combined-extended-20200116_000000.json

{
  "api": {
    "format": "json",
    "file_group_count": 3540,
    "extended-info": {
      "extended-version": 3.1,
      "SecondaryLastUpdated": "2019-12-30T18:29:07.000000Z",
      "thisfilename": "combined-extended-20191230_191107.json",
      "optimizationwarning": "Never manually edit the filters list in this file if the data is optimized! Use --groomonly to un-optimize first. Never manually edit losslesstracking.addedfilters or losslesstracking.removedfilters; data loss is guaranteed if you do.",
      "thisfileoptimized": false
    }
  },
  "lastUpdated": "2019-12-31T02:11:07.039090Z",
  "exceptions": [],
  "filters": [
    "! \u041f\u0420\u041e\u0427\u0422\u0418 \u041c\u0415\u041d\u042f !.html",
    "!! RETURN FILES !!.txt",
    "!!! HOW TO DECRYPT FILES !!!.txt",
    "!!! READ THIS - IMPORTANT !!!.txt",
    "!!!!!ATEN\u00c7\u00c3O!!!!!.html",
    "!!!!!SAVE YOUR FILES!!!!.txt",
    "!!!!RESTORE_FILES!!!.txt",
    "!!!-WARNING-!!!.html",
    "!!!-WARNING-!!!.txt",
    "!!!GetBackData!!!.txt",
    "!!!INSTRUCTION_RNSMW!!!.txt",
    "!!!README!!!*.rtf",
    "!!!READ_IT!!!.txt",
    "!!!READ_TO_UNLOCK!!!.TXT",
    "!!!ReadMeToDecrypt.txt",
    "!!!Readme!!!Help!!!.txt",
    "!!!SAVE YOUR FILES!.bmp",
    "!## DECRYPT FILES ##!.txt",
    "!#_DECRYPT_#!.inf",
    "!#_How_to_decrypt_files_#!",
    "!#_How_to_decrypt_files_$!.txt",
    "!-GET_MY_FILES-!.*",
    "!=How_to_decrypt_files=!.txt",
    "!DMALOCK3.0*",
    "!Decrypt-All-Files-*.txt",
    "!ENC",
    "!GBLOCK_INFO.rtf",
    "!INSTRUCTI0NS!.TXT",
    "!OoopsYourFilesLocked!.rtf",
    "!PEDANt_INFO!.rtf",
    "!Please Read Me!.txt",
    "!QH24_INFO!.rtf",
    "!READ.htm",
    "!README_GMAN!.rtf",
    "!README_GRHAN!.rtf",
    "!Recovery_*.html",
    "!Recovery_*.txt",
    "!SBLOCK_INFO!.rtf",
    "!WannaDecryptor!.exe.lnk",
    "!Where_are_my_files!.html",
    "!_!email__ prusa@goat.si __!..PAYMAN",
    "!_HOW_RECOVERY_FILES_!.txt",
    "!_HOW_TO_RESTORE_*.txt",
    "!_Notice_!.txt",
    "!_RECOVERY_HELP_!.txt",
    "!____________DESKRYPT@TUTAMAIL.COM________.rar",
    "!_\u0418\u041d\u0421\u0422\u0420\u0423\u041a\u0426\u0418\u042f_!.txt",
    "!back_files!.html",
    "!how_to_unlock_your_file.txt",
    "!readme.*",
    "!satana!.txt",
    "# DECRYPT MY FILES #.html",
    "# DECRYPT MY FILES #.txt",
    "# DECRYPT MY FILES #.vbs",
    "# How to Decrypt Files.txt",
    "# README.hta",
    "###-READ-FOR-HELLPP.html",
    "#DECP_README#.rtf",
    "#HELP-DECRYPT-FCRYPT1.1#.txt",
    "#HOW_DECRYPT_FILES#.html",
    "#HOW_TO_UNRIP#.txt",
    "#NEWRAR_README#.rtf",
    "#README_GMAN#.rtf",
    "#RECOVERY-PC#.*",
    "#RECOVERY_FILES#.*",
    "#RECOVERY_FILES#.txt",
    "#_#ReadMe#_#.rtf",
    "#_#WhatWrongWithMyFiles#_#.rtf",
    "#_DECRYPT_ASSISTANCE_#.txt",
    "#_RESTORING_FILES_#.TXT",
    "$%%! NOTE ABOUT FILES -=!-.html",
    "$RECYCLE.BIN.{*-*-*-*}",
    "(encrypted)",
    "(encrypted)*",
    "* .tdelf",
    "* .vCrypt1",
    "*!DMAlock*",
    "*!recover!*.*",
    "*+recover+*.*",
    "*-DECRYPT.html",
    "*-DECRYPT.txt",
    "*-Lock.onion",
    "*-PLIIKI.txt",
    "*-filesencrypted.html",
    "*-recover-*.*",
    "*-webmafia@asia.com_donald@trampo.info",
    "*.!emc",
    "*.#",
    "*.##ENCRYPTED_BY_pablukl0cker##",
    "*.##___POLICJA!!!___TEN_PLIK_ZOSTA",
    "*.#Locky",
    "*.#__EnCrYpTED_BY_dzikusssT3AM_ransomware!__#",
    "*.*.[decrypt@files.mn].angus",
    "*.*.[helpnetin@protonmail.com].com",
    "*.*.[kenny.sarginson@aol.com].deal",
    "*.*.[prndssdnrp@mail.fr].deuce",
    "*.*.sell",
    "*.*GEFEST",
    "*.*cry",
    "*.*crypto",
    "*.*darkness",
    "*.*exx",
    "*.*kb15",
    "*.*kraken",
    "*.*locked",
    "*.*locker*",
    "*.*nochance",
    "*.*obleep",
    "*.+jabber-theone@safetyjabber.com",
    "*...Files-Frozen-NEED-TO-MAKE-PAYMENT\u2026",
    "*..txt",
    "*.0000",
    "*.010001",
    "*.0402",
    "*.08kJA",
    "*.0day",
    "*.0riz0n",
    "*.0wn3dyou",
    "*.0x0",
    "*.0x004867",
    "*.0x009d8a",
    "*.101",
    "*.1500dollars",
    "*.1999",
    "*.1btc",
    "*.1txt",
    "*.1ywsmbo4",
    "*.2048",
    "*.24H",
    "*.2cXpCihgsVxB3",
    "*.2du1mj8",
    "*.2k19",
    "*.2k19sys",
    "*.2lwnPp2B",
    "*.2xx9",
    "*.31342E30362E32303136*",
    "*.31392E30362E32303136_*",
    "*.3301",
    "*.3674AD9F-5958-4F2A-5CB7-F0F56A8885EA",
    "*.3P7m",
    "*.3RNu",
    "*.3nCRY",
    "*.3ncrypt3d",
    "*.3v3r1s",
    "*.449o43",
    "*.46d7k",
    "*.490",
    "*.491",
    "*.492",
    "*.4k",
    "*.4rwcry4w",
    "*.4x82N",
    "*.509a49",
    "*.59d49",
    "*.619-300-6500",
    "*.61yhi",
    "*.63vc4",
    "*.666",
    "*.666decrypt666",
    "*.686l0tek69",
    "*.6FKR8d",
    "*.6db8",
    "*.707",
    "*.725",
    "*.726",
    "*.73i87A",
    "*.777",
    "*.7h9r",
    "*.7jo22z5m",
    "*.7z.encrypted",
    "*.7zipper",
    "*.8637",
    "*.888",
    "*.8lock8",
    "*.911",
    "*.96e2",
    "*.@decrypt2017",
    "*.@decrypt_2017",
    "*.A604AF9070",
    "*.A95436@YA.RU",
    "*.A9V9AHU4",
    "*.ABAT",
    "*.ABCDEF",
    "*.ACTUM",
    "*.ADMIN@BADADMIN.XYZ",
    "*.ADR",
    "*.AES",
    "*.AES-NI",
    "*.AES256",
    "*.AFD",
    "*.ANNABELLE",
    "*.ARTEMY",
    "*.ATLAS",
    "*.AUDIT",
    "*.AUF",
    "*.AVco3",
    "*.AYE",
    "*.AZER",
    "*.Acton",
    "*.Acton.id[1AE26935-1085].[hadleeshelton@aol.com].Acton",
    "*.Acuf2",
    "*.Adame",
    "*.AdolfHitler",
    "*.Alcatraz",
    "*.AlfaBlock",
    "*.Alkohol",
    "*.Amigo",
    "*.AngleWare",
    "*.Angus",
    "*.Annabelle2",
    "*.Apollon865",
    "*.AreYouLoveMyRansFile",
    "*.Armage",
    "*.Artemis",
    "*.Athena865",
    "*.Atom",
    "*.Aurora",
    "*.B10CKED",
    "*.BANKS",
    "*.BARRACUDA",
    "*.BAWSUOOXE",
    "*.BB4-230-*",
    "*.BD.Recovery",
    "*.BDKR",
    "*.BELGIAN_COCOA",
    "*.BIG1",
    "*.BIG4+",
    "*.BMCODE",
    "*.BONUM",
    "*.BORISHORSE",
    "*.BORISHORSE\u2026",
    "*.BRT92",
    "*.BUGWARE",
    "*.BUSH",
    "*.BaLoZiN",
    "*.BadNews",
    "*.BarRax",
    "*.Barak",
    "*.Bear",
    "*.BeethoveN",
    "*.Bill_Clinton@derpymailorg",
    "*.Bitconnect",
    "*.BlackHat",
    "*.BlackPink",
    "*.BlackRouter",
    "*.Blocked2",
    "*.Blower@india.com",
    "*.BtcKING",
    "*.C0rp0r@c@0Xr@",
    "*.CAGO",
    "*.CASH",
    "*.CCCRRRPPP",
    "*.CEBER3",
    "*.CHAK",
    "*.CHE808",
    "*.CHIP",
    "*.CHRISTMAS",
    "*.CIFGKSAFFSFYGHD",
    "*.CIOP",
    "*.CK",
    "*.COCKROACH",
    "*.COLORIT",
    "*.CONFICKER",
    "*.CONTACTUS",
    "*.CONTACT_TARINEOZA@GMAIL.COM",
    "*.COPAN",
    "*.CQQUH",
    "*.CQXGPMKNR",
    "*.CRABSLKT",
    "*.CRADLE",
    "*.CROWN",
    "*.CROWN!?",
    "*.CRPTXXX",
    "*.CRRRT",
    "*.CRYPTED000007",
    "*.CRYPTOBOSS",
    "*.CRYPTOBYTE",
    "*.CRYPTOSHIEL",
    "*.CRYPTOSHIELD",
    "*.CRYPTR",
    "*.CRYZP",
    "*.CTB2",
    "*.CTBL2",
    "*.CYBERGOD",
    "*.CYRON",
    "*.Caley",
    "*.Calum",
    "*.CerBerSysLocked0009881",
    "*.Cerber_RansomWare@qq.com",
    "*.Chartogy",
    "*.Clop",
    "*.CommonRansom",
    "*.Contact_Here_To_Recover_Your_Files.txt",
    "*.Crab",
    "*.Cry128",
    "*.Cry36",
    "*.Cry9",
    "*.CrySiS",
    "*.CryptWalker",
    "*.CryptedOpps",
    "*.CryptoTorLocker2015!",
    "*.Crypton",
    "*.CyberSCCP",
    "*.CyberSoldiersST",
    "*.Cyclone",
    "*.D00mEd",
    "*.D2550A49BF52DFC23F2C013C5",
    "*.DALE",
    "*.DARKCRY",
    "*.DATASTOP",
    "*.DATAWAIT",
    "*.DATA_IS_SAFE_YOU_NEED_TO_MAKE_THE_PAYMENT_IN_MAXIM_24_HOURS_OR_ALL_YOUR_FILES_WILL_BE_LOST_FOREVER_PLEASE_BE_REZONABLE_IS_NOT_A_JOKE_TIME_IS_LIMITED",
    "*.DECP",
    "*.DESYNC",
    "*.DEUSCRYPT",
    "*.DEXTER",
    "*.DG",
    "*.DHDR4",
    "*.DIABLO6",
    "*.DMR64",
    "*.DOCM!Sample",
    "*.DQXOO",
    "*.DREAM",
    "*.DS335",
    "*.DeLpHiMoRiX!@@@@_@@_@_2018_@@@_@_@_@@@",
    "*.DeLpHiMoRiX*",
    "*.Deniz_K\u0131z\u0131",
    "*.DiskDoctor",
    "*.Djvuu",
    "*.Do_not_change_the_file_name.cryp",
    "*.Doxes",
    "*.EGG",
    "*.EMAN",
    "*.EMAN50",
    "*.EMPTY",
    "*.ENCR",
    "*.ERIS",
    "*.ERIS!",
    "*.ERROR",
    "*.EV",
    "*.EXTE",
    "*.EZDZ",
    "*.Elder",
    "*.Email=[jacdecr@tuta.io]ID=[*].KRONOS",
    "*.Email=[luciferenc@tutanota.com]ID=[*].odveta",
    "*.EnCiPhErEd",
    "*.EncrypTile",
    "*.Encrypted",
    "*.Encrypted5",
    "*.Encrypted[BaYuCheng@yeah.net].XiaBa",
    "*.Encrypted_By_VMola.com",
    "*.Enter",
    "*.EnyBenied",
    "*.Epoblockl",
    "*.Erenahen",
    "*.ExpBoot",
    "*.ExpBoot!",
    "*.FASTBOB",
    "*.FCrypt",
    "*.FEROSUS",
    "*.FFF",
    "*.FIXT",
    "*.FJ7QvaR9VUmi",
    "*.FLATCHER3@INDIA.COM.000G",
    "*.FREDD",
    "*.FRS",
    "*.FTCODE",
    "*.FUNNY",
    "*.Facebook",
    "*.FailedAccess",
    "*.FilGZmsp",
    "*.File",
    "*.FileSlack",
    "*.Flux",
    "*.Freezing",
    "*.Frendi",
    "*.Frivolity",
    "*.Fuck_You",
    "*.FuckedByGhost",
    "*.G8xB",
    "*.GBLOCK",
    "*.GDCB",
    "*.GEFEST",
    "*.GETREKT",
    "*.GG",
    "*.GGGHJMNGFD",
    "*.GILLETTE",
    "*.GMAN",
    "*.GMBN",
    "*.GMPF",
    "*.GORILLA",
    "*.GOTHAM",
    "*.GOTYA",
    "*.GRANIT",
    "*.GRHAN",
    "*.GSupport3",
    "*.Gefest3",
    "*.GodLock",
    "*.GrAnoSinSa",
    "*.GrujaRS",
    "*.HAPP",
    "*.HCY!!",
    "*.HELLO",
    "*.HELPPME@INDIA.COM.ID83994902",
    "*.HHFEHIOL",
    "*.HILDA",
    "*.HRM",
    "*.HUSTONWEHAVEAPROBLEM@KEEMAIL.ME",
    "*.HYENA",
    "*.H_F_D_locked",
    "*.Hades666",
    "*.Hades666!",
    "*.HakunaMatata",
    "*.Harzhuangzi",
    "*.Hermes",
    "*.Hermes666",
    "*.HeroesOftheStorm",
    "*.Horriblemorning",
    "*.Horros",
    "*.Horse4444",
    "*.Horsuke",
    "*.How_To_Decrypt.txt",
    "*.How_To_Get_Back.txt",
    "*.I'WANT MONEY",
