24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 29:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4be,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Win/malicious_confidence_100% Sample 9346ad80694b… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 9346ad80694b…. Malware family: Win/malicious_confidence_100%. Threat score 100/100. 16/29 AV engines flagged this file. 11 malicious and 16 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/9346ad80694b73c5b680b825567f0550f5c7d6a61e39a9a09b481ea524a82fa3","keywords":["Malicious","Win/malicious_confidence_100%","malware analysis","sandbox report","threat intelligence","9346ad80694b73c5b680b825567f0550f5c7d6a61e39a9a09b481ea524a82fa3"],"about":{"@type":"SoftwareApplication","name":"2.123","applicationCategory":["peexe","executable"],"identifier":"9346ad80694b73c5b680b825567f0550f5c7d6a61e39a9a09b481ea524a82fa3","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Win/malicious_confidence_100%","antivirusDetections":{"malicious":16,"total":29},"behavioralIndicators":{"malicious":11,"suspicious":16},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T187f,Pattern match: "http://nsis.sf.net/NSIS_Error" Pattern match: "https://secure.comodo.net/CPS0C" Pattern match: "crl.comodoca.com/COMODORSACodeSigningCA.crl0t" Pattern match: "crt.comodoca.com/COMODORSACodeSigningCA.crt0$" Pattern match: "http://ocsp.comodoca.com0" Pattern match: "http://crl.comodoca.com/COMODORSACertificationAuthority.crl0q" Pattern match: "http://crt.comodoca.com/COMODORSAAddTrustCA.crt0$" Pattern match: "http://www.SoftwareOfUse.com" Pattern match: "http://192.168.56.153:2869/upnphost/udhisapi.dll?content=uuid:4f8e1a2d-3fec-4a15-86de-6f8fafe83a56" Pattern match: "http://[fe80::dcb9:98e8:7541:f508]:2869/upnphost/udhisapi.dll?content=uuid:4f8e1a2d-3fec-4a15-86de-6f8fafe83a56" Pattern match: "www.SoftwareOfUse.com" Heuristic match: "Microsoft.NET" Heuristic match: ":jG'FQX?A\F.sJ" Pattern match: "http://mozilla.org/MPL/2.0/" Pattern match: "http://wikipedia.org/wiki/Luhn_algorithm" Pattern match: "mozilla.org/pbm-tp-whitelist;1getServiceCi[nsIPrivateBrowsingTrackingProtectionWhitelistaddToAllowListaURIpbmtpWhitelist" Pattern match: "mozilla.org/pbm-tp-whitelist;1getServiceCi[nsIPrivateBrowsingTrackingProtectionWhitelist'removeFromAllowListaURIpbmtpWhitelist" Pattern match: "mozilla.org/gfx/printsettings-service;1" Pattern match: "mozilla.org/parserutils;1].getService(Ci.nsIParserUtils)" Pattern match: "http://lists.w3.org/Archives/Public/www-xml-linking-comments/2001AprJun/att-0074/01-NOTE-FIXptr-20010425.htm" Pattern match: "http://www.w3.org/1999/xhtml" Pattern match: "mozilla.org/autocomplete/controller;1" Pattern match: "mozilla.org/streamconv;1?from=" Pattern match: "mozilla.org/devtools/jsonview-sniffer;1" Pattern match: "mozilla.org/categorymanager;1" Pattern match: "http://www.apache.org/licenses/LICENSE-2.0" Pattern match: "pdf.js/PdfjsContentUtils.jsm" Pattern match: "pdf.js/pdfjschildbootstrap.js;5" Pattern match: "pdf.js/PdfjsContentUtils.jsm#PdfjsContentUtilsinit20171128222554cCresource://pdf.js/PdfjsContentUtils.jsmfQ;5kMx" Pattern match: "pdf.js/web/viewer.html" Pattern match: "pdf.js/PdfJsNetwork.jsm" Pattern match: "mozilla.org/streamconv;1?from=application/pdf&to=*/*contractIDM{d0c5195d-e798-49d4-b1d3-9324328b2292}classID2w@mozilla.org/streamconv;1?from=application/pdf&to=text/htmlcontractID2generateQInsISupports%nsIStreamConverter#nsIStreamListener%nsIRequestObserve" Pattern match: "mozilla.org/intl/stringbundle;1getServiceCi-nsIStringBundleServicecreateBundle/chrome://pdf.js/locale/" Pattern match: "mozilla.org/binaryinputstream;1createInstance" Pattern match: "mozilla.org/network/serialization-helper;1" Pattern match: "mozilla.org/embedcomp/command-params;1" Pattern match: "mozilla.org/xre/app-info;1!nsICrashReporterinit" Pattern match: "Prefetcher.jsm/defineLazyServiceGetterSystemPrincipal=@mozilla.org/systemprincipal;1nsIPrincipal#contentSecManagerK@mozilla.org/contentsecuritymanager;13nsIContentSecurityManager[ADDON_CONTENT_POLICY_SHIM_BLOCKING_LOADING_MSYADDON_CONTENT_POLICY_SHIM_BLOCK" Pattern