MD5: 3df42fa9732864a9755f5c8fb7ed456a
h/t @JAMESWT_MHT

REvil ransomware config:

“pk”: Rui05IT0bzVjJv7WuNIq6PZyXjBMEStA2eSxQT8TjY=","pid":"22","sub":"607","dbg":false,"fast":true,"wipe":true,"wht":{"fld":["application data","appdata","boot","$recycle.bin","$windows.~bt","google","mozilla","system volume information","windows","windows.old","$windows.~ws","msocache","tor browser","program files","perflogs","program files (x86)","intel","programdata"],"fls":["boot.ini","desktop.ini","bootfont.bin","thumbs.db","iconcache.db","bootsect.bak","ntuser.ini","ntuser.dat","ntuser.dat.log","autorun.inf","ntldr"],"ext":["theme","rtp","themepack","wpx","nls","key","adv","lnk","msi","cur","scr","ics","msp","386","deskthemepack","mpa","diagpkg","ani","msstyles","hlp","cab","diagcab","drv","diagcfg","exe","bin","ps1","hta","cmd","lock","cpl","icl","mod","shs","sys","msc","nomedia","ocx","icns","idx","com","prf","ico","ldf","bat","spl","msu","rom","dll"]},"wfld":["backup"],"prc":["tbirdconfig.exe","thebat.exe","firefoxconfig.exe","thunderbird.exe","mysqld.exe","agntsvc.exe","isqlplussvc.exe","powerpnt.exe","
mysqld_nt.exe","onenote.exe","mydesktopqos.exe","excel.exe","synctime.exe","thebat64.exe","sqlagent.exe","sqbcoreservice.exe","dbeng50.exe","sqlservr.exe","ocautoupds.exe","mysqld_opt.exe","winword.exe","sqlwriter.exe","steam.exe","mydesktopservice.exe","wordpad.exe","msaccess.exe","encsvc.exe","oracle.exe","outlook.exe","sqlbrowser.exe","msftesql.exe","infopath.exe","visio.exe","mspub.exe","xfssvccon.exe","ocomm.exe","dbsnmp.exe","ocssd.exe"],"dmn":"pinkxgayvideoawards.com;lassocrm.com;abulanov.com;denhaagfoodie.nl;rentingwell.com;toranjtuition.org;aoyama.ac;awaitspain.com;leadforensics.com;bilius.dk;leloupblanc.gr;kryddersnapsen.dk;alisodentalcare.com;patassociation.com;azloans.com;rename.kz;angelika-schwarz.com;kellengatton.com;geoweb.software;hutchstyle.co.uk;brinkdoepke.eu;pxsrl.it;casinodepositors.com;elex.is;parksideseniorliving.net;dayenne-styling.nl;arabianmice.com;dinecorp.com;hartofurniture.com;eurethicsport.eu;prometeyagro.com.ua;irizar.com;wyreforest.net;jobkiwi.com.ng;chorusconsulting.net;concontactodirecto.com;askstaffing.com;welovecustomers.fr;optigas.com;verbouwingsdouche.nl;watchsale.biz;almamidwifery.com;eatyoveges.com;berdonllp.com;moira-cristescu.com;alltagsrassismus-entknoten.de;kerstliedjeszingen.nl;gavelmasters.com;christianscholz.de;gurutechnologies.net;amco.net.au;littlesaints.academy;expohomes.com;hekecrm.com;tutvracks.com;mayprogulka.ru;keuken-prijs.nl;jameswilliamspainting.com;physio-lang.de;aslog.fr;thenalpa.com;opt4cdi.com;condormobile.fr;chomiksy.net;spirello.nl;ilveshistoria.com;iactechnologies.net;manzel.tn;bcmets.info;ruggestar.ch;triplettabordeaux.fr;aciscomputers.com;kemtron.fr;biodentify.ai;hostastay.com;malevannye.ru;eksperdanismanlik.com;skolaprome.eu;putzen-reinigen.com;xn--80abehgab4ak0ddz.xn--p1ai;pankiss.ru;adabible.org;pokemonturkiye.com;dr-vita.de;basindentistry.com;90nguyentuan.com;go.labibini.ch;redpebblephotography.com;ygallerysalonsoho.com:443;mamajenedesigns.com;koncept-m.ru;letterscan.de;sochi-okna23.ru;professionetata.com;111firstdelray.com;haard-totaal.nl;trainiumacademy.com;annida.it;utilisacteur.fr;grafikstudio-visuell.de;traitware.com;thegetawaycollective.com;amelielecompte.wordpress.com;flossmoordental.com;citydogslife.com;nxtstg.org;monstarrsoccer.com;nepressurecleaning.com;block-optic.com;scietech.academy;livelai.com;der-stempelking.de;breakluckrecords.com;kartuindonesia.com;slotspinner.com;augen-praxisklinik-rostock.de;the-beauty-guides.com;dcc-eu.com;hiddensee-buhne11.de;taulunkartano.fi;craftingalegacy.com;ijsselbeton.nl;santastoy.store;sunsolutions.es;nauticmarine.dk;penumbuhrambutkeiskei.com;witraz.pl;webforsites.com;latableacrepes-meaux.fr;kosten-vochtbestrijding.be;nutriwell.com.sg;sarahspics.co.uk;ingresosextras.online;mensemetgesigte.co.za;lagschools.ng;internestdigital.com;worldproskitour.com;stringnosis.academy;datatri.be;campusce.com;saboboxtel.uk;trevi-vl.ru;carsten.sparen-it.de;kiraribeaute-nani.com;devus.de;randyabrown.com;klapanvent.ru;mindfuelers.com;modamarfil.com;sambaglow.com;holocine.de;hom-frisor.dk;babysitting-hk.helpergo.co;geitoniatonaggelon.gr;the5thquestion.com;insane.agency;pilotgreen.com;production-stills.co.uk;catchup-mag.com;imajyuku-sozoku.com;suitesartemis.gr;corporacionrr.com;csaballoons.com;linearete.com;lidkopingsnytt.nu;beauty-traveller.com;photographycreativity.co.uk;fotoeditores.com;electricianul.com;galaniuklaw.com;sycamoregreenapts.com;happycatering.de;eos-horlogerie.com;karmeliterviertel.com;mrkluttz.com;naukaip.ru;betterce.com;bellesiniacademy.org;metcalfe.ca;edrickennedymacfoy.com;endlessrealms.net;furland.ru;rossomattonecase.it;delegationhub.com;craftstone.co.nz;ninjaki.com;andermattswisswatches.ch;rapid5kloan.org;nalliasmali.net;poems-for-the-soul.ch;bakingismyyoga.com;burg-zelem.de;tzn.nu;adedesign.com;tweedekansenloket.nl;bumbipdeco.site;silverbird.dk;2020hindsight.info;bubbalucious.com;hensleymarketing.com;jandhpest.com;agenceassemble.fr;voetbalhoogeveen.nl;solidhosting.nl;billigeflybilletter.dk;proffteplo.com;qandmmusiccenter.com;ncjc.ca;cmeow.com;scotlandsroute66.co.uk;aktivfriskcenter.se;deziplan.ru;lgiwines.com;georgemuncey.com;iron-mine.ru;victorvictoria.com;computer-place.de;ultimatelifesource.com;carolynfriedlander.com;nginx.com;mikegoodfellow.co.uk;ox-home.com;egpu.fr;dierenambulancealkmaar.nl;greeneyetattoo.com;spartamovers.com;signamedia.de;speakaudible.com;business-basic.de;rarefoods.ro;stathmoulis.gr;wordpress.idium.no;the3-week-diet.net;kroophold-sjaelland.dk;buonabitare.com;pazarspor.org.tr;3daywebs.com;jlwilsonbooks.com;evsynthacademy.org;oexebusiness.com;rivermusic.nl;tothebackofthemoon.com;5pointpt.com;airserviceunlimited.com;mollymccarthydesign.com;julielusktherapy.com;enactusnhlstenden.com;sber-biznes.com;phukienbepthanhdat.com;texanscan.org;daveystownhouse.com;masecologicos.com;animation-pro.co.uk;wasnederland.nl;subquercy.fr;smartmind.net;lifeinbreaths.com;leijstrom.com;hvitfeldt.dk;annenymus.com;johnsonweekly.com;rizplakatjaya.com;barbaramcfadyenjewelry.com;benchbiz.com;protoplay.ca;elliemaccreative.wordpress.com;sytzedevries.com;anchelor.com;mjk.digital;bertbutter.nl;myplaywin3.com;ebible.co;switch-made.com;innovationgames-brabant.nl;boyfriendsgoal.site;invela.dk;g2mediainc.com;liveyourheartout.co;buffdaddyblog.com;legundschiess.de;latteswithleslie.com;brownswoodblog.com;zaczytana.com;premiumweb.com.ua:443;creohn.de;brisbaneosteopathic.com.au;ludoil.it;pajagus.fr;hostingbangladesh.net;dentourage.com;sololibrerie.it;clemenfoto.dk;envomask.com;frameshift.it;dmlcpa.com;banksrl.co.za;towelroot.co;adterium.com;1deals.com;slotenmakerszwijndrecht.nl;amorbellezaysalud.com;rubyaudiology.com;brannbornfastigheter.se;arthakapitalforvaltning.dk;turing.academy;bajova.sk;jeanmonti.com;sppdstats.com;distrifresh.com;rtc24.com;bd2fly.com;mazzaropi.com.br;vapiano.fr;polynine.com;eafx.pro;look.academy;photonag.com;bratek-immobilien.de;blueridgeheritage.com;bavovrienden.nl;dibli.store;onlinemarketingsurgery.co.uk;bookingwheel.com;jayfurnitureco.com;testitjavertailut.net;matthieupetel.fr;jmmartinezilustrador.com;levelseven.be;centuryvisionglobal.com;stressreliefadvice.com;cotton-avenue.co.il;deduktia.fi;metriplica.academy;jdscenter.com;claudiakilian.de;encounter-p.net;a-zpaperwork.eu;xn--80addfr4ahr.dp.ua;stitch-n-bitch.com;secrets-clubs.co.uk;morgansconsult.com;kompresory-opravy.com;jimprattmediations.com;zumrutkuyutemel.com;tellthebell.website;kamin-somnium.de;bodymindchallenger.com;laaisterplakky.nl;pharmeko-group.com;bendel-partner.de;fluzfluzrewards.com;plbinsurance.com;signededenroth.dk;donau-guides.eu;sbit.ag;markseymourphotography.co.uk;soundseeing.net;thiagoperez.com;carmel-york.com;cainlaw-okc.com;limmortelyouth.com;liverpoolabudhabi.ae;letsstopsmoking.co.uk;khtrx.com;bcabattoirs.org;myfbateam.com;martinipstudios.com;zwemofficial.nl;ikzoekgod.be;relevantonline.eu;hm-com.com;olry-cloisons.fr;9nar.com;linkbuilding.life;mike.matthies.de;framemyballs.com;soncini.ch;coachpreneuracademy.com;bluelakevision.com;tilldeeke.de;limounie.com;cardsandloyalty.com;nicksrock.com;molade.nl;oththukaruva.com;onlinetvgroup.com;m2graph.fr;selected-minds.de;endstarvation.com;agencewho-aixenprovence.fr;cymru.futbol;four-ways.com;pisofare.co;otpusk.zp.ua;alcye.com;gsconcretecoatings.com;jax-interim-and-projectmanagement.com;ufovidmag.com;aidanpublishing.co.uk;jlgraphisme.fr;qrs-international.com;glas-kuck.de;guohedd.com;web865.com;sshomme.com;docarefoundation.org;kenmccallum.com;transifer.fr;indiebizadvocates.org;advanced-removals.co.uk;singletonfinancial.com;drbrianhweeks.com;teutoradio.de;bruut.online;billscars.net;chinowarehousespace.com;mahikuchen.com;futurenetworking.com;reputation-medical.online;tramadolhealth.com;alattekniksipil.com;natturestaurante.com.br;luvbec.com;from02pro.com;hawthornsretirement.co.uk;explora.nl;nykfdyrehospital.dk;bringmehope.org;stralsund-ansichten.de;xn--billigafrgpatroner-stb.se;lmmont.sk;descargandoprogramas.com;narca.net;thesilkroadny.com;mariamalmahdi.com;kvetymichalovce.sk;albcleaner.fr;purepreprod4.com;blucamp.com;tchernia-conseil.fr;vedsegaard.dk;initconf.com;wallflowersandrakes.com;motocrosshideout.com;supercarhire.co.uk;yourhappyevents.fr;xtensifi.com;charlesfrancis.photos;fi-institutionalfunds.com;parisschool.ru;advance-refle.com;promus.ca;heuvelland-oaze.nl;tages-geldvergleich.de;landgoedspica.nl;osn.ro;malzomattalar.com;comoserescritor.com;bulyginnikitav.000webhostapp.com;ledyoucan.com;ocduiblog.com;bmw-i-pure-impulse.com;ced-elec.com;dreamvoiceclub.org;topautoinsurers.net;stagefxinc.com;cmascd.com;kryptos72.com;andrealuchesi.it;mazift.dk;craftron.com;citiscapes-art.com;gta-jjb.fr;druktemakersheerenveen.nl;pvandambv.nl;circlecitydj.com;inewsstar.com;ketomealprep.academy;lovcase.com;ykobbqchicken.ca;skyscanner.ro;hostaletdelsindians.es;mariannelemenestrel.com;clinic-beethovenstrasse-ag.ch;leansupremegarcinia.net;lookandseen.com;advancedeyecare.com;pedmanson.com;innersurrection.com;therapybusinessacademy.com;mac-computer-support-hamburg.de;fysiotherapierijnmond.nl;lisa-poncon.fr;michaelfiegel.co
m;hepishopping.com;harleystreetspineclinic.com;startuplive.org;alwaysdc.com;fridakids.com;golfclublandgoednieuwkerk.nl;marmarabasin.com;goodherbalhealth.com;akwaba-safaris.com;nvisionsigns.com;pourlabretagne.bzh;davedavisphotos.com;chatterchatterchatter.com;easydental.ae;larchwoodmarketing.com;beandrivingschool.com.au;strauchs-wanderlust.info;shrinkingplanet.com;gatlinburgcottage.com;kuriero.pro;site.markkit.com.br;chatberlin.de;agora-collectivites.com;radishallgood.com;mbuildinghomes.com;lunoluno.com;cesep2019.com;ziliak.com;advesa.com;gaearoyals.com;arearugcleaningnyc.com;outstandingminialbums.com;veggienessa.com;stanleyqualitysystems.com;netadultere.fr;die-immo-agentur.de;mediabolmong.com;shortsalemap.com;theboardroomafrica.com;alabamaroofingllc.com;jag.me;mediahub.co.nz;michal-s.co.il;thepixelfairy.com;janasfokus.com;suonenjoen.fi;k-zubki.ru;kenmccallum.com;finsahome.co.uk;scentedlair.com;tbalp.co.uk;ivancacu.com;opticahubertruiz.com;jobscore.com;leopoldineroux.com;galatee-couture.com;levencovka.ru;cormanmarketing.com;graygreenbiomedservices.com;gratiocafeblog.wordpress.com;agendatwentytwenty.com;ideamode.com;xrresources.com;rentsportsequip.com;fazagostar.co;tastevirginia.com;rishigangoly.com;autoteamlast.de;acumenconsultingcompany.com;acornishstudio.co.uk;premier-iowa.com;skyboundnutrition.co.uk;adaduga.info;katherinealy.com;teethinadaydentalimplants.com;chainofhopeeurope.eu;paradigmlandscape.com;bluemarinefoundation.com;hypogenforensic.com;loysonbryan.com;directique.com;bluetenreich-brilon.de;hameghlim.com;maxcube24.com.ua;sweetz.fr;grancanariaregional.com;magrinya.net;aceroprime.com;xn--ziinoapte-6ld.ro;parseport.com;c-sprop.com;awaisghauri.com;funworx.de;iexpert99.com;fitnessblenderstory.com;airvapourbarrier.com;sprintcoach.com;stage-infirmier.fr;tanatek.com;mundo-pieces-auto.fr;ilovefullcircle.com;astrographic.com;allinonecampaign.com;lsngroupe.com;domilivefurniture.com;redctei.co;sellthewrightway.com;dinedrinkdetroit.com;ruggestar.ch;b3b