    "*.ID-7ES642406.CRY",
    "*.ILLNEST",
    "*.INCANTO",
    "*.INDRIK",
    "*.INFOWAIT",
    "*.ITLOCK",
    "*.IWANT",
    "*.Infinite",
    "*.Ipcrestore",
    "*.JAMES",
    "*.JEEPERS",
    "*.JFCWF",
    "*.JKOUOGVG",
    "*.JLCW2",
    "*.JayTHL",
    "*.JezRoz",
    "*.Jumper",
    "*.K8VfiZ",
    "*.KARLS",
    "*.KAxoAgY",
    "*.KEYH0LES",
    "*.KEYHOLES",
    "*.KEYPASS",
    "*.KEYZ",
    "*.KEYZ.KEYH0LES",
    "*.KICK",
    "*.KK",
    "*.KOK08",
    "*.KOK8",
    "*.KRAB",
    "*.KRONOS",
    "*.KUAJW",
    "*.Kg9EX",
    "*.Kiratos",
    "*.L0CKED",
    "*.L1LL",
    "*.LAMBDA.LOCKED",
    "*.LCKD",
    "*.LDPR",
    "*.LEGO",
    "*.LGAWPULM",
    "*.LIGHTNING",
    "*.LIN",
    "*.LOCK75",
    "*.LOCKED.txt",
    "*.LOCKED_BY_pablukl0cker",
    "*.LOCKED_PAY",
    "*.LOCKOUT",
    "*.LOL!",
    "*.LOLI",
    "*.LOVE",
    "*.LTML",
    "*.LanRan*",
    "*.LanRan2.0.5",
    "*.Lazarus",
    "*.Lazarus+!",
    "*.LeChiffre",
    "*.Locked-by-Mafia",
    "*.Locked_file",
    "*.Lockify",
    "*.LolSec",
    "*.LonleyEncryptedFile",
    "*.Losers",
    "*.Lost_Files_Encrypt",
    "*.LoveYou",
    "*.MATRIX",
    "*.MAYA",
    "*.MDEN",
    "*.MDRL",
    "*.MERRY",
    "*.MIKOYAN",
    "*.MMM",
    "*.MMTeam",
    "*.MOLE",
    "*.MOLE00",
    "*.MOLE01",
    "*.MOLE02",
    "*.MOLE03",
    "*.MOLE04",
    "*.MOLE66",
    "*.MRCR1",
    "*.MTC",
    "*.MTXLOCK",
    "*.MZ173801",
    "*.MZ434376",
    "*.MaMo434376",
    "*.Malki",
    "*.Marozka",
    "*.Mcafee",
    "*.Mercury",
    "*.Mira",
    "*.MyChemicalRomance4EVER",
    "*.NEMTY_*",
    "*.NEMTY_VFFXXXX",
    "*.NEMTY_VFRLXV9",
    "*.NEWRAR",
    "*.NGSC",
    "*.NHCR",
    "*.NIGGA",
    "*.NM4",
    "*.NMCRYPT",
    "*.NOBAD",
    "*.NOLOST",
    "*.NOOB",
    "*.NOT",
    "*.NOT_OPEN",
    "*.NUMBERDOT",
    "*.Nano",
    "*.Navi",
    "*.Neptune",
    "*.Node0",
    "*.Novosof",
    "*.Nutella",
    "*.O67NG",
    "*.OBLIVION",
    "*.OGONIA",
    "*.OMG!",
    "*.ONION",
    "*.ONYC",
    "*.ONYX",
    "*.OOFNIK",
    "*.OOOKJYHCTVDF",
    "*.OQn1B",
    "*.OTR",
    "*.OXR",
    "*.ObcKIn",
    "*.OhNo!",
    "*.Ordinal",
    "*.Ox4444",
    "*.PA-SIEM",
    "*.PANDA",
    "*.PAUSA",
    "*.PAY",
    "*.PAY_IN_MAXIM_24_HOURS_OR_ALL_YOUR_FILES_WILL_BE_PERMANENTLY_DELETED_PLEASE_BE_REZONABLE_you_have_only_1_single_chance_to_make_the_payment",
    "*.PC-FunHACKED*",
    "*.PEDANT",
    "*.PEDO",
    "*.PEGS1",
    "*.PERSONAL_ID*",
    "*.PHOBOS",
    "*.PICO",
    "*.PIRATE",
    "*.PLANETARY",
    "*.PLANT",
    "*.PLIN",
    "*.PLUT",
    "*.PO1HG",
    "*.POHU",
    "*.POSHKODER",
    "*.PRCP",
    "*.PRIVAT66",
    "*.PTGEPVEKM",
    "*.PUMAX",
    "*.PayDay",
    "*.Persephone666!",
    "*.Petya",
    "*.Pig4444",
    "*.PoAr2w",
    "*.Pox",
    "*.PrOtOnIs",
    "*.PrOtOnIs.VaNdElIs",
    "*.Prandel",
    "*.Prodecryptor",
    "*.Prt6aV9",
    "*.Puma",
    "*.QH24",
    "*.Qtyu8vH5wDXf6OSWAm5NuA==ObcK",
    "*.R.i.P",
    "*.R16M01D05",
    "*.R3K7M9",
    "*.R4A",
    "*.R4bb0l0ck",
    "*.R5A",
    "*.RAD",
    "*.RADAMANT",
    "*.RANSOM",
    "*.RARE1",
    "*.RASTAKHIZ",
    "*.RDM",
    "*.RDWF",
    "*.REBL",
    "*.REBUS",
    "*.RECOVERYOURFILES",
    "*.RENSENWARE",
    "*.REVENGE",
    "*.RJZUNA",
    "*.RMCM1",
    "*.ROGER",
    "*.RRK",
    "*.RSNSlocked",
    "*.RSplited",
    "*.RaaS",
    "*.Ransed",
    "*.RansomAES",
    "*.RansomMine",
    "*.ReadTheInstructions",
    "*.Read_Me.Txt",
    "*.RedEye",
    "*.Reyptson",
    "*.Rooster865qq",
    "*.Rooster865qqZ",
    "*.Ryuk",
    "*.SALSA222",
    "*.SANTANA",
    "*.SATANA",
    "*.SAVEYOURDATA",
    "*.SAVEfiles",
    "*.SBLOCK",
    "*.SDEN",
    "*.SENRUS17",
    "*.SEPSIS",
    "*.SERP",
    "*.SEVENDAYS",
    "*.SF",
    "*.SHARK",
    "*.SHRUG",
    "*.SHRUG2",
    "*.SKJDTHGHH",
    "*.SKYSTARS",
    "*.SLAV",
    "*.SOLO",
    "*.SONIC",
    "*.SPCT",
    "*.STOP",
    "*.STOPDATA",
    "*.SUPERCRYPT",
    "*.SUSPENDED",
    "*.SYMMYWARE",
    "*.SaMsUnG",
    "*.SaherBlueEagleRansomware",
    "*.Satyr",
    "*.SaveTheQueen",
    "*.SaveTheQueenING",
    "*.Scorpion",
    "*.SecureCrypte",
    "*.SecureCrypted",
    "*.Server",
    "*.ShutUpAndDance",
    "*.Sifrelendi",
    "*.Sil3nt5pring",
    "*.Silent",
    "*.SpartCript",
    "*.Srpx",
    "*.Stinger",
    "*.SySS",
    "*.TABGH",
    "*.TEST",
    "*.TGIF",
    "*.THANATOS",
    "*.THDA",
    "*.TMS5",
    "*.TR",
    "*.TRMT",
    "*.TROLL",
    "*.TROLL,",
    "*.TRUE",
    "*.TaRoNiS",
    "*.Tesla",
    "*.Tfudeq",
    "*.TheTrumpLockerf",
    "*.TheTrumpLockerp",
    "*.Tiger4444",
    "*.Timestamp",
    "*.Tor+",
    "*.Tornado",
    "*.TraNs",
    "*.UIK1J",
    "*.UIWIX",
    "*.UKCZA",
    "*.UNIT09",
    "*.UNLIS",
    "*.UselessFiles",
    "*.VBRANSOM",
    "*.VENDETTA",
    "*.VIRUS",
    "*.VIVAL",
    "*.Vapor",
    "*.Venusf",
    "*.VforVendetta",
    "*.VisionCrypt",
    "*.W0YR8",
    "*.WAITING",
    "*.WALAN",
    "*.WALAN,",
    "*.WAND",
    "*.WAmarlocked",
    "*.WCRYT",
    "*.WHY",
    "*.WHY\u2026",
    "*.WINDOWS",
    "*.WORMCRYPT0R",
    "*.WORMKILLER@INDIA.COM.XTBL",
    "*.WRNY",
    "*.WWW",
    "*.Wana Decrypt0r Trojan-Syria Editi0n",
    "*.Where_my_files.txt",
    "*.Whereisyourfiles",
    "*.Work",
    "*.Wx7A6",
    "*.XBTL",
    "*.XERO",
    "*.XRNT",
    "*.XVNAW",
    "*.XY6LR",
    "*.XZZX",
    "*.Xcri",
    "*.XiaoBa",
    "*.XiaoBa1",
    "*.XiaoBa34",
    "*.XmdXtazX",
    "*.XmdXtazX.",
    "*.YAYA",
    "*.YDHM",
    "*.YIAQDG",
    "*.YOLO",
    "*.YOU-ARE-FUCKED-BY-BALILUWARE-(CODED-BY-HEROPOINT)",
    "*.YOUR_LAST_CHANCE",
    "*.YTBL",
    "*.YYTO",
    "*.YYYYBJQOQDU",
    "*.Yakes",
    "*.Z81928819",
    "*.ZABLOKOWANE",
    "*.ZAYKA",
    "*.ZINO",
    "*.ZW",
    "*.Zeropadypt",
    "*.Zimbra",
    "*.Zzzz",
    "*.[1701222381@qq.com].ETH",
    "*.[BRAINCRYPT@INDIA.COM].BRAINCRYPT",
    "*.[BaYuCheng@yeah.net].china",
    "*.[Bas_ket@aol.com].java",
    "*.[Brazzers@aolonline.top].arena",
    "*.[DonovanTudor@aol.com].bat",
    "*.[Enigma1crypt@aol.com].ETH",
    "*.[File-Help@India.Com].mails",
    "*.[Filesreturn247@gmx.de].lock",
    "*.[GOFMEN17@YA.RU],CRP",
    "*.[GuardBTC@cock.li].java",
    "*.[Hardcorr@protonmail.com].java",
    "*.[Hardcorrr@protonmail.com].java",
    "*.[ID-][].JSWRM",
    "*.[ID62133703]",
    "*.[ID=*2uJ][Mail=letitbedecryptedzi@gmail.com].Lazarus",
    "*.[ID=*][Mail=unlockme123@protonmail.com].Lazar",
    "*.[ID]*[ID]",
    "*.[ID]*[ID]Look",
    "*.[Kromber@tutanota.com]",
    "*.[MAXVISION@SECMAIL.PRO].CRIPTOGRAFADO",
    "*.[MailPayment@decoder.com].ETH",
    "*.[NO.TORP3DA@PROTONMAIL.CH].WALLET",
    "*.[PINGY@INDIA.COM]",
    "*.[SHIELD0@USA.COM].*.WALLET",
    "*.[SSSDKVNSDFITD]",
    "*.[Sepsis@protonmail.com].SEPSIS",
    "*.[Traher@Dr.Com]",
    "*.[Unlock24@cock.li].combo",
    "*.[XAVAX@PM.ME].omerta",
    "*.[absonkaine@aol.com].phoenix",
    "*.[actum_signum@aol.com].onion",
    "*.[admin@hoist.desi].*.WALLET",
    "*.[adobe-123@tutanota.com].ETH",
    "*.[amagnus@india.com].wallet",
    "*.[amber777king@cock.li].amber",
    "*.[assistance@firemail.cc].nuclear",
    "*.[avalona.toga@aol.com].blocking",
    "*.[avflantuheems1984@aol.com].adobe",
    "*.[backdata@cock.li].CreamPie",
    "*.[backtonormal@foxmail.com].adobe",
    "*.[bacon@oddwallps.com].java",
    "*.[batmanbitka1@cock.li].arena",
    "*.[bitcharity@protonmail.com].com",
    "*.[black.world@tuta.io].nuclear",
    "*.[blellockr@godzym.me].bkc",
    "*.[blind@cock.li].blind",
    "*.[btc2018@tutanota.de].meduza",
    "*.[btc@fros.cc].btc",
    "*.[btccrypthelp@cock.li].ETH",
    "*.[buy-decryptor@pm.me]",
    "*.[china-decryptor@pm.me]",
    "*.[cho.dambler@yandex.com]",
    "*.[cockroach@cock.lu].COCKROACH",
    "*.[costelloh@aol.com].phoenix",
    "*.[crab7765@gmx.de].crab",
    "*.[crypt1style@aol.com].MERS",
    "*.[crypted_files@qq.com].aqva",
    "*.[crypto7892@gmx.de].crypto",
    "*.[crysis@life.com].*.WALLET",
    "*.[cyberwars@qq.com].war",
    "*.[daves.smith@aol.com]",
    "*.[decodingfiles@tuta.io].java",
    "*.[decrypthelp@qq.com].java",
    "*.[decrypthelper@protonmail.com].phobos",
    "*.[decryptmyfiles@qq.com].ETH",
    "*.[decryptprof@qq.com].ETH",
    "*.[drwho888@mail.fr].888",
    "*.[dsupport@protonmail.com]",
    "*.[eV3rbe@rape.lol].eV3rbe",
    "*.[embrace@airmail.cc].embrace",
    "*.[epta.mcold@gmail.com]",
    "*.[epta.mcold@gmail.com],",
    "*.[everbe@airmail.cc].everbe",
    "*.[everest@airmail.cc].EVEREST",
    "*.[evil@cock.lu].EVIL",
    "*.[fileslocker@pm.me]",
    "*.[firmabilgileri@bk.ru]",
    "*.[frazeketcham@cnidia.com].eth.hv88g2",
    "*.[grethen@tuta.io]",
    "*.[gustafkeach@johnpino.com].ad",
    "*.[help24decrypt@cock.li",
    "*.[help24decrypt@cock.li]",
    "*.[helpfilerestore@india.com].ETH",
    "*.[insane@airmail.cc].insane",
    "*.[lockhelp@qq.com].gate",
    "*.[maxicrypt@cock.li].maxicrypt",
    "*.[mercarinotitia@qq.com].adobe",
    "*.[mich78@usa.com]",
    "*.[mixon.constantine@aol.com].gamma",
    "*.[mr.yoba@aol.com].yoba",
    "*.[mrbin775@gmx.de].bin",
    "*.[mrpeterson@cock.li].GFS",
    "*.[notopen@countermail.com].NOT_OPEN",
    "*.[oron@india.com].dharma",
    "*.[pain@cock.lu].pain",
    "*.[pain@onefinedstay.com].java",
    "*.[papillon9275]",
    "*.[paradisecity@cock.li].arena",
    "*.[parambingobam@cock.li].adobe",
    "*.[patern32@protonmail.com].omerta",
    "*.[paydecryption@qq.com].brrr",
    "*.[payransom@qq.com].adobe",
    "*.[plombiren@hotmail.com].plomb",
    "*.[ponce.lorena@aol.com]",
    "*.[randal_inman@aol.com].help",
    "*.[rans0me@protonmail.com].b00m",
    "*.[raphaeldupon@aol.com].ETH",
    "*.[resque@plague.desi].scarab",
    "*.[restorehelp@qq.com].java",
    "*.[satan2018@protonmail.com].java",
