IOC Report
https://u4715530.ct.sendgrid.net/ls/click?upn=u001.8On2-2FATbCeDrjpSTA1x6InNAdWLbBvH-2BLecrnkhaC5eD1jhN3DzzdVBWqco-2BgafeRGiX2oEs3-2F7vWi4JNCXxFEGyI-2F-2BN1oqfVjFYexZLdgg0yUOvDtNP9dYibkYzFMtHklCg5Xuqp6d4mlFCmbaYKuRJ103scz4BiLEONJXaOxE-3DLzHD_FEdCqlkKbDaN3tv3SjfSO5a56957PkM5AWNnNcK4qwUJgVgLM-2BewoFfz

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\0e8472b7-97dd-4c09-957d-fc61fe5b7e3b.tmp
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\926c1319-184a-4acd-a36f-4cf186403201.tmp
JSON data
modified
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF650e0e.TMP (copy)
JSON data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log
data
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)
ASCII text
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241125174233Z-209.bmp
PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
dropped
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D
Certificate, Version=3
dropped
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6556
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.6556
PostScript document text
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING
data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json
JSON data
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents
SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal
SQLite Rollback Journal
dropped
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin
data
dropped
C:\Users\user\AppData\Local\Temp\MSI4c935.LOG
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-11-25 12-42-30-878.log
ASCII text, with very long lines (393)
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log
ASCII text, with very long lines (393), with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt
ASCII text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\34855b9b-53c4-4387-93e6-4cefafa388b7.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\d448a07d-aa23-4dc7-99d0-e9f4d50385ac.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\d865eb92-bd4f-4642-8358-fca3b0b9ea36.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
dropped
C:\Users\user\AppData\Local\Temp\acrocef_low\fa56dd28-47ec-4090-a237-8d9bfbfe2b7a.tmp
gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
dropped
C:\Users\user\Downloads\238b5cbe-11a2-40f6-8fd9-fc395d501e96.tmp
PDF document, version 1.6 (zip deflate encoded)
dropped
C:\Users\user\Downloads\3dc22a89-3e4f-45c9-9ee4-eff24fd7b3e6.tmp
PDF document, version 1.6 (zip deflate encoded)
dropped
C:\Users\user\Downloads\downloaded.pdf (copy)
PDF document, version 1.6 (zip deflate encoded)
dropped
C:\Users\user\Downloads\downloaded.pdf.crdownload
PDF document, version 1.6 (zip deflate encoded)
dropped
Chrome Cache Entry: 199
PDF document, version 1.6 (zip deflate encoded)
downloaded
Chrome Cache Entry: 200
HTML document, Unicode text, UTF-8 text, with very long lines (7862), with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 201
HTML document, Unicode text, UTF-8 text, with very long lines (7862), with CRLF, LF line terminators
dropped
There are 33 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2004,i,15130477527167022180,2649352731401562040,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u4715530.ct.sendgrid.net/ls/click?upn=u001.8On2-2FATbCeDrjpSTA1x6InNAdWLbBvH-2BLecrnkhaC5eD1jhN3DzzdVBWqco-2BgafeRGiX2oEs3-2F7vWi4JNCXxFEGyI-2F-2BN1oqfVjFYexZLdgg0yUOvDtNP9dYibkYzFMtHklCg5Xuqp6d4mlFCmbaYKuRJ103scz4BiLEONJXaOxE-3DLzHD_FEdCqlkKbDaN3tv3SjfSO5a56957PkM5AWNnNcK4qwUJgVgLM-2BewoFfzyv6u8yTlOxhHXMQz2dMtreHFiiouT7Ttns8-2FHBceTfbvt09ViVR3KqIrZGqoLhm4zD10aKJw-2Bi6jFLgMiPt0-2FUgVp-2FsUWSEC-2BFuQvh9r2DMtvzn180-2Fjl17jWbDtJUxLzkd2zA8hhRDA1OaHlUiIPMA1qYeXc6-2FPPBJpmdqRt5cIACNZIWKlH5uGSQ7BmayWNhke0W280pseRYmyN62-2BtMKJPuVEUBGfuZsQ4gifSKcVUBPUuPONFVs5kNq0SLx1tOytPxjiS0UzgvFvFizAQLvvrnD-2BeDir77DT38-2F5Mv6Ruvjp0He2Fakx0XJVnLkvz33frxNy8hPfAqf-2BkYV5nqJ525P6xV-2FWiyWALk2fbxl6UaYUk-2FwTsmEtnHcgKegYMAZ6-2FW-2Bw"
C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\downloaded.pdf"
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2096 --field-trial-handle=1560,i,13161102386040872273,15274939393762019206,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8

