Trojan.Hosts.51385

Technical Information

Modifies file system

Creates the following files

%TEMP%\adobe temp\required\eve2\cxui_generate_bar.eve
%TEMP%\adobe temp\locales\nl_nl\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\pl_pl\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\en_us\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\es_mx\support files\pack.inf
%TEMP%\adobe temp\locales\en_il\support files\pack.inf
%TEMP%\adobe temp\locales\en_ae\support files\pack.inf
%TEMP%\adobe temp\locales\en_gb\support files\pack.inf
%TEMP%\adobe temp\locales\fr_ma\support files\pack.inf
%TEMP%\adobe temp\locales\pt_br\support files\pack.inf
%TEMP%\adobe temp\locales\zh_tw\support files\pack.inf
%TEMP%\adobe temp\locales\zh_cn\support files\pack.inf
%TEMP%\adobe temp\locales\fr_ca\support files\pack.inf
%TEMP%\adobe temp\locales\uk_ua\support files\pack.inf
%TEMP%\adobe temp\locales\nb_no\support files\pack.inf
%TEMP%\adobe temp\locales\ja_jp\support files\pack.inf
%TEMP%\adobe temp\locales\en_gb\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\tr_tr\support files\pack.inf
%TEMP%\adobe temp\locales\sv_se\support files\pack.inf
%TEMP%\adobe temp\locales\ru_ru\support files\pack.inf
%TEMP%\adobe temp\locales\it_it\support files\pack.inf
%TEMP%\adobe temp\locales\fi_fi\support files\pack.inf
%TEMP%\adobe temp\locales\es_es\support files\pack.inf
%TEMP%\adobe temp\locales\pl_pl\support files\pack.inf
%TEMP%\adobe temp\locales\ko_kr\support files\pack.inf
%TEMP%\adobe temp\locales\fr_fr\support files\pack.inf
%TEMP%\adobe temp\locales\de_de\support files\pack.inf
%TEMP%\adobe temp\locales\da_dk\support files\pack.inf
%TEMP%\adobe temp\locales\nl_nl\support files\pack.inf
%TEMP%\adobe temp\locales\cs_cz\support files\pack.inf
%TEMP%\adobe temp\locales\hu_hu\support files\pack.inf
%TEMP%\adobe temp\locales\es_mx\support files\tw10428_photoshop_es_mx.dat
%TEMP%\adobe temp\locales\en_il\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\psviews.dll
%TEMP%\adobe temp\psres.dll
%TEMP%\adobe temp\wrservices.dll
%TEMP%\adobe temp\sqlite3.exe
%TEMP%\adobe temp\replace.cmd
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\msmincho_gothic_preset.tpl
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\kozukamincho_gothic_preset.tpl
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\hiraginomincho_kakugo_preset.tpl
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\crop_tool_j_preset.tpl
%TEMP%\adobe temp\locales\ja_jp\additional presets\win\keyboard shortcuts\us shortcuts.kys
%TEMP%\adobe temp\locales\es_mx\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\es_es\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\it_it\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\tr_tr\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\en_us\support files\pack.inf
%TEMP%\adobe temp\locales\en_ae\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fr_fr\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fr_ca\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\de_de\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\nb_no\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\da_dk\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\cs_cz\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\zh_tw\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\zh_cn\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\uk_ua\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\ru_ru\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\pt_br\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\ko_kr\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\ja_jp\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\hu_hu\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fr_ma\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fi_fi\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\zh_tw\support files\tw10428_photoshop_zh_tw.dat
%TEMP%\adobe temp\locales\zh_cn\support files\tw10428_photoshop_zh_cn.dat
%TEMP%\adobe temp\locales\uk_ua\support files\tw10428_photoshop_uk_ua.dat