    "*.[skeleton@rape.lol].skeleton",
    "*.[slaker@india.com]*.wallet",
    "*.[staRcRypt@tutanota.com].omerta",
    "*.[stopencrypt@qq.com].adobe",
    "*.[stopstorage@qq.com].java",
    "*.[supp01@arimail.cc].napoleon",
    "*.[suupport@protonmail.com].scarab",
    "*.[teroda@bigmir.net].masterteroda@bigmir.net",
    "*.[thedecrypt111@qq.com].ETH",
    "*.[thunderhelp@airmail.cc].thunder",
    "*.[ti_kozel@lashbania.tv].\u043a\u043e\u0441\u0442\u044f",
    "*.[velasquez.joeli@aol.com]",
    "*.[volcano666@tutanota.de].volcano",
    "*.[w_decrypt24@qq.com].zq",
    "*.[w_unblock24@qq.com].ws",
    "*.[welesmatron@aol.com].btc",
    "*.[writehere@qq.com].btc",
    "*.[yoursalvations@protonmail.ch].neverdies@tutanota.com",
    "*.[zoro4747@gmx.de].zoro",
    "*._AiraCropEncrypted!",
    "*._Crypted",
    "*._NEMTY*",
    "*._NEMTY_BTKid9H_",
    "*.__dilmaV1",
    "*._raphaeldupon@aol.com_.btc",
    "*._ryp",
    "*.a19",
    "*.a5zfn",
    "*.a800",
    "*.a990",
    "*.aRpt",
    "*.aa1",
    "*.aaa",
    "*.aajf",
    "*.abc",
    "*.abcd",
    "*.acc",
    "*.actin",
    "*.actor",
    "*.acuna",
    "*.acute",
    "*.adage",
    "*.adam",
    "*.adapaterson@mail.com.mkmk",
    "*.adk",
    "*.adobe",
    "*.adobee",
    "*.aes!",
    "*.aes128ctr",
    "*.aes_ni",
    "*.aes_ni_0day",
    "*.aescrypt",
    "*.aesir",
    "*.aga",
    "*.airacropencrypted!",
    "*.akaibvn",
    "*.akira",
    "*.alanwalkergod@protonmail.com",
    "*.albertkerr94@mail.com.m5m5",
    "*.aleta",
    "*.alien",
    "*.alilibat",
    "*.allcry",
    "*.alosia",
    "*.altdelete@cock.li.district",
    "*.am",
    "*.amba",
    "*.amber",
    "*.amnesia",
    "*.anami",
    "*.andonio",
    "*.android",
    "*.andymarvin",
    "*.angelamerkel",
    "*.animus",
    "*.anon",
    "*.anonimus.mr@yahoo.com",
    "*.anonymous",
    "*.antihacker2017",
    "*.anubi",
    "*.ap19",
    "*.aqva",
    "*.area",
    "*.arena",
    "*.areyoulovemyrans",
    "*.armadilo1",
    "*.arrow",
    "*.artilkilin@tuta.io.wq2k",
    "*.asasin",
    "*.asdasdasd",
    "*.au1crypt",
    "*.auw2w2g0",
    "*.axx",
    "*.azero",
    "*.b00m",
    "*.b0ff",
    "*.b29",
    "*.b5c6",
    "*.b78vi7v6ri66b",
    "*.b89b",
    "*.bRcrypT",
    "*.backup",
    "*.badday",
    "*.badutclowns",
    "*.bagi",
    "*.bam!",
    "*.bananaCrypt",
    "*.banjo",
    "*.banta",
    "*.bart",
    "*.bart.zip",
    "*.basilisque@protonmail_com",
    "*.basslock",
    "*.bbqb",
    "*.beef",
    "*.beep",
    "*.beer",
    "*.beets!Ransom",
    "*.berost",
    "*.berosuce",
    "*.besub",
    "*.betta",
    "*.better_call_saul",
    "*.bgCIb",
    "*.bgtx",
    "*.bguu",
    "*.billingsupp",
    "*.bip",
    "*.birbb",
    "*.bit",
    "*.bitkangoroo",
    "*.bitstak",
    "*.biz",
    "*.bizer",
    "*.bk666",
    "*.bkc",
    "*.bkp",
    "*.black007",
    "*.blackruby",
    "*.blank",
    "*.bleep",
    "*.bleepYourFiles",
    "*.blind",
    "*.blind2",
    "*.bliun",
    "*.bloc",
    "*.blocatto",
    "*.bloccato",
    "*.block",
    "*.block_file12",
    "*.blocked",
    "*.bloked",
    "*.blower",
    "*.bmn63",
    "*.bmps@tutanota.com.major",
    "*.bobelectron",
    "*.bomber",
    "*.booknish",
    "*.boooam@cock_li",
    "*.boost",
    "*.bopador",
    "*.bora",
    "*.boris",
    "*.boroff",
    "*.boston",
    "*.bot",
    "*.bot!",
    "*.braincrypt",
    "*.breaking bad",
    "*.breaking_bad",
    "*.breakingbad",
    "*.breeding123",
    "*.brickr",
    "*.bript",
    "*.browec",
    "*.brrr",
    "*.brusaf",
    "*.btc",
    "*.btc -help-you",
    "*.btc-help-you",
    "*.btc.kkk.fun.gws",
    "*.btcbtcbtc",
    "*.btchelp@xmpp.jp",
    "*.btcware",
    "*.btix",
    "*.budak",
    "*.bufas",
    "*.bunny",
    "*.burn",
    "*.bvjznsjlo",
    "*.bwall",
    "*.c300",
    "*.cRh8",
    "*.calix",
    "*.cammora",
    "*.canihelpyou",
    "*.cap",
    "*.carcn",
    "*.carote",
    "*.cassetto",
    "*.cawwcca",
    "*.cbf",
    "*.cbs0z",
    "*.cbu1",
    "*.ccc",
    "*.cccmn",
    "*.ccryptor",
    "*.cdrpt",
    "*.cekisan",
    "*.cerber",
    "*.cerber2",
    "*.cerber3",
    "*.cerber6",
    "*.cesar",
    "*.cetori",
    "*.cezar",
    "*.cezor",
    "*.cfk",
    "*.cfm",
    "*.charck",
    "*.charcl",
    "*.charm",
    "*.charmant",
    "*.chch",
    "*.chech",
    "*.checkdiskenced",
    "*.cheetah",
    "*.chekyshka",
    "*.chifrator@qq_com",
    "*.choda",
    "*.ciphered",
    "*.cizer",
    "*.ckey(RandomID).email(data1992@protonmail.com).pack14",
    "*.ckey(oK5WFfTq).email(data1992@protonmail.com).pack14",
    "*.clean",
    "*.clf",
    "*.clinTON",
    "*.cloud",
    "*.cmb",
    "*.cmsnwned",
    "*.cnc",
    "*.cobain",
    "*.cobra",
    "*.cock.email",
    "*.cock.li",
    "*.cockista",
    "*.code",
    "*.coded",
    "*.coder007@protonmail.com",
    "*.codnat",
    "*.codnat1",
    "*.codnet",
    "*.codnet1",
    "*.codyprince92@mail.com.ovgm",
    "*.coharos",
    "*.coin",
    "*.colecyrus@mail.com.b007",
    "*.com2",
    "*.combo",
    "*.comrade",
    "*.condat",
    "*.contact-me-here-for-the-key-admin@adsoleware.com",
    "*.coot",
    "*.corrupted",
    "*.cosakos",
    "*.country82000",
    "*.coverton",
    "*.cr020801",
    "*.cr1",
    "*.crabs",
    "*.craftul",
    "*.crash",
    "*.crashed",
    "*.crazy",
    "*.creeper",
    "*.crime",
    "*.crinf",
    "*.cripted",
    "*.criptiko",
    "*.criptokod",
    "*.cripton",
    "*.cripttt",
    "*.crjocker",
    "*.crjoker",
    "*.croc",
    "*.crptd",
    "*.crptrgr",
    "*.cry",
    "*.crybrazil",
    "*.crying",
    "*.cryp1",
    "*.crypt",
    "*.crypt1",
    "*.crypt12",
    "*.crypt2019",
    "*.crypt38",
    "*.crypt888",
    "*.crypte",
    "*.crypted",
    "*.crypted!Sample",
    "*.crypted034",
    "*.crypted_bizarrio@pay4me_in",
    "*.crypted_file",
    "*.crypted_marztoneb@tutanota_de",
    "*.crypted_pony_test_build*",
    "*.crypted_pony_test_build_xxx_xxx_xxx_xxx_xxx",
    "*.cryptes",
    "*.cryptfile",
    "*.cryptgh0st",
    "*.crypto",
    "*.cryptoNar",
    "*.cryptoid",
    "*.cryptojoker",
    "*.cryptolocker",
    "*.cryptotorlocker*",
    "*.cryptowall",
    "*.cryptowin",
    "*.crypttt",
    "*.cryptx*",
    "*.cryptz",
    "*.crypz",
    "*.cs16",
    "*.cspider",
    "*.ctbl",
    "*.ctrlalt@cock.li.district",
    "*.cube",
    "*.cxk_nmsl",
    "*.cxkdata",
    "*.cyberdrill",
    "*.cypher",
    "*.czvxce",
    "*.d3g1d5",
    "*.d4nk",
    "*.dCrypt",
    "*.da_vinci_code",
    "*.dalle",
    "*.damage",
    "*.damoclis",
    "*.danger",
    "*.daris",
    "*.darkness",
    "*.darus",
    "*.datun",
    "*.david",
    "*.davilarita@mail.com.yyy0",
    "*.dbger",
    "*.dcom",
    "*.dcry",
    "*.ddos",
    "*.ddpcbi",
    "*.deal",
    "*.decodeme666@tutanota_com",
    "*.decodeme666tutanota_com",
    "*.decrypme",
    "*.decrypt2017",
    "*.decrypter@tutanota.com",
    "*.decryptgarranty",
    "*.decryptional",
    "*.ded",
    "*.dedo",
    "*.deep",
    "*.defender",
    "*.demonslay335_you_cannot_decrypt_me!",
    "*.deria",
    "*.derp",
    "*.desu",
    "*.dfjhsalfhsakljfhsljkahfdjklashfdjklh",
    "*.dharma",
    "*.dian",
    "*.die",
    "*.digiworldhack@tutanota.com",
    "*.diller13",
    "*.disposed2017",
    "*.divine",
    "*.djuvq",
    "*.djvup",
    "*.djvuq",
    "*.djvur",
    "*.djvus",
    "*.djvut",
    "*.dlenggrl",
    "*.dmo",
    "*.dodger",
    "*.dodoc",
    "*.dolphin",
    "*.dom",
    "*.domino",
    "*.domn",
    "*.donation1@protonmail.ch.12345",
    "*.donut",
    "*.doomed",
    "*.doples",
    "*.dotmap",
    "*.doubleoffset",
    "*.dqb",
    "*.dragnea",
    "*.drume",
    "*.drweb",
    "*.ducueyuav",
    "*.duhust",
    "*.dutan",
    "*.dviide",
    "*.dwbiwty",
    "*.dxjay",
    "*.dxxd",
    "*.dy8wud",
    "*.dyaaghemy",
    "*.dyatel@qq_com",
    "*.e4m",
    "*.eQTz",
    "*.eTeRnItY",
    "*.ebay",
    "*.ecc",
    "*.eclr",
    "*.eddldzor",
    "*.edgel",
    "*.eky",
    "*.elpvd",
    "*.embrace",
    "*.emilysupp",
    "*.emsisosisoft",
    "*.enc",
    "*.enc_robbinhood",
    "*.encedRSA",
    "*.encencenc",
    "*.encmywork",
    "*.encoderpass",
    "*.encrptd",
    "*.encrypt",
    "*.encryptd",
    "*.encrypted.locked",
    "*.encryptedAES",
    "*.encryptedALL",
    "*.encryptedRSA",
    "*.encrypted[Payfordecrypt@protonmail.com]",
    "*.encrypted_backup",
    "*.encryptedped",
    "*.encryptedyourfiles",
    "*.enigma",
    "*.enjey",
    "*.eoeo",
    "*.epic",
    "*.etols",
    "*.euclid",
    "*.evil",
    "*.evillock",
    "*.evolution",
    "*.evopro",
    "*.ex_parvis@aol.com.AIR",
    "*.excuses",
    "*.executioner",
    "*.exotic",
    "*.exploit",
    "*.explorer",
    "*.extension.srpx",
    "*.exx",
    "*.ezz",
    "*.ezzyl",
    "*.f*cked",
    "*.fairytail",
    "*.fake",
    "*.fantom",
    "*.fartplz",
    "*.fast",
    "*.fastrecovery.xmpp.jp",
    "*.fastrecovery@airmail.cc",
    "*.fastsupport@xmpp.jp",
    "*.fat32",
    "*.fbuvkngy",
    "*.fedasot",
    "*.ferosas",
    "*.file0locked",
    "*.filegofprencrp",
    "*.fileiscryptedhard",
    "*.filesfucked",
    "*.filock",
    "*.fire",
    "*.firecrypt",
    "*.firmabilgileri",
    "*.fix",
    "*.flat",
    "*.flyper",
    "*.fmoon",
    "*.forasom",
    "*.fordan",
    "*.format",
    "*.fox",
    "*.freefoam",
    "*.frend",
    "*.frmvrlr2017",
    "*.frtrss",
    "*.fsdfsdfsdfsdfsdfsfdsfs",
    "*.fuXcF",
    "*.fuchsia",
    "*.fuck",
    "*.fuck_you_av_we_are_not_globe_fake",
    "*.fucked",
    "*.fucku",
    "*.fuckyourdata",
    "*.fun",
    "*.g0h8iwj",
    "*.g^od",
    "*.game",
    "*.gamma",
    "*.gangbang",
    "*.gankLocked",
    "*.garcewa",
    "*.garrantydecrypt",
    "*.gate",
    "*.gdb",
    "*.ge010gic",
