Joe Sandbox Cloud Basic Analysis Report
Edit tour

Windows Analysis Report
Angebot 202302214.PDF

Overview

General Information

Sample Name:Angebot 202302214.PDF
Analysis ID:1312062
MD5:6f389bac1427a89ece69191b565236eb
SHA1:66d223961f2c599af478e504f013c7a5abd427aa
SHA256:7ea07de036a154b6d46ad32a4458b558bf86d730cfe3b999e03a3132ab4f895e
Infos:

Detection

Score:0
Range:0 - 100
Whitelisted:false
Confidence:80%

Signatures

No high impact signatures.

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

Process Tree

  • System is w10x64
  • AcroRd32.exe (PID: 6596 cmdline: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\Angebot 202302214.PDF MD5: B969CF0C7B2C443A99034881E8C8740A)
    • RdrCEF.exe (PID: 412 cmdline: "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043 MD5: 9AEBA3BACD721484391D15478A4080C7)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeFile created: C:\Users\user\AppData\Local\Temp\acrord32_sbxJump to behavior
Source: classification engineClassification label: clean0.winPDF@9/56@0/1
Source: unknownProcess created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\Angebot 202302214.PDF
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeFile created: C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIconsJump to behavior
Source: Angebot 202302214.PDFInitial sample: PDF keyword /JS count = 0
Source: Angebot 202302214.PDFInitial sample: PDF keyword /JavaScript count = 0
Source: Angebot 202302214.PDFInitial sample: PDF keyword /EmbeddedFile count = 0
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOXJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management InstrumentationPath Interception1
Process Injection		1
Masquerading		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local SystemExfiltration Over Other Network MediumData ObfuscationEavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Process Injection		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaExfiltration Over BluetoothJunk DataExploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 process2 2 Behavior Graph ID: 1312062 Sample: Angebot 202302214.PDF Startdate: 21/09/2023 Architecture: WINDOWS Score: 0 5 AcroRd32.exe 15 42 2->5         started        process3 7 RdrCEF.exe 71 5->7         started        dnsIp4 10 192.168.2.1 unknown unknown 7->10

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

World Map of Contacted IPs

Public IPs

IPDomainCountryFlagASNASN NameMalicious

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:38.0.0 Beryl
Analysis ID:1312062
Start date and time:2023-09-21 08:52:58 +02:00
Joe Sandbox Product:CloudBasic
Overall analysis duration:0h 3m 36s
Hypervisor based Inspection enabled:false
Report type:full
Cookbook file name:defaultwindowspdfcookbook.jbs
Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:19
Number of new started drivers analysed:0
Number of existing processes analysed:0
Number of existing drivers analysed:0
Number of injected processes analysed:0
Technologies:
  • HCA enabled
  • EGA enabled
  • AMSI enabled
Analysis Mode:default
Analysis stop reason:Timeout
Sample file name:Angebot 202302214.PDF
Detection:CLEAN
Classification:clean0.winPDF@9/56@0/1
EGA Information:Failed
HCA Information:
  • Successful, ratio: 100%
  • Number of executed functions: 0
  • Number of non-executed functions: 0
Cookbook Comments:
  • Found application associated with file extension: .PDF
  • Found PDF document
  • Close Viewer
  • Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, wuapihost.exe
  • Excluded IPs from analysis (whitelisted): 184.25.164.138, 23.34.82.7, 23.34.82.6
  • Excluded domains from analysis (whitelisted): www.bing.com, ssl.adobe.com.edgekey.net, armmf.adobe.com, e4578.dscb.akamaiedge.net, acroipm2.adobe.com.edgesuite.net, a122.dscd.akamai.net, ctldl.windowsupdate.com, tse1.mm.bing.net, displaycatalog.mp.microsoft.com, arc.msn.com, acroipm2.adobe.com
  • Not all processes where analyzed, report is missing behavior information
  • Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

TimeTypeDescription
08:53:47API Interceptor1x Sleep call for process: RdrCEF.exe modified

