[Fedor22]

Petya imitation called Petya+. Written in .NET. Doesn't encrypt and contains fake copyright: "Hewlett-Packard 2017".
Name: Ransom_FAKEPETYA.A
MD5: 01a18db18af5cd780eab9bbadd881e8c
SHA1: 36728334c4d1bb927310e0f1268b3890f2bd2457
VT: https://www.virustotal.com/en/file/c145 ... /analysis/

[Xylitol]

in attachement