| Time & API |
Arguments |
Status |
Return |
Repeated |
1619513305.831241
NtWriteFile
|
file_handle:
0x00000444
filepath:
C:\tmpsij43m\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513308.034241
NtWriteFile
|
file_handle:
0x00000b94
filepath:
C:\Users\Administrator.Oskar-PC\Documents\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513310.878241
NtWriteFile
|
file_handle:
0x00001018
filepath:
C:\Users\Administrator.Oskar-PC\Searches\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513311.440241
NtWriteFile
|
file_handle:
0x000010fc
filepath:
C:\tmpsij43m\lib\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513311.612241
NtWriteFile
|
file_handle:
0x0000147c
filepath:
C:\Program Files\Google\Chrome\Application\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513312.174241
NtWriteFile
|
file_handle:
0x000002c0
filepath:
C:\tmpsij43m\modules\auxiliary\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513313.581241
NtWriteFile
|
file_handle:
0x00000ef4
filepath:
C:\tmpsij43m\bin\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513314.081241
NtWriteFile
|
file_handle:
0x00001824
filepath:
C:\tmpsij43m\lib\api\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513314.128241
NtWriteFile
|
file_handle:
0x0000186c
filepath:
C:\tmpsij43m\lib\core\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513315.471241
NtWriteFile
|
file_handle:
0x00001a68
filepath:
C:\Python27\DLLs\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513315.924241
NtWriteFile
|
file_handle:
0x000001fc
filepath:
C:\tmpsij43m\modules\packages\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513315.987241
NtWriteFile
|
file_handle:
0x00000f64
filepath:
C:\tmpsij43m\modules\packages\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513316.424241
NtWriteFile
|
file_handle:
0x00000e50
filepath:
C:\tmpsij43m\modules\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513316.456241
NtWriteFile
|
file_handle:
0x00001950
filepath:
C:\tmpsij43m\modules\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513316.768241
NtWriteFile
|
file_handle:
0x00001560
filepath:
C:\Users\Administrator.Oskar-PC\Contacts\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513316.768241
NtWriteFile
|
file_handle:
0x00001b6c
filepath:
C:\Users\Public\Libraries\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513316.878241
NtWriteFile
|
file_handle:
0x00001b80
filepath:
C:\Users\Public\Music\Sample Music\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513318.971241
NtWriteFile
|
file_handle:
0x00001ccc
filepath:
C:\tmpsij43m\lib\common\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513322.128241
NtWriteFile
|
file_handle:
0x00001e80
filepath:
C:\ProgramData\Microsoft\User Account Pictures\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513323.284241
NtWriteFile
|
file_handle:
0x000023b4
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Links for 中国\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513324.049241
NtWriteFile
|
file_handle:
0x0000237c
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Microsoft 网站\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513325.706241
NtWriteFile
|
file_handle:
0x000023b0
filepath:
C:\Program Files\Oracle\VirtualBox Guest Additions\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513325.721241
NtWriteFile
|
file_handle:
0x000023c0
filepath:
C:\Program Files\Oracle\VirtualBox Guest Additions\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513327.565241
NtWriteFile
|
file_handle:
0x00002570
filepath:
C:\ProgramData\Microsoft\MF\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513328.003241
NtWriteFile
|
file_handle:
0x00000764
filepath:
C:\ProgramData\Microsoft\IlsCache\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513328.346241
NtWriteFile
|
file_handle:
0x000024b4
filepath:
C:\Program Files (x86)\Microsoft.NET\RedistList\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513328.643241
NtWriteFile
|
file_handle:
0x00001560
filepath:
C:\Python27\Lib\distutils\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513328.768241
NtWriteFile
|
file_handle:
0x00001980
filepath:
C:\Users\Oskar\Favorites\Microsoft 网站\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513328.878241
NtWriteFile
|
file_handle:
0x0000089c
filepath:
C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513329.331241
NtWriteFile
|
file_handle:
0x0000059c
filepath:
C:\Users\Administrator.Oskar-PC\AppData\Local\pip\cache\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513329.456241
NtWriteFile
|
file_handle:
0x00000338
filepath:
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513329.674241
NtWriteFile
|
file_handle:
0x00002570
filepath:
C:\Users\Oskar\Favorites\Links for 中国\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513329.799241
NtWriteFile
|
file_handle:
0x00001560
filepath:
C:\Python27\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513329.940241
NtWriteFile
|
file_handle:
0x0000086c
filepath:
C:\Users\Administrator.Oskar-PC\AppData\Local\Google\Chrome\User Data\FontLookupTableCache\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513330.003241
NtWriteFile
|
file_handle:
0x00000338
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Windows Live\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513330.253241
NtWriteFile
|
file_handle:
0x000006ec
filepath:
C:\Users\Oskar\Favorites\Links\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513330.831241
NtWriteFile
|
file_handle:
0x0000246c
filepath:
C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513330.878241
NtWriteFile
|
file_handle:
0x00001bdc
filepath:
C:\Recovery\93b8a396-9abc-11eb-88c2-ffe2e29febb8\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513330.971241
NtWriteFile
|
file_handle:
0x00001e14
filepath:
C:\Users\Public\Videos\Sample Videos\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.237241
NtWriteFile
|
file_handle:
0x00000ec8
filepath:
C:\ProgramData\Microsoft\Windows\DRM\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.315241
NtWriteFile
|
file_handle:
0x00001560
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\Links\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.409241
NtWriteFile
|
file_handle:
0x00001bdc
filepath:
C:\Program Files\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.409241
NtWriteFile
|
file_handle:
0x00002164
filepath:
C:\ProgramData\Microsoft\Crypto\Keys\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.721241
NtWriteFile
|
file_handle:
0x000006f0
filepath:
C:\Users\Administrator.Oskar-PC\Favorites\MSN 网站\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.799241
NtWriteFile
|
file_handle:
0x00000d0c
filepath:
C:\Program Files\Google\Chrome\Application\SetupMetrics\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.815241
NtWriteFile
|
file_handle:
0x0000020c
filepath:
C:\Users\Oskar\Contacts\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.831241
NtWriteFile
|
file_handle:
0x00001560
filepath:
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.831241
NtWriteFile
|
file_handle:
0x00000e30
filepath:
C:\Users\Oskar\Searches\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.831241
NtWriteFile
|
file_handle:
0x00000cec
filepath:
C:\Users\Oskar\Favorites\Windows Live\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|
1619513331.909241
NtWriteFile
|
file_handle:
0x00001c20
filepath:
C:\ProgramData\Microsoft\RAC\StateData\49533B-Readme.txt
buffer:
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49533b
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49533b:
XgHBRQFnO8w13TqXLDX2ykKrrD8DyfN1zzHm/Q1iOGdk+6bX5A
efSxbLd9ZqKLXW88S/vUHgIAGn0ChJ6bH2UA6LjW7E4i4Ghq4K
/uyB7NVti4rH1/HjiHXLWgHtxWZYr39UVRRc5Xap3eUtgUlCJA
bfclMApkJIdYmJkGpBLCY9SOw1XvaGk8DT/U3W3yObFvPW+xof
iucaleVLYkn+n9bGrSHORQT32KfjbET31rq57DANWidL30mCTo
7tALop5wTzMhLkl4mWL4A/J2m8T4iLYuV5Asiqtw==}
offset:
0
|
success
|
0 |
0
|