TOKYOCORE ransomware binary identification via hash and filename

Detects the execution or presence of the TOKYOCORE ransomware binary by matching its known MD5 and SHA256 file hashes, or by identifying the specific filename 'fsociety.exe'.