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):205
Entropy (8bit):5.598801403136742
Encrypted:false
SSDEEP:6:men9YOFLvEWdM9QNxp0UxlthJi7Z+P41:vDRM9+xp0ol8Zi
MD5:D7C17F35B19256898F15A0FEF1840137
SHA1:A2E4A429079C8336CC1352CB46544FC2A3655BEC
SHA-256:63DE3FBB7C611E24942A5E8DE7B8DFA074A36C8CA10A101603D6AF1304E22C2D
SHA-512:5A71993F4271B8C22A353254DD44E802FCFB4EBB3B2F3CB118F826A533B02E50A4A1B522E6B0B863676B0722B78CD14FFB877387ECF6134DCC3696408FA31482
Malicious:false
Reputation:low
Preview:0\r..m......M..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/reviews/js/plugin.js ..fa=od/....."#.D...!.B.A.A..Eo......B...............d.{v.^.G...d.W.:...P..k%..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):174
Entropy (8bit):5.538216707116085
Encrypted:false
SSDEEP:3:m+lF9NX6v8RzYOCGLvHktWVCnK8tTb0MktmtW98fZe/O+/rkwGhkg4m1:mi9NqEYOFLvEkR8xgltmty8Be7Ywcr1
MD5:47BC1B9D3BA4EE1D80DE8F85DA404198
SHA1:39116B82DE24AE4411515CDE6F9E12E1655C21EB
SHA-256:4A569EC31F147B58C1B37CE525890BA0C6CE1DAD1360C7020AC399FAA2150A8E
SHA-512:C6BFE00C5DF06927B041D79F1801ABAC86B6D382CF500D6EB87782B3659C9A6882E2C8ED570466CB231A6D2D750DAD9DB1E54AA5E6598C7B86A50504FF302E3F
Malicious:false
Reputation:low
Preview:0\r..m............,....._keyhttps://rna-resource.acrobat.com/init.js ..#L=od/....."#.DR.~!.B.A.A..Eo..................1.x.'.vI..*|Z..o...+.4....0..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):246
Entropy (8bit):5.547855776151604
Encrypted:false
SSDEEP:6:mMyEYOFLvEWdVFLBKFjVFLBKFlQhuz8t2xltvt/RlUoSjGY1:DyeRVFAFjVFAFHi0lFtZlUo6
MD5:A7364F7ACF098BEC1119ADE9FAE3A457
SHA1:97F30554DFF13692F9CE9C41498DB27C99ECF892
SHA-256:5CC534CFF53B20FFD57140927256A2D1DDA84926B4DBFFA821EA5E1E3430D170
SHA-512:1DBC5B51CC901B0C4277D997933D5C3A8A8A426400E3C20D22B4051C46D69119F9196712EBC1E5F4FCF59C772118CE880C9E9418A0EE6B248BED5CFDE8B5857E
Malicious:false
Reputation:low
Preview:0\r..m......v...n......._keyhttps://rna-resource.acrobat.com/static/js/plugins/tracked-send/js/plugins/tracked-send/js/home-view/selector.js ...`=od/....."#.D...!.B.A.A..Eo......o}T...........hvDO.N.t@.....n.*...... ....A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):232
Entropy (8bit):5.615368025321687
Encrypted:false
SSDEEP:6:mNtVYOFLvEWdFCi5RsPzBYqltYuiWulHyA1:IbRkiDuznlajWus
MD5:4AB1BE14D85C035A37C83C061BE20D43
SHA1:AAC5717330FCF4B01676BEB1BC00D7CD59FF4CBA
SHA-256:16F89A3D16801B459AA0021E0B009F00706BB1DAE0C989ECEAB024147A054CC8
SHA-512:6418EFA17B50E95F7BDC1248B45840DF33D76C88FB0A37255116434F71553392483025CF94FE69780548501FBF852FB2AE4DF3F00395F92AA93FBA0C238645CF
Malicious:false
Reputation:low
Preview:0\r..m......h.....'....._keyhttps://rna-resource.acrobat.com/static/js/plugins/aicuc/js/plugins/rhp/exportpdf-rna-tool-view.js ...4=od/....."#.Dh..!.B.A.A..Eo......x............8 P..a...R..Y....7.@..2Dm{..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):210
Entropy (8bit):5.522938661952738
Encrypted:false
SSDEEP:6:m+yiXYOFLvEWd7VIGXVu9Vc0E5ltzVyh9PT41:pyixRuxcrlJV41T
MD5:D9E72D6845C814D55AC5EFDA37BAF656
SHA1:B4C018330374911D48C7A0AA7F0FA54F3E6F2D40
SHA-256:5E7203132208BF59B3EE56D2EDDB750FD75F8F21190F2DA78A06C75C858362CE
SHA-512:9E41F5BB865306B04BC8032C972B187D9D328DA090F5406D200AFA55F5CDC63D92BEF2EC9F7426720C6DB06EBD2121035409C84594811078B0B0AA46858565F2
Malicious:false
Reputation:low
Preview:0\r..m......R...kP]g...._keyhttps://rna-resource.acrobat.com/static/js/plugins/app-center/js/selector.js ...a=od/....."#.Dt..!.B.A.A..Eo........."........k.Q.....-_..y.....O...>..1....A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):216
Entropy (8bit):5.578652735804044
Encrypted:false
SSDEEP:3:m+lifll08RzYOCGLvHkWBGKuKjXKoyNjXKLuVx6UmE0hMktAt/xlYo2sZI8xeGvA:mvYOFLvEWdhwjQt9EqltAt73ZIl6P41
MD5:BA628B32E2F934B3727CA98FC02BC0C2
SHA1:6B167D95341B51780908AAB17D95DFE7644010D6
SHA-256:119D4373E5DFBE2D7A816E57A0B8D1A84E1640A50F8EA2624504CE2C031B122A
SHA-512:6EAD35C7C5E2DC18E2009981ECD58B1EF40F1292FB281FB6DE65DFCB0A9D16F63382BC073CDEC686AD90DBD13609D0602F5199431DE8A6C59B2FFF90BE58DEA3
Malicious:false
Reputation:low
Preview:0\r..m......X.....V....._keyhttps://rna-resource.acrobat.com/static/js/plugins/sign-services-auth/js/plugin.js ..o_=od/....."#.Dd..!.B.A.A..Eo......?.q..........].>....uUf..N...k......c..l.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):209
Entropy (8bit):5.489616386116789
Encrypted:false
SSDEEP:3:m+lZd8RzYOCGLvHkWBGKuKjXKX7KoQRA/KVdKLuV0A+llK0MktNlXVcyxMtv9EWy:mJYOFLvEWdGQRQOdQf9lDltVD6g1
MD5:484BAD0769D998CE9DC9154E1AD8ACF3
SHA1:9E55ED1A5C7322EA1BDDE235CDCDC8FA2C6C6FE0
SHA-256:655372DDC0F623A9C65BA23921B1B181D61195A37247C3871A20D7CF7898A29C
SHA-512:804B2B9FD9F82FC18F6AC9D1EE6869E9293D76DAA9B72E6A7189FDA0575C4B63947E71067EAD6A114315ABE6827EE5B0D0298073A8DEBDEF50E91FC9CB8266DA
Malicious:false
Reputation:low
Preview:0\r..m......Q..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-computer/js/plugin.js ..ca=od/....."#.D.f.!.B.A.A..Eo.......;.A..........c..y/L....|y.n..C/I.....X7-ne.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):179
Entropy (8bit):5.528309412506899
Encrypted:false
SSDEEP:3:m+lLp08RzYOCGLvHkfaMMuVX2Lrn3hMktIWl/lDQMWqg4nRb7om5m1:mOYOFLvECMLCxltI2EuR/41
MD5:E5C8EE7035BFBA3A20BC75D93C00B787
SHA1:81F33BAA2722F6A0387FE8CE9B72E60752905D69
SHA-256:0C33B646C0E00CC2F740906A4F1ED20679A0E7A02AEDCC3EE3CC5F7D3D4F51E4
SHA-512:F7E9A756501A1CF98A46E39285DC8BC27D2B5AA946F5A37CC9B1E825AFBBA69D260ECEDEB6B358B2892C490B85EF94928B72454D606DB692DA854DCBEB6298AB
Malicious:false
Reputation:low
Preview:0\r..m......3....<lb...._keyhttps://rna-resource.acrobat.com/base_uris.js .?9L=od/....."#.DK\.!.B.A.A..Eo.......5..........y...L<?W.Xi..A\Q3...J.}...d..~G.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\39c14c1f4b086971_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):212
Entropy (8bit):5.611610291264351
Encrypted:false
SSDEEP:6:mGpYOFLvEWdzAAuv5V8qltKUGm0bbsIDMGH41:XfRMtfxlUUVKsIZ
MD5:B8A398D377CCD9E0407ECAFFF16468DF
SHA1:3138D4CB7DB873E6F8E0543F7793C3AB76F09312
SHA-256:28ADFC2DE266BA97A0356972FD7135262330F548E7F5FFA16F849CD6DF537408
SHA-512:7205CBBF214AA7D4403951D7B5926AB98492778701251A51205FFABCA66A7876CE2F8C843AE142EDD348AD2389AC7FCB81BFCDB7167ED7143C59580285461BD7
Malicious:false
Reputation:low
Preview:0\r..m......T....,.^...._keyhttps://rna-resource.acrobat.com/static/js/plugins/walk-through/js/selector.js . ..<od/....."#.DR....B.A.A..Eo......@.............`.....^....L>..Xa./......C.y.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):214
Entropy (8bit):5.490205971980747
Encrypted:false
SSDEEP:6:m4fPYOFLvEWdtu+Sedltpby0zBUKSAA1:pRLtdlLb
MD5:B5389BAB51D82EF6CFCEFE03BF6E3D4B
SHA1:8560166C7A6A1D2C594933B5170152F10C6C54CD
SHA-256:9DAD2502455B791292CE64C90DBC17F02C1FF6E9AA98947B557C9CFF52803F85
SHA-512:F32C223E2C29D1B9A4DA0483BFEED7D69DDF608377EDB78EA7C45EA61C1D4A532BACA912838F72F270A0EE2B634FC5158E9CA62142DF64F2B007C18D22E2D50E
Malicious:false
Reputation:low
Preview:0\r..m......V..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/search-summary/js/selector.js ...a=od/....."#.D.;.!.B.A.A..Eo......D...........Q..E.=....=h`t..t..3%A.F$..w..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):177
Entropy (8bit):5.47577795020208
Encrypted:false
SSDEEP:3:m+l64HXlA8RzYOCGLvHkjXMLOWFvFiPmhMktg/+d1dn76KohyP5m1:md4HXXYOFLvEjMSWFvNltg/+jUdyP41
MD5:15ABE202F642AB7C6CED260AD9034719
SHA1:CB6EA1FCE39028EE9FF33D60698FDD480AC3822C
SHA-256:F6177DC4468F16CD01CCBBF2DC513C8D4EE5FECE165B5C8BD6CA002B7AE6810B
SHA-512:A94BDDA67863435ABFAA4706372066DD59C8461C9CF1C0DBD001F074B4D4783069CA84515E290576544E43821FFCBB50A0108394A3CE682A0BF5F2B8D94F65FB
Malicious:false
Reputation:low
Preview:0\r..m......1......5...._keyhttps://rna-resource.acrobat.com/plugins.js ...L=od/....."#.D.=.!.B.A.A..Eo.......7..........PU ....t^.....a.k..u.7.M.BW6#}..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):187
Entropy (8bit):5.505029041726964
Encrypted:false
SSDEEP:3:m+lpSUlIv8RzYOCGLvHkWBGKuK2fKVLQnKB+llGqMktdBUPqf9tsDMaPV44m1:mkl9YOFLvEWsfOLQnKBahltdiPqVyM+e
MD5:61E20DEA4770B0AC3D7834769665C926
SHA1:309A0A460B2CB31C176B9191EE59F95AFE4E06E7
SHA-256:F1996C1DA133AF2E600D5263D24ECAC6CABBB5FEED2905DD2787F4C14E156A2D
SHA-512:4C5FECFB9108F7E5D34C0E9EE901F8905AFD2293ABE659B8E5EE048592BB971F1DAD0C595266B5A7BBB1AA11D830E5C532E9D82EFB31E59CB1ADEA70654AF027
Malicious:false
Reputation:low
Preview:0\r..m......;...I......._keyhttps://rna-resource.acrobat.com/static/js/desktop.js ...^=od/....."#.D...!.B.A.A..Eo.......t...........q.O...j....._y..L^z...?..@N..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:modified
Size (bytes):244
Entropy (8bit):5.555371854350706
Encrypted:false
SSDEEP:6:mt9YOFLvEWdVFLBKFjVFLBKFlyXTlMxltoEtwSeKaT9pr1:URVFAFjVFAFcTlMxlntwSeKaTL
MD5:B27119EF87C3D1153BA0C6D721913F9D
SHA1:D0AD68C1EE37E0429C24B5A07F944C80E35F63EB
SHA-256:1AE35237F9CB7D2693309B8D20271DB19DC45898ADF82095447B640CC7D3CE6C
SHA-512:82944578A475737F8C53F287666C09ECAFD1EDD6E8548B2BE015DDECB45F900EE1E180BA822176862A8A26D8949E6DBE5888AD7FC726735D4CC49B8ED2B24DF6
Malicious:false
Reputation:low
Preview:0\r..m......t...R.1<...._keyhttps://rna-resource.acrobat.com/static/js/plugins/tracked-send/js/plugins/tracked-send/js/home-view/plugin.js ...a=od/....."#.D4..!.B.A.A..Eo......:.:...............H...{...2../.k`..r4.C. .A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6267ed4d4a13f54b_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):210
Entropy (8bit):5.551414580280517
Encrypted:false
SSDEEP:6:mq9YOFLvEWdzAHdQWt65lt1Ht5GFCaa+41:NRMHdl65lPt5Gda+
MD5:ACF86E250C8DD9F26775690905719314
SHA1:FEF4A4497EE4DAF87A4A3A9511AAA0978799B08C
SHA-256:51AECAD60CBAFBD7AB1D22DDF10F96B5CBA48119D6E8D10AF7BCF4C31DCF9B4D
SHA-512:86539E79A648276E8DA4DBB02216176F31EC03A4C465D636C8549E2683792218E8FAA41DE8AA67E7A3A2C9CC874391348A3244FF16DA4417E6931FA369868136
Malicious:false
Reputation:low
Preview:0\r..m......R....L......_keyhttps://rna-resource.acrobat.com/static/js/plugins/walk-through/js/plugin.js .}`.<od/....."#.D.....B.A.A..Eo.......pp............G.3D.....Q.g0...._.Q.........A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):211
Entropy (8bit):5.455465337139713
Encrypted:false
SSDEEP:3:m+lx4F08RzYOCGLvHkWBGKuKjXKGBIEGdevA/KPWFv25LI5Mkt0E9l/JyrpYFm1:ms2VYOFLvEWdvBIEGdeXun5lt0EA11
MD5:F7F287CCEDC05D6F58C7DB5875BF73A9
SHA1:7521CE6F95241EB6B7E608C49919B293570D3CF4
SHA-256:B1EF231742C7C341635A7D8C682146F8C1CFB04572ABECC6CDA31476DCC0CA91
SHA-512:B8621CD97994C4FBF085631D9C0C95DABAD7C61A64E9A98DE0688D6C79289D07087F106B8AB2F0E87E14A7003F94A6F30552105E4D9DA4EABFE40B49B65ABF61
Malicious:false
Reputation:low
Preview:0\r..m......S...]......._keyhttps://rna-resource.acrobat.com/static/js/plugins/add-account/js/selector.js ...`=od/....."#.D...!.B.A.A..Eo......Di.!.........A.o]@r..Q.....<w.....].n\....A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):202
Entropy (8bit):5.666961674880729
Encrypted:false
SSDEEP:6:maVYOFLvEWdwAPCQtfxlt4Lxm7OhKlvA1:RbR16exleLxmJ
MD5:F96E704408E91D3FAD5DF60D486CAB2A
SHA1:0C1292F31B4F27E14E9906BBF6AD622CBB0AE4E3
SHA-256:38CF030CB5FD636E0A02FD5AE4542FEB69D1E8E9F57B965BB85C904E501E0DDB
SHA-512:F51DD262382FAECA52850EC9DB6CAF6C0868F059DC48EBC967A37829B7F029AEA29D2563494A43DEB3960BC7EDCF5BAF79EF49FCA3A08EF5442F08EB0E1F4314
Malicious:false
Reputation:low
Preview:0\r..m......J......{...._keyhttps://rna-resource.acrobat.com/static/js/plugins/home/js/plugin.js .2M_=od/....."#.D%..!.B.A.A..Eo.......Y...........4T].....Tw.....(..b...EO....9.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):211
Entropy (8bit):5.5944513868795775
Encrypted:false
SSDEEP:3:m+lx2gv8RzYOCGLvHkWBGKuKjXKX7KoQRA/KWEKPWFvY3F0/VqMktQddF5YufMm1:ms2gEYOFLvEWdGQRQVukFsqltKdFt1
MD5:470E5F79FD675497CD9C1227DA674E87
SHA1:86C28275CA9FD6F39E7451A423172B36A4449BFC
SHA-256:598B74BC0E677A9AD69ECFB68F48045B59D7AD7B146265618A38D2CEECB1E0D8
SHA-512:7934C92E15B8B473297E27E748AE366FAE12F6A26ED391257410147D8B26BE7DD72B14710CD91D0EC51C8DE7E3D2A4DE14211C83834E9C99D6A6346A003A2398
Malicious:false
Reputation:low
Preview:0\r..m......S...W.%z...._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-computer/js/selector.js ...`=od/....."#.D...!.B.A.A..Eo.........U........@..{o]...9o|..qY....T....{..u.b..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):206
Entropy (8bit):5.593640220283382
Encrypted:false
SSDEEP:6:mzyEYOFLvEWdrIOQoK8/sT5ltTEt1S/1:WyeRlnK8ET5l9Et1
MD5:EDF3E8C8B4EE9D6F353898460E573A97
SHA1:BBB1CB644591CB050F750E98F4ECDCE90B9612C5
SHA-256:E670A56C9BEA697517B69D4C8123EBF4D4CA2C1DBC1E6D0EC3C1BD98194DA032
SHA-512:73C4F161FBEE08CF1EB2A0F382704F334F02DE6F3B178E8802856F1F2C5CDC57868F598FDB9B79265413C9D16CBF5137E21FAA5A755054D2002A89994CB420EE
Malicious:false
Reputation:low
Preview:0\r..m......N..../......_keyhttps://rna-resource.acrobat.com/static/js/plugins/my-files/js/plugin.js .(.^=od/....."#.D...!.B.A.A..Eo.......Gmd.........t\a......x5.'OuE.C..@......x..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):218
Entropy (8bit):5.5376530936003
Encrypted:false
SSDEEP:6:mnYOFLvEWdhwyuZmPltYgNSlwrqwK+41:wRhrlfNSqGwK+
MD5:6873758E3F51D65A4E9DE59505480F3F
SHA1:44A0BC222E80038F4CF7035B96829315013973C4
SHA-256:895378A88A49CB00D4A9683B658B0FD58C8CB4DDEDC05AAC40AACF1337B4FD05
SHA-512:48E1743F6EF922144295B6C398EF0213D2F64257FC3B42B52267C954446755A38E657ABFD59910A6D06CBEEDCE01BEDF059FFB67E6B7CF1CF7284D927FFECD7A
Malicious:false
Reputation:low
Preview:0\r..m......Z.........._keyhttps://rna-resource.acrobat.com/static/js/plugins/sign-services-auth/js/selector.js ..L_=od/....."#.D...!.B.A.A..Eo........JE...............7...o..a=.98I......(3.$G.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):230
Entropy (8bit):5.542939620421397
Encrypted:false
SSDEEP:6:mYXYOFLvEWdrROk/RJbuscTunxltx0fO441:/RrROk/FxlofL
MD5:D0FD0013D0ED1CFC3EB7855F919507C5
SHA1:2667A8B45BD9A6823861C34B93F838462AA79BF8
SHA-256:6E5B50E5D61689CD9B1B140583D472B2A98E569090A42B81369D73F1EFEB3629
SHA-512:25874285D75957896F9E6C7AB278AE22DB5EA762E53C779F48C241D56D063929A6CF82777C826CC9A25CABE04F9D211ABEB2FED251B97873073A5E8947F7686D
Malicious:false
Reputation:low
Preview:0\r..m......f...F......._keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files-select/js/selector.js .7n^=od/....."#.D...!.B.A.A..Eo........V..........~..rw.+[....!.)?..f.U..(=.=.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):186
Entropy (8bit):5.551732508973593
Encrypted:false
SSDEEP:3:m+lhD4ll08RzYOCGLvHkWBGKuKdTSV4L521/MktHupzoIN1OFPL4m1:mmDEYOFLvEWXI4SltOpzV1QPLr1
MD5:F0A9D50925748453764788AEB294E1F3
SHA1:0409E17090551C992834B1DD912A8CFAD2E44600
SHA-256:2FD0347D6186B2FB7FADE5591B5DC5B5BD9F95B5B515FC0B771B46DF50A0459E
SHA-512:E3B56CAF71FC8ADA3BCC9DD280E76F72AA3F3A7795535061E27B930C954F2CE343A4A05B744094331C27E0F2B9712D44AC13E124610D993398090C53BC7D3A0D
Malicious:false
Reputation:low
Preview:0\r..m......:....f......_keyhttps://rna-resource.acrobat.com/static/js/config.js ...]=od/....."#.D...!.B.A.A..Eo.......8............~]...%s..<...n.f..<.....1#..U..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):207
Entropy (8bit):5.5862867056596395
Encrypted:false
SSDEEP:6:m52YOFLvEWdMAub/n0lPxltzsEvsEJ41:zRMZEPxlppvs
MD5:21C3AF20882CE790D3957D233258CA4F
SHA1:AB30AD30CDE0D9645025710A9EBEC230B24A9C3F
SHA-256:6DB263B359554112144166AEFB781415B89111342110EE7E8D9350F427A38088
SHA-512:8C5CD74B2EBFE92DBFD05BED00805BC57353CF46CFC44E926191737E63D070308BE753961FFC3CB1B9CB3FA917D438AC2D0EC7A338F845FB4C53FDA86AD94F96
