Hash-urile Tool-urilor folosite in Campania de Ransomware asupra Spitalelor din Romania
b4cc0280e2caa0335361172cb7d673f745defc78299ded808426ffbc2458e4d9 DotNetTools.dll
57c56f7b312dc1f759e6ad039aac3f36ce5130d259eb9faad77239083398308b SbieSupport.dll
fc9d0d0482c63ab7f238bc157c3c0fed97951ccf2d2e45be45c06c426c72cb52 UserNotes.dll
476aa6af14dd0b268786e32543b9a6917a298d4d90e1015dac6fb2b522cf5d2e NetworkTools.dll
5ae7c0972fd4e4c4ae14c0103602ca854377fefcbccd86fa68cfc5a6d1f99f60 ExtendedServices.dll
f2805e0f81513641a440f1a21057a664961c22192cb33fca3870362c8f872d87 ExtendedTools.dll
5713d40dec146dbc819230daefe1b886fa6d6f6dbd619301bb8899562195cbab ToolStatus.dll
0c11cdc3765ffb53ba9707b6f99ec17ae4f7334578a935ba7bcbbc9c7bdeed2e Updater.dll
282696487ea5dc781788d5d8477b977f72b7c70f201c2af0cfe7e1a9fd8d749a WindowExplorer.dll
61e8cd8de80a5c0d7ced280fe04ad8387a846a7bf2ee51bcbba96b971c7c1795 ExtendedNotifications.dll
7336d66588bbcfea63351a2eb7c8d83bbd49b5d959ba56a94b1fe2e905a5b5de OnlineChecks.dll
acd49f2aa36d4efb9c4949e2d3cc2bd7aee384c2ced7aa9e66063da4150fcb00 HardwareDevices.dll
4259e53d48a3fed947f561ff04c7f94446bedd64c87f52400b2cb47a77666aaa peview.exe
bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4 ProcessHacker.exe
519c2c2ca0caf00db5b3eb2b79dfe42e6128161c13aeb4b4d8b86fbffc67e3d4 ProcessHacker.sig
70211a3f90376bbc61f49c22a63075d1d4ddd53f0aefa976216c46e6ba39a9f4 kprocesshacker.sys
9fae3f15900e13ec3860a109555ecd33ca43d38907c63438c50a2d6d91bfee1d netscan.exe
598555a7e053c7456ee8a06a892309386e69d473c73284de9bbc0ba73b17e70a Dialupass.exe
303ab72fb47b96fd7240b21954fd53decf7f2c14824ee46f75e22adb1ce46379 WirelessKeyView64.cfg
35844d0aa90c85b8279f156132c261956ce9d457afb064f7937719a2557a06ab WebBrowserPassView.cfg
7fee96ae0ed1972a80abbd4529dc81ec033083857455bbf3c803c4f47e1ac31c PasswordFox64.exe
1e13fd79ad54fe98e08d9ffca2c287a470c50c2876608edce2fe38e07c245266 SniffPass.exe
91041b616969e1526ee6dce23f8d18afdd353786ac6afa0b6611903263ee6f63 NetRouteView.exe
ffb7f8c10848601b5c55fa636318827162a7a3bb318693c49a6bf0374d64d7ab netpass64.cfg
a1d36d0cd806434dc7b069b22c4dbc3deca758b04098e5912029345372f22624 OperaPassView.cfg
b5e5ff794555fdfdf182f6cba5e98eccf79619decc107d1f30fadccadf0185e5 mailpv.cfg
de374c1b9a05c2203e66917202c42d11eac4368f635ccaaadf02346035e82562 netpass.exe
7a313840d25adf94c7bf1d17393f5b991ba8baf50b8cacb7ce0420189c177e26 mspass.exe
99a57f98f0b51da18ae218d1cf1b4480b90bfc0fc2fcf837b45cf3ad22ff4bb6 rdpv.cfg
c92580318be4effdb37aa67145748826f6a9e285bc2426410dc280e61e3c7620 SniffPass64.exe
0c776441ede827577f66fc311b351849d33d512119c5d57fcb739792ab70ab76 NetRouteView.cfg
e01b0e7feadd08a7ea87c1cde44e7b97daf9632eaee8311ef6967f33258d03c1 PasswordFox.exe
