Windows Analysis Report
Coca cola Cooler Confirmation Needed.pdf

Overview

General Information

Sample name:	Coca cola Cooler Confirmation Needed.pdf
Analysis ID:	1531356
MD5:	8b940dcbc76ff901f2fde271632918d2
SHA1:	2b8918245e7f4d02b73ccb36386765b2346d28e4
SHA256:	dd9ed9f0630fa091598320e760ef759b5605761703e7a4131e9351fa09633ba0

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Potential document exploit detected (performs DNS queries)

Potential document exploit detected (performs HTTP gets)

Potential document exploit detected (unknown TCP traffic)

Classification

Signatures

Potential document exploit detected (performs DNS queries)

Source: global traffic

DNS query: name: chrome.cloudflare-dns.com

Potential document exploit detected (performs HTTP gets)

Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443

Potential document exploit detected (unknown TCP traffic)

Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49713
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49714
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49713
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49714
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49713
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49714
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49714
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49714
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 192.168.2.16:49714 -> 172.64.41.3:443
Source: global traffic	TCP traffic: 172.64.41.3:443 -> 192.168.2.16:49713
Source: global traffic	TCP traffic: 192.168.2.16:49713 -> 172.64.41.3:443

Source: unknown

UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: chrome.cloudflare-dns.com

Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713

Source: classification engine

Classification label: clean1.winPDF@17/32@1/10

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6940

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-10 23-26-28-559.log

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Coca cola Cooler Confirmation Needed.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2136 --field-trial-handle=1556,i,17739092807775853688,7781390873827754800,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\System32\msiexec.exe C:\Windows\System32\MsiExec.exe -Embedding B4426BCB0A38A478D0244B4B4270D38D
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2136 --field-trial-handle=1556,i,17739092807775853688,7781390873827754800,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown

Source: Coca cola Cooler Confirmation Needed.pdf	Initial sample: PDF keyword /JS count = 0
Source: Coca cola Cooler Confirmation Needed.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Coca cola Cooler Confirmation Needed.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX

Screenshots

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
23.215.23.211	unknown	United States	20940	AKAMAI-ASN1EU	false
52.5.13.197	unknown	United States	14618	AMAZON-AESUS	false
172.64.41.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false

