- Distribution Method : Unknown
 
 - MD5 : bf361b8decee605e70151028d7e0c848
 
 - Encrypted File Pattern : .hos
 
 - Malicious File Creation Location : C:\Users\%UserName%\AppData\Roaming\winhos.exe
 
 - Major Characteristics :
     - Offline Encryption
     - Developed by a Korean
     - Disable Command Prompt (cmd.exe) and Task Manager (Taskmgr.exe)
     - Requires the Heroes of the Storm game play for 1 hour 
 
					List