA1 3c7421eee1211e946f9b24843fbad7ccbbadde8e
SHA512 6f0a240f148570065fd4701401feb6edc6c9c7b95e89fb8190e3e251a543ca07c1cebb1a9dce82a3c27d13b488331f632b2a052db21eab1a3816c53658756b54
SSDEEP 12288:+JsrZneV5HEqN1GgANYJTOH/r2lwQuRt+XCzP6ZTD/6jUOv0Qq48iMxy/sy/Qkcp:Usr+Z0gFRq/rawQuRUMPiTejUOvVGigt
TLSH
T14EF43348936E874B33BD24E00A854B746D0055BC2D7905F87FCAAE6209A22CB5F4B79B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallBackup.csv.WNCRY

Path C:\Users\Admin\Music\InstallBackup.csv.WNCRY
Size 576KB
SHA256 52fc874aff1d17456b4a0e844d9e989af4d99bee14f7061d4c83987c81031707
MD5 1f007d255b9df5f1ef04323efbee93cd
SHA1 d0dab7f385894bfcd4646ab5724b735d0284b178
SHA512 fbc93859f57955319773bb2e840159594f19e2807d3a627d56ecf9e32f38baeca7bd39d803c9610f3b631352075f01ab964243e9c73d1f3de97db21cd7c9d87a
SSDEEP 12288:vAf/uvBcFkfs9H9wdPPqK6F1bl8gDNxlfT+zCaT/zF:YwKOfs9mdPyvHqgh/b+zF
TLSH
T1AAC4231544D37B219A9B0DD87561BD31DC8E3A13E6B024AE8F437CCA935346BB99D0CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LockWatch.ppsx.WNCRY

Path C:\Users\Admin\Music\LockWatch.ppsx.WNCRY
Size 768KB
SHA256 95156ca027fdf59ef4b6783720816dd1de1c22e71c81bc1afbaf7cde81ae150e
MD5 50b9d6f179a5e600d0769d4d8d82429a
SHA1 d2df742f32286df967504e98b1cdb27f172c364b
SHA512 0c08fd6b02b6131ec01dcf7f29ec84b5bae87642cb88416dd4099bb084f934b7044814524319cfc6afac58092a807ae4ef56f79860f46c414e24ff677732dfa6
SSDEEP 12288:K1ySuhXoQaFDtDag4fLIs9iXDXhVhJ5qIiD1kbCY6bKHD/qX/ddlGN4j3thjShuG:FDh1aFBDsIhXf7AIiDeQKHDyXFGwWhLX
TLSH
T1A5F433A36FE2ACC6A11F795DF435EF0863037D914C3A884779DE7A15268DAC5123CC8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SetCompress.docx.WNCRY

Path C:\Users\Admin\Music\SetCompress.docx.WNCRY
Size 499KB
SHA256 e7183183c7340c4ab308360e1677fdfcf192f508928edd6f78b0211b887d1c01
MD5 29df5068cfc56dfe1e4bcd3efa59977e
SHA1 1ec8ce723bb61c702103bdc6aa32d75dbb5fcec4
SHA512 13b876252ad027922c7b95a0b2a6bf4e2e6595daf58b700d6ee4f107ad50e53c76efd114a6f35c308ad982277cf80550470ac5b99c96a0b4da94f49a17fe0aee
SSDEEP 12288:9m0nyc/vOTwSt3aaXgp8fbfCmtadU+GkNvj:40yiIaaXgqfbfCmWUer
TLSH
T1D7B423D0E383B83C215A123095969A5D149DDF607B0F1B7E3C5BF349985B8CD8CEA9AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowUnprotect.jpg.WNCRY

