Resubmissions

23/03/2026, 02:00

260323-cffqcsds9n10

05/03/2026, 16:32

260305-t1xm2scx3k10

11/02/2026, 21:18

260211-z5q9qaav8h10

11/05/2025, 03:54

250511-egp2javwat10

03/09/2024, 14:02

240903-rb57sazdqf10

03/09/2024, 13:51

240903-q59avszclf10

02/09/2024, 19:51

240902-yk8gtsxbpd10

02/09/2024, 02:27

240902-cxh7tazflg10

02/09/2024, 02:26

240902-cwxc2sygll10

21/06/2024, 19:37

240621-yca7cszgnd10

Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/06/2024, 17:07

General

  • Target
    Ransomware/criticalupdate01.exe
  • Size 261KB
  • Sample240609-vm7rjadd73
  • SHA256 f4234a501edcd30d3bc15c983692c9450383b73bdd310059405c5e3a43cc730b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Path
  • C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML

Ransom Note
  • <html> <head> <style> body{ background-color: #3366CC; } h1 { background-color: RGB(249, 201, 16); } p { background-color: maroon; color: white; } </style> </head> <body> <center> <h1><b> Attention ! All your files </b> have been encrypted. </h1></br> <p> Due encrypting was used algoritm RSA-4096 and AES-256, used for protection military secrets.</br> That means > RESTORE YOU DATA POSIBLE ONLY BUYING decryption passwords from us.</br> Getting a decryption of your files is - SIMPLY task.</br></br> That all what you need:</br> 1. Sent Your ID_KEY on mailbox [email protected] or [email protected] </br> 2. For test, decrypt 2 small files, to be sure that we can decrypt you files.</br> 3. Pay our services. </br> 4. GET software with passwords for decrypt you files.</br> 5. Make measures to prevent this type situations again.</br></br> IMPORTANT(1)</br> Do not try restore files without our help, this is useless, and can destroy you data permanetly.</br></br> IMPORTANT(2) </br> We Cant hold you decryption passwords forever. </br>ALL DECRYPTION PASSWORDS, for what wasn`t we receive reward, will destroy after week of moment of encryption. </p> <p> Your ID_KEY: <br> </p> <table width="1024" border="0"> <tbody> <tr> <td><p>aROY4gz10B9RpS6geBx5T4r4RDcffZTAp39caN5B05rL9gMG9ht6W98jGR/oN1ViiaQjJ5cz/xyRtWlR62P0cMnwI6GkTzOnBHuYry3q3cOb3yVYeuHPu3OK6Ulz9YKcySkGbPk/QGhSJM4tP2IVaeL6WiWCjNkvMNYYEQGa3mmD85IFs2UqxTNxKsGMVSndjM5FGbl/KQ8kiIoF17+u2u1VNUdfpmLNmHKWzvQ2yeoyOmgXs85I3zv0HTf20FhzOePKdCUw0kzw94Fvx4CkxszMe4HZJcaANAr/+1m4NyIlvhwwWzEWZl2Xmzpg5kghLxbHHBudwR2Bqvvz1jzArw==ZW4tVVM=</p></td> </tr> </tbody> </table> </center></html></body>

Signatures

  • Fantom

    Ransomware which hides encryption process behind fake Windows Update screen.

  • Renames multiple (2511) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Disables Task Manager via registry modification
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe
    "C:\Users\Admin\AppData\Local\Temp\Ransomware\criticalupdate01.exe"
    1⤵
    • Checks computer location settings
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4464
    • C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
      "C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe"
      2⤵
      • Executes dropped EXE
      PID:2360

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cef_200_percent.pak

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef_200_percent.pak
        • Size 16B
        • SHA256 361550f9b8848bcb017e8635f16818c9fef26d71d0fbe56de7a1849810cd68c7
        • MD5 SHA1 SHA512

        aic_file_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\aic_file_icons.png
        • Size 50KB
        • SHA256 8785338801b20e02fea57f31f1f838e20584f508f079d13cc28f58927ec53cef
        • MD5 SHA1 SHA512 SSDEEP

        selection-actions.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions.png
        • Size 1KB
        • SHA256 c62cd4517e452ffebc5898c5c644f96dbf71a0db93c4095b0f839b62e5cdc1c5
        • MD5 SHA1 SHA512