Malicious:false
Reputation:low
Preview:0\r..m......O...a.Y....._keyhttps://rna-resource.acrobat.com/static/js/plugins/reviews/js/selector.js ...a=od/....."#.D=..!.B.A.A..Eo...................z._a...'.v.......4p3..1.']...A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):210
Entropy (8bit):5.557562205032735
Encrypted:false
SSDEEP:6:mYilPYOFLvEWd8CAdAupllSnxltbjong1:6lJRq/Uxlpo
MD5:FD332EE2A59EB21CA10B29778C801E40
SHA1:E4F9E47A676DF76ADF33CBD05C37B311316264C9
SHA-256:60E3BC938DBD6F1050558E9EE7EE2E3EA918325567C2DD6B4656CCE7EE409997
SHA-512:3AF71EC52E436975C74234D1C24205DC068145814906B9F0EBB421C7683D1F2D4672676C59C0AEABF7FDF045A287C78D91E13ECE591B381F1D874C4B823BD4C7
Malicious:false
Reputation:low
Preview:0\r..m......R....|....._keyhttps://rna-resource.acrobat.com/static/js/plugins/signatures/js/selector.js ...a=od/....."#.D}..!.B.A.A..Eo.......Y.6........c}.H7M=M..-.....Ix..R.l...}Rl.$q.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):223
Entropy (8bit):5.539435796283082
Encrypted:false
SSDEEP:6:mY8nYOFLvEWdrROk/IuQcWqltwDN16wG1:F8hRrROk/SJqlu
MD5:78618153720ABA7C4D74ADCA6CD9F684
SHA1:9DBE69B2AA87BF85BB01CC3F6D39F0E2109F396B
SHA-256:2C56DEE95ABEE704C5274BB5C708F03D789727C9432EC8C8E12CA021401D464A
SHA-512:6390F56AD5D8AC34D263E24E49C8E1AA95DBE7BA7B22EE6B935DE3FA31CC537BD55980375E5F3DEFF5896A6C2AF8028723F78FA9F448B8AC6CEF1102D7E454A7
Malicious:false
Reputation:low
Preview:0\r..m......_...h......_keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files/js/selector.js .]l^=od/....."#.D?..!.B.A.A..Eo........5...........%.k.SZ..~W.....:)'B..ad......A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):213
Entropy (8bit):5.6693424336491445
Encrypted:false
SSDEEP:3:m+lstxt08RzYOCGLvHkWBGKuKjXKX+IAuAJVKjXKLuVPcplWMktL9/tmPmJelc0A:mLrnYOFLvEWdrIoJUQLp4ltL2eJIi1
MD5:5A5CE5F59F786C4ED450B245CCAD26E8
SHA1:A0AF5073AE7B790DD4A1D41E9CD71221BE50196A
SHA-256:CC0600347CB5127A120558F7A92346B6E7A17D3012786544300BB8294B3776DC
SHA-512:648E77092CE241877AF1F8A87CE717116E0D0CCD81CA133B564F1805DF4EC87F80DB22BF9CECAB8F82660A435C916DE7E9D26ADBC702BF0C649FC87504135E1D
Malicious:false
Reputation:low
Preview:0\r..m......U..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-files-select/js/plugin.js .`.^=od/....."#.Dq;.!.B.A.A..Eo...................;"./N_.,.:C..2....9L.H...3:...A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):208
Entropy (8bit):5.541602904823277
Encrypted:false
SSDEEP:3:m+lQ/pqv8RzYOCGLvHkWBGKuKjXKX+IALKPWFvvaldPvZqMktm1P6mgmOZLhT7Uy:mOEYOFLvEWdrIhuQ7v0ltmBzgm2d/1
MD5:6AA3C24060EC9F208FFE08572FA3BE54
SHA1:D2AF2CC0D939885300499B50AF21C0D6951F26F7
SHA-256:D21507760D41C6B618BDB2F749A7C4C7749EF5B67D30262962569037C0BEDB57
SHA-512:90597965CBA923EBDF163AA7917E321F63E91F9366BCDF96AB542E307E5AFAF07A7530964BE3DCAA3380B607F81B80C0FE64E8FD43439CE4FD27E86F547AE235
Malicious:false
Reputation:low
Preview:0\r..m......P....r......_keyhttps://rna-resource.acrobat.com/static/js/plugins/my-files/js/selector.js .G_^=od/....."#.D.j.!.B.A.A..Eo.......0.)........Z.Z}Q..4.o....0+..[|..n:*..U.W.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):188
Entropy (8bit):5.585574996470281
Encrypted:false
SSDEEP:3:m+l8UElLA8RzYOCGLvHkWBGKuKPK7CvfMBl/vhMktBDF9ll/EBiaQ562HvpMm1:mAElVYOFLvEW1KTdltBDF9llpx56uvp1
MD5:EB4827B4DD4290FE9B2EE6F79C210871
SHA1:EEF27AD858C62B3C3E48AF94892A759A7CDF1DF6
SHA-256:D81C10CDC26137705813D8D587E37C4886DBF9625A6F3C05300D45C70E574FE4
SHA-512:4BB4D1E33B729456463D6CE58F9FB7D4F4377D8A1C8B9BF3EFFFD4403D680668AD53C4449640DFD8E9F18C85226612DDD7CF7C15F881490F86BCC05C12665093
Malicious:false
Reputation:low
Preview:0\r..m......<...)6......_keyhttps://rna-resource.acrobat.com/static/js/rna-main.js .v6N=od/....."#.D(..!.B.A.A..Eo.......O.`........z?...SwC...^..y.....V..7R-O.....A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):214
Entropy (8bit):5.621534938221349
Encrypted:false
SSDEEP:6:mWYOFLvEWdBJvvuyr0ltLtTUDLYtmOZn1:xRBJpr0lNtYDcFZ
MD5:75193C5FD1E50190EA74F05A7FC6A186
SHA1:851D72667FC1F01E239E3BAAAD660F751EF7C420
SHA-256:DF40C25F549A20308847500D1C214767C3225C769EAC2700DD05C62F5ED0AD38
SHA-512:71566936BE1F9F671467969623BD5DF9D44D81A90031E58C0AFA14C8C004835C1C5DA66676E03F408E2CBCAA62A14F124DC1F274B0F02360DDD4CB62263739D8
Malicious:false
Reputation:low
Preview:0\r..m......V.....h....._keyhttps://rna-resource.acrobat.com/static/js/plugins/activity-badge/js/selector.js ...`=od/....."#.D.b.!.B.A.A..Eo......................t.q..W.EZ....1...[.zC.7mD..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):211
Entropy (8bit):5.568694105063263
Encrypted:false
SSDEEP:3:m+lxCq//6v8RzYOCGLvHkWBGKuKCH6U4LJzWHK7WFvQUZWN9hMktNpSKGoSSl0Jk:msRPYOFLvEWIa7zp7dN/ltN8VPu1
MD5:15F444CBB75B5EAC36B72388427AF731
SHA1:840BC927AD4D98E7D0F2D43165EECBC667ED9EDA
SHA-256:C48AEEFDED6FC476852A48ACFD5FE897F0FC0DE085655FBB594F757FD90E9EE2
SHA-512:A6297D51CC762704351657BA1DE97576790FDD004DC75B3752AE54B2C5FA46B72904EAF96AD3D4F43D72DA4A4A535CD0A0293029CAB57DB7584AC80DC3DD9881
Malicious:false
Reputation:low
Preview:0\r..m......S...{.j....._keyhttps://rna-resource.acrobat.com/static/js/libs/require/2.1.15/require.min.js .(CL=od/....."#.D..!.B.A.A..Eo.....................L...Im.@.........E.nW...IP..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):208
Entropy (8bit):5.569342657041163
Encrypted:false
SSDEEP:3:m+lQi9lC8RzYOCGLvHkWBGKuKjXKVRNUpXKLuVVmUXS2n3hMktb9ltl96F4XVAZl:mKPYOFLvEWdENU9QExltb9lswiM3Y1
MD5:4D0F0D1930831E016D611DA68CF3268B
SHA1:D19E9047B7B55AAD09F04F236B8951F4315104F2
SHA-256:DEE873F2A581AFBA82C59E75BA6FE695E90592C7AC906574C445FF48274AA846
SHA-512:0EE71E4B1D9806A9B861C1B96BC41CDC7BD85A163ACBEC30707E2A3FF42CAB8A5E6A6B7D8A782EB4C3521943FE05A4FAEBA39721E0668CFE02CE49C5D60EC3BD
Malicious:false
Reputation:low
Preview:0\r..m......P...Yft....._keyhttps://rna-resource.acrobat.com/static/js/plugins/uss-search/js/plugin.js ..n_=od/....."#.D...!.B.A.A..Eo........A4...........M....m+lS..e.....<7.U.P8*.0K.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):208
Entropy (8bit):5.58415186599047
Encrypted:false
SSDEEP:6:mQt6EYOFLvEWdccAHQ8y9/ltPrHujBRCh/41:XRc9tm/lZrODi/
MD5:55A5A04B3D885D74DD998F0286F94D57
SHA1:804FA59692CB4971AD8C4842D27EF218D952F867
SHA-256:F13DBC8031E636C5FEF288BBB8871277B8167D5A91476D06EFEB8832D6DEEB65
SHA-512:9BD98D61891986211566F75994EC3AC5F53303DBA1EE26E0E946DAA7DFC48B195EB2E6F4CEA338B2495355CF7A4A3EA42A77084E718DC7B4A134C75F1160DE27
Malicious:false
Reputation:low
Preview:0\r..m......P...W3......_keyhttps://rna-resource.acrobat.com/static/js/plugins/scan-files/js/plugin.js ..6a=od/....."#.D...!.B.A.A..Eo......eS.N........PJm...0x.x..RD...BB!@5..<..]....A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):231
Entropy (8bit):5.572026950213778
Encrypted:false
SSDEEP:6:mqs6XYOFLvEWdFCi5mhuljf1/ltElkULlF4r1:bs6xRkirjxlu7LlF4
MD5:008C427E3C7C97DD5C9CDE48233D9CE2
SHA1:40C163B32435F75A6712B292FB282EA4CDFFF26D
SHA-256:CAD377BF691195873C7508514611A58A4168F51E4A4964BCC9D81835E3CA46AC
SHA-512:C970D07042E625EC9CA5B113BA8969604D7A9162C54C5C6D58E47F923E64B018DF1AE1580F2BF57E85F01025227C3BA7246D416A6FB16BE6CE77413037C45395
Malicious:false
Reputation:low
Preview:0\r..m......g...~.I?...._keyhttps://rna-resource.acrobat.com/static/js/plugins/aicuc/js/plugins/rhp/exportpdf-rna-selector.js .Fh3=od/....."#.D..!.B.A.A..Eo........f..........P...#4..l....5...5..).w.. .h.~..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):215
Entropy (8bit):5.51073206074709
Encrypted:false
SSDEEP:3:m+lPHYs8RzYOCGLvHkWBGKuKjXKXqjuSKPWFv2aYBt15gk/MktUtPECcu1isLK5y:mhYOFLvEWd/aFuWNh/ltcPEN941
MD5:6E37C6B72508561481E557C320020B5A
SHA1:8693404BD866B02790C90EB653CDE0AD88B2EBE5
SHA-256:EE431B1CA6016007C174799DB31CACC3B55DAB946425BCC72409930D0E9785A4
SHA-512:5D0F825DB617EC99CE6290CC6E881B20CDA9594F2B933363E2CFFA60D393507B3DC79A5967AC747CE506A76DAA518CBD8107ACD148240198452AE52986C9262A
Malicious:false
Reputation:low
Preview:0\r..m......W....w.m...._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-recent-files/js/selector.js ...b=od/....."#.D...!.B.A.A..Eo.....................a.f.m.i.o.p..3U5.....^...I.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):208
Entropy (8bit):5.533864248696178
Encrypted:false
SSDEEP:6:mR9YOFLvEWd7VIGXOdQ+mMD1/ltBBMqVd3G4K41:2DRuRrHxlfB9Vd2
MD5:81F5B36FEB42B2A40C2CAD808607AEAC
SHA1:5CBFDB76B96CCB1FCAABDA64F3152AA57AFEB10B
SHA-256:516D70FF29043BB2500834B00DFFB0BDC9EFC4FDCC431A71E08D8DC7F5D74B1B
SHA-512:E945D8BC17183F74975C86D84EEA40AC94FD8188EF166E431A9255E342DAB9C8C6B4278717F8E671FEB63F9F2AEF8AE3DB5C196B9B904A44CCCC365F6040D85E
Malicious:false
Reputation:low
Preview:0\r..m......P...y.p....._keyhttps://rna-resource.acrobat.com/static/js/plugins/app-center/js/plugin.js ...a=od/....."#.D.).!.B.A.A..Eo......mJ............y.$..$.v5j...T...z.]..._S....A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):208
Entropy (8bit):5.584507798303677
Encrypted:false
SSDEEP:3:m+lQyu6OA8RzYOCGLvHkWBGKuKjXK9QXAdWKjKLuVn9llvu4/Mkt9l//W4ThzJud:mkqYOFLvEWd8CAd9QqlDlt9uA424r1
MD5:1595AB43290A6BCEB9188947B1792F7C
SHA1:715345448FE9933F9A2428FA1B89783FDEA516D9
SHA-256:159EB8537FDB334ACB7F67993D8BC6B92E28F1E487B7494E076330E2ECAB329B
SHA-512:F1B369FC49DCFD51B43C90D979FB41ADD0C03D0C4E1DC6DFEF106B9C2F6B71BD537BCACD0BC268C7BFAC9252484B6E1A52AEF841DDD13788837A4E238888052D
Malicious:false
Reputation:low
Preview:0\r..m......P...gT....._keyhttps://rna-resource.acrobat.com/static/js/plugins/signatures/js/plugin.js .W.a=od/....."#.D.K.!.B.A.A..Eo......P..........#..@..k(v.8g..5.~_....]Pj.*..6.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):210
Entropy (8bit):5.559626815265261
Encrypted:false
SSDEEP:6:moXXYOFLvEWdENUAu9KBKN5ltrNGyC8n1:xhRTPj5lJNG7
MD5:015F94029F973DBF89539BFCAD07D491
SHA1:E87A9CD58A054DDBF7C2E0F6EB73410D303D5800
SHA-256:56E7869C876F0C63E203EBB226371481F60BB47B70BED38AF3170CB7A9EB296B
SHA-512:25CC2538E3A0D8D7A3C1D0740C1DDACE2C2C63571413CB71B1ECFD17B78B4221DD7D76D80310F3D57362DA44E9666CFC79FC8F6FCD6AA06D2B216E34A05EF32E
Malicious:false
Reputation:low
Preview:0\r..m......R..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/uss-search/js/selector.js ..K_=od/....."#.DZh.!.B.A.A..Eo........Z.........8.../...;.\\o....1..........+..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):221
Entropy (8bit):5.5401035750219485
Encrypted:false
SSDEEP:6:mQZYOFLvEWdrROk/VQVwX1/ltAtsLmB41:nRrROk/VmE/lcN
MD5:51CE5F65FC8CB43A690075C22EB7D9AE
SHA1:A1BFF7B3754293EDDAAC9993E6C8DE088607DD12
SHA-256:9858F81513048B44670D0423F2825686B1E2133A03D322A4D11652C5D3509B04
SHA-512:D3C1994AAE1694200C18AE8FA1E9E62823C566D6C6930C3951F49861D4C17F1EC179DBBDDD0CF81A4F053AED3B956B3F998E5BF093663D04E5D5B7EB6929DA3B
Malicious:false
Reputation:low
Preview:0\r..m......]......,...._keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files/js/plugin.js .a.^=od/....."#.D.N.!.B.A.A..Eo......h........... ./.ev......N~..6.b.....$.j;:C...A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):210
Entropy (8bit):5.557761462080193
Encrypted:false
SSDEEP:3:m+lUV/la8RzYOCGLvHkWBGKuKjXKjcAW6KPWFvGh/mYg/MktWNlXrobk9mZa6toj:mZ/lXYOFLvEWdccAWubYGltadm9741
MD5:FA35C33A8295EE215AD1444D5A372251
SHA1:FF51424D98E503D71921F92F8030F84A2E2ADC64
SHA-256:9670C06C084125974C01DECF82528D59C50DB0D6FF6E7A92AF5EEE15CC356D5B
SHA-512:3158F2F0E380B1F08CFE11FA95E397BDD4395A4EDF82EC3C70A8C903E7F88109DFC5EFDC1C4BCC6423D1CAA0D722230488A573C271A3B57651A5DAD82570494E
Malicious:false
Reputation:low
Preview:0\r..m......R...F......._keyhttps://rna-resource.acrobat.com/static/js/plugins/scan-files/js/selector.js .#.`=od/....."#.D...!.B.A.A..Eo.........r...........U...I.>P...X...x..0U.~;m.x.k.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):204
Entropy (8bit):5.58012324976053
Encrypted:false
SSDEEP:3:m+lUg18RzYOCGLvHkWBGKuKjXKrAUWiKPWFvqvmtQP8k9hMktqNl2B6shoq+Nem1:mMOYOFLvEWdwAPVu0O65ltmEB6Jn1
MD5:4E66DF2AF21E1D8780E3260750CD34DF
SHA1:2854CC693CAAAC8265D3CAD6E9A4B38CB1C9BD38
SHA-256:053EA7DF270C567C5F1B5A55306340C2888345517D8C7B899459E23C8BF3FB6F
SHA-512:1C0E6676E70C8467CC9F91553834B55B79FA7926C9F3F62F37ACAE2B73BC79CD9069306218434A3CC084A085AC5EE8DA273ACB6C03980013B5614D52776F51BA
Malicious:false
Reputation:low
Preview:0\r..m......L....Ey....._keyhttps://rna-resource.acrobat.com/static/js/plugins/home/js/selector.js ..J_=od/....."#.D.H.!.B.A.A..Eo.........+.............k....F..D..O.n;[.1m.....=..A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):212
Entropy (8bit):5.607834029767884
Encrypted:false
SSDEEP:6:m3PXYOFLvEWdBJvYQo0lhfxltQohcsBXIh1:mxRBJQFcvl7B
MD5:E287FE4FC8DA2443C9D757FF948427A2
SHA1:B92B615251FD499A1E53E971B4B570B52326CCCE
SHA-256:720ACFD04BE3797C43E75A503204BB9F33D4A74B32CAF731E206A574F06A512B
SHA-512:A4D80F80BD8F2CB2E81D43FF8363D53A62A111A1D7C14FFF775B5CB16C6B26BF8EA6D0CD695BF9C507D3606BB2BE67B32F12041253529393DF160B3956DC38F5
Malicious:false
Reputation:low
Preview:0\r..m......T......z...._keyhttps://rna-resource.acrobat.com/static/js/plugins/activity-badge/js/plugin.js ..ea=od/....."#.D..!.B.A.A..Eo.......,.............k..`..N3.... ..d..$[.....{.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):228
Entropy (8bit):5.5662254458448315
Encrypted:false
SSDEEP:6:msPYOFLvEWdrROk/RJUQrcpYmz8qltwc3Me/1:3RrROk/sfSula
MD5:31A1EA16361A62CA64E56AAED49E790F
SHA1:6AA8624FAFB4A1A3F254A94CBD77CCF3E567A842
SHA-256:E4D81F20AB7950DAECB574E98236C68F47E0878AEB7A9730FC5B2993BA62DCA8
SHA-512:A33DACBEAE8533503C9567CAA125F1C5C7C62F7F192B639E614EB0E8D29853D6BB0D51E62FD4C78A44C2974D74B64E4BAE049361B63F1A1C096727BC59FE5D7E
Malicious:false
Reputation:low
Preview:0\r..m......d...<.s....._keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files-select/js/plugin.js .4.^=od/....."#.D...!.B.A.A..Eo.........^.............9Q].8O.z....=..:.N.{....N{.A..Eo..................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):984
Entropy (8bit):5.040251725706932
Encrypted:false
SSDEEP:12:MeVl/9l/gLnl/2+/l/KLvyl/CAl/q5tbyl/iil/iHl/OHl/Wyl/jl/lsl/lA2l/I:Mfg1zZFufGMisp6r6C9QPr
MD5:9B90244F9985CBA4985897217DD7C7AB
SHA1:9BC5919E96D2A3CE20322AADC162056A6B6FE7EC
SHA-256:E44D4707C1D938DE3374B96940F3B6AB183AEEDDFC92C1B25617C57337E95941
SHA-512:15C4CB9E0569A8B9A35F369364B2C4312DF76EF721A8DA8C3CEEB4A289D5DE061D0D14EF2C0D35A1DD3FD12014BA67243DB65124376144BE2D2943FFAB742F36
Malicious:false
Reputation:low
Preview:....h...oy retne....'........'............;.y~A..z.B_./...........*...z.B_./..............oB*.8.B_./............#...(...A_./.............k7A..z.B_./.............D.4..z.B_./..........[.i..%..z.B_./.........<...W..J.8.B_./.........,+..._.#.z.B_./..........J..j....z.B_./...........6<|....8.B_./.........A?.2:...z.B_./..........+.{..'.z.B_./.........*)....J:.z.B_./...........2q.....z.B_./...........P....V.z.B_./.........+.U.!..V.z.B_./............P[. q.z.B_./.........!...0.o.z.B_./..........u\]..q.z.B_./.................z.B_./...........*.....z.B_./..........o..k...z.B_./.........^.~..z..z.B_./.............o..z.B_./.........Gy.'.h..z.B_./.........F..=z;..z.B_./...........3....z.B_./..........v...q...8.B_./..........C..M.....A_./...........a.....8.B_./..........~.,.4>..z.B_./..........&.S.....z.B_./..........@..x..z.B_./.........=....m...z.B_./..........;/....z.B_./..............q..z.B_./............MV3...z.B_./.........:..N.A...z.B_./............B_./.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\the-real-index (copy)

