Windows Analysis Report
VTL-1535.pdf

Overview

General Information

Sample name:	VTL-1535.pdf
Analysis ID:	1431047
MD5:	22b84969b0a5b9b175542d9ee54cedee
SHA1:	6b57d5080f3d5960bfe9bf89ccd68d8fc6b2d792
SHA256:	6e7611dd2d06666bc97b347061883dfe2fe581b27915c1f3a5827bc62b5fef86
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: classification engine

Classification label: clean0.winPDF@14/44@0/0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-24 13-53-40-864.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\VTL-1535.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2080 --field-trial-handle=1720,i,2881297844661282025,9822932352563221621,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2080 --field-trial-handle=1720,i,2881297844661282025,9822932352563221621,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: VTL-1535.pdf	Initial sample: PDF keyword /JS count = 0
Source: VTL-1535.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A91mb2p0b_1lx7fp2_4zc.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A91mb2p0b_1lx7fp2_4zc.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: VTL-1535.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

⊘No contacted IP infos

ID:	1431047
Product:	CloudBasic
Start time:	13:52:51
Start date:	24.04.2024
Sample:	VTL-1535.pdf
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	22b84969b0a5b9b175542d9ee54cedee
SHA1:	6b57d5080f3d5960bfe9bf89ccd68d8fc6b2d792
SHA256:	6e7611dd2d06666bc97b347061883dfe2fe581b27915c1f3a5827bc62b5fef86
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	316A5F8BCF3B84E7B288BAA917323E4C	2D8433ACA11DE1BC3177B3B99843619D10763DAA	8A371F0BB1A1B300A5B5A25284D04311F46BE7743DAD54FCF0B141F9A89D1C30
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	316A5F8BCF3B84E7B288BAA917323E4C	2D8433ACA11DE1BC3177B3B99843619D10763DAA	8A371F0BB1A1B300A5B5A25284D04311F46BE7743DAD54FCF0B141F9A89D1C30
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	A7E8B8F236AFCF576AC97DF69238DBA3	EF9FE7D191A95C4677752431D60A438D042D988D	092F9F48BC0354F43D0D8F3E96D341872F94AC50389DD8E99182271B56DDA15D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)	ASCII text	A7E8B8F236AFCF576AC97DF69238DBA3	EF9FE7D191A95C4677752431D60A438D042D988D	092F9F48BC0354F43D0D8F3E96D341872F94AC50389DD8E99182271B56DDA15D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\02013571-b65f-427f-a361-6f94831f9e9c.tmp	JSON data	D2465C92BEDC2BD8CD3D5D77C964380D	1FDF876E4B5DEE7EE46F32A338503FCB01A340FB	1567A1930E20E14502CF57CC1F4107F1CB36A600F4F68BC24CC69217F85EFEFD
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	D2465C92BEDC2BD8CD3D5D77C964380D	1FDF876E4B5DEE7EE46F32A338503FCB01A340FB	1567A1930E20E14502CF57CC1F4107F1CB36A600F4F68BC24CC69217F85EFEFD
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	9A211C1D5052809B303A420CCA27905F	85F403352F419D8A5D1746CE808ADE00006F6A40	8B33504EAAD24BDA150D4E87E02577F09481FD7DB0A111560FDBD2C4F87CC684
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	9AFA2B9539458C3FE07B8BF32316C36E	8FDE551C27B92D97BBE1EBD627261F266F5B88B8	3DB9187E157F13F663FB1E35D4BBD2558463E41D160E2F76A7C273C1471E6D10
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)	ASCII text	9AFA2B9539458C3FE07B8BF32316C36E	8FDE551C27B92D97BBE1EBD627261F266F5B88B8	3DB9187E157F13F663FB1E35D4BBD2558463E41D160E2F76A7C273C1471E6D10
