86a42e30...afcf

C:\Users\FD1HVy\Desktop\win_defender_patch.exe

Sample File

Binary

Malicious

»

Mime Type	application/vnd.microsoft.portable-executable
File Size	187.37 KB
MD5	8581d5ae39a3f38c9bacf31f81581d5c
SHA1	a486319f967e5102bb56bc1ca993ec05cab585b8
SHA256	86a42e3023e7f651f1a90d11cdf777423d8db003fe2597c2e36e9b9ce6f4afcf
SSDeep	768:Vvnf7xGruUuRWkdih5ib5t/eJcSf/MC5CAktJG7xzRas1lMyp:xNMaWEih5iTeJ7b5CACoz5L
ImpHash	f34d5f2d4577ed6d9ceec516c1f5a744

File Reputation Information

»

Severity	Blacklisted
Names	Mal/Generic-S

PE Information

»

Image Base	0x400000
Entry Point	0x402e5e
Size Of Code	0x1000
Size Of Initialized Data	0x800
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2010-12-09 18:58:13+00:00

Version Information (11)

»

Assembly Version	1.0.0.0
Comments	-
CompanyName	-
FileDescription	ransom102
FileVersion	1.0.0.0
InternalName	win_defender_patch.exe
LegalCopyright	Copyright © 2018
LegalTrademarks	-
OriginalFilename	win_defender_patch.exe
ProductName	ransom102
ProductVersion	1.0.0.0

Sections (3)

»

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x402000	0xe64	0x1000	0x200	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	5.29
.rsrc	0x404000	0x29af4	0x29c00	0x1200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	3.53
.reloc	0x42e000	0xc	0x200	0x2ae00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	6.58

Imports (1)

»

mscoree.dll (1)

»

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
_CorExeMain	0x0	0x402000	0x2e34	0x1034	0x0

Icons (1)

»

Memory Dumps (34)

»

Name	Process ID	Start VA	End VA	Dump Reason	Bitness	Entry Point	Actions
win_defender_patch.exe	1	0x00060000	0x0008FFFF	Relevant Image	64-bit	-	... Memory Dump Actions Go to Process Go to AV Match Download Dump
buffer	1	0x7FFBB9B5F000	0x7FFBB9B5FFFF	First Execution	64-bit	0x7FFBB9B5F060	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9B6E000	0x7FFBB9B6EFFF	First Execution	64-bit	0x7FFBB9B6E040	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9BAD000	0x7FFBB9BADFFF	First Execution	64-bit	0x7FFBB9BAD2C5	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9B5F000	0x7FFBB9B5FFFF	Content Changed	64-bit	0x7FFBB9B5F4C0	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC3000	0x7FFBB9CC3FFF	First Execution	64-bit	0x7FFBB9CC3032	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC4000	0x7FFBB9CC4FFF	First Execution	64-bit	0x7FFBB9CC4000	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	First Execution	64-bit	0x1AF1359C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC5000	0x7FFBB9CC5FFF	First Execution	64-bit	0x7FFBB9CC5040	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC6000	0x7FFBB9CC6FFF	First Execution	64-bit	0x7FFBB9CC6000	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC7000	0x7FFBB9CC7FFF	First Execution	64-bit	0x7FFBB9CC7012	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC8000	0x7FFBB9CC8FFF	First Execution	64-bit	0x7FFBB9CC8060	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC5000	0x7FFBB9CC5FFF	Content Changed	64-bit	0x7FFBB9CC5740	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC8000	0x7FFBB9CC8FFF	Content Changed	64-bit	0x7FFBB9CC8760	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC3000	0x7FFBB9CC3FFF	Content Changed	64-bit	0x7FFBB9CC31A0	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9B6E000	0x7FFBB9B6EFFF	Content Changed	64-bit	0x7FFBB9B6E200	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC4000	0x7FFBB9CC4FFF	Content Changed	64-bit	0x7FFBB9CC4080	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC6000	0x7FFBB9CC6FFF	Content Changed	64-bit	0x7FFBB9CC6000	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC7000	0x7FFBB9CC7FFF	Content Changed	64-bit	0x7FFBB9CC75E0	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9B5F000	0x7FFBB9B5FFFF	Content Changed	64-bit	0x7FFBB9B5F390	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF1395C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x7FFBB9CC8000	0x7FFBB9CC8FFF	Content Changed	64-bit	0x7FFBB9CC8060	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF1331C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF134AC	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF1395C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF1390C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF132CC	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF139FC	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF1395C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF139AC	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF1331C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF1363C	... Memory Dump Actions Go to Process Download Dump
buffer	1	0x1AF12000	0x1AF13FFF	Content Changed	64-bit	0x1AF136DC	... Memory Dump Actions Go to Process Download Dump
win_defender_patch.exe	1	0x00060000	0x0008FFFF	Final Dump	64-bit	-	... Memory Dump Actions Go to Process Go to AV Match Download Dump

Local AV Matches (1)

»

Threat Name	Severity
Trojan.GenericKD.40847411	Malicious

C:\Users\FD1HVy\Documents\My Shapes\_private\folder.ico.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.23 KB
MD5	b8ae79b3f29e0a1d9ebd5f44eb6b2078
SHA1	ae83a522dc61f479508eacec1507569ab22e7274
SHA256	87da70acc0c5dfb14ca6b90cc5f4d462ced131ce2ce2e4cd584fa0533df6924b
SSDeep	768:fQSAXc1Rhjlc3jWXO2UCCsbW4NwLmhsC2zHdYMZN05C:fJJXYChW4Nww2zH+MZNoC
ImpHash	-

C:\Users\FD1HVy\Documents\My Shapes\desktop.ini.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	224 Bytes
MD5	44a7a7a2c4d04b857f8db71a5d880848
SHA1	a917a36f3a364d66e647af4190d3535b76517d1e
SHA256	0e33edd11ae25202cc4405eef4104e15cc9c485eeb303fb8a6a479b727818f0d
SSDeep	6:C13QqHto3ZwLF3FOxS0zcX45SZCJ+uKFCDY8eV5K9ipR:CNGZwxFF0Wu8CDRfu
ImpHash	-

C:\Users\FD1HVy\Documents\My Shapes\Favorites.vssx.ransomwared

Dropped File

Text

Unknown

»

Mime Type	text/plain
File Size	8 Bytes
MD5	97a8c3ff792063af8fd573df076a35e1
SHA1	411011ae84aa3376e188023754e218e761c6f2d6
SHA256	af872e43b265484c230b195c0da92f59f731486b6ade09f3eb76b449c235fac9
SSDeep	3:9NNZn:3L
ImpHash	-

