Windows Analysis Report
NOTA_ACCR_11.PDF

Overview

General Information

Sample name:	NOTA_ACCR_11.PDF
Analysis ID:	1447160
MD5:	e6843c9d88e5dff3b04fa7eb6e3f3f52
SHA1:	0e07211f9b8704b444a70656b603b37a622881ad
SHA256:	2ce905cadfa90c99483047431ba23d00f81d3ef6a710a6b184def5f9283d02ee
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: E0F5C59F9FA661F6F4C50B87FEF3A15A0.1.dr	String found in binary or memory: http://apps.identrust.com/roots/dstrootcax3.p7c
Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab

Source: classification engine

Classification label: clean0.winPDF@14/47@0/0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6868

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-05-24 08-53-02-101.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\NOTA_ACCR_11.PDF"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1628,i,3488876338839633871,10701397785841666798,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1628,i,3488876338839633871,10701397785841666798,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: NOTA_ACCR_11.PDF	Initial sample: PDF keyword /JS count = 0
Source: NOTA_ACCR_11.PDF	Initial sample: PDF keyword /JavaScript count = 0

Source: NOTA_ACCR_11.PDF

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

⊘No contacted IP infos

ID:	1447160
Product:	CloudBasic
Start time:	14:52:02
Start date:	24.05.2024
Sample:	NOTA_ACCR_11.PDF
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	e6843c9d88e5dff3b04fa7eb6e3f3f52
SHA1:	0e07211f9b8704b444a70656b603b37a622881ad
SHA256:	2ce905cadfa90c99483047431ba23d00f81d3ef6a710a6b184def5f9283d02ee
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	1274DF30C126455A54FCC17467F05484	FE7A71B01419703EB781D35770DE12381F32267B	D120ECBAE319709CF9CA0E742AC76503B38B749B60E5AC0966A7AC880394C31E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	1274DF30C126455A54FCC17467F05484	FE7A71B01419703EB781D35770DE12381F32267B	D120ECBAE319709CF9CA0E742AC76503B38B749B60E5AC0966A7AC880394C31E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	E5ED11402BFC61C2F1DBF22F66A59004	0EAAD5DBABE5B97C66E57268F719B01B40EEEBE3	3E7EDA1215DC0332BAF402587CAF4DFC866DCC46872DA59CE49A3704712A6979
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	E5ED11402BFC61C2F1DBF22F66A59004	0EAAD5DBABE5B97C66E57268F719B01B40EEEBE3	3E7EDA1215DC0332BAF402587CAF4DFC866DCC46872DA59CE49A3704712A6979
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\270ce418-4898-4502-8dbb-71ed351451e2.tmp	JSON data	DF9598A3178A124231C9DD3CE04A9B33	ECF32CFFB956942A4D051C210C8DFDCEA58788AD	497BFBB51DF2037041F2E054D480B9F3E173BF2158BF0D3380A727039BA691FF
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	DF9598A3178A124231C9DD3CE04A9B33	ECF32CFFB956942A4D051C210C8DFDCEA58788AD	497BFBB51DF2037041F2E054D480B9F3E173BF2158BF0D3380A727039BA691FF
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	DC061BA941C0E27BEB544C7B7A164055	4E5B2A1068B81191DD819503FC6E9FE8809D79E0	8E82FA1EF17CF595BE5373E76879D4E98A0D15DB43A4E6C46478BAB3E60EE9B3
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	504148A39F51A648E92EB32286F20027	77960325ED380C5F74B161C7994E27807DB5FEB5	B5BAC7FF33D04A7E06B3C8FE27B2C893E39FBF9891E3F9724DD788C13AF7871D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	504148A39F51A648E92EB32286F20027	77960325ED380C5F74B161C7994E27807DB5FEB5	B5BAC7FF33D04A7E06B3C8FE27B2C893E39FBF9891E3F9724DD788C13AF7871D
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240524125304Z-162.bmp	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54	888CDF7A58C3695D343167C9B2E21D9F	6EF6FB43EAE22FF5F26719B51A8617A899772FF3	218B419A8C30481B163F815376D4D24C477EEC29BB470C88DED7425AAF8C66A2
