Windows Analysis Report
Document 35405 (2).pdf

Overview

General Information

Sample name:	Document 35405 (2).pdf
Analysis ID:	1419161
MD5:	4ff9fae10d7736c3572aa9e790956a1f
SHA1:	38b58154a27f443d3ee999e492ab25bd5cb3d5f2
SHA256:	366cf33daf5f3807960a5c3120a793385a038b40483c593c8f3e971879b01c20
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: classification engine

Classification label: clean0.winPDF@14/42@0/0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-03 08-08-19-922.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Document 35405 (2).pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1736,i,14820674299548041102,12000682537271802868,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1736,i,14820674299548041102,12000682537271802868,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Document 35405 (2).pdf	Initial sample: PDF keyword /JS count = 0
Source: Document 35405 (2).pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A915qv0id_1cblpso_4co.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A915qv0id_1cblpso_4co.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: Document 35405 (2).pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Document 35405 (2).pdf

Initial sample: PDF keyword obj count = 60

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

⊘No contacted IP infos

ID:	1419161
Product:	CloudBasic
Start time:	08:07:32
Start date:	03.04.2024
Sample:	Document 35405 (2).pdf
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	4ff9fae10d7736c3572aa9e790956a1f
SHA1:	38b58154a27f443d3ee999e492ab25bd5cb3d5f2
SHA256:	366cf33daf5f3807960a5c3120a793385a038b40483c593c8f3e971879b01c20
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	1586AA8BD555878247B5DB68D2015F66	C80314FD894F65ECD01B8E966D53F0C000307904	517B71E3C0A119E04DDDD479F9BDD01AE39EB218004E8218DE812A8B2D914790
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	1586AA8BD555878247B5DB68D2015F66	C80314FD894F65ECD01B8E966D53F0C000307904	517B71E3C0A119E04DDDD479F9BDD01AE39EB218004E8218DE812A8B2D914790
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	9E3DB1B2BCA4036619CA0FB0DBAD8C25	C51C05CA6C62947B775024A0A4B463896ACE39E4	7039BBF8D6AF5395F5A9D86365D217A8ED2D24DBC6A58AE2E84287CFC3028202
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	9E3DB1B2BCA4036619CA0FB0DBAD8C25	C51C05CA6C62947B775024A0A4B463896ACE39E4	7039BBF8D6AF5395F5A9D86365D217A8ED2D24DBC6A58AE2E84287CFC3028202
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	0B5BEDAE031DB562F5A33E559964169C	BF86FB30E89793745AB58EDC81001166E29505FD	D9848448A949058EC14A9E51B0F84109C7D1BB68C6F2049EB6806A5D0B818055
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\aa63cbc8-6676-4579-b62a-474db838b9af.tmp	JSON data	0B5BEDAE031DB562F5A33E559964169C	BF86FB30E89793745AB58EDC81001166E29505FD	D9848448A949058EC14A9E51B0F84109C7D1BB68C6F2049EB6806A5D0B818055
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	A5B850C310B32743A2ACB14AACC11C41	B210DD9A748E9158A1BA472D83D11BC0382D7EE7	B4B63E7CCC9995189DACB23AF1F93C879C6C9BC6C3CE7CC2280C8621FD48069E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	CD7AF09DE1178F21DD2888CEC284E9C4	CFFE6033A4FA09CBB4DF00FE314D1B14CB897520	F9F10AD9A4C9BDF1828F8C655BEB50C16B3C3C6CBF965A9BE1531125C350C3C0
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	CD7AF09DE1178F21DD2888CEC284E9C4	CFFE6033A4FA09CBB4DF00FE314D1B14CB897520	F9F10AD9A4C9BDF1828F8C655BEB50C16B3C3C6CBF965A9BE1531125C350C3C0
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240403060821Z-155.bmp	PC bitmap, Windows 3.x format, 107 x -152 x 32, cbSize 65110, bits offset 54	033F4032395A1D74208179F7FA73E311	C3B795776DE57D3D4E8C1FA1E104D3B62BB2B736	237829B14154F7621EDB8A3C747834CE4ADF007D29A5E17AD51AEB3F9A86C8B0
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.5640	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	87EDBEE38F56C20298F25D5D3D4D1B5C	7F904E9615AC3186A87472EF366DD8202855B0B7	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	2946635432A28931D8C4A2A18C4C0F5D	FE5D87598D513FE717B2B79056C73362B0D024EA	B8ED97C58915FE5A8C7C655333BAD44C5C4963CDD78A5F16D603A039F269EA51
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	990F43CED77EDC8FCC4CBB0767942597	F1A3AE3C2D43BAA78998E1C4A035C83D8E58C1EC	D7456AE71B4F5CFD65FF1E6C75EEC7BBC99C5803F8BB259C4F5D1BBEDF242203
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	B652946F68EDF9F82475F33AB50DEBD5	8E5A13FA979A0E3FDDCEEEECCA7DA0934DF1A824	0E6781D9685E6CA43321C57ACC68457E9488C8F76A63534F598DA2C809AFDEB0
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	611FD5C0C29A3FC83542AACD659C5ACA	5786748025FC2382BDACB3D46DE1FA374F20385E	57E2A98CEF355CBC62E03440C6D1D55BE46E5694E2283E6027672949795F043B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	AFA92D174E08B199FC9C4EF81CD675E5	97178BCE623122142010197DCF3DFAFA6F34F9E8	BCAC941362BBAA17475EAA89B9F318ED99CDB286970F412F4884FF17F8F83E3B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	F76D0EC348E78BE6FEE5815D2FD8424C	BD0677BE4052B6FD7EE93EE8F7D6E85FDED8E0CF	275B2343B2A1AEE945912B01051E1B01CE59FCCC674528616E412C302F028F10