    "*.ge0l0gic",
    "*.ge0l0gic_readme.txt",
    "*.gefickt",
    "*.gehad",
    "*.gembok",
    "*.geno",
    "*.gerber5",
    "*.gero",
    "*.gerosan",
    "*.gesd",
    "*.ghost",
    "*.gigahertz",
    "*.globe",
    "*.gocr",
    "*.godes",
    "*.godra",
    "*.goforhelp",
    "*.gommemode",
    "*.good",
    "*.gore",
    "*.gotcha",
    "*.gr3g",
    "*.granny",
    "*.greystars@protonmail.com",
    "*.grod",
    "*.gropas",
    "*.group",
    "*.grovas",
    "*.grovat",
    "*.grt",
    "*.grupothermot3k",
    "*.grux",
    "*.gruzin@qq_com",
    "*.gryphon",
    "*.guarded",
    "*.guesswho",
    "*.gui",
    "*.gusau",
    "*.guvara",
    "*.gws",
    "*.gws.porno",
    "*.g\u043eod",
    "*.h3ll",
    "*.hNcrypt",
    "*.ha3",
    "*.hac",
    "*.hackdoor",
    "*.hacked",
    "*.hacked.by.Snaiparul",
    "*.haka",
    "*.hannah",
    "*.happenencedfiles",
    "*.happy",
    "*.happydayzz",
    "*.happyness",
    "*.harma",
    "*.hasp",
    "*.haters",
    "*.hb15",
    "*.hccapx",
    "*.hceem",
    "*.hcked",
    "*.hdeaf",
    "*.hdmr",
    "*.heets",
    "*.heisenberg",
    "*.help.Ransom",
    "*.help24decrypt@qq.com",
    "*.help_restore*.*",
    "*.helpdecrypt@india.com",
    "*.helpdecrypt@ukr*.net",
    "*.helpdecrypt@ukr.net",
    "*.helpdecrypt@ukr_net",
    "*.helpmeencedfiles",
    "*.helppme@india.com.*",
    "*.herad",
    "*.herbst",
    "*.hermes837",
    "*.heroset",
    "*.hese",
    "*.hets",
    "*.hilegofprencrp",
    "*.hitler",
    "*.hjgdl",
    "*.hncdumn",
    "*.hnumkhotep",
    "*.hnumkhotep@india.com.hnumkhotep",
    "*.hnyear",
    "*.hofos",
    "*.honor",
    "*.horon",
    "*.horsuke@nuke.africa",
    "*.how_to_recover*.*",
    "*.howcanihelpusir",
    "*.hrosas",
    "*.htrs",
    "*.hush",
    "*.hydracrypt_ID*",
    "*.hydracrypt_ID_*",
    "*.iGotYou",
    "*.iaufhhhfiles_BACK_PLS_READ.html",
    "*.iaufhhhhfiles_BACK_PLS_READ.html",
    "*.iaufkakfhsaraf",
    "*.id-*.[*@*].*",
    "*.id-*.[3442516480@qq.com].pdf",
    "*.id-*.[Harmahelp73@gmx.de].harma",
    "*.id-*.[MerlinWebster@aol.com].harma",
    "*.id-*.[adm15@pr\u2026",
    "*.id-*.[admin@fentex.net].money",
    "*.id-*.[admin@sectex.net].bot",
    "*.id-*.[admin@spacedatas.com].ROGER",
    "*.id-*.[asdbtc@aol.com].asd",
    "*.id-*.[backdata.company@aol.com].ROGER",
    "*.id-*.[backdatacompany@aol.com].html",
    "*.id-*.[bitcoin1@foxmail.com].harma",
    "*.id-*.[bitlocker@foxmail.com",
    "*.id-*.[btcdecoding@qq.com].dqb",
    "*.id-*.[karlosdecrypt@outlook.com].KARLS",
    "*.id-*.[moncler@tutamail.com].redrum",
    "*.id-*.[mr.hacker@tutanota.com].USA",
    "*.id-*.[partfile@airmail.cc].com",
    "*.id-*.[payday@tfwno.gf].html",
    "*.id-*.[teammarcy10@cock.li].kharma",
    "*.id-*.[veracrypt@foxmail.com].adobe",
    "*.id-*.[vip76@protonmail.com].html",
    "*.id-*.cmb",
    "*.id-*6.[3442516480@qq.com].pdf",
    "*.id-*E6.[3442516480@qq.com].pdf",
    "*.id-.[clifieb@tutanota.com].nvram",
    "*.id-.[hmdjam@protonmail.com].harma",
    "*.id-.[hobbsadelaide@aol.com].harma",
    "*.id-02B52D6C.[Bas_ket@aol.com].java",
    "*.id-3044989498_x3m",
    "*.id-502F1F51.[mstr.hacker@protonmail.com].KICK",
    "*.id-C4BA3647.[fox5sec@aol.com].cmd",
    "*.id.*.crazy",
    "*.id[********-1161].[member987@tutanota.com].actin",
    "*.id[*-*].[butters.felicio@aol.com].deal",
    "*.id[*-*].[lockhelp@qq.com].acute",
    "*.id[*-*].[wewillhelpyou@qq.com].adage",
    "*.id[*-1075].[lewisswaffield.a@aol.com].help",
    "*.id[*-1135].[walletwix@aol.com].actin",
    "*.id[*-1161].[member987@tutanota.com].actin",
    "*.id[*-2242].[Ke\u2026",
    "*.id[*-2252].[eccentric_inventor@aol.com].adage",
    "*.id[*-2266].[decryptbox@airmail.cc].Adair",
    "*.id[*-2275",
    "*.id[*-2275].[checkcheck07@qq.com].Adame",
    "*.id[*-2275].[raynorzlol@tutanota.com].Adame",
    "*.id[*-2275].[recovermyfiles2019@thesecure.biz].Adame",
    "*.id[*-2275].[supportcrypt2019@cock\u2026",
    "*.id[*-2299].[britt.looper@aol.com].phoenix",
    "*.id[*-2300].[crysall.g@aol.com].banjo",
    "*.id[*-2315].[decrypt@files.mn].Banks",
    "*.id[*-2325].[zax4444@qq.com].Banta",
    "*.id[*-2345].[recoverdata@cock.li].Banta",
    "*.id[*-2387].[gruzudo@cock.li].Barak",
    "*.id[*-2394].[adagekeys@qq.com].Caleb",
    "*.id[*-2416].[restorebackup@qq.com].Caley",
    "*.id[*-2423].[hanesworth.fabian@aol.com].dealemail",
    "*.id[*-2425].[*n*@cock.li].Caley",
    "*.id[*-2465].[keysfordecryption@airmail.cc].Calum",
    "*.id[*-2495].[agent5305@firemail.cc].age",
    "*.id[*-2497].[octopusdoc@mail.ee].octopus",
    "*.id[*-2542].[bexonvelia@aol.com].Dever",
    "*.id[*].[backcompanyfiles@protonmail.com].Calum",
    "*.id[6AB8ABF5-2346].[limboshuran@cock].banta",
    "*.id[C4BA3647-2250].[wewillhelpyou@qq.com].adage",
    "*.id[C4BA3647-2271].[worldofdonkeys@protonmail.com].BORISHORSE",
    "*.id[C4BA3647-2299].[britt.looper@aol.com].phoenix",
    "*.id[C4BA3647-2301].[hanesworth.fabian@aol.com].banjo",
    "*.id[RandomIP].[bron_lynn@aol.com].help",
    "*.id_*********_.WECANHELP",
    "*.id_*_.YOUR_LAST_CHANCE!",
    "*.ifuckedyou",
    "*.igza4c",
    "*.ihsdj",
    "*.iloveworld",
    "*.impect",
    "*.improved",
    "*.imsorry",
    "*.incpas",
    "*.infected",
    "*.infileshop@gmail_com_ID44",
    "*.info",
    "*.info@mymail9[dot]com",
    "*.info@sharebyy[dot]com",
    "*.infovip@airmail.cc",
    "*.insane",
    "*.insta",
    "*.invaded",
    "*.ipygh",
    "*.ironhead",
    "*.isis",
    "*.isolated",
    "*.ispfv",
    "*.israbye",
    "*.iudgkwv",
    "*.iwanthelpuuu",
    "*.jack",
    "*.jaff",
    "*.jamper",
    "*.jbptlio",
    "*.jc",
    "*.jcry",
    "*.jeepdayz@india.com",
    "*.jes",
    "*.jewsomware",
    "*.jey",
    "*.jimm",
    "*.jodis",
    "*.josep",
    "*.jse",
    "*.jsworm",
    "*.jundmd@cock.li*",
    "*.jungle@anonymousspechcom",
    "*.junior",
    "*.junked",
    "*.jupstb",
    "*.justbtcwillhelpyou",
    "*.justice",
    "*.jzphmsfs",
    "*.k0stya",
    "*.kali",
    "*.karl",
    "*.karne",
    "*.katipuneros",
    "*.katyusha",
    "*.kci0n",
    "*.kcwenc",
    "*.ke3q",
    "*.kee",
    "*.keepcalm",
    "*.kencf",
    "*.kernel_complete",
    "*.kernel_pid",
    "*.kernel_time",
    "*.kes$",
    "*.keybtc@inbox",
    "*.keybtc@inbox_com",
    "*.kezoz",
    "*.kgpvwnr",
    "*.kilit",
    "*.kill",
    "*.killedXXX",
    "*.kimchenyn",
    "*.kimcilware",
    "*.kimcilware.locked",
    "*.king_ouroboros*",
    "*.kirked",
    "*.kiss",
    "*.kitty",
    "*.kjh",
    "*.kkk",
    "*.klope",
    "*.kodg",
    "*.kok",
    "*.korea",
    "*.koreaGame",
    "*.korrektor",
    "*.kostya",
    "*.kovasoh",
    "*.kr",
    "*.kr3",
    "*.kraken",
    "*.kratos",
    "*.kraussmfz",
    "*.kropun",
    "*.kroput",
    "*.kroput1",
    "*.krusop",
    "*.krypted",
    "*.kryptonite",
    "*.krzffw",
    "*.ktuhzxpi",
    "*.kuntzware",
    "*.kuub",
    "*.kvag",
    "*.kvllyatprotonmaildotch",
    "*.kwaaklocked",
    "*.kyra",
    "*.lalabitch",
    "*.lalabitch,",
    "*.lambda.l0cked",
    "*.lambda_l0cked",
    "*.lamo",
    "*.langolier",
    "*.lanset",
    "*.lapoi",
    "*.lbiaf6c8",
    "*.lbkut",
    "*.lcked",
    "*.lcphr",
    "*.lcphr!Ransom",
    "*.leen",
    "*.leenapidx",
    "*.leenapidx@snakebite.com.hrhr",
    "*.legacy",
    "*.legion",
    "*.leon",
    "*.les#",
    "*.lesli",
    "*.letmetrydecfiles",
    "*.leto",
    "*.lfk",
    "*.lfv77az",
    "*.libbywovas@dr.com.gr3g",
    "*.like",
    "*.lilocked",
    "*.limbo",
    "*.lime",
    "*.litar",
    "*.litra",
    "*.litra!Sample",
    "*.lock93",
    "*.lockd",
    "*.locked",
    "*.locked-*",
    "*.locked.zip",
    "*.locked3",
    "*.locked_by_mR_Anonymous(TZ_HACKERS)",
    "*.lockedfile",
    "*.lockedgood",
    "*.locker",
    "*.lockhelp@qq.gate",
    "*.locklock",
    "*.lockme",
    "*.locky",
    "*.lockymap",
    "*.lokas",
    "*.lokf",
    "*.lokitus",
    "*.lol",
    "*.lolita",
    "*.londec",
    "*.loptr",
    "*.lordofshadow",
    "*.lost",
    "*.lotej",
    "*.lotep",
    "*.loveransisgood",
    "*.lovewindows",
    "*.loveyouisreal",
    "*.luboversova148",
    "*.luceq",
    "*.luces",
    "*.lucky",
    "*.lukitus",
    "*.lukitus-tiedostop\u00e4\u00e4tett\u00e4",
    "*.lurk",
    "*.m3g4c0rtx",
    "*.m3ga",
    "*.m3ga*",
    "*.m3gac0rtx",
    "*.madebyadam",
    "*.madek",
    "*.madekv120",
    "*.mafee",
    "*.magic",
    "*.magic_software_syndicate",
    "*.mailto[2Hamlampampom@cock.li].82a80",
    "*.major",
    "*.makkonahi",
    "*.maktub",
    "*.malwarehunterteam",
    "*.mamasitaq",
    "*.mamba",
    "*.mammon",
    "*.maniac",
    "*.mapo",
    "*.mariacbc",
    "*.mars",
    "*.masked",
    "*.masodas",
    "*.masok",
    "*.master",
    "*.maxicrypt",
    "*.maysomware",
    "*.mbed",
    "*.mbrcodes",
    "*.mdk4y",
    "*.mecury",
    "*.medal",
    "*.medsv162",
    "*.megac0rtx",
    "*.megacortex",
    "*.meka",
    "*.mention9823",
    "*.merl",
    "*.mers",
    "*.messenger-*",
    "*.metan",
    "*.mich",
    "*.micro",
    "*.middleman2020",
    "*.mike",
    "*.mind",
    "*.mo7n",
    "*.mockba",
    "*.mogera",
    "*.mogranos",
    "*.moka",
    "*.moments2900",
    "*.money",
    "*.monro",
    "*.mordor",
    "*.moresa",
    "*.mosk",
    "*.mouse",
    "*.ms13",
    "*.msj",
    "*.msop",
    "*.mtk118",
    "*.mtogas",
    "*.muhstik",
    "*.muslat",
    "*.mvp",
    "*.myjob",
    "*.myransext2017",
    "*.myskle",
    "*.n3xtpharma",
    "*.n7ys81w",
    "*.nWcrypt",
    "*.nacro",
    "*.nakw",
    "*.nalog@qq_com",
    "*.napoleon",
    "*.nasoh",
    "*.nazcrypt",
    "*.nbes",
    "*.ndarod",
    "*.ndpyhss",
    "*.needdecrypt",
    "*.needkeys",
    "*.neitrino",
    "*.nelasod",
    "*.nemesis",