%TEMP%\adobe temp\locales\fr_ca\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\cs_cz\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\it_it\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\sv_se\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\pt_br\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\nl_nl\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\nb_no\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fi_fi\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\es_mx\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\es_es\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\de_de\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\da_dk\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\ja_jp\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fr_ma\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\photoshop.exe
%TEMP%\adobe temp\locales\en_gb\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\en_us\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\zh_cn\meta-inf\signatures.xml
%TEMP%\adobe temp\locales\zh_cn\mimetype
%TEMP%\adobe temp\required\uxp\com.adobe.ccx.start\manifest.json
%TEMP%\adobe temp\required\uicolors.txt
%TEMP%\adobe temp\required\uxp\com.adobe.photoshop.inappmessaging\js\0.js
%TEMP%\adobe temp\required\uxp\com.adobe.ccx.start\images\products\beta\product-rune-phxs.svg
%TEMP%\adobe temp\hdpim.sql
%TEMP%\adobe temp\required\eve2\userfeedbackdialogdetailsgenaireportresult.eve
%TEMP%\adobe temp\required\eve2\userfeedbackdialogdetailsgenai.eve
%TEMP%\adobe temp\required\eve2\userfeedbackdialog.eve
%TEMP%\adobe temp\required\eve2\syntheticfillpanel.eve
%TEMP%\adobe temp\required\eve2\genailegaldisclosuredialog.eve
%TEMP%\adobe temp\required\eve2\cxui_generative_layer_bar.eve
%TEMP%\adobe temp\locales\fr_fr\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\sv_se\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\en_il\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\pl_pl\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\hu_hu\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\tr_tr\support files\tw10428_photoshop_tr_tr.dat
%TEMP%\adobe temp\locales\sv_se\support files\tw10428_photoshop_sv_se.dat
%TEMP%\adobe temp\locales\ru_ru\support files\tw10428_photoshop_ru_ru.dat
%TEMP%\adobe temp\locales\pt_br\support files\tw10428_photoshop_pt_br.dat
%TEMP%\adobe temp\locales\pl_pl\support files\tw10428_photoshop_pl_pl.dat
%TEMP%\adobe temp\locales\nl_nl\support files\tw10428_photoshop_nl_nl.dat
%TEMP%\adobe temp\locales\nb_no\support files\tw10428_photoshop_nb_no.dat
%TEMP%\adobe temp\locales\ko_kr\support files\tw10428_photoshop_ko_kr.dat
%TEMP%\adobe temp\locales\ja_jp\support files\tw10428_photoshop_ja_jp.dat
%TEMP%\adobe temp\locales\it_it\support files\tw10428_photoshop_it_it.dat
%TEMP%\adobe temp\locales\hu_hu\support files\tw10428_photoshop_hu_hu.dat
%TEMP%\adobe temp\locales\fr_ma\support files\tw10428_photoshop_fr_ma.dat
%TEMP%\adobe temp\locales\fr_fr\support files\tw10428_photoshop_fr_fr.dat
%TEMP%\adobe temp\locales\ko_kr\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fr_ca\support files\tw10428_photoshop_fr_ca.dat
%TEMP%\adobe temp\locales\en_ae\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\es_es\support files\tw10428_photoshop_es_es.dat
%TEMP%\adobe temp\locales\en_us\support files\tw10428_photoshop_en_us.dat
%TEMP%\adobe temp\locales\en_il\support files\tw10428_photoshop_en_il.dat
%TEMP%\adobe temp\locales\en_gb\support files\tw10428_photoshop_en_gb.dat
%TEMP%\adobe temp\locales\en_ae\support files\tw10428_photoshop_en_ae.dat
%TEMP%\adobe temp\locales\de_de\support files\tw10428_photoshop_de_de.dat
%TEMP%\adobe temp\locales\da_dk\support files\tw10428_photoshop_da_dk.dat
%TEMP%\adobe temp\locales\cs_cz\support files\tw10428_photoshop_cs_cz.dat
%TEMP%\adobe temp\locales\zh_tw\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\zh_cn\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\uk_ua\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\tr_tr\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\ru_ru\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fi_fi\support files\tw10428_photoshop_fi_fi.dat
nul