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):984
Entropy (8bit):5.040251725706932
Encrypted:false
SSDEEP:12:MeVl/9l/gLnl/2+/l/KLvyl/CAl/q5tbyl/iil/iHl/OHl/Wyl/jl/lsl/lA2l/I:Mfg1zZFufGMisp6r6C9QPr
MD5:9B90244F9985CBA4985897217DD7C7AB
SHA1:9BC5919E96D2A3CE20322AADC162056A6B6FE7EC
SHA-256:E44D4707C1D938DE3374B96940F3B6AB183AEEDDFC92C1B25617C57337E95941
SHA-512:15C4CB9E0569A8B9A35F369364B2C4312DF76EF721A8DA8C3CEEB4A289D5DE061D0D14EF2C0D35A1DD3FD12014BA67243DB65124376144BE2D2943FFAB742F36
Malicious:false
Reputation:low
Preview:....h...oy retne....'........'............;.y~A..z.B_./...........*...z.B_./..............oB*.8.B_./............#...(...A_./.............k7A..z.B_./.............D.4..z.B_./..........[.i..%..z.B_./.........<...W..J.8.B_./.........,+..._.#.z.B_./..........J..j....z.B_./...........6<|....8.B_./.........A?.2:...z.B_./..........+.{..'.z.B_./.........*)....J:.z.B_./...........2q.....z.B_./...........P....V.z.B_./.........+.U.!..V.z.B_./............P[. q.z.B_./.........!...0.o.z.B_./..........u\]..q.z.B_./.................z.B_./...........*.....z.B_./..........o..k...z.B_./.........^.~..z..z.B_./.............o..z.B_./.........Gy.'.h..z.B_./.........F..=z;..z.B_./...........3....z.B_./..........v...q...8.B_./..........C..M.....A_./...........a.....8.B_./..........~.,.4>..z.B_./..........&.S.....z.B_./..........@..x..z.B_./.........=....m...z.B_./..........;/....z.B_./..............q..z.B_./............MV3...z.B_./.........:..N.A...z.B_./............B_./.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:ASCII text
Category:dropped
Size (bytes):292
Entropy (8bit):5.300651740159541
Encrypted:false
SSDEEP:6:kmhvD5RIq2PWXp+N2nKuAl9OmbnIFUtLhvD5EZmwRhvD5lFzkwOWXp+N2nKuAl91:kmpDvIvaHAahFUtLpD6/RpDbFz5fHAae
MD5:502F2A6E02C592F9EFFB4CD2EB44B5F7
SHA1:A3136504DABA8E8E9B469A704DD7E9880021D12F
SHA-256:B63AD6267CAD4A290B707AEC67EE306BA38F807EB1E258B04B40E361B03EDAC2
SHA-512:5D3785C32E5DA432468D36E73F137B29C2D11C556AA561BB0EE6E327346C4AA447FA0A06543E3CD40B140E66F586C12ED05BDA086460F04BF2134F357FEF8AA7
Malicious:false
Reputation:low
Preview:2023/09/21-08:53:49.274 17d4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2023/09/21-08:53:49.275 17d4 Recovering log #3.2023/09/21-08:53:49.276 17d4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:ASCII text
Category:dropped
Size (bytes):292
Entropy (8bit):5.300651740159541
Encrypted:false
SSDEEP:6:kmhvD5RIq2PWXp+N2nKuAl9OmbnIFUtLhvD5EZmwRhvD5lFzkwOWXp+N2nKuAl91:kmpDvIvaHAahFUtLpD6/RpDbFz5fHAae
MD5:502F2A6E02C592F9EFFB4CD2EB44B5F7
SHA1:A3136504DABA8E8E9B469A704DD7E9880021D12F
SHA-256:B63AD6267CAD4A290B707AEC67EE306BA38F807EB1E258B04B40E361B03EDAC2
SHA-512:5D3785C32E5DA432468D36E73F137B29C2D11C556AA561BB0EE6E327346C4AA447FA0A06543E3CD40B140E66F586C12ED05BDA086460F04BF2134F357FEF8AA7
Malicious:false
Reputation:low
Preview:2023/09/21-08:53:49.274 17d4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2023/09/21-08:53:49.275 17d4 Recovering log #3.2023/09/21-08:53:49.276 17d4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old~RF6e1239.TMP (copy)

