MD5 Hash
Extracted from web research on notpetya. Source: https://www.crowdstrike.com/en-us/blog/petrwrap-ransomware-technical-analysis-triple-threat-file-encryption-mft-encryption-credential-theft/ | CIRCL Hashlookup: known file — PsExec.exe (381816 bytes) (source: nsrl_modern_rds — likely legitimate software)
No sightings recorded yet