Deletes the following files

%TEMP%\adobe temp\hdpim.sql
%TEMP%\adobe temp\locales\sv_se\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\sv_se\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\sv_se\support files\pack.inf
%TEMP%\adobe temp\locales\ru_ru\support files\tw10428_photoshop_ru_ru.dat
%TEMP%\adobe temp\locales\ru_ru\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\ru_ru\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\ru_ru\support files\pack.inf
%TEMP%\adobe temp\locales\pt_br\support files\tw10428_photoshop_pt_br.dat
%TEMP%\adobe temp\locales\pt_br\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\pt_br\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\pt_br\support files\pack.inf
%TEMP%\adobe temp\locales\pl_pl\support files\tw10428_photoshop_pl_pl.dat
%TEMP%\adobe temp\locales\pl_pl\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\pl_pl\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\pl_pl\support files\pack.inf
%TEMP%\adobe temp\locales\nl_nl\support files\tw10428_photoshop_nl_nl.dat
%TEMP%\adobe temp\locales\nl_nl\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\nl_nl\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\nl_nl\support files\pack.inf
%TEMP%\adobe temp\locales\nb_no\support files\tw10428_photoshop_nb_no.dat
%TEMP%\adobe temp\locales\nb_no\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\nb_no\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\nb_no\support files\pack.inf
%TEMP%\adobe temp\locales\ko_kr\support files\tw10428_photoshop_ko_kr.dat
%TEMP%\adobe temp\locales\ko_kr\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\ko_kr\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\ko_kr\support files\pack.inf
%TEMP%\adobe temp\locales\ja_jp\support files\tw10428_photoshop_ja_jp.dat
%TEMP%\adobe temp\locales\ja_jp\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\sv_se\support files\tw10428_photoshop_sv_se.dat
%TEMP%\adobe temp\locales\tr_tr\support files\pack.inf
%TEMP%\adobe temp\locales\tr_tr\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\tr_tr\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\required\uxp\com.adobe.photoshop.inappmessaging\js\0.js
%TEMP%\adobe temp\required\uxp\com.adobe.ccx.start\manifest.json
%TEMP%\adobe temp\required\uxp\com.adobe.ccx.start\images\products\beta\product-rune-phxs.svg
%TEMP%\adobe temp\required\uicolors.txt
%TEMP%\adobe temp\required\eve2\userfeedbackdialogdetailsgenaireportresult.eve
%TEMP%\adobe temp\required\eve2\userfeedbackdialogdetailsgenai.eve
%TEMP%\adobe temp\required\eve2\userfeedbackdialog.eve
%TEMP%\adobe temp\required\eve2\syntheticfillpanel.eve.orig
%TEMP%\adobe temp\required\eve2\genailegaldisclosuredialog.eve.orig
%TEMP%\adobe temp\required\eve2\cxui_generative_layer_bar.eve.orig
%TEMP%\adobe temp\required\eve2\cxui_generate_bar.eve.orig
%TEMP%\adobe temp\replace.cmd
%TEMP%\adobe temp\psviews.dll.orig
%TEMP%\adobe temp\psres.dll.orig
%TEMP%\adobe temp\locales\zh_tw\support files\tw10428_photoshop_zh_tw.dat
%TEMP%\adobe temp\photoshop.exe.orig
%TEMP%\adobe temp\locales\zh_tw\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\zh_tw\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\zh_tw\support files\pack.inf
%TEMP%\adobe temp\locales\zh_cn\support files\tw10428_photoshop_zh_cn.dat
%TEMP%\adobe temp\locales\zh_cn\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\zh_cn\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\zh_cn\support files\pack.inf
%TEMP%\adobe temp\locales\zh_cn\mimetype
%TEMP%\adobe temp\locales\zh_cn\meta-inf\signatures.xml
%TEMP%\adobe temp\locales\uk_ua\support files\tw10428_photoshop_uk_ua.dat
%TEMP%\adobe temp\locales\uk_ua\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\uk_ua\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\uk_ua\support files\pack.inf
%TEMP%\adobe temp\locales\tr_tr\support files\tw10428_photoshop_tr_tr.dat
%TEMP%\adobe temp\sqlite3.exe
%TEMP%\adobe temp\locales\ja_jp\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\ja_jp\support files\pack.inf
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\msmincho_gothic_preset.tpl