Path C:\Users\Admin\Music\ShowUnprotect.jpg.WNCRY
Size 729KB
SHA256 de8d75a8d491f9c1569fee1c939d0918b4c70df387af49689abf23fbdbbef817
MD5 4a08b45aaf2a7e26ee9ba5a97e85d76a
SHA1 c83a8acd389e450e60df37b88157c10c8354ac1b
SHA512 7ab43e8e9229d7040c638fb9dfc5d87039177c374e825b6329e542155a80f9c968c5ecd104392e578d1be14c33478cd1df7480cf18c22075b22a49fd583e8d76
SSDEEP 12288:qS3RmVW6Q2If3JanETMRHKfZ+loZaY+pnFl+kxPrz7bsOYWq98cPT/FkDYEwTgIV:r3Rd9hdfZOoYRFgkxXUdWS8cPGDYlgIV
TLSH
T19BF42399BD93102D66D49DCF475263FCF726D11BC28AB4CA59A4087B474B30C9CAB22F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SyncStep.ppsm.WNCRY

Path C:\Users\Admin\Music\SyncStep.ppsm.WNCRY
Size 614KB
SHA256 eb4a6e0797ab4610693fef88d3de3d20b5b69bb65d10cc4ce37eb60350384d93
MD5 558cc0b78eebecb1cfbb5611b075ab4f
SHA1 2a012bce9bfcce76e14ff9b3a6a0b5d9070bf2b3
SHA512 784709e36d6bd7932017557efd2235816df00065b40041cf686552d043dc2e74f91428b10b15f90b03a8648a5325b711a907b87006b5bdfb7c3b661496c0e909
SSDEEP 12288:bQUjDaTiNxlT/ZI4PwP2AtbFBcni2AC2W1Iz+6FM1aoWC/+wNKpl6IeAkbPk:bxDaiNxNRITBBc/QFM8a+wNxpAkbs
TLSH
T1C8D42313EAD1EB4D26190EA6FEAEBC8113CF0D97EE9E2818DF80547CD3237875602459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnpublishInstall.xlsm.WNCRY

Path C:\Users\Admin\Music\UnpublishInstall.xlsm.WNCRY
Size 1.5MB
SHA256 86078ffd5eef79949a02c9ac09671bcc2f76d6fc1d2b7f4757b8ca7434f3edb6
MD5 e0294eb566ded5d309ad60420a6f1676
SHA1 4bc0801a31ea38b59c07fc330531a1d74d17c3c6
SHA512 8f1bd48f9e211d0fa20f7dfa2a421567c3beded418423d5aef83f6ef20d8cac0d10ec20094df9e3394f494d7437a571ff9a89369a4239bc13b20a1be80e507c0
SSDEEP 24576:E1FXdadkmTklOPwHhAQK5Q9C83XWGPAvy+IxoLcp6vuCffw0xY0Q/8gYuQtFrnq4:aCoUKnK5iPnw/dcqusLe85htFrnB+fof
TLSH
T109653328B1F63B2838727141F4B63D1E7A197DCE6114E3F9CE7ADEEE490D60183A4685
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupResize.svg.WNCRY

Path C:\Users\Admin\Pictures\BackupResize.svg.WNCRY
Size 388KB
SHA256 1c3636a0600051baad0091a7e3433b8044eb09c6f0e375351673f9ff93c95cfb
MD5 7b399571b51548862b2af33eab745e6c
SHA1 8f9d0ffc71af76ff938b1f582a82fc4199ce27c6
SHA512 5f25211a75eb2ead9d0801c2779a3a80a83b47e8e566e3c079543f4cf83ce7b73b92b4d092a706067728dee07e9f6bf4f880f7d8f66e57ae5dedd4e13d8519f4
SSDEEP 6144:ZU3jiw9s7c7un1gXeg3tyU5wjkaENJbApoBMFNeN6jSNek+TKfL4zL2svJLQ:y44E+Xeg9yaSnEXMWOFWekyKfGFQ
TLSH
T1FD8423B8CC706A2BDAD5115840CCF998C98C07C87AF86985127BEB9FC7C7B9532C7496
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmInvoke.tif.WNCRY

Path C:\Users\Admin\Pictures\ConfirmInvoke.tif.WNCRY
Size 200KB
SHA256 1b4f5180e7605210a6973b835ec27c60efb7d983c170ba16e8a059d0b22ce667
MD5 9c3e7da6c61cb4107a9eb835ec41b8ee
SHA1 de421f85be693c584e3643cd5161f34f522a12fb
SHA512 ee4c95a57a4e0bf82850ea54437d5481b725650a8588495993cd1c111eb4412479c9bfa9d45533e56da5024bec057dad7b1f2bd8a3e51ff28fb97285bc8e2596
SSDEEP 6144:lTWkcHyz3ttYsyKANCiZk0e4jlp+6G3yYrouA:QHHyz9jzy5zjbjYkuA
TLSH
T1611423C2448EFDD83875F7942FB565B8005C6985DB5359F06AAE368E2C91F8DB03B780
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CopyBlock.bmp.WNCRY