URLs

Name
IP
Malicious
https://u4715530.ct.sendgrid.net/ls/click?upn=u001.8On2-2FATbCeDrjpSTA1x6InNAdWLbBvH-2BLecrnkhaC5eD1jhN3DzzdVBWqco-2BgafeRGiX2oEs3-2F7vWi4JNCXxFEGyI-2F-2BN1oqfVjFYexZLdgg0yUOvDtNP9dYibkYzFMtHklCg5Xuqp6d4mlFCmbaYKuRJ103scz4BiLEONJXaOxE-3DLzHD_FEdCqlkKbDaN3tv3SjfSO5a56957PkM5AWNnNcK4qwUJgVgLM-2BewoFfzyv6u8yTlOxhHXMQz2dMtreHFiiouT7Ttns8-2FHBceTfbvt09ViVR3KqIrZGqoLhm4zD10aKJw-2Bi6jFLgMiPt0-2FUgVp-2FsUWSEC-2BFuQvh9r2DMtvzn180-2Fjl17jWbDtJUxLzkd2zA8hhRDA1OaHlUiIPMA1qYeXc6-2FPPBJpmdqRt5cIACNZIWKlH5uGSQ7BmayWNhke0W280pseRYmyN62-2BtMKJPuVEUBGfuZsQ4gifSKcVUBPUuPONFVs5kNq0SLx1tOytPxjiS0UzgvFvFizAQLvvrnD-2BeDir77DT38-2F5Mv6Ruvjp0He2Fakx0XJVnLkvz33frxNy8hPfAqf-2BkYV5nqJ525P6xV-2FWiyWALk2fbxl6UaYUk-2FwTsmEtnHcgKegYMAZ6-2FW-2Bw
https://azre.gov/sites/all/modules/contrib/jquery_update/js/jquery_browser.js?v=0.0.1
unknown
https://azre.gov/sites/all/themes/bootstrap/js/misc/ajax.js?sliziu
unknown
https://azre.gov/sites/all/themes/az_gov/css/min-768.css?sliziu
unknown
https://maps.google.com/maps?q=arizona%20department%20of%20real%20estate&t=&z=15&ie=UTF8&iwloc=&outp
unknown
https://cdn.jsdelivr.net/npm/bootstrap
unknown
https://azre.gov/modules/node/node.css?sliziu
unknown
https://services.azre.gov/publicdatabase/messagecenter/createmessage.aspx?subjectid=16
unknown
https://azre.gov/misc/jquery.once.js?v=1.2
unknown
https://azre.gov/
104.16.139.40
https://azre.gov/sites/all/themes/bootstrap/js/misc/_progress.js?v=7.99
unknown
https://azre.gov/mexico-landing
unknown
https://azre.gov/sites/all/themes/az_gov/css/contextual.css?sliziu
unknown
https://azre.gov/sites/default/files/styles/slideshow_image/public/slideshow/980982_m_WEB.jpg?itok=G
unknown
https://azre.gov/sites/all/themes/az_branded/js/global.js?sliziu
unknown
https://azsos.gov/elections/voters/register-vote-update-voter-information/registerupdate-vote/
unknown
https://u4715530.ct.sendgrid.net/ls/click?upn=u001.8On2-2FATbCeDrjpSTA1x6InNAdWLbBvH-2BLecrnkhaC5eD1jhN3DzzdVBWqco-2BgafeRGiX2oEs3-2F7vWi4JNCXxFEGyI-2F-2BN1oqfVjFYexZLdgg0yUOvDtNP9dYibkYzFMtHklCg5Xuqp6d4mlFCmbaYKuRJ103scz4BiLEONJXaOxE-3DLzHD_FEdCqlkKbDaN3tv3SjfSO5a56957PkM5AWNnNcK4qwUJgVgLM-2BewoFfzyv6u8yTlOxhHXMQz2dMtreHFiiouT7Ttns8-2FHBceTfbvt09ViVR3KqIrZGqoLhm4zD10aKJw-2Bi6jFLgMiPt0-2FUgVp-2FsUWSEC-2BFuQvh9r2DMtvzn180-2Fjl17jWbDtJUxLzkd2zA8hhRDA1OaHlUiIPMA1qYeXc6-2FPPBJpmdqRt5cIACNZIWKlH5uGSQ7BmayWNhke0W280pseRYmyN62-2BtMKJPuVEUBGfuZsQ4gifSKcVUBPUuPONFVs5kNq0SLx1tOytPxjiS0UzgvFvFizAQLvvrnD-2BeDir77DT38-2F5Mv6Ruvjp0He2Fakx0XJVnLkvz33frxNy8hPfAqf-2BkYV5nqJ525P6xV-2FWiyWALk2fbxl6UaYUk-2FwTsmEtnHcgKegYMAZ6-2FW-2Bw
167.89.118.35
https://static.az.gov/sliver/css/sliver.css
unknown
https://azre.gov/sites/all/themes/az_gov/css/min-920.css?sliziu
unknown
https://azre.gov/sites/all/themes/az_gov/css/nodes.css?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/jquery_update/js/jquery_update.js?v=0.0.1
unknown
https://ptl.az.gov/dre/
unknown
https://azre.gov/sites/default/files/Arizona-ADRE2.png
unknown
https://azre.gov/favicon.ico
104.16.139.40
https://azre.gov/sites/default/files/styles/slideshow_image/public/slideshow/AZRE_welcome.jpg?itok=K
unknown
https://azre.gov/sites/all/themes/az_gov/css/min-600.css?sliziu
unknown
https://azre.gov/sites/default/files/79180122_s.jpg
unknown
http://www.azoca.gov/
unknown
https://azre.gov/sites/all/themes/az_gov/js/accessibility.js?sliziu
unknown
https://azre.gov/sites/default/files/Selection_002.png
unknown
https://services.azre.gov/publicdatabase/SearchInstructors.aspx