%TEMP%\adobe temp\locales\es_es\support files\pack.inf
%TEMP%\adobe temp\locales\en_us\support files\tw10428_photoshop_en_us.dat
%TEMP%\adobe temp\locales\en_us\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\en_us\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\en_us\support files\pack.inf
%TEMP%\adobe temp\locales\en_il\support files\tw10428_photoshop_en_il.dat
%TEMP%\adobe temp\locales\en_il\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\en_il\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\en_il\support files\pack.inf
%TEMP%\adobe temp\locales\en_gb\support files\tw10428_photoshop_en_gb.dat
%TEMP%\adobe temp\locales\en_gb\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\en_gb\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\en_gb\support files\pack.inf
%TEMP%\adobe temp\locales\en_ae\support files\tw10428_photoshop_en_ae.dat
%TEMP%\adobe temp\locales\en_ae\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\en_ae\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\en_ae\support files\pack.inf
%TEMP%\adobe temp\locales\de_de\support files\tw10428_photoshop_de_de.dat
%TEMP%\adobe temp\locales\de_de\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\de_de\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\de_de\support files\pack.inf
%TEMP%\adobe temp\locales\da_dk\support files\tw10428_photoshop_da_dk.dat
%TEMP%\adobe temp\locales\da_dk\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\da_dk\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\da_dk\support files\pack.inf
%TEMP%\adobe temp\locales\cs_cz\support files\tw10428_photoshop_cs_cz.dat
%TEMP%\adobe temp\locales\cs_cz\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\cs_cz\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\cs_cz\support files\pack.inf
%TEMP%\adobe temp\locales\es_es\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\es_es\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\es_es\support files\tw10428_photoshop_es_es.dat
%TEMP%\adobe temp\locales\es_mx\support files\pack.inf
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\hiraginomincho_kakugo_preset.tpl
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\crop_tool_j_preset.tpl
%TEMP%\adobe temp\locales\ja_jp\additional presets\win\keyboard shortcuts\us shortcuts.kys
%TEMP%\adobe temp\locales\it_it\support files\tw10428_photoshop_it_it.dat
%TEMP%\adobe temp\locales\it_it\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\it_it\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\it_it\support files\pack.inf
%TEMP%\adobe temp\locales\hu_hu\support files\tw10428_photoshop_hu_hu.dat
%TEMP%\adobe temp\locales\hu_hu\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\hu_hu\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\hu_hu\support files\pack.inf
%TEMP%\adobe temp\locales\fr_ma\support files\tw10428_photoshop_fr_ma.dat
%TEMP%\adobe temp\locales\fr_ma\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fr_ma\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fr_fr\support files\tw10428_photoshop_fr_fr.dat
%TEMP%\adobe temp\locales\fr_ma\support files\pack.inf
%TEMP%\adobe temp\locales\fr_fr\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fr_fr\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fr_fr\support files\pack.inf
%TEMP%\adobe temp\locales\fr_ca\support files\tw10428_photoshop_fr_ca.dat
%TEMP%\adobe temp\locales\fr_ca\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fr_ca\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fr_ca\support files\pack.inf
%TEMP%\adobe temp\locales\fi_fi\support files\tw10428_photoshop_fi_fi.dat
%TEMP%\adobe temp\locales\fi_fi\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\fi_fi\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\fi_fi\support files\pack.inf
%TEMP%\adobe temp\locales\es_mx\support files\tw10428_photoshop_es_mx.dat
%TEMP%\adobe temp\locales\es_mx\support files\shortcuts\win\os shortcuts.txt
%TEMP%\adobe temp\locales\es_mx\support files\shortcuts\win\default keyboard shortcuts.kys
%TEMP%\adobe temp\locales\ja_jp\additional presets\xplat\tools\kozukamincho_gothic_preset.tpl
%TEMP%\adobe temp\wrservices.dll.orig