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	FBFF380D5E55CE5A5BE33B29B4DEB671	F889A6FEACAC0C7D3D81BAA0C806C8DA3AFC20B5	D973D81B4E54DE2F57886A863453F208CC47460D22804E2CE372E0514B61B4A4
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	943B60445F70E3996ED5AFDE14DCA135	F13B14397B58A8DC866DD93ABDDB6291F8C8ACD5	38CECCE3203ACAA9B3A7FEC747127469159122E42D0812511D374662590B3323
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	85BF629CAD0F7CFA8C7B6EC5DDD9E855	CC7CCE312C14C76307EE8E4990072C4C589A4652	09878DD5E7975CAEF08A0192E5D7EC758174A407483BFF6A8B4E821B31EB7EB2
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	81C71F62CFA678D0B723765928301F21	6767B0B77B0CE25B7FBBCD90941A2DE65DF0D16F	7E51AB1A2B59A3BC40147049FBCDB04F5BD11713C48BC141F3762D3D4563F0EB
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	41D4E90C943BCD840DD5B4D0A9050F7B	4DB2C3234B9C1DAA1AC14589F81E10742D2D35CE	ADE9E6309E6557C6682FA5BB8531425330F373C800C05918E459F0EF2CE83D75
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	40E15D30EA9504A6938FAEF85441D62D	05353DF7DDA48F59492E1EDEE309BC53CD38E2F4	457CD39BE2A605A8C4EE96A61B11F617E162FC0CDF664577BA1955FA56662134
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	7185BC66D4543C4A30100C9A76B9C5EC	C0C0F017AE841E8DD2EFBDAB83DCA439FAB66934	BB49D44372366F97CB0DFD03754A9DF67889026BF4C63553BF82B29813FB53B8
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	AC9EB5A36682202C8BC1DFC39A3BAC79	A5C66A0D569C2E62A032EB6471D43B451B044D73	848CFE7A7225AC0234688BA65ACAE55CA519BAF96FE6AD6A6B4025BCD071A616
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	8C38FE2D714E52CA814F832458753592	A3B9E3F0EE02C527C59FB185DBCF0183DDD3071D	DACBAC702ACE488E1123FC0941768E28F6997682BCC83021F5677CF0955C4714
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	4200D4D1DFAF368C2A4B0FBB58B34FA5	B4D82C747089238B1FCADF7184EEC757C0B17CBA	8232C01981B52C15487F676F48DC046067B6BB15504989CCC86BB95B93894679
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	3773AA7E9129E98BD64D2DCBE0A4D84B	14C33F78DCC5CA0929F54D5DA5C8E33811BD7E07	E21616660288BA28C083AF2ACD15185E27CD2F93ADA7E523221EC9211ECEA9E8
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19	458F3AD1F3E948E64E064F246B8E332D	9B8FE2A2A5BC5D1FD7FC05E21B36212E599767FC	59F9F00950B761C0D54FB0399916CCE7DA68039099C7AF2AD4C4577D7A5F7BC3
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	BD9D5F9FC5932CE79F03D7B4F0269E78	C511A4DE058BE92159D1C6C6CE838CCB61DDCAB4	E2526EB28ECFB5AC6CC2ED0A00DAB879C219723CFBB9F00B3385EB18AE953C94
C:\Users\user\AppData\Local\Temp\MSI79061.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	F9A2CF6376FF20CB47874DABC17FA935	15AD06F5D9F22DE47B2E61DB0319BB5DF6E1DD96	97DB3B87DA3E71D1477E437D7FEE140AA6A6E2E3E6DAECE986FAB25FC7F5E3A9
C:\Users\user\AppData\Local\Temp\acrobat_sbx\A915qv0id_1cblpso_4co.tmp	PDF document, version 1.6, 0 pages	6DC48BE25B2515B345CE42A71F3729FE	FF6D484DFD54DD8D574535C1AC62885AF2D2D885	0EA6B7817275F8A6A9E7DD2616D62FAA69B8A45C0274D9475F509C6F861ED943
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-03 08-08-19-922.log	ASCII text, with very long lines (393)	1336667A75083BF81E2632FABAA88B67	46E40800B27D95DAED0DBB830E0D0BA85C031D40	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	0F081D91378A0799507766138FE0EFD9	94717DA39643C9A6686B7D851D4E55584AF1FDAD	69AB651E2B54B52FF7B02E2D16893C267D0780EEB51484FBA13483B9C762BF62
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	D414E4C6A4F92B456C185F707581256F	B368A2FC26AF8062E18F3384A107088228A943BF	8D8351B77041274FD3880C70B766B6AA2C9CA59942285481BC70789A7729C197
C:\Users\user\AppData\Local\Temp\acrocef_low\3d142fe4-d541-4b30-a5a7-f073bb54bffc.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Local\Temp\acrocef_low\5451ae1a-1bd8-465a-b328-c88e819986fc.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	18E3D04537AF72FDBEB3760B2D10C80E	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
C:\Users\user\AppData\Local\Temp\acrocef_low\9c162e0b-4aa9-4ebb-97b1-95d577da4ab1.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	A0CFC77914D9BFBDD8BC1B1154A7B364	54962BFDF3797C95DC2A4C8B29E873743811AD30	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
C:\Users\user\AppData\Local\Temp\acrocef_low\a64138c6-ac07-450a-90c0-8babd7dff17c.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE

Windows Analysis Report
Document 35405 (2).pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report Document 35405 (2).pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report
Document 35405 (2).pdf