    "*.nemo-hacks.at.sigaint.org",
    "*.nemty",
    "*.neras",
    "*.nesa",
    "*.netn6",
    "*.newlock",
    "*.news",
    "*.nhHtFWV",
    "*.ninja",
    "*.no_more_ransom",
    "*.no_more_ransomware",
    "*.noblis",
    "*.nochance",
    "*.nols",
    "*.non",
    "*.noos",
    "*.nopasaran",
    "*.noproblemwedecfiles",
    "*.norvas",
    "*.nosafe",
    "*.nostro",
    "*.notfoundrans",
    "*.novasof",
    "*.nozelesn",
    "*.nsmf",
    "*.ntu",
    "*.ntuseg",
    "*.nuclear",
    "*.nuclear55",
    "*.nuke55",
    "*.nuksus",
    "*.nusar",
    "*.nvetud",
    "*.nvram",
    "*.nytom",
    "*.o$l",
    "*.obagarmrk",
    "*.obfuscated",
    "*.ocean",
    "*.octopus",
    "*.odcodc",
    "*.odin",
    "*.odveta",
    "*.ogre",
    "*.okean*",
    "*.okokokokok",
    "*.olduw",
    "*.oled",
    "*.omerta",
    "*.omnisphere",
    "*.one",
    "*.one-we_can-help_you",
    "*.oneway",
    "*.oni",
    "*.online24files@airmail.cc",
    "*.onlinesupport",
    "*.only-we_can-help_you",
    "*.onx",
    "*.onyon",
    "*.oops",
    "*.oor",
    "*.open_readme.txt.ke3q",
    "*.openforyou@india.com",
    "*.oplata@qq_com",
    "*.orion",
    "*.oshit",
    "*.osiris",
    "*.osk",
    "*.oslawcmme",
    "*.otherinformation",
    "*.owned",
    "*.p3d374",
    "*.p5tkjw",
    "*.pablukCRYPT",
    "*.pabluklocker",
    "*.pack14",
    "*.padcrypt",
    "*.parad1gm",
    "*.parrot",
    "*.partially.cryptoNar",
    "*.partially.cryptojoker",
    "*.pay2me",
    "*.paybtcs",
    "*.paycoin",
    "*.paycyka",
    "*.payfordecrypt",
    "*.payfornature@india.com.crypted",
    "*.payforunlock",
    "*.paym",
    "*.paymds",
    "*.paymrss",
    "*.paymrts",
    "*.payms",
    "*.paymst",
    "*.paymts",
    "*.payransom",
    "*.payrms",
    "*.pays",
    "*.paytounlock",
    "*.pdcr",
    "*.pdf.p3rf0rmr",
    "*.pdf_Axffyq_{babyfromparadise666@gmail.com}.p3rf0rm4",
    "*.pdff",
    "*.pedro",
    "*.peet",
    "*.pennywise",
    "*.peosajwqfk",
    "*.peta",
    "*.petra",
    "*.pfanz",
    "*.phantom",
    "*.phoenix",
    "*.pidom",
    "*.pidon",
    "*.piny",
    "*.pizda@qq_com",
    "*.pizdec",
    "*.pizdosik",
    "*.pky",
    "*.plauge17",
    "*.pleaseCallQQ",
    "*.pluto",
    "*.pnr",
    "*.poof",
    "*.poolezoor",
    "*.poop",
    "*.popotic",
    "*.popoticus",
    "*.porno",
    "*.porno.pornoransom",
    "*.pornoransom",
    "*.potato",
    "*.powerfuldecrypt",
    "*.powerfulldecrypt",
    "*.powned",
    "*.poyvonm",
    "*.ppam",
    "*.pr0tect",
    "*.predator",
    "*.proced",
    "*.proden",
    "*.promock",
    "*.promoks",
    "*.promorad",
    "*.promorad2",
    "*.promos",
    "*.promoz",
    "*.prosperous666",
    "*.prus",
    "*.pscrypt",
    "*.psh",
    "*.pulsar1",
    "*.pumas",
    "*.purge",
    "*.pwned",
    "*.pysa",
    "*.pzdc",
    "*.qbix",
    "*.qbtex",
    "*.qnbqw",
    "*.qq_com*",
    "*.qwerty",
    "*.qweuirtksd",
    "*.qwex",
    "*.qwqd",
    "*.r3store",
    "*.radman",
    "*.raid10",
    "*.raldge",
    "*.raldug",
    "*.ram",
    "*.ramen",
    "*.rand",
    "*.ranranranran",
    "*.ranrans",
    "*.ransomcrypt",
    "*.ransomed@india.com",
    "*.ransomwared",
    "*.rapid",
    "*.rat",
    "*.razarac",
    "*.razy",
    "*.razy1337",
    "*.rcrypted",
    "*.rdmk",
    "*.reaGAN",
    "*.read_to_txt_file.yyto",
    "*.readme_txt",
    "*.realfs0ciety*",
    "*.realfs0ciety@sigaint.org.fs0ciety",
    "*.recme",
    "*.reco",
    "*.recovery_email_[retmydata@protonmail.com]*.aes256",
    "*.recovery_email__retmydata@protonmail.com__*_.aes256.testE",
    "*.recry1",
    "*.rectot",
    "*.redl",
    "*.redmat",
    "*.redrum",
    "*.refols",
    "*.rekt",
    "*.relock@qq_com",
    "*.remind",
    "*.rencrypted",
    "*.rent",
    "*.restore_fi*.*",
    "*.resurrection",
    "*.revolution",
    "*.reycarnasi1983@protonmail.com.gw3w",
    "*.rezuc",
    "*.righ",
    "*.rip",
    "*.risk",
    "*.rjzR8",
    "*.rnsmwr",
    "*.rnsmwre",
    "*.robbinhood",
    "*.robinhood",
    "*.rokku",
    "*.roland",
    "*.roldat",
    "*.rontok",
    "*.rose",
    "*.rpd",
    "*.rsalive",
    "*.rsucozxze",
    "*.rtyrtyrty",
    "*.rumba",
    "*.rumblegoodboy",
    "*.ryk",
    "*.ryp",
    "*.ryx",
    "*.s1crypt",
    "*.sVn",
    "*.safe",
    "*.sage",
    "*.sambo",
    "*.sambo,",
    "*.same",
    "*.sanction",
    "*.sanders4!",
    "*.sapphire",
    "*.sarut",
    "*.satan",
    "*.saturn",
    "*.scarab",
    "*.scl",
    "*.scorpio",
    "*.scrcrw",
    "*.sdk",
    "*.sdwwbrb",
    "*.sea",
    "*.secure",
    "*.securityP",
    "*.seed",
    "*.serpent",
    "*.setimichas1971@protonmail.com.b4wq",
    "*.sexy",
    "*.sfs",
    "*.sgood",
    "*.sguard",
    "*.shade8",
    "*.shadi",
    "*.shadow",
    "*.shariz",
    "*.shelbyboom",
    "*.shifr",
    "*.shinigami",
    "*.shino",
    "*.shit",
    "*.shutdown57",
    "*.sifreli",
    "*.sigrun",
    "*.sinopal",
    "*.sinta",
    "*.si\u2026",
    "*.sjjpu",
    "*.skunk",
    "*.skvtb",
    "*.sky",
    "*.skymap",
    "*.skynet",
    "*.skype",
    "*.slvpawned",
    "*.snake",
    "*.snake4444",
    "*.snatch",
    "*.son",
    "*.sophos",
    "*.sorry",
    "*.sorryforthis",
    "*.spa\u00df",
    "*.spectre",
    "*.spider",
    "*.spora",
    "*.sport",
    "*.spyhunter",
    "*.sr0yz",
    "*.ssananunak1987@protonmail.com.b2fr",
    "*.sshxkej",
    "*.ssimpotashka@gmail.com",
    "*.stare",
    "*.stevenseagal@airmail.cc",
    "*.stn",
    "*.stone",
    "*.stroman",
    "*.stun",
    "*.styver",
    "*.styx",
    "*.suffer",
    "*.sun",
    "*.supported2017",
    "*.supportfiless24@protonmail.ch",
    "*.suppose666",
    "*.surprise",
    "*.sux",
    "*.sux.AES128",
    "*.switch",
    "*.symbiom_ransomware_locked",
    "*.syrk",
    "*.sysdown",
    "*.szesnl",
    "*.szf",
    "*.tabufa",
    "*.tanos",
    "*.tastylock",
    "*.tater",
    "*.tax",
    "*.technicy",
    "*.tedcrypt",
    "*.telebak",
    "*.tfude",
    "*.tfudet",
    "*.tgmn",
    "*.theva",
    "*.theworldisyours",
    "*.thor",
    "*.thunder",
    "*.tmp.exe",
    "*.to.dernesatiko@mail.com.crypted",
    "*.todar",
    "*.todarius",
    "*.toec",
    "*.tokog",
    "*.toxcrypt",
    "*.trevinomason1@mail.com.vsunit",
    "*.triple_m",
    "*.tro",
    "*.tron",
    "*.tronas",
    "*.trosak",
    "*.troyancoder@qq_com",
    "*.truke",
    "*.trump",
    "*.trun",
    "*.try",
    "*.tsv",
    "*.ttt",
    "*.tuki17@qq.com",
    "*.tunca",
    "*.twist",
    "*.tzu",
    "*.uDz2j8mv",
    "*.ucftz*",
    "*.udjvu",
    "*.uk-dealer@sigaint.org",
    "*.ukr.net*",
    "*.ukrain",
    "*.unavailable",
    "*.unbrecrypt_ID_*",
    "*.upd9ykc65v",
    "*.usr0",
    "*.uudjvu",
    "*.vCrypt1",
    "*.vaca",
    "*.vally",
    "*.vanss",
    "*.vault",
    "*.vdul",
    "*.velikasrbija",
    "*.velso",
    "*.vendetta2",
    "*.venusp",
    "*.veracrypt",
    "*.verasto",
    "*.verschl\u00fcsselt",
    "*.vesad",
    "*.vesrato",
    "*.via",
    "*.viiper",
    "*.viki",
    "*.vindows",
    "*.volcano",
    "*.vpgvlkb",
    "*.vrmrkz",
    "*.vscrypt",
    "*.vulston",
    "*.vusad",
    "*.vvv",
    "*.vxLock",
    "*.wal",
    "*.wallet",
    "*.wannacash",
    "*.wannacryv2",
    "*.warn_wallet",
    "*.wasted",
    "*.wav_list",
    "*.wcry",
    "*.wctc",
    "*.wdie",
    "*.weapologize",
    "*.weareyourfriends",
    "*.weencedufiles",
    "*.werd",
    "*.wewillhelp@airmail.cc",
    "*.wflx",
    "*.whatthefuck",
    "*.whycry",
    "*.wiki",
    "*.wincry",
    "*.windows10",
    "*.wlu",
    "*.wmfxdqz",
    "*.wncry",
    "*.wncrypt",
    "*.wncryt",
    "*.wndie",
    "*.wnry",
    "*.wooly",
    "*.wowreadfordecry",
    "*.wowreadfordecryp",
    "*.wowwhereismyfiles",
    "*.write",
    "*.write_on_email",
    "*.write_us_on_email",
    "*.wsmile",
    "*.wtdi",
    "*.wtf",
    "*.wuciwug",
    "*.wvtr0",
    "*.wxdrJbgSDa",
    "*.wyvern",
    "*.x0lzs3c",
    "*.x1881",
    "*.x3m",
    "*.x3mpro",
    "*.xcry7684",
    "*.xcrypt",
    "*.xdata",
    "*.xfile",
    "*.xhspythxn",
    "*.xiaoba10",
    "*.xiaoba11",
    "*.xiaoba12",
    "*.xiaoba13",
    "*.xiaoba14",
    "*.xiaoba15",
    "*.xiaoba16",
    "*.xiaoba17",
    "*.xiaoba18",
    "*.xiaoba19",
    "*.xiaoba2",
    "*.xiaoba20",
    "*.xiaoba21",
    "*.xiaoba22",
    "*.xiaoba23",
    "*.xiaoba24",
    "*.xiaoba25",
    "*.xiaoba26",
    "*.xiaoba27",
    "*.xiaoba28",
    "*.xiaoba29",
    "*.xiaoba3",
    "*.xiaoba30",
    "*.xiaoba31",
    "*.xiaoba32",
    "*.xiaoba33",
    "*.xiaoba4",
    "*.xiaoba5",
    "*.xiaoba6",
    "*.xiaoba7",
    "*.xiaoba8",
    "*.xiaoba9",
    "*.xncrypt",
    "*.xolzsec",
    "*.xorist",
    "*.xort",
    "*.xoza",
    "*.xrtn",
    "*.xtbl",
    "*.xuy",
    "*.xwz",
    "*.xxx",
    "*.xxxxx",
    "*.xyz",
    "*.xz",
    "*.yG",
    "*.yarraq",
    "*.yatron",
    "*.ykcol",
    "*.yl",
    "*.yoewy",
    "*.youransom",
    "*.yourransom",
    "*.yq75w627",
    "*.yum",
    "*.z3r0",
    "*.zXz",
    "*.zatrov",
    "*.zbt",
    "*.zc3791",
    "*.zcrypt",
    "*.zendr4",
    "*.zeppelin",
    "*.zepto",
    "*.zilla",
    "*.ziqzqzdi",
    "*.zlpzdel",
    "*.zobm",
    "*.zoh",
    "*.zorin",
    "*.zoro",
    "*.zorro",
    "*.ztsysjz",
    "*.zuzya",
    "*.zycrypt",
    "*.zyklon",
    "*.zypto*",
    "*.zzz",
    "*.zzz12",
    "*.zzzzz",
    "*.zzzzzzzz",
    "*.{25BF1879-A2DC-B66A-3CCC-XXXXXXXXXXXX}",
    "*.{CALLMEGOAT@PROTONMAIL.COM}CMG",
    "*.{CRYPTENDBLACKDC}",
    "*.{Help557@gmx.de}.exe",
    "*.{Killback@protonmail.com}KBK",
    "*.{XXXXX-EFEE-6C04-D2DC-A9EFA812DD11}!",
    "*.{XXXXXXX-588E-7D5B-AED1-2CD51808DE12}",
    "*.{incredible0ansha@tuta.io}.ARA",
    "*.{ljspqk7@aol.com}.BRT92",
    "*.{mattpear@protonmail.com}",
