Windows Analysis Report
Invoice_INV-002296.pdf

Overview

General Information

Sample name:	Invoice_INV-002296.pdf
Analysis ID:	1427906
MD5:	65ae0d0bedd02aeef55c5724c3e48f64
SHA1:	3775b87ac0b57eae65191e5f400bf43db68d8529
SHA256:	7c748acf4d4f8878aa72271c798ef2534d759a6b63188cb2e2d5f2c86a46e172
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: Invoice_INV-002296.pdf

String found in binary or memory: http://bfo.com/products/report?version=work-20200610T1518-r36819M)/CreationDate(D:20240417091858-07

Source: classification engine

Classification label: clean0.winPDF@15/40@0/0

Source: Invoice_INV-002296.pdf

Initial sample: http://bfo.com/products/report?version=work-20200610t1518-r36819m

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-18 10-29-34-576.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Invoice_INV-002296.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2276 --field-trial-handle=1508,i,3078186341101652738,15087718266339306583,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2276 --field-trial-handle=1508,i,3078186341101652738,15087718266339306583,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Invoice_INV-002296.pdf	Initial sample: PDF keyword /JS count = 0
Source: Invoice_INV-002296.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Invoice_INV-002296.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

⊘No contacted IP infos

ID:	1427906
Product:	CloudBasic
Start time:	10:28:41
Start date:	18.04.2024
Sample:	Invoice_INV-002296.pdf
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	65ae0d0bedd02aeef55c5724c3e48f64
SHA1:	3775b87ac0b57eae65191e5f400bf43db68d8529
SHA256:	7c748acf4d4f8878aa72271c798ef2534d759a6b63188cb2e2d5f2c86a46e172
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	33801B7C62691B3B5A87B460D15C71C3	C38E65858D2EE55C80747E3B7E5230A47EE6DF37	E16938307FC3852FB9D08A599D7A738A83A8971954838B8037B7F5DDEE8D553D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	33801B7C62691B3B5A87B460D15C71C3	C38E65858D2EE55C80747E3B7E5230A47EE6DF37	E16938307FC3852FB9D08A599D7A738A83A8971954838B8037B7F5DDEE8D553D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	2A369F65F5BA5C68F7F5170DE0CDB18F	F9AC6408C323A792C467EE02008FF87558A58365	719CC8687C3365AAFD12C1ABE292798ADF537A06FA237EB62184E6DA69138143
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	2A369F65F5BA5C68F7F5170DE0CDB18F	F9AC6408C323A792C467EE02008FF87558A58365	719CC8687C3365AAFD12C1ABE292798ADF537A06FA237EB62184E6DA69138143
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	4241927149FE90D02BE46C32F255B602	78C0A3660666605F4AA1888607B0F6F3F3FA1F76	17572907E888C6C591FB98CAF3DC4D0D715A0484614FFB6C3EEE7113226FC272
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\fc0ca26f-8100-4e74-a20b-07d8f9c92949.tmp	JSON data	4241927149FE90D02BE46C32F255B602	78C0A3660666605F4AA1888607B0F6F3F3FA1F76	17572907E888C6C591FB98CAF3DC4D0D715A0484614FFB6C3EEE7113226FC272
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	E3308A4789C41F741444659EFFBA09E0	3ADCD258CC84B1978B108EBDD2483B483962C0B8	5E017325A6E81EFF634F89440F80D7BBB0A9832AD8C06A6C7502DDE50B234175
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	27DDA9F10E1EC4BC33BEDFBF7B2B09F8	EA524604316A4517A1EAB4F04D113F5C7912552F	00319C592EC3F758BA930AAD9282C9649B80CD58DB9976AA5EEAFE06CD89961B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	27DDA9F10E1EC4BC33BEDFBF7B2B09F8	EA524604316A4517A1EAB4F04D113F5C7912552F	00319C592EC3F758BA930AAD9282C9649B80CD58DB9976AA5EEAFE06CD89961B
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240418082936Z-166.bmp	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54	5B49656A9300218EC09A39D74911CEB6	714690A4D67A0C5ED46E6978C1C56F1334D7C58B	2DFE33A9A42A640B491D4C9561AA4F2360F016ADE756693305FD1CA0A694B604
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.5144	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	87EDBEE38F56C20298F25D5D3D4D1B5C	7F904E9615AC3186A87472EF366DD8202855B0B7	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	99A6CC20D615E65440A2614AD7927B4A	B22E427B312902267A41F95F7D7ABF552F4B6E96	1C8C835CDA2743860065BAA9981E8FBF37CAF85F4A0AC00C5B5A99A5070928D5
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	927F308C133751B01BB7E11C9B38DF04	28E449495228AFAF037FDF506370AA8B45CDB68D	FC6E2F7C0581A926045ED33DDF7720FF9C8AEAEBB86EC7B4E1F84BED8E64F1DE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	09C90F04B27EDD28E523EDDB24811D36	6AB7A144BD902ECAB6D649CE2CE43C4EFC6BBA0A	0BA0FE370DD84452EE70A983FB168E7B4A00CB996D48078C498E2864AA9C279D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	54E0530406EEAFA859838C5D64CFF98F	0E82C213ABA01A9C5945C4434EC8EA3FE4204417	09BA7F7DF66755B93964F578EA82FBF4020BD03DECF5AC2715A65166E42AE277