Contacted Domains

Name	IP	Active
chrome.cloudflare-dns.com	172.64.41.3	true

ID:	1531356
Product:	CloudBasic
Start time:	05:25:51
Start date:	11.10.2024
Sample:	Coca cola Cooler Confirmation Needed.pdf
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	8b940dcbc76ff901f2fde271632918d2
SHA1:	2b8918245e7f4d02b73ccb36386765b2346d28e4
SHA256:	dd9ed9f0630fa091598320e760ef759b5605761703e7a4131e9351fa09633ba0
Filetype:	Adobe Portable Document Format (5005/1) 99.96%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	BD7B0809FC9602C3097BEA5B24E6CAAF	EBBD5F5F0F4847AA5350B02E209CFD2409B47E7C	F758738E88F7B6A3FD0AF3F1BA3D09091C372B4BE6CB3400C09ED6AAD0007CEA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	BD7B0809FC9602C3097BEA5B24E6CAAF	EBBD5F5F0F4847AA5350B02E209CFD2409B47E7C	F758738E88F7B6A3FD0AF3F1BA3D09091C372B4BE6CB3400C09ED6AAD0007CEA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	3338C2EF6530AEAA5A916CB03376EE83	972021186A4F4FDE406F9BB84C26D05E6E7C1495	D633BEB7B0C9CA38D204DF5E43CD47F978B2C4F6EB62D93141591592A98AB27F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	3338C2EF6530AEAA5A916CB03376EE83	972021186A4F4FDE406F9BB84C26D05E6E7C1495	D633BEB7B0C9CA38D204DF5E43CD47F978B2C4F6EB62D93141591592A98AB27F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	F7734C5562A331E7E5AD650E528B9CCE	1F2AC5AC6B7E30E317FD8F653B1C78339248DB12	C55A12976D4F8EC2298956E7A1024E79A8A0E8E2FB0A7F574E8CD01533B9B6C0
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\d4a49df4-bb75-4fae-967f-9e3a602ba56f.tmp	JSON data	F7734C5562A331E7E5AD650E528B9CCE	1F2AC5AC6B7E30E317FD8F653B1C78339248DB12	C55A12976D4F8EC2298956E7A1024E79A8A0E8E2FB0A7F574E8CD01533B9B6C0
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	93AA4911C31E2F06671743A29A27C0D5	9066EE7392E2D00669CB2DD434BBF5A16E0B092A	24701CA67DAB349B2FF75B04EE398CACF66665DD6C5B0453F56D5D7104AAD17F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	A99650A85EDC3DB52B69E11E359B3C0C	BB21A3B1B6ACA60715B242F1EEE2CD20D11E46A2	1E752E6A59DABAAFB87B476BF47752EBCC67D9AF238CADD94F1EE868C6E674F1
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	A99650A85EDC3DB52B69E11E359B3C0C	BB21A3B1B6ACA60715B242F1EEE2CD20D11E46A2	1E752E6A59DABAAFB87B476BF47752EBCC67D9AF238CADD94F1EE868C6E674F1
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6940	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	265E3E1166312A864FB63291EA661C6A	80DFF3187FF929596EB22E1DB9021BAD6F97178C	C13E08B1887A4E44DC39609D7234E8D732A6BC11313B55D6F4ECFB060CD87728
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	431788D48887FD96F7A58F71D35A249A	6A9E186A3C59D5FC9BE10D16C730DB9567A8CFEB	E3BAB26F46DB8CBBC28BF359864E3A1524852A4DF19042DDCA85DF756B50EF62
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	01DF2FC1D70D0A9A789A43A300944883	50BA034EAD5A2CA2224B001471C42624F0C27BCD	C03675F61EC44E06EC51454A38A5011708494C5BBBEAB9DA16DC765BDF1376BA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	8735B2FB7D50873FE879A0ECBF0E7F95	51D2579D285069AD8937370DB1C7839A4EC5F5DA	A9D202DB48B017640AF01C3C2F16B22352C08637A8FAEE4D8A20D6FE2B04B492
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	1C6AACEA66227DDA5186FB86D66BA026	24A82C74F7003A308CB68324EC64E9099575A2E3	CDCB240535E5873D76F5788913D16CC8D05A8945EB524B7FB54AB5CB21786C5C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	E8E2F7B292B2201EC2919F3988BAF7FD	20A0ACDBD32FEB67174152FF70FE75B2FD24D6D2	812D4C0424D943C972583ABE8BAC738549F4921F612389E2B44B0347CD785F53
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	307CF501CB83BE6223246D45658B9777	1A035788018A6E838B20785CA114D28FDA5E7B31	A4BDB385DC4EDA56EF288779A89007D083E0E3F6AB921B046D48F89C28BA3D36
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	8563C5E90B6C86AFD7971D616625D095	096F08E5BA25A06CDC95534DE594294F97231EA4	B73D3368FA749FC6B470C5ECE9ADC95E65BD3E77DD0F66B8894B1CC23C461667
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	2904D80B26BD1DC9F3800FD4E84CE435	60379C551848D7D63C8F42E7C47BC872E4F6A63A	9D4C8EB820FCD924FD2638547C6068116D5F37D1E97BC999893B7991375271E8
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	00C3A4F7FD4418C44311D240ABA0249E	BDEC0E40906E55DFE2617659CA3F41B552F2E8F7	62F99C5D179D1618C6909B76A97ACB3F7ACC80CAC1A9715AD6F6427BD7908392
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	D4F37A121DA896BA541021193CF55665	10CEF4401C47A7098C730098B31805C2CCBF78ED	20A8599B2C4EE929B504D023BC84FA4CF13AE20DB06FD188997CF55A959E071F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	D6517AAE13E74E794546AAC3B8841A0F	B6FB8A998D8D9A0EF1FFB7B99B9A84210D823922	C657E6D4AF4C11B4F4E5EB180B4D2C429F3108296498F5C82133BF2FD05B0ACE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	D51CCDA2F1BF9FA9B948B31D2FD580C3	7958BB5C3B8F83395DCAC31DC2E23DD2E0DAF4F8	0B8D046699427E69E0BAF241860F301220AD29EDBE2AE2F953A0B6D41D79EEAB
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	32B04002DF1869F82CFA95319298448C	748DF260E63E4208799FEF9682D6BE397BFECA86	E2167CE7FAA4A9608AD1F4A1100F003F87921110FA415A3273A6C813671CFBE6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	DA3786C3F2ADFB1C149E6366AB1A2219	0E16D7F853820E3D7B800B4F450FDB4970C69BA7	B453CD10445B7EF66443ADC07CC675600EE38BE7062472D09D98DD14086027C2
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	059BEC4E5A2FA1A564903057ED522C84	1806DE8755320279AF3DDA688B83BAD868BB9021	A5905A635815AB3FFAC5009A46D13BAEAF4FE45B4402A71C4E89CD310F974A27
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	2B1F9F43943B75B9EED60C213928F3F7	4124AD8C1CC4A6E451B880681D965A14C9E3A698	AD71F39DF8357884CD8E9DF643D764AD0B4872AF86CB2E9A199D1356C0D980E5
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	81146A65F8F03C0BEFAB10BB38A31C13	D7EA6F23199423B4BA998367918E4B0673D7EF69	422A18983DB60F278A68F99FD13127C748E08154646F83BB543B5AD404F4E69F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19	EF4B6E97445C9AA4EEC4149D40AFC814	9B056728A5435D3741432292ED837A2F33972660	1FD131620DEE964B18915A83A2C0A1FBBFAB91CB4FBE44869A97F6937EC323FE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	69EEF632ECFB0232B712653365D8D638	A2AD5AD643A4E0A2A0A2F65BB354E98F8D3DF2E6	60244F018043CDBC3BA5A58419A3BA3DE8F78A82E9C4CFB13BD3A572EE0ABEF0
C:\Users\user\AppData\Local\Temp\MSIf6e.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	FEE282801805F4D734E451E08D1517C7	23F30AF7FC28DAFF3F137C82E79398D0B92A36AB	B3115E512D877410DBBAE83AA037C9C5B761E1C8A5094826F758AA847F7FA633
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-10 23-26-28-559.log	ASCII text, with very long lines (393)	91F06491552FC977E9E8AF47786EE7C1	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	F5DF98FFCE8FBD19BEE28ED44D43A70B	C621A0BC5CDC8A1932FF3F5583CD15726E3DD55A	955D45715F6E2129816F159BC7F48F2E78427938BC818AE1177FFE4F5C7FE92D
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	3283F03EA01D4D513D98EBD20DBC5985	8ABE23E4284F7760E3F96B86C639C6284A50D4DB	DE8E3149F2A6467579665DDFFAAA30313E7BFED9E5CDC1F9547DFB53C56C8378

Windows Analysis Report
Coca cola Cooler Confirmation Needed.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Network Map

Contacted Public IPs

Contacted Domains

Windows Analysis Report Coca cola Cooler Confirmation Needed.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Network Map

Contacted Public IPs

Contacted Domains

Windows Analysis Report
Coca cola Cooler Confirmation Needed.pdf