C:\Users\FD1HVy\Documents\Outlook Files\kkcie@kdj.kd.pst.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	265.01 KB
MD5	6b25a094bce5c17246b1d154510bbd4a
SHA1	ab34f1c313bce9e96b086dce7e7d8b678b8df1af
SHA256	dff05aa0d681a69238a72c109a099db95db76ca2c61493e6349e7b07f866e0a6
SSDeep	6144:fsSdSrVe2XYtp/UVcA0J61UzVMv4VRhMm2vcFJQ0M+VyxVQF:fs04VHXzml9nWcfHKKF
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\7XGbk\crCsyzN5avBbuC5bDWf.pdf.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	31.34 KB
MD5	0d1e0a9398eff1714d7bda737dfc6c12
SHA1	320502f23006740c55f7c96bf5c0cbe6f2415251
SHA256	105951c8564f42cb0576264d62343814c8dc33655e2612b830a48a82aeaeebdb
SSDeep	768:SY7rGJaMR2baCvzZhsABmNc5lnZOfKIYxsij1oa8gj7lD:SiF+ydvz9cSfZOimiOaHZ
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\7XGbk\N78-QcS1Joj.docx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	72.27 KB
MD5	00aaa8c651605a57612254fe061eacf9
SHA1	9af9cbe4e9cd09142060b69fd79dea1d3c429101
SHA256	c88ad14a3fc383a610ef1befde1416b88c1722192912cec00581e57284195b93
SSDeep	1536:IH8xa9BN7bQL7oJ/XKcKz3OPwIk3EdqYFqWZuyUpEEzcoev:Ic8F7bsoBkzjIkvYF/UpEEzcrv
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\INIgt\Byda6h\tto_zn8Uh_1NDP.odt.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	33.38 KB
MD5	361c3c9ac596afd89c51cd9d4b87efdf
SHA1	7988595800be1324e69c8ffea54673d1e4d669ee
SHA256	11b8ee02304713848200fe31d70bbe823f3548f1eb7019aa40bfb614c77b8eb1
SSDeep	768:eTuaOswRgJMvW01jXjfFXkQTY+JgkiirtESR7TOhy9wsLtD:eOsguEd1XTY+JWirtLYyd
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\N_cdRqtHgh\-Yu2RSl8JEEYJiFx3DY\-APfvmlspgiB8RX.odp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.58 KB
MD5	897db264647140975613e06339ef0b48
SHA1	e73b6db8bf663609dd4ab47b6a82939662a7a324
SHA256	8607258b70559f6aff218df9cab8b8707d9412c00d89c8117d499a78f186a8fd
SSDeep	384:vCeomLfeZ9aD8vvc1b9LK8dz0hA9gal73T342D4yMDMTrzGB:vCeosmWD881FK810kl73T342/Mmzy
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\N_cdRqtHgh\-Yu2RSl8JEEYJiFx3DY\2Aimn35nKmezuGr.doc.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	23.38 KB
MD5	6857b191a807c79ae0f37f6e973c382a
SHA1	7ac14b16f074148b5e8d68f8adb41a85329e4110
SHA256	52ac95eaa12df29df8bd31dd1edf671591309abec6da71255a87563115a51653
SSDeep	384:gxkEmSK0k0YNeYM6H2+EOmhv7a12biMs6hZGavB0FNoBsc7UAv7G68X1Ur8:Sf/4euH2+VcvlXXGFZ+UOG68FUg
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\N_cdRqtHgh\-Yu2RSl8JEEYJiFx3DY\iOumP2HnuR2F.ots.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	82.14 KB
MD5	43f5e0994af8255e5ff63165e6dd97e2
SHA1	0f498fe33f8d8cf5993903ab82b4c1a9ddc838c6
SHA256	8fade8bb065e649da5fbc47a013c9f44c6688a667cea5dd5b361af0c71883675
SSDeep	1536:UJu5J1cLBklJ+q/bd6O0go0Gvb0/66BFDraQAa3SGhFcnjME9iUN0/pZROmy:U678BkKqd0GGzklXh3TjcA2iUspZYp
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\N_cdRqtHgh\-Yu2RSl8JEEYJiFx3DY\K_5_jrx-8-isieynku6X.ots.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.49 KB
MD5	b79ca1a8308b3a53faac786c3a16a21c
SHA1	69f8a806b338ab0fada7def81527d1392bbcbc5d
SHA256	d5722af639f7f46e1313f37d5eccc5124ee931b9c888ecb606f1a07ba01a5601
SSDeep	384:gq/q06lueI/dJPTNFYqiKyuTpJEkeeNKEeaNpDe5i9oMB+Ct5MNjJEdW/XSH:p/tTeIFJPZKqiVuTA+N4abe5i2MDC5Wb
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\N_cdRqtHgh\K0VW1WQFVjR8fMBi.csv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.45 KB
MD5	ce9bc52743c85120f7790c8cc40988ae
SHA1	2edfbcb29550d34b00f484fa0441f6c727adc694
SHA256	7aff676c23788df365382ecf2ff9611d853f6303a3c332573288246502158b3c
SSDeep	384:eh4BtxPIZWKAVT5O26Eid0uWX643Gd9uIcCu3xUGWxvbxPFdtD:Iot4B+d6CuWj3Gd9YC3vbFFz
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\N_cdRqtHgh\PApig57HAP-Uw5Qy36.odp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	59.61 KB
MD5	f4fe018b3b6876054450a35337c97ae6
SHA1	1d1d6174ee241a52fa9f117788ecce23115ee733
SHA256	19edb7c5262bd1fc83ac01a7822ad396a0b62620cd8861129caefdc064107795
SSDeep	1536:/4sWawz65YQ9dDauCKwTFOHPAFBEYM7/HICHr6NNrA:/qz/+NCBTFOorEfTICHQ0
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\_ZzrYZcG\8cvh.doc.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.67 KB
MD5	ea86e489999a7b8e998e448d73deb493
SHA1	4dd72a675c9d66e2781b9c1f38be52895496fbda
SHA256	fa5f0c45fb9f68c920025f59a7b3e181c9acdb8d9a453e8cf99febc166fc76f9
SSDeep	48:zZPlSO1k7j6A7n2rWGoKMMrj39vBacqTdmMUkln:FD1kP6Azqjo+j39vBJimM3ln
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\_ZzrYZcG\NAPIG.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	63.44 KB
MD5	872d6463438ec773d31384bfe19432f8
SHA1	c0382db6abe8b04790924de57a80c1fbe6c8c90e
SHA256	77d220e86022f01f3f9f836dcd71d065a187735ca58a8fe3d00e485a5016dc34
SSDeep	1536:EIoMCbSjy2YmONrr9Bh/lCp9CwkZuJahzRhN+QrI/Ql:E6CbSjypxr9D/Ap97UJNzrI/Ql
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\C3-yA UdB3mx3hvj.doc.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	62.73 KB
MD5	cc7abe40bff41a218ccef776dbfd39a1
SHA1	c666a797f29b2ae188676f43569fe17101917036
SHA256	64b849209ea416e30229f366bcebe1ffe5ae6ce0091b2e4b1d77849b208fab2b
SSDeep	1536:fsN3LbGpOzHeP2IUXfptFonYuj1TVxmhiHsoQm:2bbAObe+PPXgYuFV4hiHsS
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\ccZastJX0mHvkvE.odp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	58.28 KB
MD5	36494b789efb01d4b9dc505e4df90c16
SHA1	a52d369d25ce908a8100d9b7aab075019af3f98a
SHA256	4fc6a5eabddfc377018e69ba60729b6e0c569407cde0fe24d033f3fb7501a325
SSDeep	1536:VTaTyI4cuR6LxB0kUNlCXb2O2F8U5Uc/tkM7yQD5JXqsaBnb:EEP696kUzUb3sUcveQlJXcBb
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\elY-cYq98RtqHyzYUO.ots.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	79.93 KB
MD5	1cb0f0931b33a55430c71c1f38392dfb
SHA1	ba96f11ebdf39984e3b120b371e64e47bb8a3e91
SHA256	581e59ee189fbe915d3f0674beae355c6da7eda65780b97a406f35fe21c7b767
SSDeep	1536:8Kn4WmrdfbqeU1S3Y5d4k0XyODG5kbedNaXL1SGeGJdelx01lN:7nkxb9e0CO+fdEYGNkxmr
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\F7EJNN.odt.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	61.29 KB
MD5	5dea2a0410f258de3add32f3936824f7
SHA1	4f5320521a613ee3cb0eed21b280a7650158684d
SHA256	68930ccfd0dbd2bdb317792c7027c44614626f9a7f64067caff4e39207b53c68
SSDeep	1536:eq6CXFKvVicsBOUnt2sM6GxlwzYcYxQb1cmTB/aE1ZDuQ:eqTXFKS5woY1xMKmwhQ
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\Qtcut.pdf.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	82.33 KB
MD5	12cd93ded11ab7ca267c269ea2c09ef3
SHA1	fbef66ab66a39c01d08866b280909b45cd0ed915
SHA256	ae0d2db9b56288fd45911a7ed46afaadaa4c8b6a489d180b604fc6b05ab3a4c3
SSDeep	1536:q1gcM4+TeTceytmXNmrzUMG875nZsS8iHb32Ho5+p1ktA/ay50ud0Kbt89+iHE:q1gcMpTeYJtmQ9d7O+b3h4pitVy5Z0Sj
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\sfV7v98.ots.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	82.90 KB
MD5	9b93c764d788ddb36b554ea665115c9a
SHA1	eae64d968f38d105dd8c9c204168d67f4572795c
SHA256	79c7855d3bf459102dcd9721cec154680f1672e7c27e68467d9df4a64c83f527
SSDeep	1536:+U0hekIzCLyzp8+dt+TSws5LYXehn97r4ZDXafJ2N657Bv/tQq/rUvr1OPlL:PWPIGL2T6s5sw9nkXgJrZioUvrwNL
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\9zb2HGJTpIU_7\y3y9QwhE0 YoU.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	76.66 KB
MD5	b5450b7d1a5f9df74f823f4e39d50bb0
SHA1	9be88914273a57ca948960abbc4785dd9f28913c
SHA256	3324e3e724a92ad389ba88499b332cb0f0e6f9247ebda506bfaacdd718dd3f19
SSDeep	1536:W0X8RJLorLLhyYnx07pFI8wkfAUtkKAaqpMA+96yb5UHr+7EQDs:t0JLoPLhP4ckfniKtAk6yb2L+AQDs
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\61JzOvre4ufxxj.pps.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	37.04 KB
MD5	0317787a95f568a551866bcebd5698a8
SHA1	7fc386a8238cdfd4ffd4fd8e54118c22fa6a170a
SHA256	85cbc7b4d7feb865cd347d5ba59b7dc1063d053151d2faf77dd3e59fe8e2e722
SSDeep	768:rO8DhQanF9ZWerzAxcXyubtOGbFBQnY3pnMZl6JJuAwOylJ:J980zJX1R5lxMZl8wAYJ
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\dtgbey_CgJ2cZuVj2.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	93.55 KB
MD5	6332026b47b1ca50e17536962ddece70
SHA1	976c7f3855f44acb5fa8085ad5c4e76ce1586cfa
SHA256	d8cb82a733908d5abeb89bd6c22124f196cb56919614c1b960fcc06e83f6f226
SSDeep	1536:NUNS6hZop/JUw0i8s9gTvu+2UdyEdIrCTuvvT7IrRSpDIWQLogAq4mLt:NaSOoYwNiLu7UdBjuvvHIrgxIWQ8Frmh
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\FEjvRcgDTq_Eo.xls.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	37.65 KB
MD5	f25f06a0337529c1d3e95164519162ac
SHA1	894e2ca1c99467272ccaac6a0603715cff44a1a7
SHA256	74d0d0ce2164c2bb8cb111ebe25a746e365a1f4e8576cd2fc88b92fcb9109388
SSDeep	768:1D1rchibnD9CFv9zd+3v5I8IY0aSwN58H6Z6P3m+KQcTNB5AXq2:91rchMGli5BIySwN53Z6voXTNrV2
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\luDXTi5Q\l6Vsn1TpXI6uBqjm0q-t.pps.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.85 KB
MD5	990f37b9870c3546f2a10e3c397370c4
SHA1	e79e50146dfb85af75ea849cd56e1e50c7954790
SHA256	6e349f103f4935bb36d00598f641e3bf7733b709e83e5d706e4404dfcc211de2
SSDeep	192:QyFlNENkw6sfuO4tPur+L4Cazfzr4nxub4t4h2XeBuN:QyOqw9fuO4tPur+Yzfn4xRv5N
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\0Rx390uuE.csv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.38 KB
MD5	cfe0de4f7694cdf24df6bc7a5f265d1c
SHA1	8095ce2eda9766843547859f9238d8973711e581
SHA256	e45f5bc1a7f5bffca3e53edcbb020fa4fba79ce6bd7d5487db03951f551d682b
SSDeep	768:c6R67vngxRNhlpPRssyVRTjYOnl0XSSG1rCnf9W6Z:cZ7vgBpZJyVRfCXXGwfJ
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\S1wzbxNL_B\AgQwldA.xls.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	44.79 KB
MD5	0e0ff00ce113cac7675e4264717399c8
SHA1	fa6128653d9ae61d209cc5810a96ca680f3416f4
SHA256	ab3058e39951cd5b8f8883a611d45ecbb8a58bc2d283a7b6c4b320b755ab0586
SSDeep	768:v3MedXxC5WPgZXdcwTynMKqouH0qCYJVGydK/Cg6NLpXTJkufgIWONSv4zb1muv2:Eeha8kcwulqR7tdK/fMN1kLIWOtdzvyd
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\usMgSDmIAeKXugMpTAe6.xls.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	93.28 KB
MD5	dedf94e7499a3f076c47541fdc87d656
SHA1	fb405ee774fc4e0a498cf6aac6dbf4f95ce63eab
SHA256	d1c2ae1a953b9e3fbb2febf80de082d6803cc41b53fd416f6f1b5bb1ee1393fa
SSDeep	1536:aBPM9eqJsM4pBB84wQ1zjmA6GZImVcQxO9ggGh5c4QRQRVzFQZ0mYMohQ7vJeCJS:uM9eLMUBlzWvo+lIFQMhbu2ovJe3J
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\uVoV.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	75.85 KB
MD5	33017ed075ea314a0034ace1daa783de
SHA1	df763806c1d510410713ee4500b9c73fa360f12d
SHA256	b7bb91cda64442200580faeb89960509ce4cfc4405ae23a7221414c09fafb57f
SSDeep	1536:sXGsKDx7kHAATuvqxfZS7M3IVxJh8q3z4ES8RpwL6yqaO:ClHAATuc3IJCr8RpwLKaO
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\Y6KlM2ZVZsyCRz_1vvOp.docx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.16 KB
MD5	66282d9d5466d990c24ae4b0d77b4dcd
SHA1	c7d4baf3ca24293033d8590d11f8021614a9868f
SHA256	81cbb68ec8622a37e45a93ecfa555e8abd44026983dad0cafd526c4a26211840
SSDeep	192:UY432Yeo0Bok26MEKUeQ4PhWOqBrFBXC8nemxUHJhD+gglKnA5zNAEIcz:YXe3L2bVbpWbBXC8nxxqaKe
ImpHash	-

C:\Users\FD1HVy\Documents\vS68yQsYzmxMk\zErHVeZXsZnEF.xlsx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	41.70 KB
MD5	58db7e674cdc38b7cb9b918dd788e7da
SHA1	228a4a919a5b87ff16a1bb1a767377c7822132b7
SHA256	0a0a1bb5f4bf34f7047ed37e30f17ee383ad14bd4f574a838f40942b7490fab3
SSDeep	768:mTwnTuME62gJbc/1E6VVxD5MqJq2mhtCyoQXvs13MLf9vm/hu0f:mTwdE6Zbcm6pOhHoQ/sijYJu0f
ImpHash	-

C:\Users\FD1HVy\Documents\3JAFdEs6V.docx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	45.84 KB
MD5	2cf2db2cc8726448ece2d36b6ba5317a
SHA1	2190846acab39fa4cc8c96942208d819ae493416
SHA256	2162770ccd27f617816839224498ba59082e751a8eeba6725660f7e70d8d53c8
SSDeep	768:/VqKuzl4dC31xaF2BcznzByWp4bNk1Ox3zPPHliUUmzHJ+bw:9uzXLx0nsvhkQxDPPHlf+bw
ImpHash	-