    "*.{mattpear@protonmail.com}MTP",
    "*.{saruman7@india.com}.BRT92",
    "*.~HL*",
    "*.~xdata~",
    "*.\u0417\u0430\u0449\u0438\u0449\u0435\u043d\u043e",
    "*.\u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043e\u043f\u043b\u0430\u0442\u0435.txt",
    "*.\u043a\u0438\u0431\u0435\u0440 \u0440\u0430\u0437\u0432\u0435\u0442\u0432\u0438\u0442\u0435\u043b\u044c",
    "*.\u5df2\u52a0\u5bc6",
    "*.\u5e72\u7269\u59b9\uff01",
    "*.\uc554\ud638\ud654\ub428",
    "*0nl1ne*",
    "*@*.blocking",
    "*@LOCKED",
    "*@adsoleware.com*",
    "*@cock.email",
    "*@cock.lu*",
    "*@cumallover.me*",
    "*@files.mn*",
    "*@gmail_com_*",
    "*@india.com*",
    "*@sectex*net*",
    "*@tfwno.gf*",
    "*@tuta.io]",
    "*@tutanota.com]",
    "*ABAT*INFO*.*",
    "*BlockBax*",
    "*Decryptoroperator@qq.com",
    "*ENCx45cR*",
    "*EdgeLocker*.exe",
    "*HERMES",
    "*How to Decrypt Files-*.html",
    "*Instraction*",
    "*RANSOMED*",
    "*RT4BLOCK",
    "*ReadMe_Decryptor.txt",
    "*SIMMYWARE*",
    "*[Beamsell@qq.com].bip",
    "*[RELOCK001@TUTA.IO]",
    "*[cryptservice@inbox.ru]*",
    "*[cryptsvc@mail.ru].*",
    "*[decryptdata@qq.com].rar",
    "*[files.restore@aol.com].write",
    "*[gomer_simpson2@aol.com].phobos",
    "*[ignatevv330@gmail.com].java",
    "*[java2018@tuta io].arrow",
    "*[lavandos@dr.com].wallet",
    "*[p4d@tuta.io].com",
    "*[qmqtt@protonmail.ch].HRM",
    "*[qrrqtt@protonmail.ch].HRM",
    "*[remarkpaul77@cock.li].JSWORM",
    "*[shivamana@seznam.cz].pip",
    "*].block",
    "*_.rmd",
    "*_HELP_instructions.html",
    "*_HOWDO_text.bmp",
    "*_HOWDO_text.html",
    "*_READ_THIS_FILE_*_*",
    "*_WHAT_is.html",
    "*_[LINERSMIK@NAVER.COM][JINNYG@TUTANOTA",
    "*__{}.VACv2",
    "*_crypt",
    "*_help_instruct*.*",
    "*_luck",
    "*_nullbyte*",
    "*_recover_*.*",
    "*_ryp",
    "*_steaveiwalker@india.com_",
    "*adobe.gefest",
    "*aes_ni_gov",
    "*bingo@opensourcemail.org",
    "*cerber2",
    "*decipher*",
    "*decrypt my file*.*",
    "*decrypt your file*.*",
    "*decryptmyfiles*.*",
    "*djvuu",
    "*drakosho_new@aol.com*",
    "*files_are_encrypted.*",
    "*fuga139gh@dr.com*",
    "*garryweber@protonmail.ch",
    "*gmail*.crypt",
    "*help_restore*.*",
    "*how_to_recover*.*",
    "*id-*.BI_ID",
    "*id-*_[*@*.*].*",
    "*id-.LyaS",
    "*info@kraken.cc_worldcza@email.cz",
    "*install_tor*.*",
    "*keemail.me*",
    "*king_ouroboros*",
    "*lockhelp@qq.com",
    "*maestro@pizzacrypts.info",
    "*msptermthemes*",
    "*opentoyou@india.com",
    "*qibfmkeM5*",
    "*qq_com*",
    "*qweasd*",
    "*rec0ver*.*",
    "*recover_instruction*.*",
    "*recover}-*.*",
    "*restore_fi*.*",
    "*snowpicnic*",
    "*structsstructs*",
    "*tflower*",
    "*ukr.net*",
    "*wall.i",
    "*want your files back.*",
    "*warning-!!*.*",
    "*ymayka-email@yahoo.com.cryptotes",
    "*zn2016",
    "*{alexbanan@tuta.io}.CORP",
    "---README---.TXT",
    ". vesrato",
    "..g.",
    ".0x0",
    ".1999",
    ".1txt",
    ".31392E30362E32303136_[*]_LSBJ1",
    ".6vr378txi",
    ".73i87A",
    ".777",
    ".7h9r",
    ".8lock8",
    ".AES256",
    ".AFD",
    ".Alcatraz",
    ".AngleWare",
    ".BarRax",
    ".CCCRRRPPP",
    ".CHIP",
    ".CONTACTUS",
    ".CRRRT",
    ".CRYPTOSHIEL",
    ".CRYPTOSHIELD",
    ".CTB2",
    ".CTBL",
    ".CrySiS",
    ".CryptoTorLocker2015!",
    ".DALE",
    ".DATASTOP",
    ".DATAWAIT",
    ".DHARMA",
    ".DIABLO6",
    ".Do_not_change_the_filename",
    ".ENC",
    ".ENCR",
    ".ENCRYPTED",
    ".ENCRYPTED_BY_LLTP",
    ".ENCRYPTED_BY_LLTPp",
    ".EnCiPhErEd",
    ".EnCrYpTeD",
    ".Encrypted",
    ".FenixIloveyou!!",
    ".FuckYourData",
    ".H3LL",
    ".HA3",
    ".INFOWAIT",
    ".KARLOS",
    ".KEYH0LES",
    ".KEYPASS",
    ".KEYZ",
    ".KRAB",
    ".Kirked",
    ".L0CKED",
    ".L0cked",
    ".LOL!",
    ".LeChiffre",
    ".Licked",
    ".Locked",
    ".Locked-by-Mafia",
    ".MERRY",
    ".MKJL",
    ".MRCR1",
    ".OMG!",
    ".OMG*",
    ".PAUSA",
    ".PEGS1",
    ".PLAUGE17",
    ".PLUT",
    ".PoAr2w",
    ".PzZs",
    ".R.i.P",
    ".R16M01D05",
    ".R4A",
    ".R5A",
    ".RAD",
    ".RADAMANT",
    ".RARE1",
    ".RDM",
    ".REVENGE",
    ".RMCM1",
    ".RRK",
    ".RSNSlocked",
    ".RSplited",
    ".SAVEfiles",
    ".STOP",
    ".STOPDATA",
    ".SUPERCRYPT",
    ".SUSPENDED",
    ".SecureCrypted",
    ".Silent",
    ".TheTrumpLockerf",
    ".TheTrumpLockerfp",
    ".VBRANSOM",
    ".Venusf",
    ".Venusp",
    ".VforVendetta",
    ".WAITING",
    ".WCRY",
    ".WHY",
    ".WNCRY",
    ".Where_my_files.txt",
    ".Whereisyourfiles",
    ".XRNT",
    ".XTBL",
    ".XXX",
    ".Z81928819",
    ".ZINO",
    ".[*].blt",
    ".[*].encrypted",
    ".[*].globe",
    ".[*].raid10",
    ".[*]_luck",
    ".[decryptor@cock.li].dcrtr",
    ".[mia.kokers@aol.com]",
    ".[ogorman.linoel@aol.com].help",
    ".[ti_kozel@lashbania.tv].*",
    "._AiraCropEncrypted",
    ".__AiraCropEncrypted!",
    ".___xratteamLucked",
    ".a19",
    ".aaa",
    ".abc",
    ".adk",
    ".adobe",
    ".adobee",
    ".adr",
    ".aes",
    ".aesir",
    ".aga",
    ".amba",
    ".angelamerkel",
    ".antihacker2017",
    ".ap19",
    ".axx",
    ".bart",
    ".bart.zip",
    ".berost",
    ".besub",
    ".better_call_saul",
    ".bin",
    ".bip",
    ".bitstak",
    ".bleep",
    ".bleepYourFiles",
    ".bloc",
    ".blocatto",
    ".blower",
    ".boston",
    ".braincrypt",
    ".breaking_bad",
    ".bript",
    ".browec",
    ".btc",
    ".btc-help-you",
    ".btcbtcbtc",
    ".btcware",
    ".bufas",
    ".bxtyunh",
    ".cbf",
    ".ccc",
    ".cerber",
    ".cerber2",
    ".cerber3",
    ".cezor",
    ".charck",
    ".charcl",
    ".chech",
    ".chifrator@qq_com",
    ".cifgksaffsfyghd",
    ".clf",
    ".code",
    ".coded",
    ".codnat",
    ".codnat1",
    ".comrade",
    ".coverton",
    ".cr1",
    ".crashed",
    ".crime",
    ".crinf",
    ".criptiko",
    ".criptoko",
    ".criptokod",
    ".cripttt",
    ".crjoker",
    ".crptrgr",
    ".crptxxx",
    ".cry",
    ".cry_",
    ".cryp1",
    ".crypt",
    ".crypt*",
    ".crypt38",
    ".crypted",
    ".crypted_file",
    ".crypto",
    ".cryptolocker",
    ".crypttt",
    ".cryptz*",
    ".crypz",
    ".css",
    ".ctbl",
    ".czvxce",
    ".d4nk",
    ".dCrypt",
    ".da_vinci_code",
    ".dalle",
    ".damage",
    ".darkness",
    ".davda",
    ".decrypt2017",
    ".ded",
    ".deria",
    ".devil",
    ".dglnl",
    ".dharma",
    ".disappeared",
    ".djvu",
    ".djvuq",
    ".djvur",
    ".djvus",
    ".djvut",
    ".djvuu",
    ".domino",
    ".doomed",
    ".doples",
    ".dotmap",
    ".drume",
    ".dutan",
    ".dxxd",
    ".dyatel@qq_com _ryp",
    ".ecc",
    ".edgel",
    ".enc",
    ".encedRSA",
    ".encmywork",
    ".encoderpass",
    ".encrypt",
    ".encrypted",
    ".encryptedAES",
    ".encryptedRSA",
    ".encryptedyourfiles",
    ".enigma",
    ".epic",
    ".eth",
    ".etols",
    ".evillock",
    ".exotic",
    ".exx",
    ".ezz",
    ".fantom",
    ".fear",
    ".fedasot",
    ".ferosas",
    ".file0locked",
    ".fileiscryptedhard",
    ".filock",
    ".firecrypt",
    ".forasom",
    ".fordan",
    ".frtrss",
    ".fs0ciety",
    ".fuck",
    ".fucked",
    ".fun",
    ".gefickt",
    ".gerosan",
    ".good",
    ".googl",
    ".grovas",
    ".grovat",
    ".grt",
    ".gruzin@qq_com",
    ".guvara",
    ".gws",
    ".h3ll",
    ".ha3",
    ".hannah",
    ".hb15",
    ".helpdecrypt@ukr.net",
    ".helpmeencedfiles",
    ".herbst",
    ".heroset",
    ".hets",
    ".hnumkhotep",
    ".hofos",
    ".horon",
    ".hrosas",
    ".html",
    ".hush",
    ".iaufkakfhsaraf",
    ".id-*.[*@*].air",
    ".id-*.cry",
    ".id-*_help@decryptservice.info",
    ".id-[*]-maestro@pizzacrypts.info",
    ".id-_CarlosBoltehero@india.com_",
    ".id-_garryweber@protonmail.ch",
    ".id-_julia.crown@india.com_",
    ".id-_locked",
    ".id-_locked_by_krec",
    ".id-_locked_by_perfect",
    ".id-_maria.lopez1@india.com_",
    ".id-_r9oj",
    ".id-_steaveiwalker@india.com_",
    ".id-_tom.cruz@india.com_",
    ".id-_x3m",
    ".iloveworld",
    ".infected",
    ".isis",
    ".iwanthelpuuu",
    ".jack",
    ".justbtcwillhelpyou",
    ".karma",
    ".kencf",
    ".keybtc@inbox_com",
    ".killed*",
    ".kimcilware",
    ".kiratos",
    ".kkk",
    ".klope",
    ".korrektor",
    ".kostya",
    ".kr3",
    ".kraken",
    ".kratos",
    ".kropun",
    ".kroput",
    ".kroput1",
    ".kuub",
    ".lambda_l0cked",
    ".lanset",
    ".lesli",
    ".letmetrydecfiles",
    ".litar",
    ".lock",
    ".lock93",
    ".locked",
    ".locked-[*]",
    ".locklock",
    ".locky",
    ".lokas",
    ".lotep",
    ".lovewindows",
    ".luces",
    ".lukitus",
    ".madebyadam",
    ".magic",
    ".maktub",
    ".megac0rtx",
    ".micro",
    ".mike!Ransom",
    ".mogera",
    ".mole",
    ".mole02",
    ".moresa",
    ".muslat",
    ".myskle",
    ".nalog@qq_com",
    ".nampohyu",
    ".neitrino",
    ".nemo-hacks.at.sigaint.org",
    ".neras",
    ".no_more_ransom",
    ".nochance",
    ".noproblemwedecfiles",
    ".norvas",
    ".notfoundrans",
    ".nuclear55",
    ".nusar",
    ".odcodc",
    ".odin",
    ".ohwqg",
    ".only-we_can-help_you",
    ".oops",
    ".openforyou@india.com",
    ".oplata@qq_com",
    ".oshit",
    ".osiris",
    ".otherinformation",
    ".p5tkjw",
    ".padcrypt",
    ".paybtcs",
    ".payms",
    ".paymst",
    ".payransom",
    ".payrmts",
    ".paytounlock",
    ".pdff",
    ".phobos",
    ".pidon",
    ".pizda@qq_com",
    ".plomb",
    ".poret",
    ".porno",
    ".potato",
    ".powerfulldecrypt",
    ".proden",
    ".promock",
    ".promok",
    ".promoks",
    ".promorad",