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:ASCII text
Category:dropped
Size (bytes):292
Entropy (8bit):5.300651740159541
Encrypted:false
SSDEEP:6:kmhvD5RIq2PWXp+N2nKuAl9OmbnIFUtLhvD5EZmwRhvD5lFzkwOWXp+N2nKuAl91:kmpDvIvaHAahFUtLpD6/RpDbFz5fHAae
MD5:502F2A6E02C592F9EFFB4CD2EB44B5F7
SHA1:A3136504DABA8E8E9B469A704DD7E9880021D12F
SHA-256:B63AD6267CAD4A290B707AEC67EE306BA38F807EB1E258B04B40E361B03EDAC2
SHA-512:5D3785C32E5DA432468D36E73F137B29C2D11C556AA561BB0EE6E327346C4AA447FA0A06543E3CD40B140E66F586C12ED05BDA086460F04BF2134F357FEF8AA7
Malicious:false
Reputation:low
Preview:2023/09/21-08:53:49.274 17d4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2023/09/21-08:53:49.275 17d4 Recovering log #3.2023/09/21-08:53:49.276 17d4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
File Type:data
Category:dropped
Size (bytes):131072
Entropy (8bit):0.010978819626460943
Encrypted:false
SSDEEP:3:ImtVdXb+j4x9pPlXlpyPll//zVrzlltD0lGQZ7XEZhGIelHdP4/X:IiVtg4x9pdM//hFwl570ZhdelG/
MD5:E36F8F81D3C03F6AAF7D768706B7673F
SHA1:EECE93F9E417717892E50F6A159516DD76C255B0
SHA-256:C6E687FF9677244574F37AD2877726DF64E5BAADDA2ABE8C4759BDE8344E44F2
SHA-512:0582ADCFA1A09095D4482C9A61475C8B77FF444BF2655DE4F6583BBB2699A054BBB2292DE2741FEEB27AFE0835B0B48F476418EE1A666DE20CA146D1EB4390A4
Malicious:false
Reputation:low
Preview:VLnk.....?.......Tq.>..j................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-230921065349Z-175.bmp

