Windows Analysis Report
Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Overview

General Information

Sample name:	Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf
Analysis ID:	1542219
MD5:	3eeac61ae9da7c2d2084d0faba3be42e
SHA1:	e44d7bc5cb1440d56a55d34336b951ac0043d52d
SHA256:	ba8a07ae916344599fda196821b2521ac936e3e7ff3195061bbfb5706c25b2a7
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Potential document exploit detected (performs DNS queries)

Classification

Signatures

Potential document exploit detected (performs DNS queries)

Source: global traffic	DNS query: name: x1.i.lencr.org
Source: global traffic	DNS query: name: x1.i.lencr.org
Source: global traffic	DNS query: name: x1.i.lencr.org

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: x1.i.lencr.org

Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf	String found in binary or memory: http://ns.policyworks.com/SmartDocuments/2.0/
Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf	String found in binary or memory: http://www.pdf-tools.com
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/

Source: classification engine

Classification label: clean0.winPDF@14/43@3/0

Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Initial sample: http://www.pdf-tools.com\

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-25 11-03-20-192.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1648,i,14260087224443745936,13656865562564589586,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2088 --field-trial-handle=1648,i,14260087224443745936,13656865562564589586,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf	Initial sample: PDF keyword /JS count = 0
Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Initial sample: PDF keyword /Page count = 16

Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Initial sample: PDF keyword stream count = 61

Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Initial sample: PDF keyword obj count = 123

