{
	"id": "ea242a76-3b1e-4277-8916-ae377606a02e",
	"created_at": "2026-04-06T00:14:00.699884Z",
	"updated_at": "2026-04-10T03:20:04.126797Z",
	"deleted_at": null,
	"sha1_hash": "62bc528e5f4d87edf152561f41eb2545d91021c6",
	"title": "The Kaspersky ShadeDecryptor tool for decrypting files affected by Trojan-Ransom.Win32.Shade",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 48120,
	"plain_text": "The Kaspersky ShadeDecryptor tool for decrypting files affected\r\nby Trojan-Ransom.Win32.Shade\r\nArchived: 2026-04-05 19:48:30 UTC\r\nLatest update: October 9, 2024 ID: 13059\r\nDo you want to prevent infections? Install Kaspersky Standard, Plus, or Premium\r\nComplete security in the digital world for you \u0026 your family. Choose your perfect solution for any device.\r\nThe Trojan-Ransom.Win32.Shade malware encrypts files on your device to make it impossible to work with them.\r\nUsing the Kaspersky ShadeDecryptor tool, you can try to decrypt the files with the following extensions:\r\nxtbl\r\nbreaking_bad\r\nytbl\r\nheisenberg\r\nbetter_call_saul\r\nlos_pollos\r\nda_vinci_code\r\nmagic_software_syndicate\r\nwindows10\r\nwindows8\r\nno_more_ransom\r\ntyson\r\ncrypted000007\r\ncrypted000078\r\ndexter\r\nmiami_california\r\nrsa3072\r\ndecrypt_it\r\nThe tool searches for a decryption key in its database. If the key is found in the database, the files will be\r\ndecrypted. If the key is not in the databases, the tool will send a request to the server for additional keys. This\r\nrequires Internet access.\r\nTo prevent infection:\r\nDownload and install new Kaspersky applications that protect against screen-locking and file-encrypting\r\nmalware.\r\nFollow the recommendations on how to protect your PC against file-encrypting ransomware.\r\nhttps://support.kaspersky.com/13059\r\nPage 1 of 2\n\nLearn more about the technologies that Kaspersky uses to protect against malware, including encryptors, on the\r\nTechnoWiki page.\r\nHow to decrypt files with Kaspersky ShadeDecryptor\r\nWhat to do if the issue persists\r\nDid you find this article helpful?\r\nThank you for your feedback! You're helping us improve.\r\nThank you for your feedback! You're helping us improve.\r\nSource: https://support.kaspersky.com/13059\r\nhttps://support.kaspersky.com/13059\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia"
	],
	"references": [
		"https://support.kaspersky.com/13059"
	],
	"report_names": [
		"13059"
	],
	"threat_actors": [],
	"ts_created_at": 1775434440,
	"ts_updated_at": 1775791204,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/62bc528e5f4d87edf152561f41eb2545d91021c6.pdf",
		"text": "https://archive.orkl.eu/62bc528e5f4d87edf152561f41eb2545d91021c6.txt",
		"img": "https://archive.orkl.eu/62bc528e5f4d87edf152561f41eb2545d91021c6.jpg"
	}
}