unknown
https://azre.gov/misc/form-single-submit.js?v=7.99
unknown
https://azre.gov/sites/all/themes/az_branded/css/branded-global.css?sliziu
unknown
https://azre.gov/licensees/recent-disciplinary-actions
unknown
https://azre.gov/misc/jquery-extend-3.4.0.js?v=2.2.4
unknown
https://www.drupal.org)
unknown
https://azre.gov/sites/all/libraries/jquery.cycle/jquery.cycle.all.js?sliziu
unknown
https://azre.gov/sites/all/themes/az_gov/css/az-gov.css?sliziu
unknown
https://azre.gov/sites/all/themes/az_branded/css/branded-nodes.css?sliziu
unknown
https://azre.gov/sites/all/themes/az_gov/css/global.css?sliziu
unknown
https://azre.gov/sites/default/files/Selection_001.png
unknown
https://azre.gov/sites/all/modules/contrib/colorbox/styles/default/colorbox_style.css?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/colorbox/styles/default/colorbox_style.js?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/views/js/base.js?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/colorbox/js/colorbox_load.js?sliziu
unknown
https://azre.gov/sites/default/files/styles/slideshow_image/public/slideshow/40629944_m_WEB%20copy.j
unknown
https://services.azre.gov/publicdatabase/SearchEntities.aspx
unknown
https://azre.gov/forms
unknown
https://azre.gov/sites/all/modules/custom/az_site_sliver/css/sliver.css?sliziu
unknown
https://azre.gov/sites/default/files/css_injector/css_injector_3.css?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/jquery_update/replace/jquery.form/4/jquery.form.min.js?v=
unknown
https://ptl.az.gov/app/dre/
unknown
https://services.azre.gov/publicdatabase/messagecenter/createmessage.aspx?subjectid=41
unknown
https://azre.gov/consumers/topics-research-purchasing-real-estate
unknown
https://azre.gov/sites/all/libraries/colorbox/jquery.colorbox-min.js?sliziu
unknown
https://azre.gov/modules/system/system.base.css?sliziu
unknown
https://azre.gov/sites/default/files/hp-consumers-box.jpg
unknown
https://static.az.gov/sliver/js/sliver.js
unknown
https://azre.gov/sites/default/files/css_injector/css_injector_2.css?sliziu
unknown
https://azre.gov/sites/default/files/styles/slideshow_image/public/slideshow/AZRE_FAQS_0.jpg?itok=Od
unknown
https://azre.gov/fees
unknown
https://azre.gov/misc/jquery-html-prefilter-3.5.0-backport.js?v=2.2.4
unknown
https://azre.gov/sites/default/files/css_injector/css_injector_1.css?sliziu
unknown
https://azre.gov/sites/all/themes/az_branded/css/branded-min-768.css?sliziu
unknown
https://services.azre.gov/publicdatabase/messagecenter/createmessage.aspx?subjectid=32
unknown
https://azre.gov/misc/ajax.js?v=7.99
unknown
https://azre.gov/sites/all/modules/custom/wysiwyg_accordion/wysiwyg_accordion.css?sliziu
unknown
https://azre.gov/misc/drupal.js?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/field_slideshow/field_slideshow.css?sliziu
unknown
https://cdn.jsdelivr.net/npm/
unknown
https://azre.gov/sites/all/modules/contrib/colorbox/js/colorbox.js?sliziu
unknown
https://azre.gov/news/firewise-arizona-water-and-deed-fraud-new-continuing-education-hours-requireme
unknown
https://azre.gov/sites/all/themes/az_gov/css/colors.css?sliziu
unknown
https://services.azre.gov/publicdatabase/SearchIndividuals.aspx
unknown
https://azre.gov/message-center
unknown
https://azre.gov/sites/all/modules/contrib/ctools/css/ctools.css?sliziu
unknown
https://azre.gov/sites/default/files/styles/slideshow_image/public/slideshow/IMPORTANT%21.jpg?itok=t
unknown