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54
Category:dropped
Size (bytes):65110
Entropy (8bit):2.200667726245628
Encrypted:false
SSDEEP:96:jlrgbbmH5VHSx1CrlQMM5nvieMMMM4C/6CYKbf1Jg7Ng0kBRhrE5rMMTMyrMMHyk:FomZV4154E4lsx6
MD5:3CC1A105CB2416AA61F13A12E34DCA61
SHA1:68A5EC119802A9001855FF2FF43206F987442F9E
SHA-256:0631B488599D28A89EA6AA37C9FEFC33F0082245993DF458886649FDFE7FFA31
SHA-512:1788986DE43FB997F2FF2B3207491407DE13639763D75C8A0F7A74D28CBF87DD32610E2C8EB6D37C10980F01C4DDC45A544CA0108F9FB9AB9715848A6B57E423
Malicious:false
Reputation:low
Preview:BMV.......6...(...k...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:SQLite 3.x database, last written using SQLite version 3024000, file counter 12, database pages 15, cookie 0x5, schema 4, UTF-8, version-valid-for 12
Category:dropped
Size (bytes):61440
Entropy (8bit):3.5655235242896315
Encrypted:false
SSDEEP:384:3eI9dThQtELJ8fwRRwZsLRGlKhsvXh+vSc:IkYZsLQhUSc
MD5:E2E05AF2C24E18C18B0A7DEB772CE0C8
SHA1:E7E11B099BD7B323ADB4EF5C3E7D7595277184C5
SHA-256:9AA6361B75EB6C08C28E7AFE03F5F525ABAFBA5C3F08E7818361CF495028DC56
SHA-512:A69F5428A257424885D359027C798884B958BE53937BFCFCC74CDA766724D1877CF93082757A9872D0F5946CE2EDAA57DEA642ECF9D6FDF4B59B6BF6A5C7336E
Malicious:false
Reputation:low
Preview:SQLite format 3......@ ..........................................................................$.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:SQLite Rollback Journal
Category:dropped
Size (bytes):8720
Entropy (8bit):3.2875771733252472
Encrypted:false
SSDEEP:48:7Mlom1CPnCiomTnEiom2om1Nom1Aiom1RROiom1oom1pom1xncZiomVsiomgMYqb:7vPnCWnEOhTnmCsnN49IVXEBodRBk9
MD5:FE567903DB3B20BB6C404FA8FB184B58
SHA1:521258675270EB5C1381FAC72B6533A50DA2E4C1
SHA-256:7CBE28DC376EFA05B130765EDC40A161A4E43EEDE4A6C03660F67D4B755E6ED4
SHA-512:5B88878C45C2618C821D2A749C5B7461907307D62925782087C892DC5AC9C35FBCA97BE895A5649AF6AFD2C61B6E3245A03E867AECE351DEABA01984F2CE4AF0
Malicious:false
Reputation:low
Preview:.... .c.....Vx...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................s........L.s.y................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt19.lst (copy)

