Fig. 8
From: Ransomware deployment methods and analysis: views from a predictive model and human responses

Randep states of WannaCry ransomware, showing a full-view, b zoomed-in, and c WannaCry’s mssecsvc.exe process analysis showing communicating functions