C:\Users\FD1HVy\Documents\6hsTt6A7ij hwzKz2fG.docx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	84.92 KB
MD5	039e028fc8c2639448ab566e524f440c
SHA1	5731abdb8f3c3dd2ea54e23d15884cd70528b047
SHA256	250b84af033eaef4cfa20c5bc9fa6dcf690b802a58cb8e1d1f74fcfe19850d21
SSDeep	1536:OaR+ARZuv4JCtE2b4IPaN2vg2bje/MqicLag3h6BhZyvLlP32DVehUM:FvZuJEYInEhcLaZyvLlP3owN
ImpHash	-

C:\Users\FD1HVy\Documents\8CRbU2risAC1g.xls.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	62.86 KB
MD5	529e63c2c371e4089d0fab7b9645f400
SHA1	68cc18fc11acc28bef3d54379b38f9870b34ccd8
SHA256	a49a274176cb546c2945293ff373314da0b47f1964f251fbd6b51b8f1ce6afc4
SSDeep	1536:W8vDCi4Zyabx/OWJHx76zB+s0X4/8nrKb7mZfTOdUpv3Ft8+AnXhsnsv:W64Z19nJszw4i2PQTIsfFt8+AXhb
ImpHash	-

C:\Users\FD1HVy\Documents\B0aV2x.xls.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	23.52 KB
MD5	57bed17afd7a0a53ea53a6c8bb926ea0
SHA1	b0ce253397bad019fde82324e437d1628c7f1484
SHA256	0a9b14dd61dab2efdd49494e80e1671fe7645315f5b90c895c7ddae7601548b0
SSDeep	384:xm+eldy2ry+yGmwp8wD3EL1tcYyHLgDmCo+Mc7nEaTRi9aesD61KbtoN2tufHOXh:zkdFrVyGm0D0htczEDmC0SNs9arYwbt5
ImpHash	-

C:\Users\FD1HVy\Documents\Database1.accdb.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	340.01 KB
MD5	41e9f59f3629d4d8928c41de782c8354
SHA1	39350aaf29beb70cc469a69b84b2f1578fa086db
SHA256	671c7dfdca1052ce5f194b2dcac43e2f893f1841a16055f7de4842b1ec00bcfc
SSDeep	6144:wPjyI+qnZjoSBge8o20+wRhVLLcihff6wMOPb3g5:2bZkS2to+wRhVs+300bQ5
ImpHash	-

C:\Users\FD1HVy\Documents\desktop.ini.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	408 Bytes
MD5	63ce9fdeefbe8ca7da5185ca95430800
SHA1	5ddc465a263b92dc60750f3e4539bd963f2c642a
SHA256	a795e9d67da80fcce59ac457875a3b3cac5ef28daa7ac1dadd65bd5ffc84b4c0
SSDeep	12:CNFFwU63adUqfIRKJ5ezxKqCqhpSg/XrTZvtQ:C/wzkUqfI8HScQJvtQ
ImpHash	-

C:\Users\FD1HVy\Documents\evAzGp.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	14.17 KB
MD5	98359a59d22d693dd3a9bac6d7c0c87a
SHA1	e7fdf1e1cf5db25da321a0eaa1d41082085bd801
SHA256	9bdcf278071d3161f9c94ccdc3362fbc0c5abd147a82e7609ebb9570500eaca4
SSDeep	384:ifIn9dEae+ODHZonVyQ1yuOdLQa5rPSut:Fn92cOSn11yldLx5P
ImpHash	-

C:\Users\FD1HVy\Documents\exB85KdJ2eMlfoQ.xls.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	83.05 KB
MD5	3a44705fd688c5d70fd1c7cdd950d67d
SHA1	caa636188f809b64dcfd034d437f5016a264be7d
SHA256	7a073f31905b80bc48a715f633ddcee2550041dc55a782e0267870e17689825c
SSDeep	1536:sZ287BuYruQUMJkVpyffu4zQWPEtAP60gIMW+3KwwXzcig5oHeQGSMRjzqrxPr1K:sRJua6jl4zc2P60gIya3cHo/MOxpK
ImpHash	-

C:\Users\FD1HVy\Documents\fTaG7fzmNL7O-NP.xlsx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	90.06 KB
MD5	6345b264b974bcc9c05fabd64951bf22
SHA1	563f5a950c193ca7648745e852908e8ca9438be1
SHA256	3a2388fea8034c59167a1aebd9dce3a3709a5587c7172ddc808309954aab209c
SSDeep	1536:eW0u3QOawEVxr1Mwl7HZfcQRNXZaVvkShNBvh/eI13DAfOUtO4w:edfO4Owl95NZINeIlAWUc
ImpHash	-

C:\Users\FD1HVy\Documents\IHQT.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	48.66 KB
MD5	92029fb4f9b793710e241636fd8becbb
SHA1	1f34f573e0c29ab08cf002a6c5a7634531f5b300
SHA256	21cda38eba34a51008d210c35c6ecc14b6f09e01f32c7251fd448a97baa62eb9
SSDeep	768:285LPXkn1PJfUouuwjZGCmND9nCevKzcXg1/Iye6pGeK3DWpp2Y8BVlCoZg3aFty:28WnjfrwtGCKZlXgmvWp4pBjM
ImpHash	-

C:\Users\FD1HVy\Documents\iKXGagjDCQKQ5Yv0c7b.xlsx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	12.48 KB
MD5	ffe4d11727eb87936efe8b97a2ae0e0c
SHA1	ae928a3f83e5a4fdd4b95695da5d63ed1c79c888
SHA256	97f6b47eef45132da125a7a7a7ea00547fc035f080cbeae3b0f6abb3fdf74345
SSDeep	192:Gvu3DhHXZQZiWIPU2YKHtdSxEO2asnYjJZFg3eX4AVrutiAsDQG0i597b5qjcP6:/3FXmHKHnSxEO8nungDPtPG09jcP6
ImpHash	-

C:\Users\FD1HVy\Documents\i_DDSIreB3Lq 9.docx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	92.06 KB
MD5	50f1f6315f82c35b3048deeb0f3f0bbd
SHA1	7d755b87bcdc4dadf66d7dbd0c8ae3de2e725d63
SHA256	8889ff575f339e516adf2876a6f8aff53e234b5a3740aea65de6de0ed3668439
SSDeep	1536:ijoMyX8sgnVW6mWVZadlCPFlylU3j4ujbaR3FdPA5JzRHxcodlKP8DbpBwgw4/gJ:iN2vgnVpmWL7IlUscbaRc5JhyOEqpBw7
ImpHash	-

C:\Users\FD1HVy\Documents\nwtXBWqKvm.xlsx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	70.45 KB
MD5	65fb1b848fff808201b1a6cbfdc82b08
SHA1	bb24860b1c946ab1d9374703ac62550c27f55dbd
SHA256	6f2ef74cc2a088f5f167d538a64b4c2d94ce128d85a059956290150b5389953c
SSDeep	1536:F/Jhf2Ua4HCirdjB4/Fffphs3LxjU7njLloeqvuSd6tHAu53k6tgu0:BTblC+djBYFfPs3ljkHX2xCH3tC
ImpHash	-

C:\Users\FD1HVy\Documents\obVTmDCc85_zPs.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	99.00 KB
MD5	ab1d81919f1ae68ba2405a78fb61dbfe
SHA1	a6c6b77009cf1906363adfad14dee60ec9879400
SHA256	2e384aabcedb1afef7c0213021d909cde0dc49c3d9a72727a1858ea2b45b4343
SSDeep	1536:EQwIMpGb/MQI8QvyfrYst7Ef9IiRSIqJGOEXM+2/vQCBNuAJPnWn8021:EQwzM0QkvyjXEfKxIqJGOEX/2/PN5WG
ImpHash	-

C:\Users\FD1HVy\Documents\PnJT.doc.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	68.30 KB
MD5	893f9ff61a14cbc30f2e4fc8a14c2e1c
SHA1	a43c45aacaa9fd4eddf8c49275fd72cd7c4dbdba
SHA256	c03b3702c9feaa60a8dadef1ea288d29364f1cd2b25531d77081591ee4038dd5
SSDeep	1536:ERvnX8rezoLHVOLT5hr36jHNAJrPwiFLGYRkjlmd2OCB81Xydc0C:0zCH4Tfr367Swi1tt1Zj0C
ImpHash	-

C:\Users\FD1HVy\Documents\pV93pvxhBtblwilkx.docx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	66.01 KB
MD5	c28722a86a4b8fd1dfb919dafa0f5d8a
SHA1	52b8f143ddd60d2c2ce0024dc57b377e8e378a25
SHA256	66774d796fcef9c880a91e5db5612cdce9e433d27970cbca8c065224e074f3a1
SSDeep	1536:z+By19tD6+jEsfK/nulinUR8bZ8XtpPmduXvg719Q9XgZRgGaM3R:Kw19tD6+jEsC/ucnyPXLPmdovg7wNgbD
ImpHash	-

C:\Users\FD1HVy\Documents\QrU_aeXE.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	98.32 KB
MD5	b9a0b3d6ccd13a108fac06d70b300793
SHA1	767be26a5ef3f00673614946cd7652d155b57f5d
SHA256	375582db9d17aea3fdd21ecc16f3473b0730b22c0578191fb419f5cf6c32556e
SSDeep	1536:rO6EshytFjpJQXeyQcdmCGdayj+LCK/MIIP0zBHLRQySYSoHaYzfyPOsX6X:RtQF9JQXnICGdayj+z/IUgyIoHxzfL
ImpHash	-

C:\Users\FD1HVy\Documents\Q_YU5u6k2YIStFjTi2yJ.odt.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.45 KB
MD5	e40931a1ea35951fe0c353c36fb260a3
SHA1	31272009e058d626e275ac977ee8e6d8e3bafc67
SHA256	9d57031659156dde8f52c2cc85e7d0684d18b29c67e721e3710eac209fa22f42
SSDeep	1536:wXNZDbo1OAelST0UxiBn/AD+5mLYMq7MNOfjVcSjZu4uvyKldo8Fg0a:wryH+Bn/w+5IYa03puaK7o68
ImpHash	-

C:\Users\FD1HVy\Documents\RQICtNNu0kLkqw f7YmR.pptx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.66 KB
MD5	f38cdd1e8f53e4fef62dc548fff963d9
SHA1	4bcfe9b14cd583a90926377beff56d973d34825b
SHA256	1c645687d51e259846460298f85cd336cac5d1a491356550f08ada89a60944f2
SSDeep	384:KhGm5ys3AC8RBkHx8dlnrhPpAmPycHycxQEm/nIeCeGvqAdar0u:KE8ACO0WdlrhPpbKyVxQEm/Ieyvvdw
ImpHash	-

C:\Users\FD1HVy\Documents\TDUzPt1.docx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	51.23 KB
MD5	2a5643cd781c11667152652dfdcf934a
SHA1	c1c14974bd15d949cd786e59d4795cb0c481181e
SHA256	d2e5b59439fd3129bda5c45389132f3840e7d6c2ef17e4dde1ce64fa4fda10a8
SSDeep	768:Ucnx1zHx1VqTqzZ4okx0R4MY6833+kbIMywnZd6UwPhN9gMBtYwEowYybMHdEoB:UeznyqzZ4nxM4R+xMZCg6IZmB
ImpHash	-

