| Time & API |
Arguments |
Status |
Return |
Repeated |
1619513308.690762
NtWriteFile
|
file_handle:
0x00000a94
filepath:
C:\tmpsij43m\bin\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513308.846762
NtWriteFile
|
file_handle:
0x00000d48
filepath:
C:\tmpsij43m\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513308.862762
NtWriteFile
|
file_handle:
0x00000a14
filepath:
C:\tmpsij43m\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513308.971762
NtWriteFile
|
file_handle:
0x00000294
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\WidevineCdm\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513309.268762
NtWriteFile
|
file_handle:
0x000009c4
filepath:
C:\Program Files\Google\Chrome\Application\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513309.393762
NtWriteFile
|
file_handle:
0x00000d74
filepath:
C:\Program Files\Oracle\VirtualBox Guest Additions\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513310.440762
NtWriteFile
|
file_handle:
0x000010a0
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\VisualElements\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513310.862762
NtWriteFile
|
file_handle:
0x000011ac
filepath:
C:\ProgramData\Microsoft\IlsCache\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513311.659762
NtWriteFile
|
file_handle:
0x000003e8
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\MEIPreload\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513311.862762
NtWriteFile
|
file_handle:
0x0000108c
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513312.221762
NtWriteFile
|
file_handle:
0x000005f8
filepath:
C:\ProgramData\Microsoft\User Account Pictures\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513312.737762
NtWriteFile
|
file_handle:
0x0000022c
filepath:
C:\Program Files\Google\Chrome\Application\SetupMetrics\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513312.768762
NtWriteFile
|
file_handle:
0x00000e38
filepath:
C:\Program Files\Google\Chrome\Application\SetupMetrics\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513312.971762
NtWriteFile
|
file_handle:
0x00001478
filepath:
C:\ProgramData\Microsoft\MF\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513313.018762
NtWriteFile
|
file_handle:
0x000002e4
filepath:
C:\ProgramData\Microsoft\MF\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513313.018762
NtWriteFile
|
file_handle:
0x0000149c
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513313.096762
NtWriteFile
|
file_handle:
0x00000278
filepath:
C:\tmpsij43m\lib\api\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513313.112762
NtWriteFile
|
file_handle:
0x000009d8
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513317.487762
NtWriteFile
|
file_handle:
0x00000a9c
filepath:
C:\ProgramData\Microsoft\RAC\StateData\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513318.018762
NtWriteFile
|
file_handle:
0x00000a8c
filepath:
C:\Program Files\Google\Chrome\Application\Dictionaries\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513318.221762
NtWriteFile
|
file_handle:
0x00001b24
filepath:
C:\ProgramData\Microsoft\Windows\DRM\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513318.737762
NtWriteFile
|
file_handle:
0x000015b8
filepath:
C:\tmpsij43m\modules\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513318.768762
NtWriteFile
|
file_handle:
0x00001590
filepath:
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513318.768762
NtWriteFile
|
file_handle:
0x00001818
filepath:
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513318.846762
NtWriteFile
|
file_handle:
0x00000d9c
filepath:
C:\ProgramData\Microsoft\Crypto\Keys\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513319.018762
NtWriteFile
|
file_handle:
0x00000ccc
filepath:
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513319.112762
NtWriteFile
|
file_handle:
0x00000200
filepath:
C:\Program Files (x86)\Microsoft.NET\RedistList\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513319.143762
NtWriteFile
|
file_handle:
0x00000640
filepath:
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513319.799762
NtWriteFile
|
file_handle:
0x00001698
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513319.799762
NtWriteFile
|
file_handle:
0x00001490
filepath:
C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.0\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513319.815762
NtWriteFile
|
file_handle:
0x00000c8c
filepath:
C:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513320.065762
NtWriteFile
|
file_handle:
0x00001af4
filepath:
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513320.096762
NtWriteFile
|
file_handle:
0x00000500
filepath:
C:\Users\Administrator.Oskar-PC\Documents\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513320.159762
NtWriteFile
|
file_handle:
0x00001c5c
filepath:
C:\tmpsij43m\lib\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513320.190762
NtWriteFile
|
file_handle:
0x00001484
filepath:
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513320.206762
NtWriteFile
|
file_handle:
0x00000378
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\WidevineCdm\_platform_specific\win_x64\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513320.659762
NtWriteFile
|
file_handle:
0x00000b14
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513321.018762
NtWriteFile
|
file_handle:
0x00001df4
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\Extensions\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513321.112762
NtWriteFile
|
file_handle:
0x00001df0
filepath:
C:\Program Files\Google\Chrome\Application\89.0.4389.114\Installer\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513321.846762
NtWriteFile
|
file_handle:
0x000002c0
filepath:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_94995ab25177e7c7298027ae617b93854df5_cab_0126c1cf\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513321.909762
NtWriteFile
|
file_handle:
0x00000274
filepath:
C:\Users\Administrator.Oskar-PC\Searches\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513321.909762
NtWriteFile
|
file_handle:
0x00001688
filepath:
C:\Users\Administrator.Oskar-PC\Contacts\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513321.924762
NtWriteFile
|
file_handle:
0x00000e48
filepath:
C:\tmpsij43m\lib\core\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513321.987762
NtWriteFile
|
file_handle:
0x00000a90
filepath:
C:\Users\Public\Libraries\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513322.924762
NtWriteFile
|
file_handle:
0x000002c0
filepath:
C:\Users\Public\Recorded TV\Sample Media\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513323.003762
NtWriteFile
|
file_handle:
0x00001c5c
filepath:
C:\tmpsij43m\lib\common\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513323.331762
NtWriteFile
|
file_handle:
0x00001308
filepath:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_d473a376adfb18a7b165c5e3c26de43cd8bccb_cab_05eac559\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513324.065762
NtWriteFile
|
file_handle:
0x00000d64
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Links for 中国\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513324.096762
NtWriteFile
|
file_handle:
0x000018fc
filepath:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_e44d9bd7eba8ad7f54ca160a4fc3d2a5d4c60_cab_055f7698\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|
1619513324.471762
NtWriteFile
|
file_handle:
0x00000990
filepath:
C:\ProgramData\Microsoft\Windows\Ringtones\135921-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .135921
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_135921:
l5hz8l6ZS3UbsFhQbp8tkUtm5S2RBRRQKD1poKhdt5e4fUVKv9
cBXVy8tWtK2dzUjCbG6RVedDS3Uwr7BEc6WfxCNyV2dMNm6kpz
tBBtLGHO93AO394tzO9RbxRfz2ofvGJS53whwUkMWbggDJi9xW
rNlXVWvEwYuLzPbuhY83ZlbgNGPqQIdn3bk0yLvFJYVjJ7o3sf
H2NpIcFzQGK3TwDGlVpJX9vK4a+XVeuTNWUeYxCU6RMF/ds+p9
YvNzi7wLxYOKJ+CBQwtedZDVh2AJx5fDa3z5Aawg==}
offset:
0
|
success
|
0 |
0
|