目前我们收集到了GlobeImposter 2.0一些特殊变种，例如后缀为*.{eamil}XX，或者为*.crypted_email等，他们有如下特征：Dppflash extractor
勒索通知文件：how_to_back_file.htm HOW_TO_RESTORE_FILES.htmlDppflash extractor
邮件地址：Dppflash extractor
makbigfast@india.comDppflash extractor
hardfoork@india.comDppflash extractor
happydayz@india.comDppflash extractor
happydaayz@aol.comDppflash extractor
strongman@india.comDppflash extractor
hiddentreasure@india.comDppflash extractor
choclatestep@india.comDppflash extractor
jeepdayz@aol.comDppflash extractor
vape@india.comDppflash extractor
vapeefiles@aol.comDppflash extractor
fostcrypt@india.comDppflash extractor
fostecrypt@aol.comDppflash extractor
OMNOOMNOOM@india.comDppflash extractor
omnoomnoomf@aol.comDppflash extractor
trustcrypt@india.comDppflash extractor
trustfiles@aol.comDppflash extractor
pingy@india.comDppflash extractor
plingyfiles@aol.comDppflash extractor
legoo@india.comDppflash extractor
legosfilos@aol.comDppflash extractor
grafcrypt@india.comDppflash extractor
graffiles@aol.comDppflash extractor
georbushy@aol.comDppflash extractor
plingyfiles@aol.comDppflash extractor
fostecrypt@aol.comDppflash extractor
fostcrypt@india.comDppflash extractor
mixfight@india.comDppflash extractor
mixifightfiles@aol.comDppflash extractor
ronald_reagan@derpymail.orgDppflash extractor
colin_farel@aol.comDppflash extractor
bentleysali@india.comDppflash extractor
brabusDangers@india.comDppflash extractor
unlistbusten@aol.comDppflash extractor
illnestfirst@aol.comDppflash extractor
makbigfast@india.comDppflash extractor
fedovas@aol.comDppflash extractor
uridzu@aaathats3as.comDppflash extractor
minzeewerg@420blazeDppflash extractor
damarles@airmail.ccDppflash extractor
steffevendeng@post.comDppflash extractor
yoshikada@cock.luDppflash extractor
zerwix@airmail.ccDppflash extractor
secure@cock.liDppflash extractor
加密算法：Dppflash extractor
对于小文件，全字节加密Dppflash extractor
对于大文件。比如数据库，虚拟机，仅仅加密文件头部，文件尾部有残留信息。