| Time & API |
Arguments |
Status |
Return |
Repeated |
1619269233.455036
NtWriteFile
|
file_handle:
0x000007f4
filepath:
C:\tmpsij43m\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269234.408036
NtWriteFile
|
file_handle:
0x00000794
filepath:
C:\Users\Administrator.Oskar-PC\Documents\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269235.127036
NtWriteFile
|
file_handle:
0x00000c48
filepath:
C:\Users\Administrator.Oskar-PC\Contacts\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269236.361036
NtWriteFile
|
file_handle:
0x00000e78
filepath:
C:\Users\Administrator.Oskar-PC\Searches\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269236.361036
NtWriteFile
|
file_handle:
0x00000eb4
filepath:
C:\Users\Administrator.Oskar-PC\Searches\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269236.643036
NtWriteFile
|
file_handle:
0x00000310
filepath:
C:\tmpsij43m\bin\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269238.346036
NtWriteFile
|
file_handle:
0x00001324
filepath:
C:\ProgramData\Microsoft\User Account Pictures\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269238.924036
NtWriteFile
|
file_handle:
0x000015c4
filepath:
C:\tmpsij43m\modules\auxiliary\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269239.033036
NtWriteFile
|
file_handle:
0x00001368
filepath:
C:\tmpsij43m\lib\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269241.330036
NtWriteFile
|
file_handle:
0x000018c4
filepath:
C:\tmpsij43m\lib\common\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269241.908036
NtWriteFile
|
file_handle:
0x000018c0
filepath:
C:\tmpsij43m\modules\packages\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269243.424036
NtWriteFile
|
file_handle:
0x00000f2c
filepath:
C:\tmpsij43m\modules\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269243.799036
NtWriteFile
|
file_handle:
0x00001c48
filepath:
C:\Users\Public\Libraries\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269244.096036
NtWriteFile
|
file_handle:
0x000017ec
filepath:
C:\Program Files\Oracle\VirtualBox Guest Additions\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269245.486036
NtWriteFile
|
file_handle:
0x00001d84
filepath:
C:\tmpsij43m\lib\core\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269248.643036
NtWriteFile
|
file_handle:
0x00001e88
filepath:
C:\Users\Administrator.Oskar-PC\AppData\Local\pip\cache\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269251.252036
NtWriteFile
|
file_handle:
0x00001e3c
filepath:
C:\Python27\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269252.705036
NtWriteFile
|
file_handle:
0x000008e8
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269252.689036
NtWriteFile
|
file_handle:
0x0000213c
filepath:
C:\Program Files\Google\Chrome\Application\SetupMetrics\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269252.736036
NtWriteFile
|
file_handle:
0x00000de0
filepath:
C:\Python27\DLLs\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269252.924036
NtWriteFile
|
file_handle:
0x000006b8
filepath:
C:\Program Files (x86)\Microsoft.NET\RedistList\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269253.205036
NtWriteFile
|
file_handle:
0x00001d50
filepath:
C:\tmpsij43m\lib\api\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269253.721036
NtWriteFile
|
file_handle:
0x00000f30
filepath:
C:\Program Files\Google\Chrome\Application\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269253.721036
NtWriteFile
|
file_handle:
0x00001460
filepath:
C:\Program Files\Google\Chrome\Application\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269254.111036
NtWriteFile
|
file_handle:
0x00002144
filepath:
C:\Python27\Lib\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269259.127036
NtWriteFile
|
file_handle:
0x00001f84
filepath:
C:\ProgramData\Microsoft\Windows\DRM\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269259.627036
NtWriteFile
|
file_handle:
0x000006a0
filepath:
C:\Python27\include\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269259.674036
NtWriteFile
|
file_handle:
0x00002128
filepath:
C:\Python27\include\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269259.705036
NtWriteFile
|
file_handle:
0x00001d54
filepath:
C:\Python27\Lib\distutils\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269260.377036
NtWriteFile
|
file_handle:
0x00000218
filepath:
C:\Users\Public\Videos\Sample Videos\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269260.455036
NtWriteFile
|
file_handle:
0x00001b3c
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Windows Live\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269260.893036
NtWriteFile
|
file_handle:
0x000004b4
filepath:
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.018036
NtWriteFile
|
file_handle:
0x00002040
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Links for 中国\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.268036
NtWriteFile
|
file_handle:
0x00000710
filepath:
C:\ProgramData\Microsoft\Crypto\Keys\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.299036
NtWriteFile
|
file_handle:
0x000005b8
filepath:
C:\ProgramData\Microsoft\MF\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.346036
NtWriteFile
|
file_handle:
0x000002dc
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.346036
NtWriteFile
|
file_handle:
0x00000e48
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.471036
NtWriteFile
|
file_handle:
0x00001c98
filepath:
C:\Users\Oskar\Searches\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.486036
NtWriteFile
|
file_handle:
0x00001ef8
filepath:
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.486036
NtWriteFile
|
file_handle:
0x000002a8
filepath:
C:\ProgramData\Microsoft\IlsCache\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.564036
NtWriteFile
|
file_handle:
0x00000cc4
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Microsoft 网站\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.580036
NtWriteFile
|
file_handle:
0x00002168
filepath:
C:\Users\Oskar\Favorites\Windows Live\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.658036
NtWriteFile
|
file_handle:
0x00000c64
filepath:
C:\Users\Public\Music\Sample Music\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.768036
NtWriteFile
|
file_handle:
0x0000145c
filepath:
C:\Recovery\93b8a396-9abc-11eb-88c2-ffe2e29febb8\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.783036
NtWriteFile
|
file_handle:
0x000009a4
filepath:
C:\ProgramData\Microsoft\RAC\StateData\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.783036
NtWriteFile
|
file_handle:
0x00002020
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\WidevineCdm\_platform_specific\win_x64\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.799036
NtWriteFile
|
file_handle:
0x00000710
filepath:
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.830036
NtWriteFile
|
file_handle:
0x00000674
filepath:
C:\Users\Administrator.Oskar-PC\AppData\Local\pip\cache\http\8\7\6\7\7\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.861036
NtWriteFile
|
file_handle:
0x000005b8
filepath:
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|
1619269261.939036
NtWriteFile
|
file_handle:
0x0000034c
filepath:
C:\Python27\Lib\distutils\618403-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .618403
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_618403:
WewwPRjICPv4OYwoUoCwp58KnoP10yHKKh/6v8VjjXQdZbeYqy
Io9d96xwzlK00XcjSvydY1pzLaeAxAUh5Xp1eF7MgFwNsE41Zj
Ao2zZ8/oh8OlIdwuGy/ZvND7GsxrpRNdH6sXnQxWFh7pB7yNCp
YAdcRJZ5KCEzwO4kuUjWJ3wTk0bK+THRQVLmCoAC/Kx9qQB8uP
RPLaro9RNAdWhZ1k5pFlfH87s16cQHjq7rVWRE6KgFsrfA6sDF
a/TDya98JcGvTo0262J+I3WYi98+J2kkM+wXRWsQ==}
offset:
0
|
success
|
0 |
0
|