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240424115343Z-168.bmp	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54	A81728809BDFCC0C42912C2C5223A6A7	8B056D77CA9DCF483B1526C69CDB24C687D13564	F7A0F77762A74E7A8CDC3FAEF68F09913293F79DB0D095EE830D52EC75A2B2DA
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3040000, file counter 11, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 11	5B1DF0B8BAAED5128A169191CDC9E843	A6BB71B1B636D8FDFF23E1A30DB602EACE5A6702	FAB233D102DEE0E5C9D9F5DF8DB313A26E2EEF082EC3DEF02ECA04B418906B0F
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	AEA5960E53974963276059E127B43D3B	9E40D55703F637FDD8A2EBB9E0A98E9174B78DD8	FAC7456281DCA5618BD782C013D77384BA802006FF4D33C4E25973D2E34E98ED
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.6456	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	265E3E1166312A864FB63291EA661C6A	80DFF3187FF929596EB22E1DB9021BAD6F97178C	C13E08B1887A4E44DC39609D7234E8D732A6BC11313B55D6F4ECFB060CD87728
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	7905E7460A9122DD318E3762A2AFCD7B	2A4432C58060B45FF6FCD24C0E76E7E775BE15D7	0B84596154B76A6AA58B329475FAE79564D9A4B7109AF77E5C643E4888E610EB
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	95B3A6F037CFFA2BC47EF4A12A70D2E4	94B889A54CE1E85EA598A0312DF8607479DF45D6	822FCEDAA8F5E53B0ED521C6A7C2DA0FF53649024C700B0EE3A6749A52438BA0
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	CDB1F1EFE7055B7B8336C733780FAB77	3CAA5D8CD9360A00760CD676D90404873BDEC691	603DCD90D643534DD9F4B534B8CBA054B4FFBAB885579EF30145FB7ECF4FF150
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	C2F993D69C241C977B829FF41460FC92	BF5D46D7B23259FD1D4F866915870FE4BB049408	4976C4032B597029FD8CF58ABDEFE05CC47A37830A9F6E30889AFA848CD38617
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	F37F3EA3CB725F9A32EF0BE3BC6110F2	48BEC2A01D3385DC331017445DE3C265B2EF30AF	B3EDA11118A859D65014194A26D0990F5F135CBB67E5A52F1A58A26279A576B0
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	CBF8DAF9E8B6B194D4E040314E324D19	CF26D3055964D74A9BF260F531DD9EA39B791A1B	749AED474C9B2457BB22462C22D81913515DADD0CB2A5AE800F48D0C6CF146D3
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	65E12ABB0BD29908BD6677655A448C9F	9475748A6B737E8E7153716C06245EE74589F090	FA98E2B65B045A53D80DE121D60C742CB384ADA46FC9CE53D52A528D5F99F9EA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	754CF9F30072AAD3C641123BBA3B7390	30D5B75F29DE30F24660B0C35158BD192B46D1A9	4480D88FD53E3557762AC36CDE613FBF554821E5E6D04B86FD73A90621BBAAEE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	4872E7ABEB31DD95A270E24F0970D27C	4DEAD2D182C614018D9E2432C6A7413EE101B075	247C16F504B1EB869E522137154072CBE1A40574EE8E57B373C91815234F1C6B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	6E0477367D21976432D088648001428A	BB892869DBFD6F0687AFF43804D6B91C7D7DAFDF	4D9B6C9AC6166FFA04FE0CE82A4D6D6D222ACCC1186B673CC9C2D24BA5F5D3AC
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	69A96EE7D15DDEA687DA6F5C7D921DB5	FA0D3430FC1FAE23FEAD9D5885B9DB7B9E0F9E7B	856BDF04A3B72045F9641AF0F3C862F1B53C283823B0AA130F313E8538408902
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	B19F1FD51B43219BFBB5596EFE5DA020	FE95B8D2FFD28DABC50A977F21745D0341B94A79	FB697FFF1BBCE16DA14356B0B4B4D4BC5C6EAC1C0338B776E72FC567F36C8E75
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	5FACA033854A304C9910CC6C2F40C84D	0BF27138F6A371A23863710C51484D6D44F6C919	1E2F3BE2ABE7AE9A530443C13927E986D4E1C925CEF7510C77B7A7659F0E99A1