C:\Users\FD1HVy\Documents\xPRIBcH.xlsx.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	7.00 KB
MD5	483960006089019df84821dc102418b3
SHA1	b584dbd2759cb95dfd50ff9c59f2f1cfb93e1191
SHA256	4b46fc3effddfb27b19b3c5f9352e80fdac4bd7559748ec9b6b7aa10ce5a0ec7
SSDeep	192:G0a1e42g2HpJRYGM6fyZK2rDQFbL2bMnlzoOWudj:452gQHM65e+iIlsQx
ImpHash	-

C:\Users\FD1HVy\Documents\ZNgiGj2xtRMY4KyJ.ots.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	58.51 KB
MD5	e6c608ddf25ebad50d4330e3ef429fdf
SHA1	7f5684baee017ba6f1ccf12d8a7c25a338077333
SHA256	5f42bfda226781d729a0bd072d9b7cb17a024768b3e2a501b7660342ad6eefbe
SSDeep	1536:dhrEpC0EDeP4RF2k7mkeH3/8Phd4pH7cRwb:db0yCqTead4hh
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\B oPNRLAj.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	51.30 KB
MD5	f5e474aa9c88131a9eb9385fb434fd14
SHA1	0c8df3535838ceb4061f0c5dcf4db24b4d9e2df4
SHA256	7e50f4cc62e5b8462c5ae5364b73bd62cc6f5ac11bdc47739aa0d14f2bf3ed79
SSDeep	1536:WBQ8vRMMKpH/CepqmlIfJKGKphvBgyXgxMrzht:wQ8vR8H6ekm6xyBJX8Ut
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\dyjUBfiVuB3VwaL2S2.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	54.96 KB
MD5	af2bd6d3cbdb18f5906d6fffefbc1b6c
SHA1	c7d9189564228ffd12358b47de84f9943aa829ec
SHA256	d269892a63b29e125ce022f9c0d0cf76032439c7be1f7540033e54586f673017
SSDeep	1536:ke9VS+k8r0feZW/x9Cy//lgcvn7+29PKnqfFOGHtPD/VRE6:ke9hvU76M7+294qsGNPjVq6
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\G5TJQh.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	92.23 KB
MD5	32f5271804aaf268a610b69869057afc
SHA1	3b38b61afec1cb73ebf1aa353abc25f29f1ee088
SHA256	e3cce948c554d854763a7f041ed9776580bf67649e80832031bc648d9d244743
SSDeep	1536:qEqhBCr7xmHg7dd7OliSq7mN7nmHvfKaUsTp3wvq5N+3NE5juRSN0:qEqhErEHed0Yi7nm6azpgvq5N+9k6kN0
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\m3G-X9yd.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	66.96 KB
MD5	0b77fb7a0d279b91e30cbf0fc8951d52
SHA1	cda1bd452e5106c74555cfa1ed023ae2e4501377
SHA256	5a5f2ab2b222466bd1fdc862057d1d89a6dc5ebcb4dc54e919feaa995d2948b7
SSDeep	1536:1lfcFc0zsRvCJvwq/Lf0PE20o/+wGn4/+0CKaIfB:1lfcuCJvwqD8Z0o/+m+6aIfB
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\NVT8c.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	76.52 KB
MD5	a9a78bfcacf9f4b0a15f40569b44f60f
SHA1	939041f489393f9671b335185199c62c4e2c099d
SHA256	cbce6d4425efbccd39b8796dfb81e872c37abe1272bb5c43c29130cd553be3fc
SSDeep	1536:2e+npaKlSyoXNo3ixVCMqr4ykCvZ4MUCZprGDZfBFcQ+z88yrEVC/1f:H6kNXNo6VCMqrWG4MFZF2B7+48CEk1
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\nzhgQUJ-Y1wF35iiuL2.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	22.91 KB
MD5	bb1352ac56dd59b42e7b8bdbf0c88921
SHA1	05476aed10bd382ba5068960a35454f89e47890d
SHA256	c02447689380379c7d0ce133d858705359c9e510720e11b036e37e8b17b996a4
SSDeep	384:nOCK2ylHrTlWOYb99gILmsgvgIJF2YMSQsl0kkENCPqzKWDKg7yuOhM7nml8q0sB:nOxbdWrT1DgvgzDOQEoPRcJxml8q0qpx
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\SuinnHSza-AhY4tr.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	4.15 KB
MD5	c317d623c028c018055d78bc839956af
SHA1	ff5cda2be460bd1e7d7c7179fdc59f97aef6f389
SHA256	a9c84cdd157279609e3d56dd70d8838bd6b3c57baf17b1a02da6786c23d62164
SSDeep	96:PJWGAlv02UVlUhY+xjYbxyPr0ifg0AKZ9KoaCam+3:xxqcvqhY+xsb0DZJ9baCar
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\Wca7Qy.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	46.74 KB
MD5	743c3c141ad26a06d1207cdd58ba0e81
SHA1	53806d994477f91f257deadd785438a3a905a5a2
SHA256	639fab4139492dadcae5c6159e12513f1799ffcc4c32ef72a3ef850fff924542
SSDeep	768:rbZ4zEy6p0BrUKuUeyfp3s02JwMGTZRYNY0eNf1e8LjpXYcLlxc8V1o7JviyAuCu:3Z4b6Stfp3UNwZmNSre8LNYcpJ3o7Vd7
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\xxKgfYIasF.gif.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.65 KB
MD5	29ed641657d1d1c668d87e3b61d697df
SHA1	a5d337e001cf41e27924d2bdbc0da0287925e5c3
SHA256	027b49c152fa59c9d27c2d6fbfcee49bd0f9f0dadf33e04f1f5775e05b6488cb
SSDeep	768:LVzKUktsDUEjTn5x9hh8UU1mmIVO0zmccSb3SI:EU4E3nn9hBwmzEoCI
ImpHash	-