.ch;cookinn.nl;wademurray.com;logosindustries.com;brunoimmobilier.com;palmecophilippines.com;ramirezprono.com;jalkapuu.net;bychowo.pl;belofloripa.be;martha-frets-ceramics.nl;perceptdecor.com;omnicademy.com;ahgarage.com;wrinstitute.org;achetrabalhos.com;broccolisoep.nl;drvoip.com;whoopingcrane.com;ddmgen.com;alene.co;jglconsultancy.com;yayasanprimaunggul.org;makingmillionaires.net;cssp-mediation.org;campinglaforetdetesse.com;bagaholics.in;atma.nl;yournextshoes.com;global-migrate.com;wribrazil.com;bjornvanvulpen.nl;christopherhannan.com;muni.pe;digitale-elite.de;cl0nazepamblog.com;apogeeconseils.fr;epsondriversforwindows.com;artcase.pl;schluesseldienste-hannover.de;mgimalta.com;pubcon.com;uci-france.fr;housesofwa.com;the-cupboard.co.uk;profibersan.com;teamsegeln.ch;atelierkomon.com;kafkacare.com;metallbau-hartmann.eu;quitescorting.com;salonlamar.nl;oraweb.net;newonestop.com;oro.ae;encounter-p.net;o90.dk;forextimes.ru;cuadc.org;smartercashsystem.com;customroasts.com;happylublog.wordpress.com;hoteltantra.com;omegamarbella.com;acibademmobil.com.tr;itheroes.dk;cac2040.com;terraflair.de;saint-malo-developpement.fr;edvestors.org;drbenveniste.com;anleggsregisteret.no;ntinasfiloxenia.gr;buzzneakers.com;lyricalduniya.com;asiaartgallery.jp;avisioninthedesert.com;baikalflot.ru;vitormmcosta.com;activeterroristwarningcompany.com;richardmaybury.co.uk;direitapernambuco.com;goddardleadership.org;n-newmedia.de;perfectgrin.com;jefersonalessandro.com;haus-landliebe.de;specialtyhomeservicesllc.com;thegrinningmanmusical.com;fskhjalmar.se;orchardbrickwork.com;studionumerik.fr;cyberpromote.de;mieleshopping.it;mindsparkescape.com;uncensoredhentaigif.com;krishnabrawijaya.com;alaskaremote.com;neolaiamedispa.com;nationnewsroom.com;so-sage.fr;blavait.fr;mediogiro.com.ar;tecleados.com;smartspeak.com;zuerich-umzug.ch;molinum.pt;entdoctor-durban.com;mslp.org;fta-media.com;zinnystar.com;skinkeeper.li;theater-lueneburg.de;lattalvor.com;palema.gr;fixx-repair.com;5thactors.com;ceocenters.com;tetameble.pl;liepertgrafikweb.at;foerderverein-vatterschule.de;schulz-moelln.de;imagine-entertainment.com;agrifarm.dk;greatofficespaces.net;11.in.ua;ikadomus.com;mrcar.nl;richardkershawwines.co.za;breathebettertolivebetter.com;saberconcrete.com;cp-bap.de;factoriareloj.com;rozmata.com;cleanroomequipment.ie;nbva.co.uk;silkeight.com;heimdalbygg.no;zdrowieszczecin.pl;johnstonmingmanning.com;angeleyezstripclub.com;enews-qca.com;auto-opel.ro;innovationgames-brabant.nl;k-v-f.de;ziliak.com;thehovecounsellingpractice.co.uk;pureelements.nl;mangimirossana.it;hotelturbo.de;nevadaruralhousingstudies.org;riffenmattgarage.ch;louiedager.com;jaaphoekzema.nl;voice2biz.com;memphishealthandwellness.com;ncn.nl;metroton.ru;kristianboennelykke.dk;lollachiro.com;bodet150ans.com;hotjapaneselesbian.com;skidpiping.de;raeoflightmusic.com;operativadigital.com;pansionatblago.ru;schroederschoembs.com;cascinarosa33.it;efficiencyconsulting.es;husetsanitas.dk;vvego.com;angelsmirrorus.com;eastgrinsteadwingchun.com;hinotruckwreckers.com.au;belinda.af;espaciopolitica.com;campusescalade.com;racefietsenblog.nl;diverfiestas.com.es;werkzeugtrolley.net;awag-blog.de;lapponiasafaris.com;curtsdiscountguns.com;aheadloftladders.co.uk;chris-anne.com;p-ride.live;leatherjees.com;dentallabor-luenen.de;oncarrot.com;collegetennis.info;solutionshosting.co.uk;globalcompliancenews.com;wirmuessenreden.com;phoenixcrane.com;auberives-sur-vareze.fr;epicjapanart.com;cops4causes.org;midwestschool.org;skoczynski.eu;gosouldeep.com;sveneulberg.de;smarttourism.academy;bohrlochversicherung.info;rhino-turf.com;nepal-pictures.com;slideevents.be;alexwenzel.de;primemarineengineering.com;amyandzac.com;gbk-tp1.de;stabilisateur.fr;goeppinger-teppichreinigung.de;smartworkplaza.com;avtoboss163.ru:443;bourchier.org;trivselsguide.dk;muller.nl;dentalcircle.com;rsidesigns.com;factorywizuk.com;skooppi.fi;diakonie-weitramsdorf-sesslach.de;nexstagefinancial.com;humanviruses.org;spacebel.be;prodentalblue.com;tieronechic.com;tesisatonarim.com;atrgroup.it;marcandy.com;weddingceremonieswithtim.com;nourella.com;gazelle-du-web.com;ronielyn.com;eventosvirtualesexitosos.com;frankgoll.com;sachainchiuk.com;miscbo.it;jacquesgarcianoto.com;reizenmetkinderen.be;hnkns.com;frimec-international.es;fsbforsale.com;designimage.ae;sealgrinderpt.com;pro-gamer.pl;lashandbrowenvy.com;bundan.com;denverwynkoopdentist.com;margaretmcshane.com;rino-gmbh.com;ronaldhendriks.nl;globalskills.pt;jakubrybak.com;cc-experts.de;publicompserver.de;ziliak.com;groovedealers.ru;universelle.fr;log-barn.co.uk;onesynergyinternational.com;rattanwarehouse.co.uk;richardiv.com;kelsigordon.com;dennisverschuur.com;parentsandkids.com;triavlete.com;vipcarrental.ae;dieetuniversiteit.nl;yvesdoin-aquarelles.fr;kickittickets.com;animalfood-online.de;dogsunlimitedguide.com;arazi.eus;alnectus.com;matteoruzzaofficial.com;billyoart.com;sharonalbrightdds.com;catalyseurdetransformation.com;yourcosmicbeing.com;biblica.com;internalresults.com;girlish.ae;oscommunity.de;fann.ru;ya-elka.ru;rokthetalk.com;nieuwsindeklas.be;bonitabeachassociation.com;avis.mantova.it;jollity.hu;andreaskildegaard.dk;charlottelhanna.com;ciga-france.fr;peppergreenfarmcatering.com.au;theatre-embellie.fr;renderbox.ch;boomerslivinglively.com;bayshoreelite.com;fascaonline.com;innervisions-id.com;fla.se;focuskontur.com;istantidigitali.com;mneti.ru;circuit-diagramz.com;grupoexin10.com;boloria.de;jobstomoveamerica.org;alharsunindo.com;devplus.be;stoneridgemontessori.com;janellrardon.com;topvijesti.net;wg-heiligenstadt.de;juergenblaetz.de;rechtenplicht.be;glende-pflanzenparadies.de;mondolandscapes.com;eyedoctordallas.com;mind2muscle.nl;aquacheck.co.za;jonnyhooley.com;reygroup.pt;simpleitsolutions.ch;baptistdistinctives.org;zealcon.ae;bridalcave.com;kausette.com;fire-space.com;altocontatto.net;qwikcoach.com;vitoriaecoturismo.com.br;baita.ac;nuohous.com;sjtpo.org;keyboardjournal.com;powershell.su;artvark.nl;lesyeuxbleus.net;mercadodelrio.com;profiz.com;tatyanakopieva.ru;thestudio.academy;rs-danmark.dk;drnelsonpediatrics.com;axisoflove.org:443;kombi-dress.com;dantreranch.com;buerocenter-butzbach-werbemittel.de;alpesiberie.com;renehartman.nl;altitudeboise.com;antesacademy.it;satoblog.org;projektparkiet.pl;fbmagazine.ru;scholarquotes.com;biketruck.de;gardenpartner.pl;akcadagofis.com;placermonticello.com;mustangmarketinggroup.com;duthler.nl;rhino-storage.co.uk;karelinjames.com;walterman.es;fanuli.com.au;janmorgenstern.com;apiarista.de;pixelhealth.net;forumsittard.nl;aberdeenartwalk.org;mariajosediazdemera.com;paardcentraal.nl;piestar.com;bescomedical.de;eshop.design;fotoslubna.com;afbudsrejserallinclusive.dk;agriturismocastagneto.it;t3brothers.com;zorgboerderijravensbosch.nl;greenrider.nl;crestgood.com;lumturo.academy;fidelitytitleoregon.com;oportowebdesign.com;napisat-pismo-gubernatoru.ru:443;ravage-webzine.nl;laylavalentine.com;o2o-academy.com;successcolony.com.ng;licensed-public-adjuster.com;palmenhaus-erfurt.de;tradenavigator.ch;springfieldplumbermo.com;test-teleachat.fr;kookooo.com;yuanshenghotel.com;pays-saint-flo
ur.fr;nrgvalue.com;unboxtherapy.site;subyard.com;mesajjongeren.nl;glennverschueren.be;affligemsehondenschool.be;johnkoen.com;domaine-des-pothiers.com;line-x.co.uk;vdolg24.online;thisprettyhair.com;magnetvisual.com;rolleepollee.com;min-virksomhed.dk;banukumbak.com;elitkeramika-shop.com.ua;ayudaespiritualtamara.com;loparnille.se;valiant-voice.com;etgdogz.de;maryairbnb.wordpress.com;birthplacemag.com;wineandgo.hu;shortysspices.com;pinthelook.com;catering.com;speiserei-hannover.de;mursall.de;patriotcleaning.net;baumfinancialservices.com;handyman-silkeborg.dk;luvinsburger.fr;imaginekithomes.co.nz;azerbaycanas.com;acb-gruppe.ch;techybash.com;lovetzuchia.com;peninggibadan.co.id;hospitalitytrainingsolutions.co.uk;cap29010.it;theintellect.edu.pk;neonodi.be;hawaiisteelbuilding.com;rvside.com;paprikapod.com;bg.szczecin.pl;mrmac.com;apmollerpension.com;cxcompany.com;queertube.net;dnqa.co.uk;triplettagaite.fr;livedeveloper.com;unislaw-narty.pl;spectamarketingdigital.com.br;colored-shelves.com;unexplored.gr;kdbrh.com;goodboyscustom.com;volta.plus;energosbit-rp.ru;forskolinslimeffect.net;finnergo.eu;cincinnatiphotocompany.org;medicalsupportco.com;interlinkone.com;floweringsun.org;schlagbohrmaschinetests.com;ownidentity.com;precisetemp.com;motocrossplace.co.uk;brighthillgroup.com;noda.com.ua;justaroundthecornerpetsit.com;lexced.com","net":true,"nbody":"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","nname":"{EXT}-readme.txt","exp":false,"img":"QQBsAGwAIABvAGYAIAB5AG8AdQByACAAZgBpAGwAZQBzACAAYQByAGUAIABlAG4AYwByAHkAcAB0AGUAZAAhAA0ACgANAAoARgBpAG4AZAAgAHsARQBYAFQAfQAtAHIAZQBhAGQAbQBlAC4AdAB4AHQAIABhAG4AZAAgAGYAbwBsAGwAbwB3ACAAaQBuAHMAdAB1AGMAdABpAG8AbgBzAAAA"}

All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions

==
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
  a) Download and install TOR browser from this site: https://torproject.org/
  b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
  a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
  b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}