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	CF6492FE7D20C8FB08D98AF2D7E104FE	113814B3DA2DA3690B0EBEBC62B61B0FAEF95DA0	73DC31F24D3572AF42FC614BC5223454AAA203F5916386B17EC6C0C5359B53D1
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	40D31D2556C18A54A4D967AFAA559489	1FA99B81DFBD48D9ED72A6349D5E641FC2165188	AECE91E7C8E7825BF8CFAE91910E02F7D69B5DF474A82EB07D1C4518E7725E27
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	B11C121040D317528F8166BE571C2038	5EC67E4938CE7B8EAED037A77B40B3A1F4BF5905	548FC6317F34598CF2C5346CEFCE3B1AA80EFCBB1C48BBAC7F8ED330ED5AE04E
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	2383D172516CC8541F68318AE1B15593	F6DFDF1D1221C70DD2DA4B6CF82F38F2AFB6E4F8	9A1D95E97D00E9AD52572BD259374E8C0BC4708D97C4278CB37C6B75AD9B6919
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	D8ADE5E0BD2E3CC3FDDEC6403F4C8482	6F35BF948B91CA0A4A568766147E27F8BDFECE48	45C27D7DE9A61247205A0A41D7E6615A066766D9075E99A1D1578985957351F4
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	A835B17E0E7D84C65AB357AE0268CA12	916BA2D146FDB4F682FD153C9FD0C126A051C74E	8BD4D5400E8A3C4B937FBE014348ECCD2DAD1870D45BD646067BB05E429AAA6B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	1B88D7821698B39F34CDD2FFE7194D10	28BBA76BB24CF10E1649527D44BC718A547DB1E4	406C755FD6F9355EE993361CEC853FE21F6F8C964A34271AF59022E2A74536EA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	702F54B9C00B27D938306F4B895C0E6A	7187BC4DCE825391199C48F5DAACD673C1484156	8F1A1C973D66C4F0C018CF0F6F56BA0506F238DE5FFEBFAFA9DED59DD024675D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	77C01DDF81A34A470EEF9781356BE89D	2C9251AA3D1A86939EA662E6F12E5B4B7DF00BB2	FB00DE8768FF52C71ABF5CC9A91EE94E2B497D4AE56096550843D45EE4CB59A2
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	85A7C81CFF9C13CA8B21F17DAFA9FEF5	8A3FA99ADB88DA9DB4A7FF5A8A5AC8410A26534D	C36E671F41903C6B051579F31D0B93E29C30EA223D7802FB079B065CE2792A76
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	77D097C5CD3F55A26FBE464E80D1801C	3DEBF01EF219E25F22539FCD8541F4A31CCA063F	4C1EE0DB1A4293DBBBE61900AD4500D124BD8B324D7E5B5CAB1C3CF7C2625837
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	BFA7D982AACB5F8E8196A1E0999035F6	587C044F2203EEBF27AE8294AF1DA893E5A3280E	BA84C9027989E88039052743D233F7F9F2E04AC2F2599D725B57D34E985F71AC
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	2FEED9A7A6AA3747C19A804540155098	DEC74CBE2AB70195FE2025CCC75F04DBF0825BCF	DDF74D6FA9B39D1A68AE6C7642D0313BBDC6FD0A6A6C02C0A5EFD54F0B1D980A
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19	6C12853B7F708D362110114206C914B5	04F886904771FEA642B7326D49D7D3378C24EB61	21F2D8B6579828667F2C9669D7B6EC088527FAB035FD2424276BD7D65D0A2CF1
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	13F1A35969076086FB735060169375AD	EB2CD6384C07975169A9328AB8F643A2F97A9CF7	3D597BC9211DD0BB9E7C32E201502D556C0CA155D580962F7881A17D2ADB8B08
C:\Users\user\AppData\Local\Temp\MSI7a0af.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	E33B83A380FE854E0AC750DA47C636DC	0D6E0323CC8562B189855063ECB96D91084E90F0	0C763CE367C0A2396E3690B58CD3941D1D8B16168AC6FCF84967F2633CDAE7D3
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-18 10-29-34-576.log	ASCII text, with very long lines (393)	1336667A75083BF81E2632FABAA88B67	46E40800B27D95DAED0DBB830E0D0BA85C031D40	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	42C3649A4BCC9A95A35904151592F518	04613F7A49703A6E4F947449B0FD3BC52E55CC79	498B84C5C23A09840FDEF15F3F54038C0F9C20A931324CB6E9A3891F58BB3A65
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	2ECFD80236150D1CA44CC0D81C77B22E	6B678B2F6C9DA25208AAE9DCBC68CB371B8D16D9	EA3A69CFC59F3B8589BF11C3AE4D681ECFFB5D2DB4E5660C498558563C7ACD00
C:\Users\user\AppData\Local\Temp\acrocef_low\3e2c4add-d7b5-44ff-8bde-f73a29c170e4.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Local\Temp\acrocef_low\5234bdce-1c0f-4122-9318-45257e5e3434.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
C:\Users\user\AppData\Local\Temp\acrocef_low\8987fdd5-0f3f-412f-981f-f4efd1bf592c.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	AE1E8A5D3E7B2198980A0CA16DE5F3D3	A1DB2C58AFC81E6A114A8EB47BE0243956F79460	8C2E1B13F6658714D51737D6745FE065B87497923945AB3028706A4171C8328F
C:\Users\user\AppData\Local\Temp\acrocef_low\c7d0c299-835c-4d92-ac41-9936febf1b12.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	A0CFC77914D9BFBDD8BC1B1154A7B364	54962BFDF3797C95DC2A4C8B29E873743811AD30	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685

Windows Analysis Report
Invoice_INV-002296.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report Invoice_INV-002296.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report
Invoice_INV-002296.pdf