Analysis
-
max time kernel
112s -
max time network
112s -
platform
windows7_x64 -
resource
win7 -
submitted
15-10-2020 17:15
Static task
static1
Behavioral task
behavioral1
Sample
5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe
Resource
win7
Behavioral task
behavioral2
Sample
5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe
Resource
win10v200722
General
-
Target
5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe
-
Size
1.2MB
-
MD5
504890ff01be54dfa0ce0b92624614a2
-
SHA1
f8ce09a61e7b131c1d48e621b65a4789f7d5feed
-
SHA256
5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6
-
SHA512
45668897546f316af5565a63015cb91b2c9f275882bb39aa1c1b113b6a544f6bfdec1270e69ec932cbdc82432e1e86ff149eaf20747600cdd35086c286187fec
Malware Config
Signatures
-
Matrix Ransomware 460 IoCs
Targeted ransomware with information collection and encryption functionality.
Processes:
5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exedescription flow ioc Process File created C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\lua\meta\art\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Mozilla Maintenance Service\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\META-INF\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\All Users\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\ProgramData\Package Cache\{12578975-C765-4BDF-8DDC-3284BC0E855F}v14.21.27702\packages\vcRuntimeAdditional_amd64\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\icons\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Microsoft\Feeds\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Mozilla Firefox\browser\features\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Google\Update\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\lua\intf\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\hi\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\Saved Games\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\skins\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.ecore_2.10.1.v20140901-1043\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\css\dark\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\All Users\Microsoft\Assistance\Client\1.0\en-US\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Microsoft\Media Player\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher.win32.win32.x86_64_1.1.200.v20141007-2033\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ga\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d5vrebxd.default-release\datareporting\archived\2020-06\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\locale\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\sk\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\amd64\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\ProgramData\Package Cache\{F7CAC7DF-3524-4C2D-A7DB-E16140A3D5E6}v14.21.27702\packages\vcRuntimeMinimum_amd64\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\All Users\Microsoft\OfficeSoftwareProtectionPlatform\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\All Users\Microsoft\MF\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\am\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\skins\fonts\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\images\cursors\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\zi\Africa\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\zi\America\North_Dakota\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\brx\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\fur\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\VisualElements\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\deploy\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\tl\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Roaming\Microsoft\Protect\S-1-5-21-1131729243-447456001-3632642222-1000\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\kk\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\Documents\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Google\Chrome\Application\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\gl\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\IDTemplates\ENU\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\lua\extensions\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Google\Chrome\Application\Dictionaries\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\db\bin\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\locale\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ka\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\META-INF\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\wasm\index-dir\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\d5vrebxd.default-release\cache2\entries\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ja\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\Locales\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9tnk39ho.Admin\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\Favorites\MSN Websites\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\All Users\Microsoft\OfficeSoftwareProtectionPlatform\Cache\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\Favorites\Links\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\pt_BR\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\lua\http\images\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\ProgramData\Microsoft Help\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\configuration\org.eclipse.equinox.simpleconfigurator\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\hy\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Recovery\f840bc82-aff2-11ea-839f-f21450b4f854\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d5vrebxd.default-release\storage\default\moz-extension+++0b99e65e-22a6-4b3f-a101-8818eb39c6a0^userContextId=4294967295\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\bin\server\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.106\default_apps\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\ckb\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\wasm\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\ext\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Microsoft\Media Player\Sync Playlists\en-US\00008352\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\amd64\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\lua\sd\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\cmm\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\d5vrebxd.default-release\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.rcp_4.4.0.v20141007-2301\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Java\jre7\lib\zi\America\Indiana\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Microsoft Sync Framework\v1.0\Runtime\x64\resources\1033\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\Mozilla Firefox\fonts\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Code Cache\js\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe File created C:\Users\Public\Libraries\#SNT2_INFO#.rtf 5474b58de90ad79d6df4c633fb773053fecc16ad69fb5b86e7a2b640a2a056d6.bin.exe HTTP URL 7 http://gmn.timerz.org/addrecord.php?apikey=snt2_api_key&compuser=AVGLFESB|Admin&sid=hARuEkrd4OXZcl4C&phase=4D19B28B1D766C04|3361|1GB