C:\Users\FD1HVy\Pictures\919foinTXZU\YrIIQgrv.gif.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	67.10 KB
MD5	82729e1135bf622286d47b77562454a5
SHA1	37fa7811dda4355ee2425a52d934b904636ac480
SHA256	011abbfe3c036c91fd75913b299ad1f77815906d2c312488835fe6163fb6c9e3
SSDeep	1536:n/PbgeounqJC2XVtRWPoKlTgoSCLlllaXOimg3DdXS4q:/DtouSpDgzl0oSChOyg3DdC4q
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wWlbVPYHJkQCO2x\bkVFco06qWKZ.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	93.59 KB
MD5	e824e920efffab3cdaf9a24ecfe1361b
SHA1	d742bb4125be6136010bdee020a6842f0851c7b6
SHA256	4791e748c71765b0b47c41088e8b5f4eb7d593fbe985b979ed47b2a8375b3817
SSDeep	1536:57Y57k/WIPdWOATE8MLCib2YswF2tTQ3hjfE/djdhFmfdp8RkpqLlVJb7XNOTNG:50xgPag8MLrhItTQ3hbejdbSdpukpyjl
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wWlbVPYHJkQCO2x\nCA1KwhrEZxH53jzPHM.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	26.85 KB
MD5	42d23100572b13a3118230194f9db30d
SHA1	1c4f650f2e3fead53d08a1d8605a1053b519334d
SHA256	3ddeec80e9aec942cd5ca75203b9b63416262f32024c0f5520d8bba908867461
SSDeep	768:oz+f50dOkhsZDJinFr0Cur+2+FIV31n86XgtT9V8lRfa4:oz+f5KOk70CFFa899V8lRfx
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wWlbVPYHJkQCO2x\nlViqiOs-WuYui.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	42.98 KB
MD5	483eba717b96da3a0fd767a6c5c3e123
SHA1	e264670e6e18f140fee329c69592843a7aa501b9
SHA256	807899208972a3875793b578a59a3929a3e989d5ac754358e008f47013a1c290
SSDeep	768:a3JraogpV5+9JJcjYeaFcYzy0LkrT33+/rFt97TF8kO1BXdRgRH67qyqbvUABk/e:tog/g1c8XfNkPOrFtRO1hg8TA+1Fseij
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wWlbVPYHJkQCO2x\sk90TAOxs1.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.51 KB
MD5	c46779459285ad5f8cab02e7b528285c
SHA1	1ee0870662a17b2ae5d49cbea7f8e9fbd6b1b523
SHA256	301909a55609150f4b41f846178da4af6a0e9b84b390984362bc999f6316880b
SSDeep	192:uc2e7y2nIH32C5ORD6GMSRK0Hq2iAdehubKymj6mpW/264KyKyy:geyHR5ORD6GMSBHqadeh9NGmge64B6
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wWlbVPYHJkQCO2x\sxbiw.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	37.76 KB
MD5	5b935aa38904484ef265a5e9919df3fe
SHA1	1e01681dff35b8642258a0b65c2408a4b555320b
SHA256	1fd5afe880264014e8e639e6cc85a4ea37f51b38bf564e05c408de7f44a1943d
SSDeep	768:AYVEKuF+rtipOfgDWwBSU6pIx7vfn/xzCc3cNOcGoq7ldblG9a:RVE7FGYptWwUU6pU7PxzCEdcGRdZG9a
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wWlbVPYHJkQCO2x\VtCYAzbgvh4U.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	15.57 KB
MD5	1707c3b30ca3bf2e0011f472a392d1b5
SHA1	dfa364cfd90f2ab5231d2f122d62b64f9a5e79c9
SHA256	473f15b8c7b212211d9e1c90d09c12d022696f22d978cddccc37601df904c318
SSDeep	384:AMTdQ2AB4zlZa/CgBxSOvFdcfaaykGcC1JIVOjpbBe:AM68wJBRFdcfaaRsiVOjpbA
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wWlbVPYHJkQCO2x\Y96md2FTbT.gif.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	82.33 KB
MD5	bb5b78de71265edcc93e018992859e7a
SHA1	561551b270072c5c7e587f2ad55f39d415113176
SHA256	3d6cb11895ff8d787481b3b82a5e8bbdcca93a72e9d966ae232f537009692b9d
SSDeep	1536:mpPnaEOjXwOkaph24M6i7SWuzltyP081ep7LEQOQxH0g+IR6j7PPydi+7quwVFa:YP4jXwu2R6KMltfpllHT+4UB1Fna
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\BVECeD.gif.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	90.20 KB
MD5	c10d00661ce0df4850e9c79bbeb42b7e
SHA1	9b0dd7a2432663df6f1e9e951ad32d2a95ea381b
SHA256	29388827bc1ed8a5089e40a41b51f6a9743251060eb51029dc475bf65ebd0972
SSDeep	1536:k/kDuRple8BmD259EygJihyIDt2hLHPkO7UJM5Usqw/ct+AB5tvYXqkW5V/:CkDuleH2HbgeyICvkU5Yw/cLPeXqkW5x
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\cruYVtp2KYSwwT_LF8H.gif.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	36.34 KB
MD5	10f7400b29e51355f36de428897cd877
SHA1	7b5038ca2f5e67f8913e39ef24a8e01bb0ddef5f
SHA256	eab2cde696b477215fd8d9e7ff9438c7f3c5b867d6621ed584e52d639b63c896
SSDeep	768:4EP2GXtU2AVX93rjxRrYzPO7EWng4sKrU6oNl856qVjBfZ0:/jX+2Ar3n3rY7O7dngL/6oNm561
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\S0A1B5a.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	84.91 KB
MD5	ba0558b86e919613572d3d8c5049c176
SHA1	33ff857a9251bd97ca2fb0e1356a7b5f315ae011
SHA256	0b9e150cba3eceba0944f6221d0e1f56734202fddf768801972d0662094b8fcf
SSDeep	1536:pO/sQjkjzq6qRtcrLmoUK6EodvRXp37K6L4DiWgiQWyodP4htEp9EUrk76W:pqsM4+6qs2/Rbdz37dkgPW1+/iGUrW/
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\wDPt -blRmOK3Yrr9gXD.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	72.27 KB
MD5	8597cbb025f4b42c45e2bfbc784a93ac
SHA1	e9745f842dec07acb4c8868e15bc4d2d8d0bd9a1
SHA256	2502aac89cee8d797c87296efd645e3869c7bed4d0026c6e185a9a7a08a6216a
SSDeep	1536:is/kIK6JpCz9Oywup6wS9RMJb2Bj+CNPTV7ZSoM7gBZDzfLGEXMYdMKvYnvn:5khewJOc079eJGLZAr7g3LGEXjy9nf
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\Cl2UpBOEjN9 VCuWJ\XgX5 rV0yIB1.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.72 KB
MD5	386e8370f9edc0ee0971b475b5adbeaa
SHA1	2745452a3d8494624285d89705041bed281f8206
SHA256	b2ea07eee7f1361fb1b7e2263e6c16c3e97b5c06214435f4d1b758cdc539e824
SSDeep	1536:YmDLh4x5C3PzFdSNbhrXscevN9OD+W/rJFjVUFq/rbZlyP6kia:YAyx5CPz0bhrXscmNyjrMqj2Cra
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\3hjwETOj iWYW.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	25.66 KB
MD5	6b33fdeb804a460dedf1daf34eb757d7
SHA1	15f654a9c9e230c40e664341bbdac983552c2a98
SHA256	b662724c9cb46139908924524b14f4b29870c20cbdf8e9cfb4db493203e5a1ce
SSDeep	768:i+R3+fqAGECVzywsi4zxlrdFFvMgVG0aajxj9ZgWSI6wEYo:i+oCADmf1sPFHV6ajxjzgKUYo
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\7QULv.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.08 KB
MD5	9d115d174244c5492a59427ef9620237
SHA1	a41e0b775b45b1ab0a645c378a76fc5631064924
SHA256	18b62d928a1f33671430d7fde3a47976687e41db5ffd320b0fe9e1a634af044f
SSDeep	768:QHb/FufxLnLqXKNbBZhloh8069W/KWvOydNxeEwKx4MWrG83YcSH6B2rA5k1Rwb9:Q7/k9muBxu69FBydOEws4drG83YcNB2Q
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\G6Cj.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.06 KB
MD5	785101228db6b040affb095e8ed039f4
SHA1	a5b2e6495b948ecac21c920acccbfade54d1e972
SHA256	920b5d2012ea8f8afb6307dab7f637fec13a2ffad6ce6a13959ce88af93f154a
SSDeep	768:EwOJpJ3FYe4EcMiEcFjXfHS+uxxzEHBGJ3Wp:EwOJpJVYe/3i77fSddJW
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\hD8VP9UHlbhHxmhluuyH.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	9.56 KB
MD5	ff83dc3119fbcd1f76411b3ac9ed4a8a
SHA1	04e298c14f841836965948b4cf2ddbfdba64137c
SHA256	c404c9d721c7bfde08db55d592b79418100e99262680a18cab48da6d94c05e2b
SSDeep	192:LKztmw0xtfHIAhPg0Lce4OuZr6dH8/+NiRZkbcitN/Q2:LKEw0TbhV+rJm8RZkbNtNf
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\HwLAMOVYPpI.gif.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	16.33 KB
MD5	ab1555fcc1fa37089d9376b0d5375445
SHA1	8a109ce3feec012306bb2c85c1d919c5a249afd0
SHA256	3692eff54643248c72971938e55817a835cc5b1f6c62d8fd663309676a8ce2b6
SSDeep	384:W0hi767se2vxb5aEOcVlPocGk2sKOobCTVdIIx8kpqZPiwG:l7tixb0ErlPo1sKLCJd/+gq54
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\QZ48z4RDprjty.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.59 KB
MD5	600cf009aec3c96b061ae20834a0318d
SHA1	29cfae58cd93786f39bf770dcc895417906a4936
SHA256	1382900857f612a4ee40a594939d18e363a4408f279a25b9707c38afd4251b77
SSDeep	384:6r7jUpqAq+KX7qbydme6z6N5ChvLVlHznmD5YRp:qUnKXIy562NCTVVRp
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\UEF5ozYaHFl3z.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	71.62 KB
MD5	78847ffbce25e682674e0092fbf3f985
SHA1	d7aed458a4226b22cf272a31869f763a958d93ac
SHA256	1b78feb7de048c83305bd752057f2c4bff003eb972bda60f0407184bf44da1ad
SSDeep	1536:q3qONEuRx8QbD6Ia22/ZwucFWWVApffFzMLQSuCRFFj6hC3vuJ7tvv8D3:2VNEuRxrfWf/6FWrpXFzMsrCRaC3vuJg
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\URlBJQmL1Vmw--2W.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	76.06 KB
MD5	313f86710413725a9cc2c08a75a7e1cc
SHA1	b070c01d51740eae94710309aedfe94b9403365b
SHA256	782f54da7a5bc8b252ba1b9f888627760423d8a9892f1d61c31d6c31d17826b9
SSDeep	1536:soLzWx6UkUziHoUfW3fYOU2tTGkkZR9tU90nRFatfz28k9934/:soeMiVtoR9t40RFa16+
ImpHash	-

C:\Users\FD1HVy\Pictures\laEzvODaxxcP\vMSlf4.jpg.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	85.89 KB
MD5	0b327c69b4663f59d0bccef4894259c1
SHA1	044973824106de09e8c0b2ac25a9735bac9d1836
SHA256	ed158de7a9219b8aeaaf6a3b407c5548324a833be6ba4ccff4ee06720fb38c12
SSDeep	1536:ujNJbDBY8B36XDfvnyBqPea8pB/Fsnj+LA74BLtYY5Oloq7v3BP6nJzPv44:uJJbDrczfvyBqwBWj+L3B2dlPv3CZP5
ImpHash	-

C:\Users\FD1HVy\Pictures\Saved Pictures\desktop.ini.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	192 Bytes
MD5	084c14710a825e6c37dbb31d3306338e
SHA1	9b5e9d23e6f212cdd9539dbb9991c4e46cf6550f
SHA256	9395f8864cdc532a9e77fe98309a703cbb62ea0fa9bc2e000f5c118472c1c1bb
SSDeep	3:C1agY6kA4m8NEWYzfIBQDtF/YjPgrMPjw7qkrMPrEKtwst0yYLDF8dy5hCLcUzcR:C13QrYVBF/YjPgrAwukrqT0yMZdhoX+7
ImpHash	-

C:\Users\FD1HVy\Pictures\C5pt1-vJcZ-Rx8q.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	76.81 KB
MD5	8bb686cd322880b48dc75a1726fe42b5
SHA1	4882c6fcbaa92b4dd323cd901a6d23150d4607e4
SHA256	6e1a54a7c37709060721a4927187c9dfd2f398c2d83a95fe65193c6e0b452b0b
SSDeep	1536:VfHM1CG6JjmPFiwE6GRttHu2OlgAUbPO5Gv7DWKsxgGYoC4v:V01CHzwSbhoyq5Gv7DT5GYoC4v
ImpHash	-

C:\Users\FD1HVy\Pictures\desktop.ini.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	512 Bytes
MD5	389eccb35dd161a685bba877a2d8d212
SHA1	2d6b47a80d13dde6ce44b57897a78a3ca2523fe4
SHA256	a5383afb1c48b6bdee9420d23cd0b1a6cdc5843cb9ec951fdc8560c7287bb096
SSDeep	12:CNFFwU63ad9jzLPY3WFwzlaQndMHjDdIsA96x6l58pX49:C/wzk90WCvdEqQxqy49
ImpHash	-

C:\Users\FD1HVy\Pictures\FRq15h.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	45.00 KB
MD5	86c1658187c16e73bb5588e6b90bb7f4
SHA1	31f7eb1bdacdd6f0e02a9cc89b83ce78a575bd21
SHA256	152f72bf95f270a94125c66889dd3db9ea4da175b3445dede7f3e0c0e3fb10f1
SSDeep	768:M5Rbx1VZfvZ3jGAtjgGp8MVjK35iuPBeXUFCpQjIRIgUt2IDqxSzUBPHX:M5R91/XFfjgp35kk2QjIrc2ID4sAP3
ImpHash	-

C:\Users\FD1HVy\Pictures\HzCtWSyb1veb.gif.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	81.09 KB
MD5	5b889cca3da4b58f3045be722049a046
SHA1	723d63321578955a62b2e4a4367f5dfc1ed85356
SHA256	86f589e31be461ad01fbebedb2c999075df91f05cf27cf9d2ecd985b8b3f663c
SSDeep	1536:zUE3F2vJOILWT4606hGY+2IQrrjRRF4N92in5HJ43P0JMnYMyTZNOcc:zNV2BOj4FY+ORR0928p43cJMYTlkcc
ImpHash	-

C:\Users\FD1HVy\Pictures\J17m3SmlgJ1a6 Il1B2.png.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	57.50 KB
MD5	610ebe0d3811543b9a37403c4db02177
SHA1	b0bc4e4204aa948a4cf94029798e701fb8085f99
SHA256	bf40ffb0a8060906f7e2a1efbe3adfd30c4d342e05a01dd7001b710f96e0793f
SSDeep	1536:T+rsUt5o3xHe2cvFqwuT3AcCnZtWq3F1lj2SuA:wxfoRsyAc493F9f
ImpHash	-

C:\Users\FD1HVy\Pictures\Xi_gn9udVUTgJ3A xf.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	82.12 KB
MD5	53e33ef8262a46852a8fe7db92c7c99c
SHA1	ae57f7a09486e5c8f664190772e8cdec034cb62b
SHA256	6a8c787b8bbdf1bf096d01c317149951fa829cff59bf78ac41c63f994ec47ed2
SSDeep	1536:xB42bi/wnFIJbBPf9PgvFrY5z5nQcatAp9KdiF4bmVnax14dRSe5:De/wnwPf9PeO5z5QcGAcUtUxSdRSU
ImpHash	-

C:\Users\FD1HVy\Pictures\_ZsMMydrW2r5ZiFW5W.bmp.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	86.48 KB
MD5	d592eb878b73822254e1273f119b68e5
SHA1	2fc1af777c3aca9fbad7e80916bafe331d93684a
SHA256	2b582e26e68653b5aad5857ed79544c70f2ecde12c8be65b2d629403d5a53a28
SSDeep	1536:2W4nT+bJWm0kLU35ekrwQoj9WVsiVO581FZK7/UsnCAyrlAOi29YeDEWNvBEkOT:0T+mko8Zj9WCiTwdsyOX9YeYbT
ImpHash	-

C:\Users\FD1HVy\Videos\2bI0Kk.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	22.24 KB
MD5	a7e3fd051442307bbc0810df37afe0b1
SHA1	35f3adb8ef8e9e6b5845decc7cb711403b5e36f2
SHA256	03b17c3bfa643547394eeb16c1ebb7ef02a1375208f1a593f950e8413b5b1be7
SSDeep	384:njEggeR54Okm1T725GM10V1EbdxD/pKetdva3Rares6ZNqqkAEyDCOa:no/eR54cTSL10QbfFK6KRarePZhkAEXJ
ImpHash	-

