Windows Analysis Report
a58.pdf

ID:	1467138
Product:	CloudBasic
Start time:	18:38:08
Start date:	03.07.2024
Sample:	a58.pdf
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	e800cacb7da9706f7cbadecc954b0a10
SHA1:	58342023921cfa86088d234ba94230e805acfe94
SHA256:	13a80791ee707dca434fa10783c8adc4175c091adc6499c8cbc32db0d59a27f8
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	4501CD067E1A5E9A4BD49AF5DF14B86F	B467EF8C748134A93C89F6F9FA736A16F05CC6EB	2C1C9EC2EA6442D683BF57C6F9562E0A3D6B5B6BB02DB72E5ABAA51C3411B126
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	FBCDC04A783A39A7DC194454EF321992	90D77584A8B0FA80819BDBEF06F8F9B8D25C22E2	1383F32CF293A57AF0DB7246723A8D0DF8A3929CF08DDB4DF4C1DD7CC208FAFE
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\6c995781-8387-4b6b-8db6-d4bd2feed7cb.tmp	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF4db35b.TMP (copy)	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	3749262F21F41950606DC677C788FA52	4E79AA0567FBF3B938949C3FD52FF3E01353E32E	9C1FEEEB1DC2D22F426C0AAC01D21B7DBAEBB293009E6D08D50F61350613E3BD
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	AB5B01F252C719FF3866E258D1188E6B	3B98D2194D968693EEA6233E2319BA67F2E8F0D1	8D28FEB546DEC27A8EB04E8564879F7703C4FD841CED15679DCD5740DAA4F1A8
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240703163839Z-162.bmp	PC bitmap, Windows 3.x format, 119 x -152 x 32, cbSize 72406, bits offset 54	3077E0AD608B5D120A28634DC3890B8B	13B57A30AD0C726A3BA787A2250E14DF87D3BF18	0FC2D40E490DD2FA04909CA9840F24AEA668F86B1B99C6D81B65DC1DE9084F6F
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2	A4D5FECEFE05F21D6F81ACF4D9A788CF	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	6684ECADFA0FAC521059F22FE286C14C	290972005C428EF85D95F17449876ABAFCEEB487	6D53E50425356318C0FB92840C9F1C28B736E1B20F716105DED0B89BD11878D2
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression	49AEBF8CBD62D92AC215B2923FB1B9F5	1723BE06719828DDA65AD804298D0431F6AFF976	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	D4AE187B4574036C2D76B6DF8A8C1A30	B06F409FA14BAB33CBAF4A37811B8740B624D9E5	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	04BDA36C638DE06FF1709204201EF54A	14A9E4B1F602C97337F3C230B965EF62321BC9C0	AE3382FF2303C7032C390E55F9DC4A1D2F68ADA7EA7CC44F3C7441DB3732A420
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	F4A5A4DDB5243C1FE753FC61992AC043	6B47E6A3325AF6345E923E916C09A4AC985CCFB3	24E12FAF49AB9DEE681707105996D83C33A8D03F833E067AD3A7D5C739620A3B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6256	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	51AFDF6C7EB2AC697CB6400CFE90400C	E8960E289CA3A6D81D8A2575C009E9C5B147BC9B	48502D9832FFA1CE891A8141737CDD903702E6F43E8AEDC16D0F33A1E3BF1774
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	B1E40B942A13BCA358CD4781549975D6	6B16B900C9E58AC6B7F3112F33DB7783F969C310	6F99B9DF7AE6175BA9B18C9F374AC64787F08F3CD08D2BA205CAE571759BDC89
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	0FA6187E2B9F5B33C7DDDE2CCC9C8B1C	CF22AE85EE6BF8006AF3052D0D0355D83D9942D8	3826F75DABD2519C2D2D13FB625B289B976357300F5A872523A1C5E14ACDFF08
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	66619DA16EF52D5697F72679D08D8F58	6EEBBF849F94BF93869A1E9ED0BEE053A5D1C8DB	08A7D17B76ED0A2D470847977E421FC20B2A1C019B64F1A9766635C1F996AB9E
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	F9B3E797BDE59EA39D0F2692DB493503	839E45E086E3A67684D8A1964AEC5CB5B56BA3D3	3EEA142E215FE2554D95CB05063E8DF3C7EFC1B81402FA48D6176E8F86F0DF1C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	8EBE96D9C6CD68255EAE63CC8F014621	500567859AB2136718A509B8FC41BA664F3742DF	448F1B5C92C4FA938B7167517C7D04C371977531E4B0B130AB391D37C5893B5D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	33D4CEF330772FD447EFCDC3A1BDB699	87FE599C5EBFC971207256E173A801A1B7059E7C	E8D65489E01DC7D6EA925B5EE8CE59B933F9E2B32D3DEBA68E3BBDBD1B79F63A
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	B799A652F8E03F31C360E4071C4811E2	BDC5A98850B658C3505ECBCB791A3A9F72AB113B	2D91586D5D6FF41DFDCEA06642A85DFE2F166DC86560D1E014FB721E3AE7D6CD
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	17F0186F16E63345A6A29AD5854DB240	47F840CD96FCAEFD8BF622433C649C84C4C45872	28E58535AE8E6667E9F16DFB1EDC3DC7AA4018CBADE333D3A7CDBE2ED73491D0