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:PostScript document text
Category:dropped
Size (bytes):536
Entropy (8bit):5.17576513886526
Encrypted:false
SSDEEP:12:T4RFQ8idRuMgxg6dxs3yBFTtDcSTAzidRuOPgxg601s3yBFDHpcSa:kNid8HxPs3yTTtPmid8OPgx4s3yTDHBa
MD5:4D5E3CD969F14362210F0473720C5528
SHA1:AFD90E9888759B809F78E87D5550B601A288A0A3
SHA-256:79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
SHA-512:B10C157945432CC8944E63A28CA3420CAD0C6B87BABC77BB5437DA5E3DF0CDEB657D410F28FA61D314E86269B8D1AC5972B0792D3E78787DFCE496EEE979DF64
Malicious:false
Reputation:low
Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt16.lst.6796

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:PostScript document text
Category:dropped
Size (bytes):536
Entropy (8bit):5.17576513886526
Encrypted:false
SSDEEP:12:T4RFQ8idRuMgxg6dxs3yBFTtDcSTAzidRuOPgxg601s3yBFDHpcSa:kNid8HxPs3yTTtPmid8OPgx4s3yTDHBa
MD5:4D5E3CD969F14362210F0473720C5528
SHA1:AFD90E9888759B809F78E87D5550B601A288A0A3
SHA-256:79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
SHA-512:B10C157945432CC8944E63A28CA3420CAD0C6B87BABC77BB5437DA5E3DF0CDEB657D410F28FA61D314E86269B8D1AC5972B0792D3E78787DFCE496EEE979DF64
Malicious:false
Reputation:low
Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst (copy)