C:\Users\FD1HVy\Videos\2sN0b5QjkoMUxfT.mp4.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	6.17 KB
MD5	1286e05282838477ba4edfb447cb3b3d
SHA1	0ecc72b7ae9f80a980b540e765bcd512afa7ee38
SHA256	f9fb72148d3b7fd7ea1d8f9b483de065969a94990cf0a5e170c5124c7cda4577
SSDeep	192:465hmXJNHjvrphW21DY2bNR+ZRr3iHjnHxC:4yhmXJNfp82LMrejnc
ImpHash	-

C:\Users\FD1HVy\Videos\4SC2hoS5Y8ati -.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	19.16 KB
MD5	c457ac5aeeb1cdd7156a562b3c4cd199
SHA1	3777eb9c852dc99b7c68426c74ff6badf5fd4268
SHA256	57d3b140661b582bc985bc98c46e6250476b545cd3056924019522f3b06c97c1
SSDeep	384:ZApLwON6CB5hS3bwMNjQoEYb1I08r1lG7Ia45M1rfQwBBGtLx:WHEASLBXBb1+J8XpowBBq1
ImpHash	-

C:\Users\FD1HVy\Videos\7vCo7mjT4BO6wyX7cmY.swf.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.85 KB
MD5	ada323c1780fa3445036c90526a26e59
SHA1	81263a814c754499a74a23876a3ff6f8dbaf39db
SHA256	f4fcf364b84038c835f537b0134dec18ff59e9d8826568b9fc885b204ea220e7
SSDeep	768:UBejEcsWoWnmxkHu4Q8ZCTAA2b/Gdy2fx+CfybwSB4y:H5sWqkHu4Q8ZA2jGdy2fMCfybpP
ImpHash	-

C:\Users\FD1HVy\Videos\desktop.ini.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	512 Bytes
MD5	357568a17725b8f4e07927a22c3ceefd
SHA1	d4e2c40c095240495a621daeb42d2b66b493f6cb
SHA256	b9e01053d01c41c95e37ec58d58ebcec0e944433a03f3dc1c6ef278c18666b65
SSDeep	12:CNFFwU63aMp2b606OAEKk639lhYbb1FBQR3VworUD2Nh6:C/wzrAb60trN2nYb1P83V9Cb
ImpHash	-

C:\Users\FD1HVy\Videos\do1ZdrgKsS62L-a_bRu.avi.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	88.98 KB
MD5	99924469189e238c1866820d78e14d04
SHA1	e3e263ef0f40a3fbc39261d8d3427ae095de1afd
SHA256	a202d6952dd5e261b9ce64ea9317bb67c0935ceeab27f968921deb1528cc36d2
SSDeep	1536:+mo2yM3P6Zcxk8AgrC2wY5SaNfLHdSuKoveIA248UZIs773Z+BouBF7Uvfhl6:+NdUixgrCaYaNfwuK4UZIs77p++sF7om
ImpHash	-

C:\Users\FD1HVy\Videos\FZcaDvO6qItm8UkdHA.flv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	10.68 KB
MD5	294e85c9a690d2f4cb2134227173923c
SHA1	3def6566ba5dde022c5757660d6aa90617640d7c
SHA256	268de5fe2e6772b4c8678a12a24853912e7128d4f76b1418a9e472cdc3353c3d
SSDeep	192:jEy80jI5whZfVNXc8stRfyxEnwY7us+NlaLxfDPoJCVC0Ad/nEo:r8Z0f7XctMSw2x+NAx7wgC0s7
ImpHash	-

C:\Users\FD1HVy\Videos\jcIEvPGfE6dSa1v.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	16.95 KB
MD5	30732472e90928061ed80a0959388b2b
SHA1	4494212a89b0ec6e74666db8c3433187527d69ba
SHA256	64019a3640302d59fa074a4068463ce485510c60aadca5a7fab1b5336511d180
SSDeep	384:MVlcbMyn0iqkX+RPKKxHiWksTkPzQHYhfNdI4Hc4zQ4dRg9k9:Alcb7q6KHlVTkPzWCS4zQ4dRg96
ImpHash	-

C:\Users\FD1HVy\Videos\LFaxXfB6k.swf.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	45.12 KB
MD5	b8bb470c8015b7b03e5f33ff71ea990e
SHA1	e47737657bffadeb991671ab9578b63f4ccf1c3f
SHA256	aae81af566f62127c1cc96a8dba7c907b33a6475f41f6c86346732cb427d2725
SSDeep	768:ZNSjLXYhjQ/5/wC6N/kmrD5w7OhrVklrYdvQZrFSZwDi6yughGOv3NiUJCGBXF9/:eLXuQwhN/rD5w7ONhurUZwDHbalGer1
ImpHash	-

C:\Users\FD1HVy\Videos\MCIhGUmD5ZpncI-g_Z.swf.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	48.49 KB
MD5	ef4279db436c16b6598c95d1a21ba0c5
SHA1	40f9d63f296fed74cce8be0f70441d489c898f43
SHA256	76588beff14f058df7c216d95e96f11c869ddddf7ef4bc688053a8792a441b11
SSDeep	1536:izdf2mv23F9BxX728Z0yMDO36gkmigwm3:3Z728uy8I6gEgJ
ImpHash	-

C:\Users\FD1HVy\Videos\ngSkQJWdEQrT-nqaR.avi.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	22.88 KB
MD5	c30e7aa4eb617abceef97f8c95cead7b
SHA1	bd45a9313e7643b39b1f3ecf92c29c7ce934e54e
SHA256	3c96cce1e66a96df2976549c9f7043e36d07ac9356acadf1180de9aabf193033
SSDeep	384:+qkx5gcnaRELtLPgFDE4kL++/LclGD+HYrbGF2cN3v8KqRX9alQw:+FDqW7vdL++DKGDluH/8KyX9WQw
ImpHash	-

C:\Users\FD1HVy\Videos\noFDCPT-L8Efi.flv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	47.21 KB
MD5	77b6497bb39efdc671d1de1965dca460
SHA1	3904d8d45163e12e500062d0f25c91464eec25fb
SHA256	02219d9af15594c02535d4513ebb6880828e880005ee8de7568a53c83b9be2c7
SSDeep	768:8xE9gVj1qf7PSlCzXAIESi4ZGA5KcoALfH0INfEfkZYAh0XEzPRwTltKMHsB2Mbo:8xEOhAf7KuXViKGaKBALWfkZYdXqultL
ImpHash	-

C:\Users\FD1HVy\Videos\odMBS tbdWkv.flv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	46.57 KB
MD5	ec6d0487048948d8b65cd1fbb54408b4
SHA1	a4c36740dcaaf3dc78cc6bd28cfb8050c9fc0bd3
SHA256	279231b9d1edf1412e7e6c4c2b6cf1e110af888547183362b31c89a2b33729d2
SSDeep	768:F4TDBvjdMVyn5P2mpZSIdByqnlpW3d8aEe2ToSVlfARFhPFVAYntutofr1vcg:ghdM0nlVWIGslU3d8ZVoSrARFFFVVntX
ImpHash	-

C:\Users\FD1HVy\Videos\OTJR JQb.flv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.80 KB
MD5	9aa218868f316df39c42864feb4d0754
SHA1	3022b538c730e648f7c7f512304d5fd07db73a69
SHA256	c93b3f97502cd7c3c11f3fe6284b3382f5eeac6282d3f067b26ee07c1097d5ec
SSDeep	768:IgO5vurn0XOVIW4wFrckTr53YUOOZsDWCQRmT8maT2qN:IgO52rnfnnTF3rOOCDW+8my
ImpHash	-

C:\Users\FD1HVy\Videos\rF0y6Y.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	27.46 KB
MD5	9f26281507ec7e5025ec199849fde9d1
SHA1	ee7ebee655fc4db3ecaff418a53d1479c879da1e
SHA256	012be6bfea1c72a3fd5adf8976953ac653234b769dfeda61fd70304094d2b7a3
SSDeep	768:ASMTazJyhe0AQ9Xm3jrIcdYYV/0/z150bDqXWJS:AzW1yhe0AOWYcR82DqXWJS
ImpHash	-

C:\Users\FD1HVy\Videos\rpBW-LBEaDoTIgy3lRU.avi.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	44.60 KB
MD5	c5766e72a0b500964c2eb283e3f7e1c5
SHA1	44382e77cd2d17f090396e39ebcc6826a661a16b
SHA256	c0e2265aa25c93483f4bac1642fc6f6281fc01c7b91a5c9d324b41dd4679fd94
SSDeep	768:+yb8h0V6UUKjKuicKoJiHY0E5CmcNjxw2MpoRdKIdYfbbwxX+8AJaVsfORttQ1Vk:+u70KT+OeNjiFpUwId44SWRtq/+
ImpHash	-

C:\Users\FD1HVy\Videos\RRrRCZsd2-mEAunS-jg.mp4.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	35.60 KB
MD5	c6b2f2b11e6e728aa870005d2665f229
SHA1	dfa4fbbcb0147fc28589d8ec227bd55406295db3
SHA256	19f9019f3c6277ea8d129fd8119897a68df0ce0104d68f05a403a054bde6b802
SSDeep	768:+hQIZhzVVz4mq+gOaWxKbu/iU4UzX/EwCzdxO/61a7+26xb5g:+eIZh3znuoxef+CxO4aqd5g
ImpHash	-

C:\Users\FD1HVy\Videos\RSWBseXuoSjR VBjAyR.mp4.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	17.60 KB
MD5	cd9872e65c25d7c6210344107f3921e7
SHA1	a29584eca7cf21f0732f83cdca353c1b5898132a
SHA256	85cdb5544ebd1f729eaa8317000ec01ac60d520f7bc661822daa406bb2f78296
SSDeep	384:MivfLtJnW1TBVZLNW0FbZsNav2PbT6nxT756xD9IhLteEPD69b:XLt4nZhvbKPbenRM9EwEPD69b
ImpHash	-

C:\Users\FD1HVy\Videos\RyQ3aY_u7.avi.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	38.74 KB
MD5	f269c9fd3ba96260dbbfd4dd8a6fc1e7
SHA1	3817fb5801640d01b4c9e4e22d0fcb7097c25f6f
SHA256	b52893a4123e9b9d33a11f18c91ad358eacc78693c4c7ab2911a16988401e41c
SSDeep	768:+HtccPr8erSMmnF4k2NWSrOVSD/MDQIB+SM6QKij7jFpbE:+HtPz86SL7SrOVSBx6QK07jLE
ImpHash	-

C:\Users\FD1HVy\Videos\Smgx-iqF.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	87.05 KB
MD5	38dbd5deca38d92fde4623415b9a5443
SHA1	b665db00cbcacb953b6beb579d9db7ef406286b5
SHA256	9583c0aa50a8badd85c443299a2e3b754a95f70496cf6cc501869f277a8dd812
SSDeep	1536:rXO1rx4VE8015BDlRMBAwaN67gEcTwIT3HQN+/0J70CBX8TS:r+v46313lyBABO+dQNpaVS
ImpHash	-