Moves the following files

from %TEMP%\adobe temp\psviews.dll to %TEMP%\adobe temp\psviews.dll.orig
from %TEMP%\adobe temp\psres.dll to %TEMP%\adobe temp\psres.dll.orig
from %TEMP%\adobe temp\photoshop.exe to %TEMP%\adobe temp\photoshop.exe.orig
from %TEMP%\adobe temp\wrservices.dll to %TEMP%\adobe temp\wrservices.dll.orig
from %TEMP%\adobe temp\required\eve2\cxui_generate_bar.eve to %TEMP%\adobe temp\required\eve2\cxui_generate_bar.eve.orig
from %TEMP%\adobe temp\required\eve2\cxui_generative_layer_bar.eve to %TEMP%\adobe temp\required\eve2\cxui_generative_layer_bar.eve.orig
from %TEMP%\adobe temp\required\eve2\syntheticfillpanel.eve to %TEMP%\adobe temp\required\eve2\syntheticfillpanel.eve.orig
from %TEMP%\adobe temp\required\eve2\genailegaldisclosuredialog.eve to %TEMP%\adobe temp\required\eve2\genailegaldisclosuredialog.eve.orig

Modifies the HOSTS file.

Miscellaneous

Creates and executes the following

'%TEMP%\adobe temp\sqlite3.exe' "%CommonProgramFiles(x86)%\Adobe\caps\hdpim.db"
'<SYSTEM32>\cmd.exe' /c ""%TEMP%\Adobe Temp\replace.cmd" "' (with hidden window)

Restarts the analyzed sample

Executes the following

'<SYSTEM32>\cmd.exe' /c ""%TEMP%\Adobe Temp\replace.cmd" "
'<SYSTEM32>\xcopy.exe' /eihry Locales\it_IT "Locales\it_IT"
'<SYSTEM32>\xcopy.exe' /eihry Locales\ja_JP "Locales\ja_JP"
'<SYSTEM32>\xcopy.exe' /eihry Locales\ko_KR "Locales\ko_KR"
'<SYSTEM32>\xcopy.exe' /eihry Locales\nb_NO "Locales\nb_NO"
'<SYSTEM32>\xcopy.exe' /eihry Locales\nl_NL "Locales\nl_NL"
'<SYSTEM32>\xcopy.exe' /eihry Locales\pl_PL "Locales\pl_PL"
'<SYSTEM32>\xcopy.exe' /eihry Locales\ru_RU "Locales\ru_RU"
'<SYSTEM32>\find.exe' /c /i "ic.adobe.io" <DRIVERS>\etc\hosts
'<SYSTEM32>\xcopy.exe' /eihry Locales\sv_SE "Locales\sv_SE"
'<SYSTEM32>\xcopy.exe' /eihry Locales\tr_TR "Locales\tr_TR"
'<SYSTEM32>\xcopy.exe' /eihry Locales\uk_UA "Locales\uk_UA"
'<SYSTEM32>\xcopy.exe' /eihry Locales\zh_CN "Locales\zh_CN"
'<SYSTEM32>\xcopy.exe' /eihry Locales\zh_TW "Locales\zh_TW"
'<SYSTEM32>\netsh.exe' advfirewall firewall delete rule name="Adobe Unlicensed Pop-up" dir=out
'<SYSTEM32>\xcopy.exe' /eihry Locales\hu_HU "Locales\hu_HU"
'<SYSTEM32>\xcopy.exe' /eihry Locales\pt_BR "Locales\pt_BR"
'<SYSTEM32>\xcopy.exe' /eihry Locales\fr_MA "Locales\fr_MA"
'<SYSTEM32>\xcopy.exe' /eihry Locales\de_DE "Locales\de_DE"
'<SYSTEM32>\cmd.exe' /c REG QUERY HKLM\SOFTWARE\Adobe\Photoshop\170.0 /s | FINDSTR /irc:ApplicationPath
'<SYSTEM32>\reg.exe' QUERY HKLM\SOFTWARE\Adobe\Photoshop\170.0 /s
'<SYSTEM32>\findstr.exe' /irc:ApplicationPath
'<SYSTEM32>\xcopy.exe' /eihry Required "Required"
'<SYSTEM32>\xcopy.exe' /eihry Locales\cs_CZ "Locales\cs_CZ"
'<SYSTEM32>\xcopy.exe' /eihry Locales\da_DK "Locales\da_DK"
'<SYSTEM32>\xcopy.exe' /eihry Locales\en_AE "Locales\en_AE"
'<SYSTEM32>\xcopy.exe' /eihry Locales\fr_CA "Locales\fr_CA"
'<SYSTEM32>\xcopy.exe' /eihry Locales\en_GB "Locales\en_GB"
'<SYSTEM32>\xcopy.exe' /eihry Locales\en_IL "Locales\en_IL"
'<SYSTEM32>\xcopy.exe' /eihry Locales\en_US "Locales\en_US"
'<SYSTEM32>\xcopy.exe' /eihry Locales\es_ES "Locales\es_ES"
'<SYSTEM32>\xcopy.exe' /eihry Locales\es_MX "Locales\es_MX"
'<SYSTEM32>\xcopy.exe' /eihry Locales\fi_FI "Locales\fi_FI"
'<SYSTEM32>\xcopy.exe' /eihry Locales\fr_FR "Locales\fr_FR"
'<SYSTEM32>\find.exe' /c /i "1hzopx6nz7.adobe.io" <DRIVERS>\etc\hosts

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial