File Name Hashes Detection psexec fd3e7d0f6a31b821604707ef99da281e4fd7d11c7804e46eeed11f66b200a391 7zip.exe 321d0c4f1bbb44c53cd02186107a18b7a44c840a9a5f0a78bdac06868136b72c Ransom.Win64.GOHIVE.YEBIF ac.exe be1565961e123f52e54e350e0ca2666f8ffa42fdc46df18dca6f7c0ac2b43d23 Ransom.Win64.HIVE.YMBJG %SYSTEMROOT%\winlo.exe 3ec89b737c5b91eb9da0a2d9c6c1f0e637087b4552e26806d959c11f8f06e96f Ransom.Win64.HIVE.A 1e21c8e27a97de1796ca47a9613477cf7aec335a783469c5ca3a09d4f07db0ff Ransom.Win64.GOHIVE.SMJMA fdbc66ebe7af710e15946e1541e2e81ddfd62aa3b35339288a9a244fb56a74cf Ransom.Win64.GOHIVE.SMJMA c04509c1b80c129a7486119436c9ada5b0505358e97c1508b2cfb5c2a177ed11 Ransom.Win64.GOHIVE.SMJMA 88f7544a29a2ceb175a135d9fa221cbfd3e8c71f32dd6b09399717f85ea9afd1 Ransom.Win64.GOHIVE.SMJMA a0b4e3d7e4cd20d25ad2f92be954b95eea44f8f1944118a3194295c5677db749 Ransom.Win64.GOHIVE.SMJMA 5954558d43884da2c7902ddf89c0cf7cd5bf162d6feefe5ce7d15b16767a27e5 Ransom.Win32.GOHIVE.SMJMA 77a398c870ad4904d06d455c9249e7864ac92dda877e288e5718b3c8d9fc6618 Ransom.Win32.HIVE.THFCOBA 612e5ffd09ca30ca9488d802594efb5d41c360f7a439df4ae09b14bce45575ec Ransom.Win64.GOHIVE.SMJMA a290ce75c6c6b37af077b72dc9c2c347a2eede4fafa6551387fa8469539409c7 TrojanSpy.PS1.DATASPY.B 977b2ce598bd6518913fe216d1139c041e159a6510cd71a6a14a49570c1019be TrojanSpy.PS1.DATASPY.A gmer.exe e8a3e804a96c716a3e9b69195db6ffb0d33e2433af871e4d4e1eab3097237173 PUA.Win32.GMER.YABBI Bk74AE.tmp/PCHunter64.exe d1aa0ceb01cca76a88f9ee0c5817d24e7a15ad40768430373ae3009a619e2691 PUA.Win64.PCHunter.B c:\Users\Public\Music\lapress_32.exe 8f3c5f9cd657e3785d751305023cf83a7f27780d5441817614d442e28dbe3ac4 Ransom.Win64.HIVE.A %SYSTEMROOT%\Temp\xxx.exe c367ab50c1f103963da0f0404eeda46c9e768711797d638afa1c4cf740575613 Ransom.Win64.HIVE.YABIW 791251-1632642588.exe fdbc66ebe7af710e15946e1541e2e81ddfd62aa3b35339288a9a244fb56a74cf Ransom.Win64.GOHIVE.SMJMA ed614cba30f26f90815c28e189340843fab0fe7ebe71bb9b4a3cb7c78ff8e3d2 Ransom.Win64.GOHIVE.SMJMA 1e21c8e27a97de1796ca47a9613477cf7aec335a783469c5ca3a09d4f07db0ff Ransom.Win64.GOHIVE.SMJMA fdbc66ebe7af710e15946e1541e2e81ddfd62aa3b35339288a9a244fb56a74cf Ransom.Win64.GOHIVE.SMJMA c04509c1b80c129a7486119436c9ada5b0505358e97c1508b2cfb5c2a177ed11 Ransom.Win64.GOHIVE.SMJMA a0b4e3d7e4cd20d25ad2f92be954b95eea44f8f1944118a3194295c5677db749 Ransom.Win64.GOHIVE.SMJMA 5954558d43884da2c7902ddf89c0cf7cd5bf162d6feefe5ce7d15b16767a27e5 Ransom.Win64.GOHIVE.SMJMA 77a398c870ad4904d06d455c9249e7864ac92dda877e288e5718b3c8d9fc6618 Ransom.Win64.GOHIVE.SMJMA e514be3e997895c7e3ece03549c8cb6b5700fe8f814948ed201ca59daa8733fb Ransom.Linux.HIVE.C C:\ProgramData\nds.dll/nds.dll 7b7f13ab85bc78849e04a5589c84f0ec1847460106c03ca3db84703c7af054f3 Ransom.Win32.HIVE.YXBJR bdf3d5f4f1b7c90dfc526340e917da9e188f04238e772049b2a97b4f88f711e3 Ransom.Linux.HIVE.A 6983ef6e484c0c70356d6f868ac03bc90a1055560642706743511f76aa6f28ad Ransom.Linux.HIVE.B linux 6a0449a0b92dc1b17da219492487de824e86a25284f21e6e3af056fe3f4c4ec0 Ransom.Linux.HIVE.A xxx.000 5d95bf2518918422a6cac03f90548f02a5848dbc43836868636b61d0a87ed968 Ransom.Win64.HIVE.YXBKC windows.exe 47006ed84afb1f1fd761b81f3ae7b6547c0cb4845538301035e1388693fc6f7f Ransom.Win64.HIVE.YABLG mmm.exe" 25793a0764a51b38806b7dcf5f5d8df9620f090f72362aa03187c8813e054482 Ransom.Win64.HIVE.VSNW01L21 7b7f13ab85bc78849e04a5589c84f0ec1847460106c03ca3db84703c7af054f3 Ransom.Win32.HIVE.SMYXBJR.hp 5d95bf2518918422a6cac03f90548f02a5848dbc43836868636b61d0a87ed968 Ransom.Win64.HIVE.YXBKC xxx.000 d64f9742539436acba5ff9c4f1c8ca501cad86dfa823828b65418b493c8109ac Ransom.Win64.HIVE.YXCACZ xxx.000 5d95bf2518918422a6cac03f90548f02a5848dbc43836868636b61d0a87ed968 Ransom.Win64.HIVE.YXBKC bd6d8f7c9e016dd7395ee7f0f8485de622a9b034b7c5d2e1af25cb762dd8d8c9 Ransom.Win64.HIVE.YXBKFZ 0e8e6fc94e6eb17cfd8993b3dcfd9acd11ee32f1b4e956df3097ae3259be4f9c Ransom.Win64.HIVE.YXBKFZ 875708f911752bef7e2ef0658d395ebeccef774d5fdb74f6e9ee60b52d86cbf0 Ransom.Win64.HIVE.YXBKFZ "zzz.exe 5b32ac4754bd5728cc7a68f341bf64cec4a737eb584814bb2099a5f2ff69e584 Ransom.Win32.HIVE.YXBKV baa7a6e5a093ee6be47eca86e5acbcba196c7d1d35662eecad23ec870702116a Ransom.Win32.HIVE.YXBKV xxx.exe a2ad0442cebe3e6abb86069a3b66b471b4a7c9d00286da4b8114d17a849128d6 Ransom.Win64.HIVE.YEBJM 321d0c4f1bbb44c53cd02186107a18b7a44c840a9a5f0a78bdac06868136b72c Ransom.Win64.GOHIVE.YEBIF main.py 6bd3adc7e43e20ede1a82ad1469cc7ecd085b324621edbd4ec23db4e4473895f Trojan.Python.KILLAV.YPCBO