C:\Users\FD1HVy\Videos\V91ee-UZpqGTpy.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	99.09 KB
MD5	3fea63c6e772d2af5973e03a72582c2e
SHA1	e4f6190c89ceb086d3191cadd135f4d86fa6b7d9
SHA256	f32b97c7472ff22df163ed45f8eb1d91243f3118d27600c8767a04ff92111371
SSDeep	1536:7BDnSIT2FdAsCIBTqjN6iVPJaBZ/26UuT3FbbQ7ynd/OcLMM39rYTr3K4VNBxfbH:7N2FdlqZ7Pqb5dnMYMLNB1bJw4
ImpHash	-

C:\Users\FD1HVy\Videos\YD1Mg17VSvrsQ8ePN_sX.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	79.14 KB
MD5	c72195d4a509d5bec26cfdee90055aff
SHA1	139b7386abb1c59abbe4caf7315cc19ca48c6bbd
SHA256	6498d31c296c5d158cd9dcd28bed53de01546a7d93140f016f96d1528cc694c6
SSDeep	1536:g08kJhhMKzIJ+JwmqZbN+rN8j6GgL0LiEC50Z3WL+GXrMM0hvRpCsZSj/SoWx:cYrZJwD+rOALe65q3W/j0hlEqpx
ImpHash	-

C:\Users\FD1HVy\Videos\yGtMG8cQt_AG3e.mp4.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	52.97 KB
MD5	69738916fcab87164eb5e17e2f785201
SHA1	ee92ec15894cd61e1de81c74f06e44c0e991c803
SHA256	42888b5913e821b27ecc23f0cb204169179ae19bed570a082d2f0ca80882bade
SSDeep	1536:wnLSJlREG03mykOE7ZOfJYkWo/erdJUf4PJAFZ:wLSpEG03m57ZOfPwrUfsu
ImpHash	-

C:\Users\FD1HVy\Videos\ynbDl8beDnAm48.mp4.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.69 KB
MD5	245d445f0a0f9990d00167dd84c13aca
SHA1	eaa8e792b5509d88a5b29ade47d510a022119a91
SHA256	5eabefccdf6572ccf0cd98cf54525c9c8cc1f79aced3f74833e6e4ae4668e4b5
SSDeep	48:Qr7rdZXaGbUCaypwvNhKDtTIdIZxchgmM4sg:QzXaGUny2v3sQSWKd4sg
ImpHash	-

C:\Users\FD1HVy\Videos\zDJCbqsVWZgbx.mp4.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	29.57 KB
MD5	aa8d5c34e5b46975eef4443771d55d57
SHA1	95a4aa0dadc05ae81ffa27adf41c81369f0d8a64
SHA256	9e988170f06a66de23c2a5a47b20a7ed965af946ba7d8dccb655fe313cdc42a0
SSDeep	768:goSvJ0Xcf6UMmFa8aTx5H5nWu38fK8K25APBORRiUj6G5Lsc3/:gYuZxLsx5Znl38fKwcABeG5Lscv
ImpHash	-

C:\Users\FD1HVy\Videos\_3pySX0EeOA.mkv.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	50.80 KB
MD5	a98fd41976483ca332d63a1f0f137fb7
SHA1	12e913a2207f38288b34ab112d64b0023055dd1d
SHA256	d0b68704432d7afcee9365e867d7905ac431e3c37bdf5547870edcdb00a21315
SSDeep	1536:VUDmIjg6ZvCHb2wMXY1itq8G5sQ68skIoQpat6yV:VUDmIj96PRe5RQ81at6E
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\12ZxW.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	54.21 KB
MD5	f9998d233370cf2456d5282692a23c95
SHA1	2a477a03df02503d2e5c1e5f58ae9fcadd4f44af
SHA256	684ba7944ed454f116a70878f3be8a1b381dd1b328ff58aea29ed3bd60ae5af2
SSDeep	1536:saLmU1dG07s55aPAENN7HdxvoMGH1L36HDxwHsR4jizi:sApX7svd6roMGV7cDcsiki
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\8F_ijqn0rUDvA6-hP.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	88.92 KB
MD5	161485083338bec43dc73a62febdd02f
SHA1	d7f195117ddd7b96fb2769e0ccdf9e54da934f5c
SHA256	485d9c9a085851c786e923c159bc07d4f72ede8cbb537b0c333517c6f0491568
SSDeep	1536:JhQ6q3UixYr7kGnUNw75PdyfleokLn02ISda6y0EBtEseTS9LtM/A0XfdogeFopJ:7zqgxUNadyf8okLaiy0EBt95twzo4QJC
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\8_funD-wLnAqegM-f9.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	32.06 KB
MD5	2b60b0c64ea23f562e6e6d169f9c362b
SHA1	412e8fb79ba0c3fdb6ccae9039d8a811efe6320d
SHA256	0bbba82c54efc87696f39b5ebc1598ea8782050f9140d2ce52411e4ca81919c3
SSDeep	768:nFYFS8R9gcPQ7gAdFrvgNVEktZh7cykwx118HxSm+A:FY08IT/xacF84UA
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\9fE5_.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	54.95 KB
MD5	703b27184470a41754dee1f98a406659
SHA1	ad566803e0004747467e67541b96cd8944114d24
SHA256	fdd993cdba8482e7be64476859d8b22e1f63b535472b8389043f72af70327945
SSDeep	1536:ZHHVTYVModRKOh5Mf+mud444jiVBgfaps8Uo79h4ToNc:diSaP5MGmud34jicfapsx0/4UNc
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\e7aJDthWxNP.wav.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	53.21 KB
MD5	935f19dd578f39bd0f2eebf5be7f2a66
SHA1	efeeafd0142468fa12f8a5b0c00c9201b6ce7fdb
SHA256	7522592816e34f8b3c54016b7071a59f698bd6158ea1af55339a8ead59584bd5
SSDeep	768:BymEt8o9IVt0qb8FEgvni0en8f67BDIf1A82zZpdbSWQ5jXMHsyFF26LnPxv:BRE6o9IL0oqvi0OjVdSWQ5oMAn5v
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\EgdxWZTmW.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.37 KB
MD5	6b355acdbf45856fe1cba53806933bc0
SHA1	e4e11fa74d1ac042a77ec0d3969b1bb89282aebf
SHA256	8dab13a86559197b3cc907626f2f6fc8ed1e8476b9760a1c1c7cfd3000b7be58
SSDeep	48:VjRnNUBszIFV7LYU11VkhBY1hHRSMzunoDgUl0LMY3gIIt3THiNfoo:RRNQpYcOu1JcMzuoDgUWTa7it5
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\FXbnw4KUpn6r.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	95.02 KB
MD5	cf2c6762d3a1333646587046658ca017
SHA1	e86b0dc289cda585aebf1b55cb28c0d21d631f27
SHA256	063908193967aaa62f205abd3533dba297efc0d659c0a46c2407fd5bb1d048f7
SSDeep	1536:aWIqkPeLAr/7BbN9Ez03IPKLPjzNLJiYiNXMjky8fEV67UIOwGAAZVN0teOeT7r0:G/e6qGIaIk58fn7BWZVN0YbTHIx
ImpHash	-

C:\Users\FD1HVy\Music\BCpy0hpS4N-J-d3Fubes\HdB_.wav.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	78.73 KB
MD5	ac6dcdf5a3d16728fe787cf7cbbfcc84
SHA1	ba22f759ac8f89104a0f4c025bf4cc920dbade14
SHA256	d625884eee1696efcc2331a4be3a55ead63eaf63ef13454a21cccd127844d727
SSDeep	1536:7X85ba1wH7E884j2QJ6LrBGM6eqDBFtybXnxnqctKf5pOlqb:7X85bHH4884jv4rBv6pD81njt+5pOi
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\3TmG UytC.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	35.77 KB
MD5	a2c8d9fc052b154e05a22921ba99ed1e
SHA1	9b6c60c3ef658fa721724bceb10f9d9b5534c9b1
SHA256	16c914e97287cacdca0c35592572f203027089ac57215b72ae343de88a47310a
SSDeep	768:6luJZgUf/K1ijBIRlr87VyQqJikcT1cJ6F80PT5DaCxttJU+Zd71Ac:qlUf/K1ijolA5yx0II8mRnxt7Pd+c
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\6o94UX.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	87.53 KB
MD5	4cb23f3441d96bcc2e004911d54592b7
SHA1	61e85420cc7b7ed8c8b2889ca595a9eee70d0bdd
SHA256	0a2fb8a5b02f9714943c1bd4234f8e5751b017bb44cbce0e6ed080af0fa60a2c
SSDeep	1536:2EwnTZ9z1tPfyQd21McjsCQkO0U7nhvYaYl6IXmj32Svrrsqcr5Y3l3gBk8QDG:Lq9zriMO0b0U7hvHIs2Svlcr5Og+m
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\A5yT1PXy8eU.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	91.45 KB
MD5	3bad938d4b2507e5bd89f4f5122b98e0
SHA1	d4b9c1134eef73fcfcaee7490b1457697674d1a5
SHA256	07b3209bb88fafc8ad26f83853d4956bd69527db8f89be7e7e8cada5241c3442
SSDeep	1536:dEolftg50hdY7XFOQ/05k/lZrtWiZgcws4DSV/WcDiLMdbWLQ6EeDuonkPmRKD1h:nlftg5+mXd/02pWiE4V/WcDiolWUho4h
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\cUkYuq 9rrpUmS-S.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	49.30 KB
MD5	78e75d24d318e7c196fb40913a44acdb
SHA1	5b344ff4d05e4efa3a8d5fcb071021be162f3617
SHA256	4371927c0b329c582a9eb0ec721126f0171e92ce93755d62c45bb46de970135f
SSDeep	768:qwsapVUe0wupRmbYYRvFvIklUr6TnfXdJkpJcm4X+XAgJHvaazuDLn+lN:nVpVUe0wcRatHxbEDwaHSaz3N
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\jqwKRVHvtgV.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	95.00 KB
MD5	483c582090b7f917c401a6cd9faff2ec
SHA1	fddef81497a679667a68df889ea2c9c95fcddb31
SHA256	c38279c4baac213924ff566731e5d54ae17885da89eda1de3c4c12fa879fb5c8
SSDeep	1536:lEJaFPAHMHmtvGQT30rV7AOqwln39snjDFU1WRNJt/ZHX6AktpBI06xgCZ7HC8TH:SJaFPAHumtLotAKKx0WRrr36AkltM7HR
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\KKe2Omq4m79BPs8P0EM.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	61.19 KB
MD5	daad37d83c4fe2bec1db15fdeb1559d5
SHA1	8d6e37424b2376dc50a0f053c9e825280da75b45
SHA256	fd45dbdd422b975ec843a3b2df55b0ae0564587bb9c8f83e205bd088352d9f24
SSDeep	1536:jnaEFEFTjWSo732piuCPBZOAe2SNRJuyqG00d7pxTm:Da+Ws3wiN1SNRJurG0u7TTm
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\szvkYxEO3.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	3.21 KB
MD5	76967fe002f889b715ada565f2628104
SHA1	c81186e486f0666afa1dfcc12d5433c5ac99270b
SHA256	1f3c11ad2b7ba7419f5a07b822e9fbb9217df71a8b3bb4f2ded308452c313997
SSDeep	96:R8BMU217uIszydmZeJtegiB2VqItHgfHcX:mBh21Oz4mZrE99X
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\tEb.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	31.96 KB
MD5	98d2e5266befb29a6c83ebfacb773923
SHA1	fc4ee6b84af417e4feb7d05ef43b109ba3de0317
SHA256	91f7fe75103aa425bf2ee0533e4c56215c9b24a7df02938164b49b6eb92a32f8
SSDeep	768:7/sfA87VoCWb1CNUPu09eHKuKDUMq9m3wZOMpsneK:TsxVozb199eHKDUzm3AsneK
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\urv87.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.08 KB
MD5	e14cb983236a4bf9104d252277f507fa
SHA1	74def89b6313edd92ac925be8d947cd711cdfc74
SHA256	b2f4ad4a910eb11779988a3352d4126fb30365efa2a1c74e84e5425a934cde74
SSDeep	24:r6hQk3hD0Ahkmxdzx+1VENLTW+P+c4CzL9dHWtCWT19RUfMveOTSyP:rEhpg1idW+P+6zzH8hTvTSA
ImpHash	-