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	4008D5C05042153E69CC64E612729F15	5917ED1B77E86BDB6C64C575E295A80CD90181E9	0A7B9F1CBF6D3A446C8CF58F938B3C293287B725E319AA87DFCCF1BC44868BAD
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	6AAB72C7C243D4D7485CEBCB2B96BB82	9EFF979BA0B9D6EC751EBC077B81841B5DCF3587	84C8D7F71FF1675EB9BC344B7122902E9E1B5A24BB12F825FDE0B3BEEB69A622
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	AA2DFE10FF40413A08ADE80F6FF7B74A	A846A0BA384EF0B6BDA8BD03C56863AF4BA521CC	A6646AD57BD99EF16838042CC92C80CA935CAB0EBE34C5E31E92D37137BB05E9
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	0E24348A087E29EF0D5FD30617AC91E1	AE0E0FEDE2037656AA1641BFD186A1D34B1111C0	DA04089F227B5D3749B135533070C36D35EF23F505C5421E88487F56FF0B63C7
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 24, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 24	A03213286ED01100B38846B361F88005	A2255E7E604EEE7B08E8B995B625B317E9444F04	F35BD0F9EFDF9B0238F2EAFF8AE9F8A01AA946E6A9EBB7100AB447014736074B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	B08CF0D555F78361F994D273353B6E56	D33DB746DB466B2024CD1D164311D0528CA6195C	E6F0B4F0AF2A282ADA996B8C1A0B82B2FFB0808BA1B84A1E800BD007DC341015
C:\Users\user\AppData\Local\Temp\MSIc32a9.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	6680DC9F519EF0939BA6308BDEBE0993	563D4AB444AD9A92FAC764A634A41ACCE2C6A7AE	F25387822DEABBC146759DA8F4CDE5299EE6D4860E01C8F2AA1A684D43A3F268
C:\Users\user\AppData\Local\Temp\acrobat_sbx\A91mb2p0b_1lx7fp2_4zc.tmp	PDF document, version 1.6, 0 pages	94794524342ED5D99B742BC57E59EAF0	709508D89070537A7AB86C384AA13639AA4F1F35	429066651EF442320ACA19FB31C23C827596F970ED7A272DB12E5266FB2CAD8E
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-24 13-53-40-864.log	ASCII text, with very long lines (393)	128A51060103D95314048C2F32A15C66	EEB64761BE485729CD12BF4FBF7F2A68BA1AD7DB	601388D70DFB723E560FEA6AE08E5FEE8C1A980DF7DF9B6C10E1EC39705D4713
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	05CA079E303614D62FF6153182471F49	AD168C004D748B7D293CA7C57220D2C21A18C99B	AAE6D0E1BE2DB705603E64D6408B30040B8BF23BCCB64A76B6055A8160E36D5F
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	3EE735D6AF81D8BFB3BAF058A7C384F0	1BE70F6254389F2A0799C52C606EF98032D3FEF2	1D9C99FF4D3A61951D5FD8AE23FB4F7CB04CB8D277DD4DF57409008BD7A8C579
C:\Users\user\AppData\Local\Temp\acrocef_low\47a17638-72db-4013-aa9c-604254702905.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
C:\Users\user\AppData\Local\Temp\acrocef_low\628b1c09-5b93-46c1-96ed-e81fafd5c8e8.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	18E3D04537AF72FDBEB3760B2D10C80E	B313CD0B25E41E5CF0DFB83B33AB3E3C7678D5CC	BBEF113A2057EE7EAC911DC960D36D4A62C262DAE5B1379257908228243BD6F4
C:\Users\user\AppData\Local\Temp\acrocef_low\a30c28b5-e1b1-45f1-b26f-d9cb5d789953.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Local\Temp\acrocef_low\b397c953-7a95-451e-8513-b99f5c5983ab.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	716C2C392DCD15C95BBD760EEBABFCD0	4B4CE9C6AED6A7F809236B2DAFA9987CA886E603	DD3E6CFC38DA1B30D5250B132388EF73536D00628267E7F9C7E21603388724D8

Windows Analysis Report
VTL-1535.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report VTL-1535.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Windows Analysis Report
VTL-1535.pdf