        selection-actions2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\selection-actions2x.png
        • Size 3KB
        • SHA256 4f2720cadf7853be2e9528e0b781232ea5765f72eb554c6e133b51598f22992c
        • MD5 SHA1 SHA512

        s_remove_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg
        • Size 720B
        • SHA256 1dff60ddf2880fbfbd2b7381d293b9ce7816f8417e0f38b6e5550aa843f890b7
        • MD5 SHA1 SHA512

        duplicate.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\duplicate.svg
        • Size 1KB
        • SHA256 1e9f6e7a2689df1ec36fd74e92a398e1b5b737803d371285c44c286a350c3582
        • MD5 SHA1 SHA512

        remove.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\remove.svg
        • Size 1KB
        • SHA256 d1417be523b73bb47c23ae62ca8a054334e7711b50a4ac7fed0cc74b5ab7dd19
        • MD5 SHA1 SHA512

        s_backarrow_default.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_backarrow_default.svg
        • Size 896B
        • SHA256 5b1874b33da97633c1aa8dad9e1ca8f80f7b94b4ba36e64eb44d27e9bbbbb406
        • MD5 SHA1 SHA512

        s_comment_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_comment_18.svg
        • Size 1KB
        • SHA256 2376df251b716d6276728cdc4e9eb1038f96f77ea44f00ea6687a21efbb383bc
        • MD5 SHA1 SHA512

        s_editpdf_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_editpdf_18.svg
        • Size 1KB
        • SHA256 ef72e23b5cc206948fa1174b30ef24464a14c68557e055f0dff8e81080a5385c
        • MD5 SHA1 SHA512

        s_export_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg
        • Size 7KB
        • SHA256 1f843452515a61c550f5c8b3f5bc88a92d69c397f44ff8a6a4ff866de71c6945
        • MD5 SHA1 SHA512 SSDEEP

        s_fillandsign_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg
        • Size 2KB
        • SHA256 a4db62d244c95acb544df4023a6f30740aab5af567e452fe206bfd0504a01fdb
        • MD5 SHA1 SHA512

        s_folder-default_32.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_folder-default_32.svg
        • Size 560B
        • SHA256 dbe1c4c882b52683570a61c83558a796347245f1d7bb772dc98091bcc32a72c0
        • MD5 SHA1 SHA512

        s_move_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_move_18.svg
        • Size 1KB
        • SHA256 7a4e94c0ea62a70aa887875fb36d172e4381415a03a2aa024798f0d1c3c954ab
        • MD5 SHA1 SHA512

        s_nextarrow_default.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_nextarrow_default.svg
        • Size 880B
        • SHA256 48ea4a5d2fb451919f7cce4e35633723e1b60411d01087a03685579937fd710e
        • MD5 SHA1 SHA512

        s_organize_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_organize_18.svg
        • Size 1KB
        • SHA256 a36f6bc13db4478a4c6ce58da06d38eefeb83be74e62f84acbddc7f3f811146c
        • MD5 SHA1 SHA512

        s_rename_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_rename_18.svg
        • Size 1KB
        • SHA256 643352df3c2221750a4af42be74c06ace7684b89b31f610b2d418abee72688f2
        • MD5 SHA1 SHA512

        s_sendforsignature_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_sendforsignature_18.svg
        • Size 2KB
        • SHA256 203f6b09a4a1f9a57247af3118291f7077bf96dd0bcb7c3db8cdfd67ec483d7e
        • MD5 SHA1 SHA512

        s_share_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_share_18.svg
        • Size 1KB
        • SHA256 3b1199cf0feea42c99096b56d32b9417afdd877b8e8f9c3b22fc99ae5ce059e3
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\root\ui-strings.js
        • Size 3KB
        • SHA256 df76415885661553553c27c7a3bef2d5bbb593c665cba6d1a51ae87883eb080c
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\root\ui-strings.js
        • Size 28KB
        • SHA256 210b0d8574ff878637496e1b3af762afdd828aa7353b7e03b7432238aa733c24
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\root\ui-strings.js
        • Size 7KB
        • SHA256 c329f24a2ce5c83bcf61bc5aef8a48c28ab9d3898eeac24d483331c533fe255d
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\he-il\ui-strings.js
        • Size 896B
        • SHA256 d3a8120c2ac17f221acbbbee9485636b68598193efa289cba6c800d1328e0b1f
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\root\ui-strings.js
        • Size 4KB
        • SHA256 855f4225bfbfec5b61add26efd85be5f73eade4ea7ba6a9ab6c033730b7c1841
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 dd9e394b2874b8ed9ba0c68eec93762fcdb525c39547d57d4d07c1800bf30648
        • MD5 SHA1 SHA512