C:\Users\FD1HVy\Music\CCmFQddL\w8QW_uxT3eqE9COJ.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	84.13 KB
MD5	69799ed4c65a2bee00a83a7e2d6e6ee5
SHA1	b2bf003a6730f7e886fdc354e047f02ecbe19d41
SHA256	1961beff6515afe8de89101a801806a7404569f9645c3fef9f91a2942991408d
SSDeep	1536:uGDp98k1BESLYI4mgaJnQxmnTpxhechcoplOZePhMIRlhFZ9uAyT2FJbYPHzurd:uaYkBRLYlmJOgNx0cSIlR5vhFvM2FJb9
ImpHash	-

C:\Users\FD1HVy\Music\hVYBQZBDB1Q5KBS6JZM8\88SOegvNVTJ_ j.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	36.74 KB
MD5	f3150de9d930573200b96f70e9e48f22
SHA1	b2882a266a6977602a262a682cca2655c5717482
SHA256	cebb6a6bc6842f73e356dea29d32a56176e085fc5565d91007714e2dee7b70ca
SSDeep	768:wsQs88Tbmff/tEM2dBA92DW7c8EUmOTeDZaygnCmVWpfBuLqlDJkeUOTtx:EsvbmPt1cAmX8WOTeDPgCvfDDJlRT/
ImpHash	-

C:\Users\FD1HVy\Music\hVYBQZBDB1Q5KBS6JZM8\F7sGv1gjY.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.33 KB
MD5	e8e50120a65924ddc0e3ab8b33357e64
SHA1	64deb23faf215066139b1c08679580860358e998
SHA256	b9c15849f211f58ab88c51890b478f12d71860812a583189f1ef1de204e075e0
SSDeep	48:rGBFz6R6wttF7psaOGdsqUUB/ON/D7BDUEnM6stk:ropaHLeGiUB/ONP2UM6L
ImpHash	-

C:\Users\FD1HVy\Music\hVYBQZBDB1Q5KBS6JZM8\j-okeUH7L996o7mcrF.wav.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	57.46 KB
MD5	3c52d2882d704f1f62ff133d17b70557
SHA1	b75dbdd03b72b1c0712a337d90ca2a7c755258b5
SHA256	064bf6371e7b2794713e49491e82a2cd9a3643ee593899b6a5f61b0eb210a438
SSDeep	1536:6pDbF5dqKuLtX/u9w8S4xUpmPwAWm00TQl:6pDbDTut/um8S4XPwATfTQl
ImpHash	-

C:\Users\FD1HVy\Music\S8cFZ9KDV3SCw\JI4mL6I7Pgskw.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	81.01 KB
MD5	3a9083454cba1ff44b7ddc0c670fdbc1
SHA1	71dfbb5a256040a00e636fd14435e0f950a4666f
SHA256	04c96a98a0aa9978eedf80effd239d6ec8ad0dedd2ea1c4d1ca97f6a2778dd9d
SSDeep	1536:SyIKG25J5SOIc1cNiJLowwLU39CTJBM8jqTTHIs8H/ByAszznToy/spKwjhlzjk:SyIKG2FSOIc1HawwQ8TLM8SjeCcyPwdG
ImpHash	-

C:\Users\FD1HVy\Music\S8cFZ9KDV3SCw\tgki6aU3.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	69.27 KB
MD5	27f665a783c59566b2bb8ae31f863297
SHA1	71ab9dbc84cb31f333c97b51612147eca874653b
SHA256	12b5cede1f6315d1e58d24dfddc12e55db3a7f6ac6d0b5255fc2555402c390ee
SSDeep	768:+HlLiTaXe9AlqBUX+5t66z7KgcXVzOQbVIeT8RmSdXoAhzlA9z/+N7jmFG/rFB5F:+ETwgIVX+5tQXUQbV78ESPlAIxI3Woc
ImpHash	-

C:\Users\FD1HVy\Music\S8cFZ9KDV3SCw\ue3M.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	2.19 KB
MD5	0c3bdfaaaf5441c310eb215293867dbe
SHA1	cfb7730aa10ca2979e40acc4a03617f9d298979c
SHA256	aa8f1e438110a53d7f59dd3dbd8ae203deb177aa74043a9963c987c3d1550881
SSDeep	48:rUNwcptvKzPIhGMmYUGhoLLrO/tw9dLNdqVM0si7ZF:rUN/vUIk20K1wHLaG0v
ImpHash	-

C:\Users\FD1HVy\Music\S8cFZ9KDV3SCw\W c-htOST9KuSC.wav.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	1.05 KB
MD5	aa5d209c5da5c8f4c5be0ccaf641ad42
SHA1	56e5f1b0b9b8724a2a72af9a6cf2ecd3d43ff1e8
SHA256	8e05d349ecdd853912218d6a471f13597a08869ea2284a7030af562c7c67f91a
SSDeep	24:/t+FkSSpO/H2kjrpZkpCFjX2bE3lKEPtZ8FsRq7S0o://SSU/HFnpDJLrPt/RqE
ImpHash	-

C:\Users\FD1HVy\Music\0Lt4Kt2p.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	37.02 KB
MD5	6d1fa34a35e87466546a9b62fe44355c
SHA1	5dc4ea8812cf115e01cef9f9b19c13e2fd867d66
SHA256	f9dc69155939a3e536633b5f7e22a760820afcf97d83a7da1183b00e43fd780b
SSDeep	768:+yDaJFaccC7c3ZMs8ytfsYSEOkburHeYRq8RtTn/cT94+:x+FaNScSK1QrHeyNchL
ImpHash	-

C:\Users\FD1HVy\Music\desktop.ini.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	512 Bytes
MD5	de299e6b8ec2b24212428b4812fa9422
SHA1	52a9d1ec2b183d41e80377739401b50c68459fd6
SHA256	d6d328646527115518c9074a9ab3406eb878cb7216b5a4e1aacaf8d41fbc015b
SSDeep	12:CNFFwU63a1EURj8ndard2ulIuYAvUqqoJZT:C/wzsEo2Ad2uuurvPqoj
ImpHash	-

C:\Users\FD1HVy\Music\dI8Gj60 lrYz.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	87.05 KB
MD5	3c933b73d3e8f6da5146c0cd5bae4403
SHA1	033278e4dc5b67523caa992fa16b7911473dac08
SHA256	56c2a4e093b1afed2e65ddb818831dc9bc040aa1ee0d24ea49096de62ab95f3b
SSDeep	1536:SAndNfkCoXpQTfwb46LI2ZhkE4Y1eycSX+f0G1G6HAMfrhWkvWtzibay44VK86bQ:SAjkoOLI2AELKSup1aMzhBnbay448860
ImpHash	-

C:\Users\FD1HVy\Music\LlgHNg RY7Q.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	18.09 KB
MD5	5def5faa220138ff02d0b5cda5d879b0
SHA1	f9a64e34f122fc2a31b0b4112424ad9f50c3237b
SHA256	ff9cf6ac63032c87feaedc75fb730787cebeed12c3065a325d3d16dee0b8a6cc
SSDeep	384:FPlsYHFesOCTnxyb4926cJ8+WB5ks1E6lb51B9cPDKKp:4CexCTnQDxmUs1Ey51BwDKKp
ImpHash	-

C:\Users\FD1HVy\Music\maw0SMQmZzJY.mp3.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	55.66 KB
MD5	2a1e8beb4de9f86ac6ac0324b9d72fc7
SHA1	f3aa0931725ba2f6c732b1cc3ac23327aba31500
SHA256	4d6885653275601ab702cea60e05f9da676f3c2112a0c8d0590f5cf230d706cf
SSDeep	1536:IlL6SX48DHrkrqtt3tYHvKh4uYRFYfD33e7Qx:yRXzHrjYHIPYRFcuw
ImpHash	-

C:\Users\FD1HVy\Music\Uc8pYpnwZ.m4a.ransomwared

Dropped File

Stream

Unknown

»

Mime Type	application/octet-stream
File Size	99.62 KB
MD5	a9cf42e5c9d606046556d00dc19bb565
SHA1	79e2fcf83f72210ece7a86e7bc81d3cd4bad5c0a
SHA256	0db07e74212efcf48d93788b3c99be1b6d9a1be6da44066b4a0bd92b60163421
SSDeep	1536:55cUc02tM3lJ/s+J9woDj7Ra7IpeJa81xlyPOkkvhdnKMgXAwbTt05qt/6Mp9LeA:5rZ2y3nJsIpeJa81HyGxv/IHbT+qj/+6
ImpHash	-

C:\Users\FD1HVy\Documents\5jNv-FlECUDOVXEaa-.xlsx.ransomwared

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	4.31 KB
MD5	635f2d7ce8d50524745b3a1f7dd42cf8
SHA1	2330dae89112975728be4174bd7a9e07acef2030
SHA256	cd25f8cab3760c8b330413db96f625833e7fd48f75ed7bfbed7c976a14212891
SSDeep	96:G+uE+wfvbFBU7MaMJTp4iOzbrwxoCi/ZlT6jRV6LG:G6fxe7MaMJiiSDujay
ImpHash	-

C:\Users\FD1HVy\Pictures\Camera Roll\desktop.ini.ransomwared

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	192 Bytes
MD5	1329681909d4e922115f55a03e08a087
SHA1	f1e7d3732cea2d4f9ca37518db93b31542b79e1c
SHA256	40b78a1e51af2b6ece3bc16f18636a5a7fcb3ed9cdf3e639c579c5ffd66b01d0
SSDeep	3:C1agY6kA4m8NEWYzfIBQDtF/YjPgrMPjw7qkrMPrEKtwst0yYLDF8dy5hCLcUzck:C13QrYVBF/YjPgrAwukrqT0yMZdhoX4w
ImpHash	-

C:\Users\FD1HVy\Videos\xQwqMDuqvoSGT-fnsT.flv.ransomwared

Dropped File

Stream

Not Queried

»

Mime Type	application/octet-stream
File Size	67.98 KB
MD5	ba198bdeb50198ceac6accf1f091cb1e
SHA1	2bc9da5b8f077e4868db688ef5d6ccbaefe26dac
SHA256	0c1956e0ffa769daf88e1e5028362fe2ab18695c726e6d9491ed34d975cbdaf9
SSDeep	1536:sM0ur4f4md4UBzDdI4QkRVqgjRTlI2UMqB5iLsDskzfIrWxJb5JEtldmK:tjr4D4MXdIHITG2g/usAkzq8HJoLV
ImpHash	-

C:\Users\FD1HVy\Documents\3JAFdEs6V.docx

Dropped File

Unknown

Not Queried

»

Mime Type	-
File Size	0 Bytes
MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SSDeep	3::
ImpHash	-

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After