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

⊘No contacted IP infos

Contacted Domains

Name	IP	Active
x1.i.lencr.org	unknown	unknown

ID:	1542219
Product:	CloudBasic
Start time:	17:02:12
Start date:	25.10.2024
Sample:	Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	3eeac61ae9da7c2d2084d0faba3be42e
SHA1:	e44d7bc5cb1440d56a55d34336b951ac0043d52d
SHA256:	ba8a07ae916344599fda196821b2521ac936e3e7ff3195061bbfb5706c25b2a7
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	5C9D5C4052760A951960D34240370E6C	D3C39CD77D8C57798221E4B42881F99C982A75DE	E258BA28040D5EA9B4DF5E04D2DA7B161BA6609524CDA2B77C0B8B6C50FA36E7
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	5C9D5C4052760A951960D34240370E6C	D3C39CD77D8C57798221E4B42881F99C982A75DE	E258BA28040D5EA9B4DF5E04D2DA7B161BA6609524CDA2B77C0B8B6C50FA36E7
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	8E349486F934DA2FA0E609016E0B3EF4	3D7FBB6C32DB0D918785F7EC325DCA4A174F1B86	DA6C72BEE8C4FE90C220EB604ACD460752E117284358FB2F305D38635E55D09B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	8E349486F934DA2FA0E609016E0B3EF4	3D7FBB6C32DB0D918785F7EC325DCA4A174F1B86	DA6C72BEE8C4FE90C220EB604ACD460752E117284358FB2F305D38635E55D09B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\8c98ff50-e130-474d-bea7-ca56fea0e52e.tmp	JSON data	24AB171235194FB7386480CEF1E2977E	0F671571733CBD55F66D1D422BAC7190B84DAB46	D9B456F058F5627BC7A5B61FF905898A8F79C34F80BDB6A53D9C83DA61C8B497
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	24AB171235194FB7386480CEF1E2977E	0F671571733CBD55F66D1D422BAC7190B84DAB46	D9B456F058F5627BC7A5B61FF905898A8F79C34F80BDB6A53D9C83DA61C8B497
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	0D2563BBE6D26A686F3B085F449DF24C	B1871B40A31276595A89675CAC8082E1557951CA	2C464B8B0FCD966B3698AE2C6A34F3D162DA980BC062A6296692D4CB0B62A11A
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	9D54593A6F5730116C74E85752326EDA	9D695AE0D7D3ECCCE026BE23734B07FA8156CEDB	5C8E8C7CF0F2F8CF19CE1EEF01AE406B0CFA0A018D34C6F3638C470ECD482581
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	9D54593A6F5730116C74E85752326EDA	9D695AE0D7D3ECCCE026BE23734B07FA8156CEDB	5C8E8C7CF0F2F8CF19CE1EEF01AE406B0CFA0A018D34C6F3638C470ECD482581
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241025150322Z-171.bmp	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54	EE4187A8B79383624360F42AD45559BC	6761DF105612BC66A05DD941E034BB0F654984DD	EB8443C289D299FF764B3A29F538C696686DB62E331F5B6B7A36E52D0FEC83ED
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15	EB60BECA4639BA27A08E6E80A6C3FBA5	23053F1F0DE699F7C1DD0FE72F931CDA3E167A04	ED160B7309036A4555B4DEB6ED3B95A3884E7E631E8DCBB7BED7F4138C77F016
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	754073D00B94C907A8D5CB92D33ADA4F	F215924B7F944E04882FEB72F154F6D55BBB38E9	ED526B5054CF078204DC19604152BA9BA6D2A1FE2DB6FA76294CA49B8DE27556
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D	Certificate, Version=3	0CD2F9E0DA1773E9ED864DA5E370E74E	CABD2A79A1076A31F21D253635CB039D4329A5E8	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D	data	E69D5BD918BE9665278B99FD07431F99	904D8E6E05EA01CC75DE63BC1F4039CFEE741556	6FB32FB14A1508A6C3391DD5E77FC85C95A71D8055603879805EEEA5E8207341
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	F5567C4FF4AB049B696D3BE0DD72A793	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	84A078F5353A48539AA0EA0C08699D03	F2F8DD2963647A4225A8FABFA867A544A0CE30F8	FB7907C9E4D818D4677A30EF55A337DC5A28668F5FC2EFBDB3F517023F0AE9BA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	B06653893102187B84792CE2DDF131B5	D4A543AA4F39C2F0E79AB8321A31AAED4D60F1ED	2FFD7E11561949D0AF1B1AFDCF7AFC46852879657513623EFA3EDF0874A41F4C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	9695C41C92D91F755F42E35DBB859162	B3A87DBE2DD2348FA058085979E65491157D8FC2	C4CD3B4F22A95220970AC5F2586F736752B8B31A78C22A63D5BEDF3E88782BBF
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	3001BE137858FC693D1D70A8F2474E4B	8D7F79210412E75E8838A3687BE7341723DF1868	4CF06146E7048B7DD9730729624F116EC6737CF3C29F57E11985BE96B2ABBB37
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	F1D325F078E2530A95C89DCDD4CC2BF8	97A224AECB9DB66CD1E49ED48BD7FB60799C2A5F	23EB4590EE118946BD81162DE055FB7A9116D05FE1B05695242FC595970E4D82