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15	4D8EBAC6A0F8980DAB43F051E9F074F0	940C8A31C909D38607DEB5E5760DD819485EE718	3F7E57124CB37D9FC76BF20BE8B42F0BD3B9EDDE04409301D32655CF12E113D3
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	E4CBD66E94C11FBBE0C7A61A954F970B	09B8E9F78243A050F0D444B9F6C25389A1D31D98	A2DAE86C4C38065000927AE31A70871DB770CEB0B056E01207255CE558D348F9
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, Windows 2000/XP setup, 69993 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression	29F65BA8E88C063813CC50A4EA544E93	05A7040D5C127E68C25D81CC51271FFB8BEF3568	1ED81FA8DFB6999A9FEDC6E779138FFD99568992E22D300ACD181A6D2C8DE184
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	D4AE187B4574036C2D76B6DF8A8C1A30	B06F409FA14BAB33CBAF4A37811B8740B624D9E5	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	23B30DEEA2295EDF27E063213FE5DCCE	D2E5149583CAB68D84B3A9BE39656350C2D24E03	1FEC0E987A022B57DD6B98D2D5D63D0FE6730A209741C4D20CC1B023D0890F77
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	5138BF1B70B601F415AA5406DC138DB4	0AD0963F7143C477D77E9041768B6929AE1957E6	EE75299D7881D44401D9DCC1D2336CECC3B3DA4C078450B9D677FFEC0D46E8C8
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6868	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	F5567C4FF4AB049B696D3BE0DD72A793	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	E6A01ED47584C497D6A93A9FA935A95F	A50F5D179911C01E630FE180C09BE79880AE278A	4EF904AE3B4997682851C97D14577190373A837F51CA0A59E74910FF1B6052A4
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	43D730D8B4475F2F22C8408F5A96E4CC	A45994EC37DCE8471A245760B2B3DBEC7DCCB413	53A7DE03E1E461B00AEA9BB71FEFCA844822C528B140308674EF84814AB2AC3B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	F559054C21FFC1198888428779E7405E	392D10AB4EF595861921F02C71D1D04DA6F9823D	CFE783F65EC3E20B02657BA6D18E23E8D5A7027B80826CE8048D33BFE69F1868
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	61CDF5DA423AE8778FE81A6B8244278E	B4513203A4238FE6321EF4A8865C03DAB0D898DF	7EEA621FA66B648D0432EDAD65EE5CFE7072763FE85DA9EA7F568BB79B6E1AE5
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	A5A614EEFF71FE7B74DA2856CEEEA351	4F4FCC83688EFD1093F69A907690BCDAF5556392	EA3DAB35AB9BD96CD620C30DD7D1C206706A2363EB423F9CE4CE8285A7EAED06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	F329F7FC14750C81AADA88B30E5A98D1	7A0E40B8D17990209F34EF67D5E21B24C28C1D47	73DFE621AD7BF5BB0F09FECAD3E974876C1842F09934FE78E6F08328AEFC85F2
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	E248F93AE5A325B12623B72F12B3B103	B789027C402E3127F61BF7FC44BFFAA5046B87DE	26BAA83247342773F1DCB3EEE1C40D45841D42CED4FA8A1798BC85E3294A5956
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	AC25E5B07ADCA1778D8DF6A63E0B1A1D	20E0FF56AD924F9184E2E8F9C7DCA37520162A69	66EA53EA93732DAC8C65EB77D9AA4FB2E596A60B017836D822593DCE5F579604
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	B0AB0FC0AFD43BD8CE40916786552267	418B9CB5629DAE49103DB2B83F0D64B1555E07A9	1BB3BCB1C2B74E299EADA8E6EE9D2A017358E7A28565BB0D2760492767D11FA1
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	D19966A72A43A03E32E0B3DFED9D615A	5842841DC354592047A5D6BF18CFC14D25A18F1F	79ADCCF817E0220DC4105496B39816A7F291BF0458311CEFC2D51447A39F88BE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	2C434E10252E51EAE098D6A0944E817D	24D42943F52B91F98AAAAD460E98880EF6331DB4	016F5B000615241735F94F2E0C5570B8C47D77A3B81CB93211CC4B41B71DB84D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	D7A077316F8B19B17200BB88CB99BE1D	0322B2460688BBF10A04CCE6CDEDD5A9809FD555	C42B005BFA6D5CB99AE0B1CD2FAB294FEC61E5DE5E8DEE9ADAF672BA912F4D41
