4.4.6.1
Features
Further migration from the “Ransomware Rewind” product name to “Cyber Crucible”.
Legacy service name
"Ransomware Rewind"
will migrate to"CyberCrucibleAgent"
. Process name stays the same.Registry key in
HKLM\SOFTWARE
will migrate from legacyRansomwareRewind
to currentCyberCrucibleAgent.
Fixes
Fixed some 32bit processes triggering as having “modified memory” when the process image is at the maximum allowable size of a 32 bit process.
MD5 Hashes
service.exe = 51ff73ab3caac8d269d1fad823de9f60
CCRRSecMon.sys (Windows7) = 6014b3fa07cec7e39753f7eaea4d1ea7
CCRRSecMon.sys (Windows8) = 26756d6394a70482952519c104730676
CCRRSecMon.sys (Windows10) = 8665c9f7b99b385acaecc11d42fda468