        convertpdf-rna-selector.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-selector.js
        • Size 175KB
        • SHA256 b12ea64388f7ce3f4d61351e2184e13b2be1358177865579c0fab6a0f7223f81
        • MD5 SHA1 SHA512 SSDEEP

        convertpdf-rna-tool-view.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\rhp\convertpdf-rna-tool-view.js
        • Size 376KB
        • SHA256 8e4cb70cadf9b3aa1cd43d973d4a3a0037c00923864de4586f1c9ad505024500
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js
        • Size 2KB
        • SHA256 34b6f9b921923dc8522cf4a24e65782b2c74e8041fd869de74f58710e7f29cab
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 1a0fb0a3301d12818c769f89986ee02a8d64b3b6a010c2310e1b238eed9180fb
        • MD5 SHA1 SHA512

        example_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons.png
        • Size 688B
        • SHA256 44a0c9ef3b5874bb37aba4097a9c507fa062e4d3ec96a428a640e29a2f0b1c0f
        • MD5 SHA1 SHA512

        example_icons2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\example_icons2x.png
        • Size 1KB
        • SHA256 37335faf57c567c75e08f901213bae987b491b1e899b16221c3bd4ea94568853
        • MD5 SHA1 SHA512

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon.png
        • Size 448B
        • SHA256 2f73fe98b6b7136210f2c5425a250c42d9cb4e8bc1460bc35745622d9a46c0ec
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_2x.png
        • Size 624B
        • SHA256 9af98f14aa715ac3b596b54c91b6aabce96c33777628d1a437245418b4205e0f
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover.png
        • Size 400B
        • SHA256 699c9cbb092b74e039bc5502fbdde862a2703cab79682babbd75c6466ed76d07
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\rhp_world_icon_hover_2x.png
        • Size 560B
        • SHA256 f391a1c826638fbf52b0c1d333f077925df17aeb2c867b0ff47a2a0260657352
        • MD5 SHA1 SHA512

        rhp_world_icon.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon.png
        • Size 400B
        • SHA256 45ece2a4bd22fb71d06deb4dec0f7410016ff56ae1ff0e1a616e949eb4970f54
        • MD5 SHA1 SHA512

        rhp_world_icon_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png
        • Size 560B
        • SHA256 c70e6066991f74e6fbee98b9276a0b7664278f90810aa68befd157853480d9bd
        • MD5 SHA1 SHA512

        rhp_world_icon_hover.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png
        • Size 400B
        • SHA256 21c9bf14bab0302f22005002496330210fa3d7af02abf7ea5950a71092962350
        • MD5 SHA1 SHA512

        rhp_world_icon_hover_2x.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png
        • Size 560B
        • SHA256 1028486954a9bf6435e28d14f108bc286a5a4fbd72848999270f92e81224479c
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-ma\ui-strings.js
        • Size 1KB
        • SHA256 1c93ad94df70e6641770e8f2d82ecc150abba3f6a4875b69b45d4043b7cb16b2
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 88d1f014dacd4e3347615d712d31cd4a6230bbf52cc039334ff335d88734a3b3
        • MD5 SHA1 SHA512

        s_checkbox_unselected_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\s_checkbox_unselected_18.svg
        • Size 912B
        • SHA256 98fd888b8187065432f1267f1e9beb30b321209bb5c7d3279d2e85684ad38b82
        • MD5 SHA1 SHA512

        s_checkbox_selected_18.svg

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\images\themes\dark\s_checkbox_selected_18.svg
        • Size 1KB
        • SHA256 7fa79c82223f933426e623c35a8e3f99ad02537d689bc699a5713432e0e2a77c
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\root\ui-strings.js
        • Size 8KB
        • SHA256 13d8be6283e55ec9320268e5fa010f969056e6a4123945f1ac306d0720b39768
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-ma\ui-strings.js
        • Size 1KB
        • SHA256 5ce978546c4cda73e19a76f9296b567b04cdf5de5e38a5a778ad1f2349e55cd5
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\fr-ma\ui-strings.js
        • Size 1KB
        • SHA256 b094e996008c039af7700f294f585c8056471592a08182f90e9fb8ce65918af3
        • MD5 SHA1 SHA512

        icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons.png
        • Size 7KB
        • SHA256 3c6d3fcc64df0195298d52359d9a26e1f24e6c6b26515307fc7e1ee089f93394
        • MD5 SHA1 SHA512 SSDEEP

        icons_ie8.gif

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_ie8.gif
        • Size 7KB
        • SHA256 84fb5a2541f5cf04b592ccd90e4a0281146233a018f4ab6bd85dc23c91d6c37a
        • MD5 SHA1 SHA512 SSDEEP

        icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\icons_retina.png
        • Size 15KB
        • SHA256 be9ee0b10334a4bd45fbd5ffcd301f24390f3b6a7a1189daa758b5d5a64ee99b
        • MD5 SHA1 SHA512 SSDEEP

        new_icons.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons.png
        • Size 8KB
        • SHA256 e8710a4ea93135b7a43a7327ca04b603b24cd96d64ba66de18e7554169c9b1e7
        • MD5 SHA1 SHA512 SSDEEP

        new_icons_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\new_icons_retina.png
        • Size 17KB
        • SHA256 9eb1b2e47009e1e6cd3a30b3330fa7f95232f3be705eb5abc5d0485024c0b2a5
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-gb\ui-strings.js
        • Size 832B
        • SHA256 a4bb568c889c74440293708ddcae19da7de9ebf019921f13aac3e490fd95f7cb
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js
        • Size 864B
        • SHA256 911534743b57bb731d93f120cecd1e566edb116f9fce2528a69c8892cdf5a974
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\ui-strings.js
        • Size 1KB
        • SHA256 5100afe719d3de2a645824aa7927393264487989bd24b646403ae95881bc94b6
        • MD5 SHA1 SHA512

        bg_pattern_RHP.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_pattern_RHP.png
        • Size 192B
        • SHA256 67077b404161a549d99fc3a3a27edd7dea1cf9120930ab3ec50d93af72572e33
        • MD5 SHA1 SHA512

        bg_patterns_header.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\bg_patterns_header.png
        • Size 704B
        • SHA256 c34fac4f74d2b448a47872d158d7b9f2f9bf183ffacc2454b8742fedafeb18c1
        • MD5 SHA1 SHA512

        illustrations.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations.png
        • Size 8KB
        • SHA256 f8142a39dbcdba55584808705e16de7d197bce440b76b86cc9f079e141e4a8cf
        • MD5 SHA1 SHA512 SSDEEP

        illustrations_retina.png

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\illustrations_retina.png
        • Size 19KB
        • SHA256 948a88b95953cf80336ad10ded7a29c29f45094bcbdeafb06095036ec19eb0fe
        • MD5 SHA1 SHA512 SSDEEP

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 21ff94c3323743cb6feb5b952f41ac881fc39339d06e84e162825abfafcca8f4
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\sl-sl\ui-strings.js
        • Size 1KB
        • SHA256 9abf872275bb17c958077620311021f3ba6dd1dc22dece7d4476ee7317bafd54
        • MD5 SHA1 SHA512

        main-selector.css

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\css\main-selector.css
        • Size 816B
        • SHA256 888a9b915b6812c73d839504b407f9872f52a91ebf6d4e20b32f9befe6d1a9ee
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\root\ui-strings.js
        • Size 1KB
        • SHA256 e0df7a2cf456cee419e43fa016430bddc5a586a7e3b51a7d9e000f22e113ee10
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\ui-strings.js
        • Size 1KB
        • SHA256 595d6c1a9056e4904fcd41d8db3ab0fb9e35cd846e027953bedc70aa4c29976b
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\root\ui-strings.js
        • Size 1008B
        • SHA256 dbb7a2e248288bdf513388e34f8a7d69f37d04ec1b27d910d0fb28707738240e
        • MD5 SHA1 SHA512

        ui-strings.js

        • Path C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js
        • Size 4KB
        • SHA256 c4072e470838dc866237e2a4930c4d933d1d9e7e3a3b0a551fa179fb62ecf427
        • MD5 SHA1 SHA512 SSDEEP

        DECRYPT_YOUR_FILES.HTML

        • Path C:\Program Files\7-Zip\DECRYPT_YOUR_FILES.HTML
        • Size 1KB
        • SHA256 33ed8d39b6ec72be066e6a8a239362777d639dff3b94d2d1450d541b0ece1c83
        • MD5 SHA1 SHA512

        win32_LinkNoDrop32x32.gif

        • Path C:\Program Files\Java\jdk-1.8\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
        • Size 160B
        • SHA256 b499fa5c2e9ba09a19917d181cf1ee90330f54c4780f1f5ff7b0d14eff0fcacb
        • MD5 SHA1 SHA512

        THIRDPARTYLICENSEREADME-JAVAFX.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME-JAVAFX.txt
        • Size 192B
        • SHA256 cc92da95cd57202535c8c4668ac2fd237cfd58bcafecd17fbaa42ad80cbb9653
        • MD5 SHA1 SHA512

        THIRDPARTYLICENSEREADME.txt

        • Path C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt
        • Size 192B
        • SHA256 510336ef7cc564beb12dd8da62aececf39486eaed65d4884451d872537f49d9c
        • MD5 SHA1 SHA512

        directshow.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\directshow.md
        • Size 1KB
        • SHA256 c6a02d184d8b0c01eac96867f615a5af43c1511df0f1fddaed32de47ef8f52d1
        • MD5 SHA1 SHA512

        glib.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\glib.md
        • Size 31KB
        • SHA256 336c5a1755d2775494625635c7366f9be445c37466934d3be7384b8b1da9bf8a
        • MD5 SHA1 SHA512 SSDEEP

        gstreamer.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\gstreamer.md
        • Size 34KB
        • SHA256 4f904d8dd7b896c3e1400f93c91731b1076b7047b38d063e0047075b5f338a6d
        • MD5 SHA1 SHA512 SSDEEP

        jpeg_fx.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\jpeg_fx.md
        • Size 2KB
        • SHA256 5f99c090edcdb91848e71406e6f06f2b618e4f6c9f1fe03d0743c54e8d3ae2d7
        • MD5 SHA1 SHA512

        libxml2.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxml2.md
        • Size 3KB
        • SHA256 2c6aa856ab3ce33329dc7c7e4880e7174b4fd9d5278e8e5191b7aa3f9ef79194
        • MD5 SHA1 SHA512

        libxslt.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\libxslt.md
        • Size 2KB
        • SHA256 7ff9ed45f3eaddd0ee911a7faeeb96b00f16b23c374cb8a21dbd3b246e4a8384
        • MD5 SHA1 SHA512

        mesa3d.md

        • Path C:\Program Files\Java\jre-1.8\legal\javafx\mesa3d.md
        • Size 5KB
        • SHA256 a58fc9d82e0d95635d88e8d36d25d3cf5e565dbc60a6274a128a407235e80988
        • MD5 SHA1 SHA512 SSDEEP

        asm.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\asm.md
        • Size 1KB
        • SHA256 b4ea2d44684610790da3ab25636a219f4bd5bc9c766947307bdb56b99a43e62f
        • MD5 SHA1 SHA512

        bcel.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\bcel.md
        • Size 10KB
        • SHA256 48a0d042d019406e276305e0af91d0f8073be85d8b3663a61997032fbb17c9f9
        • MD5 SHA1 SHA512 SSDEEP

        cldr.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cldr.md
        • Size 3KB
        • SHA256 c7911f099ee376bf7b75011538389e3d987421913d72ab0f35c2d94beeac5719
        • MD5 SHA1 SHA512

        colorimaging.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\colorimaging.md
        • Size 176B
        • SHA256 8f991ecd2d3bc71dcdaa68a7804f42c3a9b9a53d98717f51eaf2eebe9ad77239
        • MD5 SHA1 SHA512