    ".promorad2",
    ".promos",
    ".promoz",
    ".protected",
    ".pulsar1",
    ".puma",
    ".pumas",
    ".pumax",
    ".purge",
    ".pzdc",
    ".r5a",
    ".radman",
    ".raldug",
    ".razy",
    ".rdmk",
    ".rectot",
    ".redmat",
    ".refols",
    ".rekt",
    ".relock@qq_com",
    ".remind",
    ".rescuers@india.com.3392cYAn548QZeUf.lock",
    ".rezuc",
    ".rip",
    ".rmd",
    ".rnsmwr",
    ".rokku",
    ".roland",
    ".roldat",
    ".rumba",
    ".sage",
    ".sanction",
    ".sarut",
    ".scarab",
    ".scl",
    ".serpent",
    ".sexy",
    ".shadow",
    ".shino",
    ".shit",
    ".sifreli",
    ".skymap",
    ".sport",
    ".stn",
    ".stone",
    ".surprise",
    ".szf",
    ".tfude",
    ".tfudeq",
    ".tfudet",
    ".theworldisyours",
    ".thor",
    ".todarius",
    ".toxcrypt",
    ".tro",
    ".tronas",
    ".trosak",
    ".troyancoder@qq_com",
    ".truke",
    ".trun",
    ".ttt",
    ".tzu",
    ".udjvu",
    ".uk-dealer@sigaint.org",
    ".unavailable",
    ".unlockvt@india.com",
    ".uudjvu",
    ".vault",
    ".velikasrbija",
    ".verasto",
    ".versiegelt",
    ".vindows",
    ".vscrypt",
    ".vvv",
    ".vxLock",
    ".wallet",
    ".wcry",
    ".weareyourfriends",
    ".weencedufiles",
    ".wflx",
    ".windows10",
    ".wncry",
    ".wnx",
    ".xcri",
    ".xcrypt",
    ".xort",
    ".xrtn",
    ".xtbl",
    ".xxx",
    ".xyz",
    ".yourransom",
    ".zXz",
    ".zc3791",
    ".zcrypt",
    ".zepto",
    ".zerofucks",
    ".zorro",
    ".zyklon",
    ".zzz",
    ".zzzzz",
    ".{CRYPTENDBLACKDC}",
    ".~",
    ".~xdata~",
    ".\u043a\u0438\u0431\u0435\u0440 \u0440\u0430\u0437\u0432\u0435\u0442\u0432\u0438\u0442\u0435\u043b\u044c",
    ".\u5df2\u52a0\u5bc6",
    "000-IF-YOU-WANT-DEC-FILES.html",
    "000-No-PROBLEM-WE-DEC-FILES.html",
    "000-PLEASE-READ-WE-HELP.html",
    "0000-SORRY-FOR-FILES.html",
    "001-READ-FOR-DECRYPT-FILES.html",
    "005-DO-YOU-WANT-FILES.html",
    "009-READ-FOR-DECCCC-FILESSS.html",
    "027cc450ef5f8c5f653329641ec1fed9*.*",
    "0_HELP_DECRYPT_FILES.HTM",
    "170fb7438316.exe",
    "4-14-2016-INFECTION.TXT",
    "52036F92.tmp",
    "686l0tek69-HOW-TO-DECRYPT.txt",
    "@Please_Read_Me@.txt",
    "@WARNING_FILES_ARE_ENCRYPTED.*.txt",
    "@WanaDecryptor@.*",
    "@_RESTORE-FILES_@.*",
    "@_USE_TO_FIX_*.txt",
    "@decrypt_your_files.txt",
    "AArI.jpg",
    "ASSISTANCE_IN_RECOVERY.txt",
    "ATLAS_FILES.txt",
    "ATTENTION!!!.txt",
    "ATTENTION.url",
    "About_Files.txt",
    "Aescrypt.exe",
    "AllFilesAreLocked*.bmp",
    "BTC_DECRYPT_FILES.txt",
    "BUYUNLOCKCODE",
    "BUYUNLOCKCODE.txt",
    "BitCryptorFileList.txt",
    "Blooper.exe",
    "C-email-*-*.odcodc",
    "COME_RIPRISTINARE_I_FILE.*",
    "COMO_ABRIR_ARQUIVOS.txt",
    "COMO_RESTAURAR_ARCHIVOS.html",
    "COMO_RESTAURAR_ARCHIVOS.txt",
    "CRYPTOID_*",
    "CallOfCthulhu.exe",
    "ClopReadMe.txt",
    "Coin.Locker.txt",
    "Comment d\u00e9bloquer mes fichiers.txt",
    "Como descriptografar seus arquivos.txt",
    "CryptoRansomware.exe",
    "Crytp0l0cker.Upack.dll",
    "Crytp0l0cker.dll",
    "Crytp0l0cker.exe",
    "Cversions.2.db",
    "Cyber SpLiTTer Vbs.exe",
    "DALE_FILES.TXT",
    "DECRYPT-FILES.html",
    "DECRYPTION INSTRUCTIONS.txt",
    "DECRYPTION.TXT",
    "DECRYPTION_HOWTO.Notepad",
    "DECRYPT_INFO.txt",
    "DECRYPT_INFORMATION.html",
    "DECRYPT_INSTRUCTION.HTML",
    "DECRYPT_INSTRUCTION.TXT",
    "DECRYPT_INSTRUCTION.URL",
    "DECRYPT_INSTRUCTIONS.TXT",
    "DECRYPT_INSTRUCTIONS.html",
    "DECRYPT_ReadMe.TXT",
    "DECRYPT_ReadMe1.TXT",
    "DECRYPT_Readme.TXT.ReadMe",
    "DECRYPT_YOUR_FILES.HTML",
    "DECRYPT_YOUR_FILES.txt",
    "DESIFROVANI_POKYNY.html",
    "DOSYALARINIZA ULA\u015eMAK \u0130\u00c7\u0130N A\u00c7INIZ.html",
    "Decoding help.hta",
    "Decrypt All Files *.bmp",
    "DecryptAllFiles*.txt",
    "DecryptAllFiles.txt",
    "DecryptFile.txt",
    "Decryptyourdata@qq.com",
    "DesktopOsiris.*",
    "DesktopOsiris.htm",
    "EMAIL_*_recipient.zip",
    "ENCRYPTED.TXT",
    "ENTSCHLUSSELN_HINWEISE.html",
    "FACT. 8-9-1278104.doc",
    "FA_HLEH3S83AO22WO.doc",
    "FE04.tmp",
    "FILES ENCRYPTED.txt",
    "FILES.TXT",
    "FILESAREGONE.TXT",
    "FILES_BACK.txt",
    "File Decrypt Help.html",
    "File_Encryption_Notice.txt",
    "Files encrypted.html",
    "GJENOPPRETTING_AV_FILER.html",
    "GJENOPPRETTING_AV_FILER.txt",
    "GNNCRY_Readme.txt",
    "Galaperidol.exe",
    "GetYouFiles.txt",
    "GoRansom.txt",
    "HELLOTHERE.TXT",
    "HELP-ME-ENCED-FILES.html",
    "HELPDECRYPT.TXT",
    "HELPDECYPRT_YOUR_FILES.HTML",
    "HELP_BY_CROC.TXT",
    "HELP_DECRYPT.HTML",
    "HELP_DECRYPT.HTML*",
    "HELP_DECRYPT.PNG",
    "HELP_DECRYPT.URL",
    "HELP_DECRYPT.lnk",
    "HELP_ME_PLEASE.txt",
    "HELP_RECOVER_FILES.txt",
    "HELP_RESTORE_FILES.txt",
    "HELP_RESTORE_FILES_*.*",
    "HELP_RESTORE_FILES_*.TXT",
    "HELP_TO_DECRYPT_YOUR_FILES.txt",
    "HELP_TO_SAVE_FILES.bmp",
    "HELP_TO_SAVE_FILES.txt",
    "HELP_YOURFILES.HTML",
    "HELP_YOUR_FILES.PNG",
    "HELP_YOUR_FILES.TXT",
    "HELP_YOUR_FILES.html",
    "HILDACRYPTReadMe.html",
    "HOW DECRIPT FILES.hta",
    "HOW TO DECRYPT FILES.HTML",
    "HOW TO DECRYPT FILES.txt",
    "HOW TO DECRYPT[1T0tO].txt",
    "HOW TO RECOVER ENCRYPTED FILES-infovip@airmail.cc.TXT",
    "HOW TO RECOVER ENCRYPTED FILES.TXT",
    "HOW-TO-DECRYPT-FILES.HTM",
    "HOW-TO-DECRYPT-FILES.HTML",
    "HOW-TO-RESTORE-FILES.txt",
    "HOWTO_RECOVER_FILES_*.*",
    "HOWTO_RECOVER_FILES_*.TXT",
    "HOW_CAN_I_DECRYPT_MY_FILES.txt",
    "HOW_DECRYPT.HTML",
    "HOW_DECRYPT.TXT",
    "HOW_DECRYPT.URL",
    "HOW_DECRYPT_FILES#.html",
    "HOW_OPEN_FILES.hta",
    "HOW_RETURN_FILES.TXT",
    "HOW_TO_DECRYPT.HTML",
    "HOW_TO_DECRYPT.txt",
    "HOW_TO_DECRYPT_FILES.TXT",
    "HOW_TO_DECRYPT_FILES.html",
    "HOW_TO_DECRYPT_MY_FILES.txt",
    "HOW_TO_FIX_!.TXT",
    "HOW_TO_RESTORE_FILES.html",
    "HOW_TO_RESTORE_FILES.txt",
    "HOW_TO_RESTORE_YOUR_DATA.html",
    "HOW_TO_UNLOCK_FILES_README_*.txt",
    "HUR_DEKRYPTERA_FILER.html",
    "HUR_DEKRYPTERA_FILER.txt",
    "HVORDAN_DU_GENDANNER_FILER.html",
    "HVORDAN_DU_GENDANNER_FILER.txt",
    "HWID Lock.exe",
    "Hacked_Read_me_to_decrypt_files.html",
    "Hello There! Fellow @kee User!.txt",
    "Help Decrypt.html",
    "Help_Decrypt.txt",
    "How Decrypt My Files.lnk",
    "How To Decode Files.hta",
    "How To Restore Files.txt",
    "How decrypt files.hta",
    "How to decrypt LeChiffre files.html",
    "How to decrypt your data.txt",
    "How to decrypt your files.jpg",
    "How to decrypt your files.txt",
    "How to decrypt.txt",
    "How to get data back.txt",
    "How to restore files.hta",
    "HowDecrypt.gif",
    "HowDecrypt.txt",
    "HowToBackFiles.txt",
    "HowToDecryptIMPORTANT!.txt",
    "How_Decrypt_Files.hta",
    "How_Decrypt_My_Files",
    "How_To_Recover_Files.txt",
    "How_to_decrypt_your_files.jpg",
    "How_to_restore_files.hta",
    "HowtoRESTORE_FILES.txt",
    "Howto_RESTORE_FILES.html",
    "Howto_Restore_FILES.TXT",
    "IAMREADYTOPAY.TXT",
    "IF YOU WANT TO GET ALL YOUR FILES BACK, PLEASE READ THIS.TXT",
    "IF_WANT_FILES_BACK_PLS_READ.html",
    "IF_YOU_WANT_TO_GET_ALL_YOUR_FILES_BACK_PLEASE_READ_THIS.TXT",
    "IHAVEYOURSECRET.KEY",
    "IMPORTANT READ ME.txt",
    "IMPORTANT.README",
    "INSTALL_TOR.URL",
    "INSTRUCCIONES.txt",
    "INSTRUCCIONES_DESCIFRADO.TXT",
    "INSTRUCCIONES_DESCIFRADO.html",
    "INSTRUCTION RESTORE FILE.TXT",
    "INSTRUCTIONS_DE_DECRYPTAGE.html",
    "INSTRUCTION_FOR_HELPING_FILE_RECOVERY.txt",
    "ISTRUZIONI_DECRITTAZIONE.html",
    "Important!.txt",
    "Important_Read_Me.txt",
    "Info.hta",
    "Instruction for file recovery.txt",
    "Instructionaga.txt",
    "Instructions with your files.txt",
    "JSWORM-DECRYPT.hta",
    "KryptoLocker_README.txt",
    "LEER_INMEDIATAMENTE.txt",
    "LEIA_ME.txt",
    "Lock.",
    "Locked.*",
    "MENSAGEM.txt",
    "MERRY_I_LOVE_YOU_BRUCE.hta",
    "NEWS_INGiBiToR.txt",
    "NFS-e*1025-7152.exe",
    "NOTE;!!!-ODZYSKAJ-PLIKI-!!!.TXT",
    "OKSOWATHAPPENDTOYOURFILES.TXT",
    "OKU.TXT",
    "ONTSLEUTELINGS_INSTRUCTIES.html",
    "OSIRIS-*.*",
    "OSIRIS-*.htm",
    "OkuBeni.txt",
    "PAYMENT-INSTRUCTIONS.TXT",
    "PLEASE-READIT-IF_YOU-WANT.html",
    "PadCrypt.exe",
    "Paxynok.html",
    "Payment_Advice.mht",
    "Payment_Instructions.jpg",
    "Perfect.sys",
    "READ IF YOU WANT YOUR FILES BACK.html",
    "READ ME ABOUT DECRYPTION.txt",
    "READ ME FOR DECRYPT.txt",
    "READ TO UNLOCK FILES.salsa.*.html",
    "READ-READ-READ.html",
    "READ@My.txt",
    "README HOW TO DECRYPT YOUR FILES.HTML",
    "README!!!.txt",
    "README-NOW.txt",
    "README_DECRYPT_HYDRA_ID_*.txt",
    "README_DECRYPT_HYRDA_ID_*.txt",
    "README_DECRYPT_UMBRE_ID_*.jpg",
    "README_DECRYPT_UMBRE_ID_*.txt",
    "README_FOR_DECRYPT.txt",
    "README_HOW_TO_UNLOCK.HTML",
    "README_HOW_TO_UNLOCK.TXT",
    "README_LOCKED.txt",
    "README_RECOVER_FILES_*.html",
    "README_RECOVER_FILES_*.png",
    "README_RECOVER_FILES_*.txt",
    "README_TO_RECURE_YOUR_FILES.txt",
    "READTHISNOW!!!.TXT",
    "READ_DECRYPT_FILES.txt",
    "READ_IT.txt",
    "READ_IT_FOR_GET_YOUR_FILE.txt",
    "READ_ME.cube",
    "READ_ME.html",
    "READ_ME.mars",
    "READ_ME_!.txt",
    "READ_ME_ASAP.txt",
    "READ_ME_FOR_DECRYPT_*.txt",
    "READ_ME_HELP.png",
    "READ_ME_HELP.txt",
    "READ_ME_TO_DECRYPT_YOU_INFORMA.jjj",
    "READ_THIS_FILE_1.TXT",
    "READ_THIS_TO_DECRYPT.html",
    "READ_TO_DECRYPT.html",
    "READ__IT.txt",
    "RECOVER-FILES.html",
    "RECOVERY_FILE*.txt",
    "RECOVERY_FILES.txt",
    "RESTORE-.-FILES.txt",
    "RESTORE-12345-FILES.TXT",
    "RESTORE-SIGRUN.*",
    "RESTORE_CORUPTED_FILES.HTML",