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	49B1EEA00AF93AF35087BA9F63F94316	620E1BF4BD951DA2A199089CC3D3B8C5FBA4B886	F8DDC87C46BFC4A602CEDC7F111FCDF841F318932F4CD33F71E6D83252F9BB6D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	F31843F2D078441D25C4A898BCC21711	06428876DC0D4F84EE1E0352FBA2F3498A8921E7	A4723543C54A6DF07053FA37895E3BD2E7703031C570421054735F30C7AE9B82
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	33B0B06E5E168DA54EFCC7E53BAA0278	78DDCB5F5888B9BBE70B21C01B7D1E089D575591	2351D15E361A2F764B45307D8D4D8CD17BD13673407A757F8EC470927B923CEE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	0B5E23F5A01C48C953112DD8680E86AC	2DD814ABD095E529B289EDCB9166FD1CABBFDABC	BE31742345E8BD672D6252C2B1A9B11067424075EE64D2D247E77173BC19D2EF
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	3944E193CA0D2D1EB54B5A1ECD2B3E70	E8A5EFA8291A4C2246EF67BCDC0E82AA139553D3	E2670ABF5F619890896EE79CC91E3909E9FDADBC3D836CB7E0AA8F367A45A2A8
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	6DAE572088DC040A52D48072E93D7CDF	9BA1F976F177E0270913E72FBA233B100AE08655	84D9856F9BF7C53070515D7461AEE6703595E52430B6961CDFCE86A90CF235BA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	57758A8BBB4BEDA4166FB1AB5608AE4E	BBFDF527CEF110603A04867269EA147BF74821DE	56A3BA35B3583F3B38E80F19B0284186DDB14D8201C0990974A3355D3AE666D4
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	BAC61DF2423CB6D1B5C29F0353AD3627	E4B681FB7A09AEFAAFE65ED33F57F5B475647CBE	061C96B96B63078E4C02CB0A387067886A150B61CE4E513240725737A5DD6201
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19	E97AC3D298170370E8FB12BEABF666BD	25E0401CB2FED6DC2F0A7A2CF98C70B9D3FAB18C	4F32729371BBBAED110598AF6864FE6D6F675A7AA03E04DDA9D68BF25E04ED1D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	F252EB7159E40F30229172ECFA00430C	B66AE1525FE8A02FFB8A55149928904827F1C8E6	C600A03206C7089990D0AECAC8D30B16C7B803906F855F7EAE465F5B9930CADA
C:\Users\user\AppData\Local\Temp\MSIca602.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	48F71D05330DE0888FC0FEB4B695533E	828A39B1F5A0CF0553DA61F519DB501B91C3D3B5	F618B4BC56E28AF8C91B3795AA4795DEA8FF23CA0A0C7E8992B03CF784F79741
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-07-03 12-38-37-307.log	ASCII text, with very long lines (393)	91F06491552FC977E9E8AF47786EE7C1	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	4C8B3DEB20D494B3BA5178A266772D35	2B4C9DEE305B887FCAE521D150A500138F0E68FF	138EF955A4D86DF8EC28B46FDCB8F93BB088EDD5D42FB7781B88E53253D95A8B
C:\Users\user\AppData\Local\Temp\acrocef_low\1b99201b-8af7-455f-8dd4-3fc756645268.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	1D64D25345DD73F100517644279994E6	DE807F82098D469302955DCBE1A963CD6E887737	0A05C4CE0C4D8527D79A3C9CEE2A8B73475F53E18544622E4656C598BC814DFC
C:\Users\user\AppData\Local\Temp\acrocef_low\788c6761-44af-4751-ac52-e876582ff0c5.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
C:\Users\user\AppData\Local\Temp\acrocef_low\a49b8e50-3f1c-496b-b294-8be05ace472a.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Local\Temp\acrocef_low\b1d9e918-8eb9-4ae5-8b6a-96fe3ed28d42.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	18E3D04537AF72FDBEB3760B2D10C80E	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4

There are no high impact signatures.

System Summary

Source: classification engine

Classification label: clean0.winPDF@18/40@0/48

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6256

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-07-03 12-38-37-307.log

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\a58.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1568,i,6199865999433682923,671851639167481023,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\System32\msiexec.exe C:\Windows\System32\MsiExec.exe -Embedding 91A1F1306CEAE1A320C2F380E0E7B8D9
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2108 --field-trial-handle=1568,i,6199865999433682923,671851639167481023,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: a58.pdf	Initial sample: PDF keyword /JS count = 0
Source: a58.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: a58.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Hooking and other Techniques for Hiding and Protection

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation