value:  Ragnar Locker has used VirtualBox and a stripped Windows XP virtual machine to run itself. The use of a shared folder specified in the configuration enables Ragnar Locker to encrypt files on the host operating system including files on any mapped drives.
name: Hide Artifacts: Run Virtual Instance