    "RESTORE_FILES.HTML",
    "RESTORE_FILES_*.*",
    "RESTORE_FILES_*.txt",
    "RESTORE_HCEEM_DATA.txt",
    "RESTORE_INFO-*.txt",
    "Rans0m_N0te_Read_ME.txt",
    "Ransom.rtf",
    "Read Me (How Decrypt) !!!!.txt",
    "Read me for help thanks.txt",
    "Read.txt",
    "ReadDecryptFilesHere.txt",
    "ReadME-Prodecryptor@gmail.com.txt",
    "ReadME_Decrypt_Help_*.html",
    "ReadMe_Decryptor.txt",
    "ReadMe_Important.txt",
    "Read_this_file.txt",
    "Readme-Matrix.rtf",
    "Readme_Restore_Files.txt",
    "Receipt.exe",
    "Recovery+*.html",
    "Recovery+*.txt",
    "Recupere seus arquivos aqui.txt",
    "Restore Files.TxT",
    "Restore_ICPICP_Files.txt",
    "Restore_maysomware_files.html",
    "Restore_your_files.txt",
    "Runsome.exe",
    "SECRET.KEY",
    "SECRETIDHERE.KEY",
    "SECURITY-ISSUE-INFO.txt",
    "SGUARD-README.TXT",
    "SHTODELATVAM.txt",
    "SIFRE_COZME_TALIMATI.html",
    "Sarah_G@ausi.com___",
    "Sarah_G@ausi.com___*",
    "ScreenLocker_x86.dll",
    "Sifre_Coz_Talimat.html",
    "SintaLocker.exe",
    "SintaRun.py",
    "Spreader_x86.dll",
    "SsExecutor_x86.exe",
    "StrutterGear.exe",
    "Survey Locker.exe",
    "TOTALLYLEGIT.EXE",
    "TRY-READ-ME-TO-DEC.html",
    "TUTORIEL.bmp",
    "Tempimage.jpg",
    "ThxForYurTyme.txt",
    "TrumpHead.exe",
    "UNLOCK_FILES_INSTRUCTIONS.html",
    "UNLOCK_FILES_INSTRUCTIONS.txt",
    "USPS_Delivery.doc",
    "UnblockFiles.vbs",
    "UselessDisk.exe",
    "VIP72.exe",
    "Vape Launcher.exe",
    "VictemKey_*_*",
    "WE-MUST-DEC-FILES.html",
    "WHERE-YOUR-FILES.html",
    "WannaCry.TXT",
    "WannaCrypt 4.0.exe",
    "Wannacry.exe",
    "What happen to my files.txt",
    "WhatHappenedWithFiles.rtf",
    "WhatHappenedWithMyFiles.rtf",
    "WindowsApplication1.exe",
    "Wo_sind_meine_Dateien.htm*",
    "YOUGOTHACKED.TXT",
    "YOUR_FILES.HTML",
    "YOUR_FILES.url",
    "YOUR_FILES_ARE_DEAD.hta",
    "YOUR_FILES_ARE_ENCRYPTED.HTML",
    "YOUR_FILES_ARE_ENCRYPTED.TXT",
    "YOUR_FILES_ARE_LOCKED.txt",
    "YOU_MUST_READ_ME.rtf",
    "Your files are locked !!!!.txt",
    "Your files are locked !!!.txt",
    "Your files are locked !!.txt",
    "Your files are locked !.txt",
    "Your files are now encrypted.txt",
    "Your files encrypted by our friends !!! txt",
    "Your files encrypted by our friends !!!.txt",
    "YourID.txt",
    "ZINO_NOTE.TXT",
    "Zenis-*.*",
    "Zenis-Instructions.html",
    "[*]-HOW-TO-DECRYPT.txt",
    "[KASISKI]",
    "[KASISKI]*",
    "[Lockhelp@qq.com].Gate",
    "[amanda_sofost@india.com].wallet",
    "_!!!_README_!!!_*",
    "_!!!_README_!!!_*_ .txt",
    "_!!!_README_!!!_*_.hta",
    "_*_HOWDO_text.html",
    "_*_README.hta",
    "_*_README.jpg",
    "_Adatok_visszaallitasahoz_utasitasok.txt",
    "_CRYPTED_README.html",
    "_DECRYPT_INFO_*.html",
    "_DECRYPT_INFO_szesnl.html",
    "_HELP_HELP_HELP_*",
    "_HELP_HELP_HELP_*.hta",
    "_HELP_HELP_HELP_*.jpg",
    "_HELP_INSTRUCTION.TXT",
    "_HELP_INSTRUCTIONS_.TXT",
    "_HELP_Recover_Files_.html",
    "_HELP_instructions.bmp",
    "_HELP_instructions.txt",
    "_HOWDO_text.html",
    "_HOW_TO_Decrypt.bmp",
    "_H_e_l_p_RECOVER_INSTRUCTIONS*.html",
    "_H_e_l_p_RECOVER_INSTRUCTIONS*.png",
    "_H_e_l_p_RECOVER_INSTRUCTIONS*.txt",
    "_H_e_l_p_RECOVER_INSTRUCTIONS+*.html",
    "_H_e_l_p_RECOVER_INSTRUCTIONS+*.png",
    "_H_e_l_p_RECOVER_INSTRUCTIONS+*.txt",
    "_How to restore files.*",
    "_How_To_Decrypt_My_File_.*",
    "_INTERESTING_INFORMACION_FOR_DECRYPT.TXT",
    "_Locky_recover_instructions.bmp",
    "_Locky_recover_instructions.txt",
    "_README_*.hta",
    "_README_.hta",
    "_READ_ME_FOR_DECRYPT.txt",
    "_READ_THI$_FILE_*",
    "_RECOVER_INSTRUCTIONS.ini",
    "_RECoVERY_+*.*",
    "_RESTORE FILES_.txt",
    "_WHAT_is.html",
    "_XiaoBa_Info_.hta",
    "_crypt",
    "_help_instruct*.*",
    "_how_recover*.html",
    "_how_recover*.txt",
    "_how_recover+*.html",
    "_how_recover+*.txt",
    "_how_recover.txt",
    "_iWasHere.txt",
    "_nullbyte",
    "_ryp",
    "_secret_code.txt",
    "_\u5982\u4f55\u89e3\u5bc6\u6211\u7684\u6587\u4ef6_.txt",
    "aboutYourFiles.*",
    "allcry_upx.exe",
    "anatova.exe",
    "anatova.txt",
    "bahij2@india.com",
    "chilli.exe",
    "cmdRansomware.*",
    "confirmation.key",
    "crjoker.html",
    "cryptinfo.txt",
    "cryptolocker.*",
    "cscc.dat",
    "damage@india.com*",
    "de_crypt_readme.*",
    "de_crypt_readme.bmp",
    "de_crypt_readme.html",
    "de_crypt_readme.txt",
    "decipher_ne@outlook.com*",
    "decoder.hta",
    "decrypt all files*.bmp*",
    "decrypt explanations.html",
    "decrypt-instruct*.*",
    "decrypt_Globe*.exe",
    "decrypt_instruct*.*",
    "decrypted_files.dat",
    "decypt_your_files.html",
    "default32643264.bmp",
    "default432643264.jpg",
    "delog.bat",
    "diablo6-*.htm",
    "dispci.exe",
    "dllhost.dat",
    "dummy_file.encrypted",
    "ebay-msg.html",
    "ebay_was_here",
    "email-salazar_slytherin10@yahoo.com.ver-*.id-*-*.randomname-*",
    "email-vpupkin3@aol.com*",
    "enc_files.txt",
    "encryptor_raas_readme_liesmich.txt",
    "enigma.hta",
    "enigma_encr.txt",
    "exit.hhr.obleep",
    "fattura_*.js",
    "file0locked.js",
    "filesinfo.txt",
    "firstransomware.exe",
    "hacked.txt",
    "help-file-decrypt.enc",
    "help_decrypt*.*",
    "help_decrypt_your_files.html",
    "help_file_*.*",
    "help_instructions.*",
    "help_recover*.*",
    "help_recover_instructions*.bmp",
    "help_recover_instructions*.html",
    "help_recover_instructions*.txt",
    "help_recover_instructions+*.BMP",
    "help_recover_instructions+*.html",
    "help_recover_instructions+*.txt",
    "help_restore*.*",
    "help_to_decrypt.txt",
    "help_your_file*.*",
    "how to decrypt aes files.lnk",
    "how to decrypt*.*",
    "how to get back you files.txt",
    "how to get data.txt",
    "how_decrypt.gif",
    "how_recover*.*",
    "how_to_back_files.html",
    "how_to_decrypt*.*",
    "how_to_recover*.*",
    "how_to_recver_files.txt",
    "how_to_unlock*.*",
    "howrecover+*.txt",
    "howto_recover_file.txt",
    "howto_restore*.*",
    "howtodecrypt*.*",
    "howtodecryptaesfiles.txt",
    "infpub.dat",
    "install_tor*.*",
    "keybtc@inbox_com",
    "last_chance.txt",
    "lblBitcoinInfoMain.txt",
    "lblFinallyText.txt",
    "lblMain.txt",
    "les#.TXT",
    "locked.bmp",
    "loptr-*.htm",
    "lukitus.html",
    "matrix-readme.rtf",
    "maxcrypt.bmp",
    "message.txt",
    "mood-ravishing-hd-wallpaper-142943312215.jpg",
    "msptermthemes.exe",
    "oor.",
    "oor.*",
    "ownertrust.txt",
    "padcryptUninstaller.exe",
    "paycrypt.bmp",
    "payload.dll",
    "petwrap.exe",
    "popcorn_time.exe",
    "pronk.txt",
    "qwer.html",
    "qwer2.html",
    "qwerty-pub.key",
    "random",
    "ransomed.html",
    "readme.hta",
    "readme_decrypt*.*",
    "readme_for_decrypt*.*",
    "readme_liesmich_encryptor_raas.txt",
    "recover.bmp",
    "recover.txt",
    "recoverfile*.txt",
    "recovery+*.*",
    "recovery_file.txt",
    "recovery_key.txt",
    "recoveryfile*.txt",
    "redchip2.exe",
    "restore_files.txt",
    "restorefiles.txt",
    "rtext.txt",
    "ryukreadme.html",
    "strongcrypt.bmp",
    "structsstructs.exe",
    "svchosd.exe",
    "svchostt.exe",
    "t.wry",
    "tabDll*.dll",
    "taskdl.exe",
    "taskhsvc.exe",
    "tasksche.exe",
    "taskse.exe",
    "tor.exe",
    "tox.html",
    "unCrypte@outlook.com*",
    "vault.hta",
    "vault.key",
    "vault.txt",
    "vesad",
    "warning.txt",
    "wcry.exe",
    "wcry.zip",
    "wie_zum_Wiederherstellen_von_Dateien.txt",
    "winclwp.jpg",
    "wormDll*.dll",
    "x5gj5_gmG8.log",
    "xort.txt",
    "your_key.rsa",
    "zXz.html",
    "zcrypt.exe",
    "zycrypt.*",
    "zzzzzzzzzzzzzzzzzyyy",
    "\u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0435.TXT",
    "\u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u043e\u043f\u043b\u0430\u0442\u0435.txt"
  ],
  "extended-data": {
    "excludefromfilters": [],
    "deltasinceprev": [
      "*.charmant",
      "*.help.Ransom",
      "*.id[*-2542].[bexonvelia@aol.com].Dever"
    ],
    "regexsubstringsubs": [
      {
        "\\.$": ".*"
      },
      {
        "^\\.": "*."
      },
      {
        "([X,x]{2,})+(?!$)": "*"
      },
      {
        "\\*{2,}": "*"
      }
    ],
    "regexsummarizations": [
      {
        "^\\*\\.[Xx]iao[Bb]a[0-9]*$": "*.xiaoba*"
      },
      {
        "^# DECRYPT MY FILES #.*": "# DECRYPT MY FILES #.*"
      },
      {
        "^\\*\\.cerber.{0,1}": "*.cerber*"
      },
      {
        "^\\*\\.crypt\\d.*": "*.crypt*"
      },
      {
        "^\\*\\.crypte.*$": "*.crypte*"
      },
      {
        "^\\*\\.crypto.*$": "*.crypto*"
      },
      {
        "^\\*.[Dd]jvu.$": "*.djvu?"
      },
      {
        "^\\*\\.encrypted.*": "*.encrypted*"
      },
      {
        "^\\*\\.fuck.*": "*.fuck*"
      },
      {
        "^\\*\\.helpdecrypt@.*": "*.helpdecrypt@*"
      },
      {
        "^\\*\\.mole.*": "*.mole*"
      },
      {
        "^00\\d-.*\\.html$": "00?-*.html"
      },
      {
        "^_H_e_l_p_RECOVER_INSTRUCTIONS.*": "_H_e_l_p_RECOVER_INSTRUCTIONS*.*"
      },
      {
        "^help_recover.*": "help_recover*.*"
      },
      {
        "^how to decrypt.*": "how to decrypt*.*"
      },
      {
        "^help_your_file.*": "help_your_file*.*"
      },
      {
        "^help_restore.*": "help_restore*.*"
      },
      {
        "^how_decrypt.*": "how_decrypt*.*"
      },
      {
        "^readme_decrypt.*": "readme_decrypt*.*"
      },
      {
        "^\\*\\.cript.*": "*.cript*"
      }
    ],
    "losslesstracking": {
      "addedfilters": [],
      "removedfilters": []
    }
  }
}