Path C:\Users\Admin\Pictures\CopyBlock.bmp.WNCRY
Size 470KB
SHA256 e0dfbc5e1831c7f789d03232e95d30a52c573739a8a52df3b9ac5bd3342f9b65
MD5 ab22efa79f4b6c62a02cc364e6a03155
SHA1 57c383970893e733ed092920894031216bcb0481
SHA512 3b56b425e593b7f492aa1c652ca9a87f0b29df3679e032d0c384a73f2a88a82a1f9a6f168919e46b2ed5fd2af68a149dfd306de48e237b6ff0eb32aaaaec1298
SSDEEP 12288:jWhCiNrRGz3OtoyFw+6GVeQ/DMMYQpyqF9EckqxXmX0:jWXhRGqtoyFw+P8QYS9EcFXi0
TLSH
T16CA4232544F532B4DDCB6E224F873A3773119ED880591BE05B03969DC8AD838EBAD35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DebugCopy.raw.WNCRY

Path C:\Users\Admin\Pictures\DebugCopy.raw.WNCRY
Size 646KB
SHA256 6cfdf5bae638a89dd606bf850f74d61a296704a0d2ed22f89eaeb2e3f7b06e94
MD5 9b272e18b69165ec8a3cf792b66e97b7
SHA1 02ef495b573771d9e29c87ff1d38bf20a8ffb574
SHA512 1172d2ee69e27fb97e811de00d8566622b216bc893cb70479f7aafcd4f7a80bba5d84b1c2cb6a5dc3ae1adb3e163b418c4abaf493726ea3d18d2b3d7bbd53562
SSDEEP 12288:JCYwOWclCzcn4XXI90cCZMnE9Pgjza3m1hBBBdp7NQNsYoTn+CxeZ04WOLE:J7FWckugXI9jTSap1hBBPp7NQroqL04w
TLSH
T1C5E4237B074E22D8417F638293913FFC56A37D0EE25C616C26CE2258EED2709616CE4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FormatUnregister.gif.WNCRY

Path C:\Users\Admin\Pictures\FormatUnregister.gif.WNCRY
Size 247KB
SHA256 4a527fb01f0404638a8c7ebb2c4d1a9b3def6f259c6f594bedfd10340c4741f4
MD5 14e4a22d9ed6027454b2de9a5ae21cc5
SHA1 0700dcb0a475d056c74606cc9173b523230de7fe
SHA512 2afa80a8dc8b5093ad55c785f0ca6247d31e733351ba28c0bb578da29d61ed9434addd1a5274a3d0e35c5f9227ce55faf55c2ce3a36d5f2ecc5c508a9ea0b3e7
SSDEEP 6144:PFLIFCWQ9T66mEZ0nbp9qdF8jfdPy+6clA:yYn9T6iQSS0clA
TLSH
T1A63423DDA60E5A21A9554F24BE09FE010132970A92F0F496B9D78538FCF3231E39B61E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountEnter.tiff.WNCRY

Path C:\Users\Admin\Pictures\MountEnter.tiff.WNCRY
Size 223KB
SHA256 819116eaa85a8be375d7074bf454e856c54be15e3a66337336a50176a8dadb07
MD5 e6fd7cca08dabe6e7f5f9b493868e709
SHA1 c110804c2e6ab1d492c7d38f72eb5f93f0c9d141
SHA512 881f66d000a348317036ffb465c1076d826216acea7894395977facd72ee59654abf1c42dde6c5e2ca5313c0dfca9e494d32aa19abd68b2608f9fe605b8f852f
SSDEEP 6144:U48nCZJKFi7i7j8yvNmmiWgQgmK2nFC4mIl6Zj9i1oWrp2B7:U7aJvi7jlvNnTTgt4mTZj9i15G7
TLSH
T12924225FF27322E46582AFBD62548B22EA067CD30FE8DBBF652D36100C4D5879EA45C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutImport.svg.WNCRY