        cryptix.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\cryptix.md
        • Size 1KB
        • SHA256 b950db2ffb57beb302a5eb5f854c83fa42df2f269e7f3acfb95dc76006937f93
        • MD5 SHA1 SHA512

        dom.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dom.md
        • Size 3KB
        • SHA256 a960bdc48667301d1df1eea6fe0106a5fddd67ebe3aa035934fb680449526fd4
        • MD5 SHA1 SHA512

        dynalink.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\dynalink.md
        • Size 1KB
        • SHA256 99ab876d6da989c577a8bf1ed618b574aa6c170bdb6b68bc2f74d827c9081d2f
        • MD5 SHA1 SHA512

        ecc.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\ecc.md
        • Size 28KB
        • SHA256 075ce9f89d02609bacf978ecd9f2f03d1deaa4ffa29466cec122a76af2695d62
        • MD5 SHA1 SHA512 SSDEEP

        freebxml.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\freebxml.md
        • Size 2KB
        • SHA256 d27d795b7cc1a5a4df4485dcf4929c2caadfc0d5304c7aeb4b6bc997e50f7b29
        • MD5 SHA1 SHA512

        giflib.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\giflib.md
        • Size 1KB
        • SHA256 0adb9ef2b9ad33308f5a3f28743b04e89c2529396a48952e73ca66053541ced9
        • MD5 SHA1 SHA512

        icu.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\icu.md
        • Size 2KB
        • SHA256 aa0254b62216f3aa42019948e899ea73810a5efd4f9fd5fb7eed067998194a96
        • MD5 SHA1 SHA512

        jcup.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jcup.md
        • Size 1KB
        • SHA256 62c13c5edf3c9b28269368f37dfe33da4eb587087b2f852134bbb8c83b928ec1
        • MD5 SHA1 SHA512

        joni.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\joni.md
        • Size 1KB
        • SHA256 78dcf2c1a6b73de58e707677305b2a73b90b497056645ff93d11e47773b79f66
        • MD5 SHA1 SHA512

        jopt-simple.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jopt-simple.md
        • Size 1KB
        • SHA256 d736521c05f2f9f298c3c98009e915b63e5110137ed220a7bafff4b5edb0705a
        • MD5 SHA1 SHA512

        jpeg.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\jpeg.md
        • Size 3KB
        • SHA256 afda3ad043fb2eeb16cfb232903488d7d8934c018531a68ce801c4442418afee
        • MD5 SHA1 SHA512

        lcms.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\lcms.md
        • Size 2KB
        • SHA256 cea79f965bcc48eaec085e318db21670ee6f3ec05e746fdcf69eb922404bf729
        • MD5 SHA1 SHA512

        mesa3d.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\mesa3d.md
        • Size 5KB
        • SHA256 30b8bce48ee2db223ddb5e9af26d9fcca415365289c60b40fdadbfaa084815bd
        • MD5 SHA1 SHA512 SSDEEP

        pkcs11cryptotoken.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11cryptotoken.md
        • Size 3KB
        • SHA256 ff54876b2913a69a05b86b454cacfae1ba2f12b244448d8604a8c64debeaaf6f
        • MD5 SHA1 SHA512

        pkcs11wrapper.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\pkcs11wrapper.md
        • Size 2KB
        • SHA256 cda20815a51cbbfc489ee8f8c306b0955403e246b22384572c3b2a4065176d1c
        • MD5 SHA1 SHA512

        relaxngcc.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md
        • Size 2KB
        • SHA256 e47a4d10e271fd30b8f242adbd0fc3188f26b2f7c65d3ee5225dc51b792b5631
        • MD5 SHA1 SHA512

        relaxngdatatype.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngdatatype.md
        • Size 1KB
        • SHA256 5e57bc55869686a8ae2d2d0076174c07c8313a9f11ad74fbceb463aa8f55b440
        • MD5 SHA1 SHA512

        relaxngom.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\relaxngom.md
        • Size 1KB
        • SHA256 4bd83b559795225ea66b733de5a9d59241efd8405e40e83c90fe47b1bc971d6b
        • MD5 SHA1 SHA512

        santuario.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\santuario.md
        • Size 11KB
        • SHA256 f45a4fa308405526711a219ae3e7b95345a62b9cc71d9614747c04c5c9817db9
        • MD5 SHA1 SHA512 SSDEEP

        thaidict.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\thaidict.md
        • Size 1KB
        • SHA256 e5a4332056cefde5da946e108469c4a87eee45603fa1e4e6b4c3077cda35aa09
        • MD5 SHA1 SHA512

        unicode.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\unicode.md
        • Size 2KB
        • SHA256 24ef4b7f38edfae28269621f156cc685aaa38a4e7b09e1adbd8038a178d61a17
        • MD5 SHA1 SHA512

        xalan.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xalan.md
        • Size 11KB
        • SHA256 b99745b03d78801b71a6ebbd34d12eb267d6cf4383319ee2b47952edea4c1d89
        • MD5 SHA1 SHA512 SSDEEP

        xerces.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xerces.md
        • Size 11KB
        • SHA256 8b7d21498d18c1e1772721adc97c3496a92c3552cb7693898c2f0f3744b0d7a2
        • MD5 SHA1 SHA512 SSDEEP

        xmlresolver.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\xmlresolver.md
        • Size 11KB
        • SHA256 ea9003b9d213d6ed39ff08cd0d78563381b8a76b20fa33ed8c8c727330a4ff07
        • MD5 SHA1 SHA512 SSDEEP

        zlib.md

        • Path C:\Program Files\Java\jre-1.8\legal\jdk\zlib.md
        • Size 1024B
        • SHA256 81aa36e4c596ff2ad16cf4e299c1687405dfdab2509066ca9ea7d90a3a21dc61
        • MD5 SHA1 SHA512

        ClientSub2019_eula.txt

        • Path C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt
        • Size 48B
        • SHA256 abe864c98b9dfc4e914ea750a79470418ebdda25ddb7ff2d7e4c8348d09db281
        • MD5 SHA1 SHA512

        WindowsUpdate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\WindowsUpdate.exe
        • Size 21KB
        • SHA256 489f2546a4ad1e0e0147d1ca2fd8801785689f67fb850171ccbaa6306a152065
        • MD5 SHA1 SHA512 SSDEEP

        memory/2360-3118-0x00007FF9F8150000-0x00007FF9F8C11000-memory.dmp

        memory/2360-2675-0x00007FF9F8153000-0x00007FF9F8155000-memory.dmp

        memory/2360-154-0x00007FF9F8150000-0x00007FF9F8C11000-memory.dmp

        memory/2360-149-0x0000000000BF0000-0x0000000000BFC000-memory.dmp

        memory/2360-148-0x00007FF9F8153000-0x00007FF9F8155000-memory.dmp

        memory/4464-7-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-32-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-135-0x0000000074430000-0x0000000074BE0000-memory.dmp

        memory/4464-134-0x000000007443E000-0x000000007443F000-memory.dmp

        memory/4464-5-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-11-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-17-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-19-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-21-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-36-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-46-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-50-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-65-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-4-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-0-0x000000007443E000-0x000000007443F000-memory.dmp

        memory/4464-9-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-13-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-15-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-23-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-25-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-27-0x0000000074430000-0x0000000074BE0000-memory.dmp

        memory/4464-28-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-30-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-136-0x00000000052E0000-0x00000000052EE000-memory.dmp

        memory/4464-34-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-38-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-40-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-42-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-44-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-48-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-52-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-133-0x0000000074430000-0x0000000074BE0000-memory.dmp

        memory/4464-132-0x0000000074430000-0x0000000074BE0000-memory.dmp

        memory/4464-54-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-56-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-58-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-131-0x00000000051F0000-0x00000000051FA000-memory.dmp

        memory/4464-129-0x0000000004AC0000-0x0000000005064000-memory.dmp

        memory/4464-130-0x00000000049F0000-0x0000000004A82000-memory.dmp

        memory/4464-60-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-62-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-68-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-67-0x0000000004920000-0x000000000494B000-memory.dmp

        memory/4464-3-0x0000000074430000-0x0000000074BE0000-memory.dmp

        memory/4464-2-0x0000000004920000-0x0000000004952000-memory.dmp

        memory/4464-1-0x00000000048F0000-0x0000000004922000-memory.dmp