https://azre.gov/sites/default/files/20241120%20-%20Final%20Draft%20-%20Approved%20by%20Governor%27s%20Office.pdf
https://services.azre.gov/publicdatabase/SearchSchools.aspx
unknown
https://azre.gov/sites/all/themes/bootstrap/js/bootstrap.js?sliziu
unknown
https://az.gov
unknown
https://azre.gov/sites/all/modules/contrib/views/css/views.css?sliziu
unknown
https://azre.gov/sites/default/files/Selection_003.png
unknown
https://www.azstatejobs.gov/jobs/search
unknown
https://azre.gov/sites/all/themes/az_gov/css/reset.css?sliziu
unknown
file:///C:/Users/user/Downloads/downloaded.pdf
https://azre.gov/sites/default/files/js_injector/js_injector_3.js?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/media/modules/media_wysiwyg/css/media_wysiwyg.base.css?sl
unknown
https://cdn.jsdelivr.net/html5shiv/3.7.3/html5shiv-printshiv.min.js
unknown
https://azre.gov/veteran-active-duty
unknown
https://azre.gov/consumer-advisory-buyer-broker-agreements
unknown
https://azre.gov/sites/all/modules/custom/wysiwyg_accordion/wysiwyg_accordion.js?sliziu
unknown
https://azre.gov/sites/all/modules/contrib/extlink/extlink.css?sliziu
unknown
https://openbooks.az.gov/
unknown
http://x1.i.lencr.org/
unknown
https://azre.gov/sites/all/themes/bootstrap/js/modules/views/js/ajax_view.js?sliziu
unknown
https://azre.gov/sites/default/files/20240710%20-%20FY24%20Occupational%20License%20Predetermination
unknown
https://www.google.com/maps/place/Arizona
unknown
https://services.azre.gov/OesWeb/Account/Login
unknown
https://azre.gov/water-resources-and-information
unknown
https://azre.gov/sites/all/modules/contrib/extlink/extlink.js?sliziu
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
azre.gov
104.16.139.40
www.google.com
142.250.181.68
x1.i.lencr.org
unknown
u4715530.ct.sendgrid.net
unknown

IPs

IP
Domain
Country
Malicious
52.202.204.11
unknown
United States
104.16.139.40
azre.gov
United States
192.168.2.4
unknown
unknown
167.89.118.35
unknown
United States
239.255.255.250
unknown
Reserved
142.250.181.68
www.google.com
United States
96.17.64.171
unknown
United States

Registry

Path
Value
Malicious
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
aFS
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tDIText
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tFileName
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
tFileSource
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sFileAncestors
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sDI
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sDate
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
uFileSize
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
uPageCount
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
sAssetId
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c1
bisSharedFile
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
aFS
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
tDIText
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
tFileName
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sDI
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
sDate
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
uFileSize
HKEY_CURRENT_USER\SOFTWARE\Adobe\Adobe Acrobat\DC\AVGeneral\cRecentFiles\c2
uPageCount
There are 8 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://azre.gov/sites/default/files/20241120%20-%20Final%20Draft%20-%20Approved%20by%20Governor%27s%20Office.pdf
file:///C:/Users/user/Downloads/downloaded.pdf
file:///C:/Users/user/Downloads/downloaded.pdf