Path C:\Users\Admin\Pictures\OutImport.svg.WNCRY
Size 341KB
SHA256 8e486795d778693fbacbc14b1c21fd1f7a1619fe191f688e877c1ce89ab21adb
MD5 65c251d0ec1795c0d5c27150c19234f6
SHA1 e024379eb264f17c1d754cf008cc74640769a81e
SHA512 b527d907fd09cd04d9f93411bcafd1498e4150532b0ab30c7e57636e9ad5c4dbdc17d46ec29d71f0c8921ac18c30f9af53f2d53ab6269b8d0ac1c5063040e59c
SSDEEP 6144:y/+WzoPbVix8x3B0yV+KX5YL3K4yxTXyb+joJNuYNh+InPtc4CwKC:IoRix8hOmGK3xTCbdCahLnO4R
TLSH
T10A74238383907F7457F2A7C114BCA8DE8BED99D1E8EA650D49C44823636B9B101E24FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RepairRestore.jpeg.WNCRY

Path C:\Users\Admin\Pictures\RepairRestore.jpeg.WNCRY
Size 411KB
SHA256 f5e6b33b4fa1b040db249338213e3ec0a40a02f0788416e56ef5ab9fc790b50b
MD5 d3208f1d31bc9a4e66cc05d70a1a95eb
SHA1 1c2839b1e42dc1dfb489368d74a131cf5bdaf1f2
SHA512 9edab2402ab450bcc6d6dadb27c331dff8fb484d14603add2a7535961a3a6e16022309edf72778589102986a441dd09ba04810e5649c3157f0b50afe1b04067f
SSDEEP 12288:+P81tDYGAtfp8UZjc3LM/nby/XkWPL6MsB:C4tDYR7xC46UWPL2B
TLSH
T1659423F978AF6B763A2D797F7816686F88BD1DC75310EC0342ACB481351B0C45A2D62E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitUndo.gif.WNCRY

Path C:\Users\Admin\Pictures\SubmitUndo.gif.WNCRY
Size 317KB
SHA256 4c1b448569f1eb7d78e045becb696d2a6a022af0ded4d0af64ad0c2465503c6f
MD5 6effbdb77de6594618b89a5f7ca658bf
SHA1 0f9f9d85f14f887adcabb87f2597710349835b17
SHA512 844e45aaef8b2a3a51561e8cfb0e994b6886a34ac6bb903d22bd4f203536734cdf3277d451a262b49cce244b59c1dc3a444a888b6681080df02ef7668e159005
SSDEEP 6144:aW9U7if5QrmqJZ3ceWHQ4Ym5nCcemAJzWrgBec3aWn7LFZotAS6H/d0Z2+qZ:b5QrJZs3temAQBQ7LFZotT6H1qxqZ
TLSH
T18C642360094C309F7BC3E7523DA89B561A04CD9AC93999B6573DE19683FCEE0B0C46E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendSkip.tif.WNCRY

Path C:\Users\Admin\Pictures\SuspendSkip.tif.WNCRY
Size 458KB
SHA256 193cdd858ecbee89a41e343f193e43e81d1fa5a950d0e88f29b762b54bf2f6b1
MD5 db47e415e041fcd55a3e097decad91fd
SHA1 f2cb814031b7c40ded206036e1b5d7e671e5b78b
SHA512 d529f1e6cd9824e1f226284ba100fdf089db3073313bb8e8b6727d45d0b741cf53d5814fa5042a1feeed7725cba7fc1b2a548df820614edafffef537000e45d6
SSDEEP 12288:Q+0LwVmR5Q2o7OfbCpjRv+FZJ8xlmCjRj:QrymV0CIjRvcZJ8xl1j
TLSH
T118A423195FB7EA3D5F585A0D2751A82BA9D008A936F5207DE090C7BEC7C4C17FA21A33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UPKRBylz.jpg.WNCRY

Path C:\Users\Admin\Pictures\UPKRBylz.jpg.WNCRY
Size 25KB
SHA256 78a632ec43ccbf3dd936ef6e9568d0ec239ea89a7eb2c84fe0c6d01cba3ad2be
MD5 e92016385cf46d3a2141fa70384b6720
SHA1 c04944cd0776b96ebe62283ff6cb47a8c3644645
SHA512 4fd0aa15ce546d16294a42a8e6267c4d54868072853f2c026c9de75a0532322a679ce2319a6c89536cfc7e3098d8f2e171765b0211b29e10a75d9b8b10f89fba
SSDEEP 384:4Gd2s2smqvThbQLVXxHJawCF8w0/FWzshS4QHNHyIoE/Oz4mR1w+RtL8QVl9mgRu:Pd2sdVTpQa1FO/F91Qtfmk2F8QVhRu
TLSH
T140C2E0408460ADCDD267D4FFA8E2F880B30A075AEE61AD2ADD34DA925F153979F031D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/576-1912-0x00000000739C0000-0x00000000739DC000-memory.dmp

Download

memory/576-1939-0x0000000000500000-0x00000000007FE000-memory.dmp

Download

memory/576-1904-0x00000000735D0000-0x00000000737EC000-memory.dmp

Download

memory/576-1906-0x0000000073900000-0x0000000073922000-memory.dmp

Download

memory/576-1907-0x0000000000500000-0x00000000007FE000-memory.dmp

Download

memory/576-1916-0x00000000737F0000-0x0000000073867000-memory.dmp

Download

memory/576-1913-0x0000000073930000-0x00000000739B2000-memory.dmp

Download

memory/576-1917-0x00000000735D0000-0x00000000737EC000-memory.dmp

Download

memory/576-1915-0x0000000073870000-0x00000000738F2000-memory.dmp

Download

memory/576-1914-0x0000000073900000-0x0000000073922000-memory.dmp

Download

memory/576-1903-0x0000000073930000-0x00000000739B2000-memory.dmp

Download

memory/576-1911-0x0000000000500000-0x00000000007FE000-memory.dmp

Download

memory/576-1940-0x00000000739C0000-0x00000000739DC000-memory.dmp

Download

memory/576-1926-0x0000000000500000-0x00000000007FE000-memory.dmp

Download

memory/576-1932-0x00000000735D0000-0x00000000737EC000-memory.dmp

Download

memory/576-1942-0x0000000073900000-0x0000000073922000-memory.dmp

Download

memory/576-1944-0x00000000737F0000-0x0000000073867000-memory.dmp

Download

memory/576-1905-0x0000000073870000-0x00000000738F2000-memory.dmp

Download

memory/576-1945-0x00000000735D0000-0x00000000737EC000-memory.dmp

Download

memory/576-1943-0x0000000073870000-0x00000000738F2000-memory.dmp

Download

memory/576-1941-0x0000000073930000-0x00000000739B2000-memory.dmp

Download

memory/4240-39-0x0000000010000000-0x0000000010010000-memory.dmp

Download

memory/6044-1955-0x0000000073680000-0x0000000073702000-memory.dmp

Download

memory/6044-1949-0x0000000073650000-0x0000000073672000-memory.dmp

Download

memory/6044-1947-0x0000000073710000-0x000000007392C000-memory.dmp

Download

memory/6044-1950-0x0000000000500000-0x00000000007FE000-memory.dmp

Download

memory/6044-1948-0x0000000073680000-0x0000000073702000-memory.dmp

Download

memory/6044-1946-0x0000000073950000-0x00000000739D2000-memory.dmp

Download

memory/6044-1957-0x00000000735D0000-0x0000000073647000-memory.dmp

Download

memory/6044-1954-0x0000000073710000-0x000000007392C000-memory.dmp

Download

memory/6044-1956-0x0000000073650000-0x0000000073672000-memory.dmp

Download

memory/6044-1951-0x0000000000500000-0x00000000007FE000-memory.dmp

Download

memory/6044-1952-0x0000000073950000-0x00000000739D2000-memory.dmp

Download

memory/6044-1953-0x0000000073930000-0x000000007394C000-memory.dmp

Download