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:PostScript document text
Category:dropped
Size (bytes):536
Entropy (8bit):5.17576513886526
Encrypted:false
SSDEEP:12:T4RFQ8idRuMgxg6dxs3yBFTtDcSTAzidRuOPgxg601s3yBFDHpcSa:kNid8HxPs3yTTtPmid8OPgx4s3yTDHBa
MD5:4D5E3CD969F14362210F0473720C5528
SHA1:AFD90E9888759B809F78E87D5550B601A288A0A3
SHA-256:79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
SHA-512:B10C157945432CC8944E63A28CA3420CAD0C6B87BABC77BB5437DA5E3DF0CDEB657D410F28FA61D314E86269B8D1AC5972B0792D3E78787DFCE496EEE979DF64
Malicious:false
Reputation:low
Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt19.lst (copy)

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:PostScript document text
Category:dropped
Size (bytes):9566
Entropy (8bit):5.226610011802065
Encrypted:false
SSDEEP:192:eTA2j6Q6T766x626Oz6r606+6bfs6JtRZ65tsu6rtG16lMXY5B5Cfk:es4p0vTLcdfIfsmtRZEtsuatG1gMIzV
MD5:63B24EA3A13EAC476D6309BB202EF459
SHA1:89502C393549C20C933E4553F51F74F3DBE085EF
SHA-256:2B4BE0BED267BBD4E4FFFC912A6C7ED6A8D4735DCF9B69FF90F37CDDEF4110EA
SHA-512:2CB315DD00867DEE3A2CBC4017B59C53B41E817216FE0111A60947E1F0D81FF6767D8F7B5C406AAF9E6516BE716A086642AFFABBEFBE4C5B260437C89E3535EC
Malicious:false
Reputation:low
Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:Type1.FontName:AdobePiStd.FamilyName:Adobe Pi Std.StyleName:Regular.FullName:Adobe Pi Std.MenuName:Adobe Pi Std.StyleBits:0.WritingScript:Roman.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobePiStd.otf.DataFormat:sfntData.UsesStandardEncoding:yes.isCFF:yes.FileLength:92588.FileModTime:1426577650.WeightClass:400.WidthClass:5.AngleClass:0.DesignSize:240.NameArray:0,Mac,4,Adobe Pi Std.

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt16.lst.6796

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:PostScript document text
Category:dropped
Size (bytes):9566
Entropy (8bit):5.226610011802065
Encrypted:false
SSDEEP:192:eTA2j6Q6T766x626Oz6r606+6bfs6JtRZ65tsu6rtG16lMXY5B5Cfk:es4p0vTLcdfIfsmtRZEtsuatG1gMIzV
MD5:63B24EA3A13EAC476D6309BB202EF459
SHA1:89502C393549C20C933E4553F51F74F3DBE085EF
SHA-256:2B4BE0BED267BBD4E4FFFC912A6C7ED6A8D4735DCF9B69FF90F37CDDEF4110EA
SHA-512:2CB315DD00867DEE3A2CBC4017B59C53B41E817216FE0111A60947E1F0D81FF6767D8F7B5C406AAF9E6516BE716A086642AFFABBEFBE4C5B260437C89E3535EC
Malicious:false
Reputation:low
Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:Type1.FontName:AdobePiStd.FamilyName:Adobe Pi Std.StyleName:Regular.FullName:Adobe Pi Std.MenuName:Adobe Pi Std.StyleBits:0.WritingScript:Roman.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobePiStd.otf.DataFormat:sfntData.UsesStandardEncoding:yes.isCFF:yes.FileLength:92588.FileModTime:1426577650.WeightClass:400.WidthClass:5.AngleClass:0.DesignSize:240.NameArray:0,Mac,4,Adobe Pi Std.

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin

Download File
Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
File Type:data
Category:dropped
Size (bytes):63598
Entropy (8bit):5.4331110334817385
Encrypted:false
SSDEEP:768:PCbGNFYGpiyVFiC0ZaFAaMdRCQVe9UrsBUDnIiUP2Yyu:J0GpiyVFihaSaMdRheKYiUOK
MD5:522CE1745C4356A0A4EB283045A2AA2B
SHA1:553A52F4CA93934D0CB6EF9D66FAA7FE154B3091
SHA-256:F98F9083815F35DB8E5CE70C0AB8C7857FEC056F8406C89B64645D15AA8A97A2
SHA-512:EB01EDE99173D59A801A576AE320F84026E5ED8AE51EAD819ADCA6157A3F492EDC7C7460484D72B0CAB895401A68296AF80CCE40098ED556EA86AE9D33D3FC66
Malicious:false
Reputation:low
Preview:4.382.88.FID.2:o:........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.94.FID.2:o:........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.82.FID.2:o:........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.93.FID.2:o:........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.107.FID.2:o:........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.103.FID.2:o:........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.116.FID.2:o:........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.75.FID.2:o:........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.89.FID.2:o:........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.85.FID.2:o:........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.98.FID.2:o:........:F:Arial-B

Static File Info

General

File type:PDF document, version 1.4, 2 pages
Entropy (8bit):7.8904284019335496
TrID:
  • Adobe Portable Document Format (5005/1) 100.00%
File name:Angebot 202302214.PDF
File size:43'660 bytes
MD5:6f389bac1427a89ece69191b565236eb
SHA1:66d223961f2c599af478e504f013c7a5abd427aa
SHA256:7ea07de036a154b6d46ad32a4458b558bf86d730cfe3b999e03a3132ab4f895e
SHA512:cb07abef11f4442edb6588121820d72073221d2ecc352f4bfddd85d5a0b59c341715aa404bec134b5660d31141980157d2c05917c339a4aa436d055a88f0e3cb
SSDEEP:768:13lD5aSbIM17G2qeGuHrLqrxOm353oPF0XWaVV/floJ5hwMeysIHOU2DL2+M:1VD5aSbD9vnqYm3FoPFmVVHlFMrse2fo
TLSH:7413C0408589E4C0E75B6FF2FFBA48225399F31119A1BE76158E5D83A981FFCB90E311
File Content Preview:%PDF-1.4..%......%..%wPDF4 by WPCubed GmbH, 32bit unicode ..%..%..1 0 obj..<</Type/Metadata/Subtype/XML/Length 1503 >>..stream.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="3.1-701">.<rdf:RDF xmlns:rd

File Icon

Icon Hash:62ceacaeb29e8aa0

Static PDF Info

General

Header:%PDF-1.4
Total Entropy:7.890428
Total Bytes:43660
Stream Entropy:7.962315
Stream Bytes:39039
Entropy outside Streams:4.976505
Bytes outside Streams:4621
Number of EOF found:1
Bytes after EOF:
NameCount
obj17
endobj17
stream4
endstream4
xref1
trailer1
startxref1
/Page2
/Encrypt0
/ObjStm0
/URI0
/JS0
/JavaScript0
/AA0
/OpenAction0
/AcroForm0
/JBIG2Decode0
/RichMedia0
/Launch0
/EmbeddedFile0
IDDHASHMD5Preview
48e8a8e89494c34d4554f7856d2641935b09b7bd1a9c107e7

Network Behavior

⊘No network behavior found

Statistics

CPU Usage

050100s020406080100

Click to jump to process

Memory Usage

050100s0.0010203040MB

Click to jump to process

High Level Behavior Distribution

  • • File
  • • Registry

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

General

Target ID:0
Start time:08:53:43
Start date:21/09/2023
Path:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
Wow64 process (32bit):true
Commandline:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\Angebot 202302214.PDF
Imagebase:0xdf0000
File size:2'571'312 bytes
MD5 hash:B969CF0C7B2C443A99034881E8C8740A
Has elevated privileges:true
Has administrator privileges:true
Programmed in:C, C++ or other language
Reputation:low
Has exited:true
Show Windows behavior

File Activities

Show Windows behavior

Section Activities

Show Windows behavior

Registry Activities

Show Windows behavior

Mutex Activities

Show Windows behavior

Process Activities

Show Windows behavior

Thread Activities

Show Windows behavior

Memory Activities

Show Windows behavior

System Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

General

Target ID:1
Start time:08:53:46
Start date:21/09/2023
Path:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
Wow64 process (32bit):true
Commandline:"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
Imagebase:0xf70000
File size:9'475'120 bytes
MD5 hash:9AEBA3BACD721484391D15478A4080C7
Has elevated privileges:true
Has administrator privileges:true
Programmed in:C, C++ or other language
Reputation:low
Has exited:true
Show Windows behavior

File Activities

Show Windows behavior

Section Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
Show Windows behavior

Mutex Activities

Show Windows behavior

Process Activities

Show Windows behavior

Thread Activities

Show Windows behavior

Memory Activities

Show Windows behavior

System Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
There is hidden Windows Behavior. Click on Show Windows Behavior to show it.
There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Disassembly

⊘No disassembly