hello. This is White Defender.

Ransomware can be dealt with if you prevent it in advance.
White Defender is an anti-ransomware solution that can protect against ransomware in real time. thank you안녕하세요. 화이트디펜더입니다.

whitedefender video

This is a video of White Defender responding to ransomware threats.

title
Xp64 ransomware
Registration date
2025-05-07
type
Ransomware
Treatment method
Diagnosis/treatment is possible with WhiteDefender.
change extension
Filename.Extension.Xp64
ransom note

What is Xp64 Ransomware?
The malware analyzed by WhiteDefender, which researches and develops ransomware security, is Xp64 Ransomware.
Xp64 is designed to encrypt file data and change the extension so that it cannot be used. 

Xp64 renames the file data by adding the extension ".Xp64" to the user`s important data files.
For example, the file "download.jpg" will be changed to "download.jpg.Xp64", and "sales.xlsx" will be changed to "sales.xlsx.Xp64".
Once this attack process is complete, it displays a ransom note in a pop-up message, and a ransom note with the title "Xp64_Help.txt" is created in every directory.



A ransom note is a note that contains instructions that you must follow.

 

Ransomware name Xp64 ransomware
Changed extension .Xp64
Ransom note (payment information file) Xp64_Help.txt
characteristic After encrypting all file data, money is requested
MD5 09c6d5e7b0d8063461b6b03c3e353c2c
SHA-1 bc0b184b360f239af74ead0878210669e85fda68
SHA-256 8dfd7415dcadcc189224a1def1a77dfca00256fe5d8aec20c528ee64a887254d
Basic protection methods The most basic and effective protection method is
to use a reliable anti-ransomware program.
Keep your security software up to date.

 

Everyzone White Defender Co., Ltd. | CEO: Seunggyun Hong|Business registration number: 220-81-67981
Copyright ⓒEveryzone , Inc. All Rights Reserved.|