match: "mozilla.org/childprocessmessagemanager;1getServiceCi" Pattern match: "mozilla.org/io/string-input-stream;1createInstance" Pattern match: "mozilla.org/offlinecacheupdate-service;1" Pattern match: "mozilla.org/eventlistenerservice;1getServiceCi/nsIEventListenerService-addSystemEventListenercontextmenu3_handleContentContextMenubind" Pattern match: "http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulnamespaceURItagNamelabelclassListcontainstext-linkhrefaNode" Pattern match: "http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulshouldDisplaynodeTypeCinsIDOMNodeDOCUMENT_NODEnamespaceURI'_isXULTextLinkLabelbgImageURLimageDescURLimageInfomediaURL#webExtBrowserTypecanSpellCheckhasBGImage'hasMultipleBGImagesisDesignModeinFra" Pattern match: "mozilla.org/timer;1createInstanceCinsITimer!initWithCallbackTYPE_ONE_SHOTaCallback" Pattern match: "mozilla.org/timer;1createInstanceCinsITimer!initWithCallbackTYPE_ONE_SHOTmetaTagchromeGlobalmetaTagsnameproptagurlentryvaluevaluevaluecurrMaxScorevaluecurrMaxScoredescriptionimagetimeouthandleMetaTag/" Pattern match: "mozilla.org/plugin/host;1getServicensIPluginHostnextdonevalue/nsIObjectLoadingContentisKnownPlugin!permissionString5getPermissionStringForTypeactualTypegetPluginUImain/nsIDOMHTMLAnchorElementblock!addEventListenerclick" Pattern match: "https://bugzilla.mozilla.org/show_bug.cgi?id=1172586" Heuristic match: "name: aError.name" Pattern match: "mozilla.org/browser/sessionstore/utils;1getService" Pattern match: "e.huP/_#" Pattern match: "Utils.jsm/defineLazyServiceGetteruuidGenerator;@mozilla.org/uuid-generator;1!nsIUUIDGeneratorSessionHistory" Pattern match: "mozilla.org/browser/session-history-entry;1createInstanceCinsISHEntry" Pattern match: "mozilla.org/supports-PRUint32;1'nsISupportsPRUint32dataIDDatenowuseddocshellID!_docshellUUIDMaphassetuuidGeneratorgenerateUUIDtoStringdocshellUUIDgetComponents" Pattern match: "https://bugzilla.mozilla.org/show_bug.cgi?id=1378770#c6" Pattern match: "https://screenshots.firefox.com/#tour" Heuristic match: "9HZ+(f2:U;t8JUx/ 4OKj8Yq*] R$]|s|/{n5#M8;Sa$Q:=M7wb.nc" Pattern match: "mozilla.org/network/protocol/about;1?what=aboutHost.thisunregister@8@" Pattern match: "mozilla.org/toolkit/finalizationwitness;1;nsIFinalizationWitnessService/defineLazyModuleGettersWresource://gre/modules/ExtensionContent.jsm!ExtensionContentSresource://gre/modules/MessageChannel.jsmMessageChannelUresource://gre/modules/NativeMessaging.jsmN" Pattern match: "pZ6.xvD/4V'ydy_^.@#QF#" Pattern match: "TQ7permissionsChangedCallbacksaddcallback.this/BrowserExtensionContentChildAPIManagerMessengerPort|Kk-{=20171128222554wCresource://gre/modules/Schemas.jsmMM" Pattern match: "call.this/exportLazyGetter/" Pattern match: "http://www.w3.org/TR/html4/strict.dtd" Pattern match: "https://www.torproject.org/download/download" Pattern match: "http://cr7icbfqm64hixta.onion" Pattern match: "https://localbitcoins.com/buy_bitcoins" Pattern match: "http://www.coindesk.com/information/how-can-i-buy-bitcoins/" Heuristic match: "f5_ b7#Ysa2tg&EI3us&Rd}XqrJvn~_mRqHajlLP}R&}M|:>@OKEpT.In" Pattern match: "TPy9.fA/':4[?z" Pattern match: "8xvA.Yked/h:n8cB^%.a-w[fb*qj939mT}:ET" Pattern match: "Wl1VJ.ARSt/oTs"26:T12d6,"

You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files.

Decryption as guarantee

http://cr7icbfqm64hixta.onion

How to obtain Bitcoins

https://localbitcoins.com/buy_bitcoins

http://www.coindesk.com/information/how-can-i-buy-bitcoins/

Attention!

Wait from us for reply to your mail within 48 hours.
Do not try to decrypt your data using third party software, it may cause permanent data loss.
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.

Your personal ID

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

!!! Ð¡ÑÑÐ¾ÐºÑ Ð½Ðµ Ð¼ÐµÐ½ÑÑÑ !!! -->

" (Source: READ_IT.html, Indicator: "decrypt your files") "

All your files have been encrypted!

" (Source: READ_IT.html, Indicator: "files have been encrypted") "