b556d90b30f217d5ef20ebe3f15cce6382c4199e900b5ad2262a751909da1b34 WebBrowserPassView.exe
c4304f7bb6ef66c0676c6b94d25d3f15404883baa773e94f325d8126908e1677 ChromePass.exe
5cbf5561567a5db2f755f18995d83760894e54b66dae1f8afe1f0923a2b37800 mspass.cfg
5e85446910e732111ca9ac90f9ed8b1dee13c3314d2c5117dcf672994ce73bd6 PstPassword.exe
a29130ee952795efbc00f22be2d02d4700584e2595079e46377e3efafec53413 PstPassword.cfg
e71cda5e7c018f18aefcdfbce171cfeee7b8d556e5036d8b8f0864efc5f2156b BulletsPassView64.exe
816d7616238958dfe0bb811a063eb3102efd82eff14408f5cab4cb5258bfd019 VNCPassView.exe
9fb59d4b8668b5f52dad1d80a6773f85b74b5c0c9e70e9ab4c12612956a500b7 iepv.cfg
12f13d129579c68ec3cc05bef69880b6a891296fa9fce69b979b1c04998f125c WirelessKeyView.exe
b19dfe440e515c39928b475a946656a12b1051e98e0df36c016586b34a766d5c BulletsPassView.exe
dbe98193aced7285a01c18b7da8e4540fb4e5b0625debcfbabcab7ea90f5685d iepv.exe
95d3fa5c14919ae200fb9933106a5f2affa70f42086a87fc7a7d3a50c7273236 SniffPass64.cfg
16c6af4ae2d8ca8e7a3f2051b913fa1cb7e1fbd0110b0736614a1e02bbbbceaf mailpv.exe
8e4b218bdbd8e098fff749fe5e5bbf00275d21f398b34216a573224e192094b8 OperaPassView.exe
ae474417854ac1b6190e15cc514728433a26cc815fdc6d12150ef55e92d643ea RouterPassView.exe
6a7975f53bf25a179af77019e8272fdb16d964b04d09a8d8291515db3beeddbb RouterPassView.cfg
aeabf8a10199fc19ca9901f7e668fb6e3c1f32371f8bd6061d3e3b8fcb1869fa BasicProg.cfg
6f0ab90bd0551fc8acfeb817843a3b780ef31b783f3cf57e4e612b0ed6faa8ee ChromePass.cfg
48b77c1efbc3197128391a35d0e1ed0b5cc3a05b96dd12c98ac73ffc6a886fc8 WirelessKeyView64.exe
2af251fc7325dd2f545185478466a4763260fecc7a4f6c91a1f388da2f754733 BulletsPassView64.cfg
64788b6f74875aed53ca80669b06f407e132d7be49586925dbb3dcde56cbca9c pspv.exe
205818e10c13d2e51b4c0196ca30111276ca1107fc8e25a0992fe67879eab964 rdpv.exe
6a87226ed5cca8e072507d6c24289c57757dd96177f329a00b00e40427a1d473 netpass64.exe
0a0d363b31d0d93075241d2174e23210ceab341df5f751e9efc61f089841af5a PasswordFox64.cfg
5d24a321b06e73861366e720e97cb5bb5fdf84a24dc7b61bf7ebcd1ee33f40ba Dialupass.cfg
04cc60eba7041e0cef2deb1bec9a087432344737dd2e5141c9cda981506ca1a5 pars.vbs
31eb1de7e840a342fd468e558e5ab627bcb4c542a8fe01aec4d5ba01d539a0fc mimik.exe
d43520128871c83b904f3136542ea46644ac81a62d51ae9d3c3a3f32405aad96 mimidrv.sys
59756c8f4c760f1b29311a5732cb3fdd41d4b5bc9c88cd77c560e27b6e59780c mimilib.dll
66b4a0681cae02c302a9b6f1d611ac2df8c519d6024abdb506b4b166b93f636a mimik.exe
d032001eab6cad4fbef19aab418650ded00152143bd14507e17d62748297c23f mimidrv.sys
b42725211240828ccc505d193d8ea5915e395c9f43e71496ff0ece4f72e3e4ab mimilove.exe
a6527183e3cbf81602de16f3448a8754f6cecd05dc3568fa2795de534b366da4 mimilib.dll
4aa5260d08fa44f9f67bb2187e1c75114656f16e0c4630415385bd65c5d8c665 start.bat