Analysis
-
max time kernel
90s -
max time network
91s -
platform
windows7_x64 -
resource
win7v200722 -
submitted
08-10-2020 15:06
Static task
static1
Behavioral task
behavioral1
Sample
710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe
Resource
win7v200722
Behavioral task
behavioral2
Sample
710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe
Resource
win10v200722
General
-
Target
710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe
-
Size
1.2MB
-
MD5
67fec6ab8e3a8b74aa742f8b365cdbca
-
SHA1
e36e647e055aeeb94a3f1e3e16fb6968c30d73ec
-
SHA256
710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb
-
SHA512
5dcae0d0181ad4684a9c4d88f1b93948c1b42d9ed4cf5ed7ee86052b57d2fa38b4a3024d837f758dc4b63a49e66fd64135bc58bb839cb00db648494fed749ffe
Malware Config
Signatures
-
Matrix Ransomware 459 IoCs
Targeted ransomware with information collection and encryption functionality.
Processes:
710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exedescription flow ioc Process File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\lua\http\images\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Favorites\Links\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\profileRegistry\JMC.profile\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\dropins\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\mn\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Videos\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\images\cursors\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\es\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\management\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2ulz21c5.default-release\datareporting\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\PFM\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\SystemV\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\nl\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\wasm\index-dir\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Microsoft\Windows Mail\Backup\new\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Templates\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Favorites\Microsoft Websites\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Document Building Blocks\1033\14\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\or\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2ulz21c5.default-release\datareporting\archived\2020-07\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Downloads\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\css\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.rcp.ja_5.5.0.165303\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.core_5.5.0.165303\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\sl\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Searches\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\North_Dakota\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\BrowserMetrics\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Public\Videos\Sample Videos\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\Pacific\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Favorites\MSN Websites\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\wa\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Public\Pictures\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.89\Locales\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Microsoft\Feeds\Feeds for United States~\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Saved Games\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2ulz21c5.default-release\startupCache\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\af\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Public\Music\Sample Music\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.89\VisualElements\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\lua\extensions\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.89\WidevineCdm\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\ast\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Music\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\my\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\MSBuild\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Adobe\Acrobat\9.0\Cache\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.feature_3.9.1.v20140827-1444\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\bin\server\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\lua\intf\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\lua\modules\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Google\Chrome\Application\Dictionaries\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Microsoft Analysis Services\AS OLEDB\10\Resources\1033\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\bs\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\2ulz21c5.default-release\cache2\entries\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Public\Music\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.help_2.0.102.v20141007-2301\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Mozilla Firefox\fonts\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\America\Kentucky\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\prc\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Mozilla Firefox\browser\VisualElements\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\lua\http\requests\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\include\win32\bridge\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Pictures\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\ff\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\LocalLow\Sun\Java\jdk1.7.0_80_x64\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\fonts\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\ia\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\server\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\js\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\All Users\Microsoft\Assistance\Client\1.0\en-US\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.89\MEIPreload\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Kentucky\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\Australia\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\hr\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\locale\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.89\default_apps\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\si\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\wasm\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\Antarctica\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\lua\meta\reader\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Links\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\Favorites\Links for United States\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins3d\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\G9Q5MRQ4\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\ProgramData\Package Cache\{f4220b74-9edd-4ded-bc8b-0342c1e164d8}\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2ulz21c5.default-release\storage\default\moz-extension+++355a24d0-6cfc-4451-9595-11d186f69ab7^userContextId=4294967295\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\0000863F\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\UBDEWKGM\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\ach\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Microsoft\Feeds Cache\0V5SICB9\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\META-INF\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\2ulz21c5.default-release\storage\permanent\chrome\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Admin\AppData\Local\Microsoft\Media Player\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\ks_IN\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\com.jrockit.mc.feature.flightrecorder_5.5.0.165303\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Users\Public\Pictures\Sample Pictures\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\p2\org.eclipse.equinox.p2.engine\.settings\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\SPPlugins\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe File created C:\Program Files\VideoLAN\VLC\locale\vi\LC_MESSAGES\#DRSC_README#.rtf 710c3a5f954b57150f89119074d834fac1def177d73d8adf605378b9c2589ceb.exe HTTP URL 6 http://sec.timerz.org/addrecord.php?apikey=drsc_api_key&compuser=ELJKIHEZ|Admin&sid=oBmyzS1XOfT4SR34&phase=[ALL]49E80ECBA8F3CD9C