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	D64F9E81897D7D96D3EB09A34B7160AD	D8D80A5EEC36220939DACF8E59F2F830C6811650	B391793BC3281994FCEA8DF400F2276AC7FC73BA89CDDA7012B95E324C745835
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	7614B2A6023C81DCF8601C3643EB608E	E1E6613403B6CF4CAD059A24B4FD2FE86C068104	7A36607C8C8A9E56D6D44823BB73A27159A0F5A6ECDA842A9339E4502A2344AE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	DF55AF82C6FFA506880304C4CF07E25A	182B99C5773BC9F4C3E34617D5DAD525D436A370	CF28FA60AC8DE1D899483AB7B8F642BB40DD6E65CC3D3016CEFE55B7928F42C6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	077AC633913BDDFE76C1430C3E50FDC0	A5642F7E33F7B73D3B30381E07E1BD55FCE1BFF3	944D6EC9951F5DB92B1E9F9AF42FCCB5059026FC1F88970D08ADA4674B6BDA3C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	9C47665B40AD999860895969967E080F	5476873E8395F231D9A7A3B1218DC42C2496CE15	C76387B0CE5BF39F162BC61B287F27A57FE8F029F8B1EAE5E502B480F13514E9
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25	D30B3DB19D4F61B9E2D9844CD786348E	4EABA85D23378B1AEDB20FD7DFE514B39A82F2FD	E1453986A2023B5F8DE1AB04C452736DB5A7E521C0AF35D402A40B6807C75ABA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	42FC1F36188E60BE259A7C6DA10C9282	A17931EC18232BA67F5D8D32D0EE7D503A111B7D	DBB8DEE54DA636B3D49470A418A6E0EFE8EDC78A813C6409B22C872C19934971
C:\Users\user\AppData\Local\Temp\MSI1a233.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	983E97A21785EA9C346F10AD1B37C229	2412DDBAFFEC208D8D0607718F1241DE020C2777	EA90022B3752C6FD31B8E8FF4715DCD48BCD0353DCA73F4E19B7F171E07F8742
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-05-24 08-53-02-101.log	ASCII text, with very long lines (393)	8947C10F5AB6CFFFAE64BCA79B5A0BE3	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	3BCAC0B2723CF1F744A9DFB516F16685	9BCF75D03C1E512F4E1DF230D834403718FA41D1	364C22B7E86397C4B50FA14380D1C1E6F1A2FB87204EBB4359B4648DA00387A6
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	2BDB2AD86F4C9135174463C233E1FDF3	1D7C83D066D2D9A8480636BA9309636CD639042D	E57B55DD3C88FA1E1FA1EEDD538C311684FA4F65E079F33F85DE19562772E37E
C:\Users\user\AppData\Local\Temp\acrocef_low\006c72e0-57b7-4b27-b61f-a43c8d6b7cee.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	A0CFC77914D9BFBDD8BC1B1154A7B364	54962BFDF3797C95DC2A4C8B29E873743811AD30	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
C:\Users\user\AppData\Local\Temp\acrocef_low\a8cacac0-8e83-4db4-8a2d-96a119f96fc0.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Local\Temp\acrocef_low\d4d26192-d1d3-40d5-b1cd-63140bef78e1.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	E787F9888A1628BE8234F19E8EE26D68	44D5180C06ADBBDAADDBCE350CE4DEC997CD83E5	3A09F3799148DA49F039A35AEDD22F368FB35B8D6022C4691C10606F704DAF80
C:\Users\user\AppData\Local\Temp\acrocef_low\e3cb68e2-ba05-40d8-8b91-23e18e754f93.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE

Windows Analysis Report
NOTA_ACCR_11.PDF

Overview

General Information

Detection

Signatures

Classification

Signatures

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report NOTA_ACCR_11.PDF

Overview

General Information

Detection

Signatures

Classification

Signatures

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report
NOTA_ACCR_11.PDF