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	C29552D441EE8260448E16A125C99E8E	4EADD8EEDB435D1F6D33598932D08FF918EB1825	18C1925DCA5B55708FF812D2152555274F63FEB7DB0502269EE4909A61A3431F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	D938EFE1D6012DEFF28F9995B032D017	726BC6A2942C7B8AC8F3B49226A3B3682989D3A2	286FFD71D7E35E4FCF7C981148403B2D09F107ABB169D4F47D99A834D7D86010
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	4D350DFF04EE98B4FCADFDBAD6CC3183	8A9C21FD310960D78B509AA2BF181DD5966A8054	B8C72FC986E860E55776C96296D48D31D075489B790A678434A4738D6C8F6DF6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	ADAB80C76A5A12E3E380974F31FD64A7	A2C52C1FB030F085EF546D3E1F53B7224CA3E0A2	938CFCD9FB6058F4B7F523B6FDDA7FB9BE9532E5971F909D7E58EA512A4BAC8F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	2FBCE431A3AED56EF24B46E9DEC3F95A	5012BB380B159C5191BA08C837F1D4E77D0C7132	90FD0FF0E8E084C824AE07AFFB501890F0829A4A561508C3E5D80BBCFF310762
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	37C27D1FB13F89C9BA979A75BAB6EBAA	BBD31EBF59C869BD04E62CFD14BA9697E7A78011	EF72CB2375D9411ABD174EA764DA8F08D8F50DB8F0E6F1FBF0293133A5D2BEE7
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	3A61F291393DCEA84C5313824A4A8901	A0007A670C6F8A2D4BC7D8DE284DC230E3C0683F	A142D830908594D4FBEEA895A23ACBE881DEF03263FC55F265B1B47BE1ECA8C3
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	8ACD7DEDDB1DA7C1E396EAE8A34D0951	E20D5E46D807489E7398323CD77B34883B896B96	8FFE59B1CE79DDCFBB48160317752A7B49E4C7856FF3134A3A5C8BBF29B61FAB
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	188A80ECCF9B60B7A843EA970BC26EF0	1F0BE27AAC1AB0B8F2C132E9E50E52634A0DB436	A702671B6963A58BC4758A728748800DF74B64685A7B3CE746F910C06859A064
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	9B0D035A04629A9847C0C62160FEC7AA	51967C83EC10526E744BBC982B0A96DD0C6E3440	B3993C7A7F025F7D88E0C652233BDA38ABCECC955F3209E5F5DD6ACA795E761A
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	6C1C28C06EB909CBC063D1D63B34F971	57C108FA520083F887B7C8215A5C698606F4D922	A792820A0A24D52642D9360CEA6F6EA644AFB23D4645FEFCCA06140EA3A93AA4
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	A2F655BA3FD646D7D9819ADDAAD2220C	D3FA4F476E0C2935019527A0556CA892D3B71825	3C050FA6AB12F5A00A611D32FDD469DBB5838B288A581A520EAA813A85B17714
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25	27E88F037228345D47A80E4CFFDE1F84	EE552FAB21E80A53582876D28B14877DE6B24149	044D53EC99E7155A3B677814A4A11222AA77B8B8018B22FC569E4197D188787C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	C15F3420EEA50D9F0A7665AFBD1A8734	AE33B9C854A12753BEFD6F2BE75A5CB930D9D342	C861435701883D599FCA409F7134B58B8FD487FA58F4D7B120AB1DFA6F3488B0
C:\Users\user\AppData\Local\Temp\MSIb2947.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	B3CF025B7520DE3BBCE43561F9C3B406	FC33C8771172CE4170B330B9310A560DA9A87D2A	ECC68E77E4A0EFDB8EE20CFCA1F1BBD0FF8DDDD5293C6DD7B94329D14B30FF5A
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-25 11-03-20-192.log	ASCII text, with very long lines (393)	8947C10F5AB6CFFFAE64BCA79B5A0BE3	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	2C44B87894D137DB5C68FEF10ED3052E	0693EDA52371EE2E6265D56F81291384DA69E700	AE3FAB0A4F78CC7BE531611D37F8ECF32A54F888E79D79A7DFB067D8DDC389E2
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	5A7653393923657B59EA59BFE87371BB	B9933773184A692D5800B85F80362EA1F93FEDC7	03BAACD61B8E742CD81012CB21A38F362D8F879F2A70816E1E29C8C992DD39E6
C:\Users\user\AppData\Local\Temp\acrocef_low\7ff66f03-6423-4899-a762-61c50eeed922.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
C:\Users\user\AppData\Local\Temp\acrocef_low\ac494246-235e-42b1-92e9-b43c342e82b6.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	716C2C392DCD15C95BBD760EEBABFCD0	4B4CE9C6AED6A7F809236B2DAFA9987CA886E603	DD3E6CFC38DA1B30D5250B132388EF73536D00628267E7F9C7E21603388724D8
C:\Users\user\AppData\Local\Temp\acrocef_low\f0afb215-7c77-4451-b5ba-70d335518a9c.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	1F3D69524A9D7E17BD2363C81D130F1A	C2A4A08839CBA47BEE2B601975F7C4F0CC191091	D0FFBEC8502A0BE88A99F6708987658FEBE4CF3B6B79AF219C53EFF6458F9D9D
C:\Users\user\AppData\Local\Temp\acrocef_low\f0b29596-fd3b-47d6-91d3-dbb841e88651.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B

Windows Analysis Report
Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Contacted Domains

Windows Analysis Report Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Contacted Domains

Windows Analysis Report
Dr. Lindsay Chropractic Corporation Spine Fit Rehab & Wellness (24-10-2024 - Submission).pdf