Windows Analysis Report
Carlton House Insurance 2024.pdf

ID:	1455420
Product:	CloudBasic
Start time:	20:13:32
Start date:	11.06.2024
Sample:	Carlton House Insurance 2024.pdf
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS
MD5:	5eb4094e2dbfc868f6cd4ca57b045246
SHA1:	993e2a7347f1eb431a2fd6041595cbb6d9bfe915
SHA256:	98523c7350b0fdd9079823bc1870341bc3e76826ba7ff730498f20908c019bcd
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	45BF8CC2D6F88732745C9C090B18A12E	7C29AA41733FD965137DAACB5620979CF48FCC9D	066B99B85C098CA39AC8C2AA17D18D2CF92E202CCD74E0B54304F20B794BAF2C
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG	ASCII text	D31CABB951630C878DE77DEF49293B60	1F0C7FC9FDAFD5CEA777DD93F8063840E018E396	E5108FC14744D59A3D33237422449586AF7906ACA07B84085EFF02B03216463A
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\16aebb49-9ef5-4197-a7c9-834074afdfb1.tmp	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF640f6a.TMP (copy)	JSON data	4C313FE514B5F4E7E89329630909F8DC	916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56	1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\e30df9d6-6c7d-4a33-a889-9779ef904da7.tmp	JSON data	0966BEB4CC7A1EE073E63A8D8579075C	760E8596A8A1890D2158824E000F1A67612F951C	62BEF414445BC8E10488167904831B7272B125B5089F01DFDBEBF7A398885929
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log	data	A507437B11671F9DD309136C3B529ECC	539617CAA66EA41C18A5F417E662C5D4A2A62C8E	3F014097AFDBBD46D6ED1D5E9E9DD4846D7E662568C76269C00CCE1FFF15FB05
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG	ASCII text	3E46FE6504D1A55FB25C2C29CBEFD65B	888F3D8E9B79B3B0D8DC863937692B2336F658C9	6165CCC95AC2E3D2F2D842D488FA931B92503E90542AAF375CD250B9A1CFCD29
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240611181407Z-210.bmp	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54	25DF2EE7A20C0FD6C7ACFF7350C76D81	64F742971D014A901BBE8205EB525102CFEC9791	7AEE7AF93264066594DB9216BC93636A4D7B4418E2D0C15D0BEFDC996F1D7FB8
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3040000, file counter 2, database pages 14, cookie 0x5, schema 4, UTF-8, version-valid-for 2	A4D5FECEFE05F21D6F81ACF4D9A788CF	1A9AC236C80F2A2809F7DE374072E2FCCA5A775C	83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	3891EADEF88E0F772F2F868B8DDA8298	C8E8731C3CAB83D0D3BA7E5E8C54592B57D3B79C	31846706D65CB52FEDB4484DB6924D83A699E3CE5ADA2E0752FA2C5DE2533AD4
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression	49AEBF8CBD62D92AC215B2923FB1B9F5	1723BE06719828DDA65AD804298D0431F6AFF976	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	D4AE187B4574036C2D76B6DF8A8C1A30	B06F409FA14BAB33CBAF4A37811B8740B624D9E5	A2CE3A0FA7D2A833D1801E01EC48E35B70D84F3467CC9F8FAB370386E13879C7
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	393F7D4361B0B7615AC31C068E4F8C50	A9D5FE1FB074400B792DD14589022E14263DBC8C	CEE0463ACF85FE93D5BCF828CEF71EA8201B4B7F7F2E6A17FDA43EA506791731
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0F5C59F9FA661F6F4C50B87FEF3A15A	data	0705FE32A5016C45A88396C1319A330F	3658FD4D803363037132614BA2C3A484AD64AB0F	5DC09743B11DE386B80CD264EBE29069C2072DF3158110E5F07C83AB087CA12D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7112	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)	PostScript document text	94185C5850C26B3C6FC24ABC385CDA58	42F042285037B0C35BC4226D387F88C770AB5CAA	1D9979A98F7C4B3073BC03EE9D974CCE9FE265A1E2F8E9EE26A4A5528419E808
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat	data	FE852323455F908766C83850A12160B0	8E4043ACD55DDFA11ABF8B490DEC4A3C5F452A19	185F5A265A1EF49281D9B5E4E50A5CA8C6EEFB4B7E281393291E2580B2D855F7
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID	JSON data	AC9D65A5B2F808E157C4FE9BA9B07A71	3CF2AE0412CE6108F38A930D9A426348B241BD47	7B61FCA9C73C5BB4085C632A8115B7190CE951A699888DE743E260D03D7880EF
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface	JSON data	EFD522CAF71C5E2D67480DB52ED43415	6455797DA29BF6AE32BF428DEF8439F238176D72	295622237C5BEA0EE7899512CE34264585809338037FEA7FCE31336B7FAE7DAA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface	JSON data	6B26545FA0C8D7CC6C52AB628DE34174	23E6806302157A5DF959EA228B1CA2408E32892C	E7E5B4DFA3E7B528E57A603EF90E51581B77AEC5A7B7C0244FA6851615BBFE37
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD	JSON data	3454075DE9FFE8B7219AC302A8526F0F	08076611AF909D6A6C35D3B204EB302EADEBE379	B5056109DA286B6CEDCDAA4BC294C417D878CBBFBCBB282A72A0D5288F37CCD6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner	JSON data	AEA6E12C8A974D90A7691A1984CC2A21	7FC19B035212533BC63020456942467188446A0A	0E8EAC6CF85FE749728C809D1492ADF2C4DA4C433D2899817811C11520600400
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner	JSON data	6A9ED213B185C18C5BE74F82F42C65BD	C378A863A6A2848E5FB69A1AE06CB2B842D3D97C	4009365C19BC2AEB261CFD169D974D87251544EFC075AE3C492B26F6479EA51B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention	JSON data	7D75EE41C8A876B4F4315A3A07AA24FA	CB3548913460007381D63514266452A33AAAB7AD	D5BCB2B6640D77CC3DA008DB336E1ED817D2F2CF57E8AB8E42636EE1F16A65D5
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner	JSON data	91157DD67DEC8A9E273C947B896B391B	682CFB51758F5A652919622952199D27B4ECE869	4F57576EE27802B9930647E6773007496B84F39467BE837309C321449C78E0F6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner	JSON data	6360D1D8B3A5769C086E3687DF699211	2787886ECB2ABE48F251472051107B0462D42D1E	196F8149F4CD3261CFED1816F850927F4C7B6ED9515F0B02321FF386F94DF14F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner	JSON data	3737E80E95EF4F415D49150CAB80B088	5D6C28B68AEBA84449C73299BAFE38030349A8A0	8D11C084DDB43C00CCE21DDDFDFABC8F7EEA65F0DEE628386E0A7A73DC7BC792
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner	JSON data	8A93D8FAA723123A32E61F6F44F4E137	1AEB9746CADD77F418376F0BE667BD0724995AB3	65D8F77C15A33053150EA5328C0563087133151E27C40E48BE447A1CED196EE0
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner	JSON data	9FC81FAA2192BB1A0039963ED1BB377C	BAADBA49CE9936C8E0A4377AFE80A25D5ECEA326	074B2E9A6166B052B04F331A109CD1A861E555577E3A90974879DBFACA83F3E6
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention	JSON data	9015374E6C173DA12A120193F410B1DA	B15201EAED771D68E2D317DD0951936C4FEBA4DC	9CD21EB254111909588039C6C277ED742CC47221B96565A372D5548B67029733
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner	JSON data	4AFEC53307C2289CA1DB029FF2E34F17	FF9E62E8C611D3D1BD65B077EB77715A87724D88	2292358F9BD05F39F4D0741DEFF091DD1D4AFFBB2D84615F4F336AC54E40201E
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards	JSON data	EC6A4170CAC15DB67A34CFD662F8BD80	03113EEFAC6FFAAAC71D72C2DD1EED4F627EB68E	0B1E706AF13938149966BC107FF7A72B63270E7B153527355892AE8187E05D43
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020	JSON data	2924D00E3340DD970E6841ADA3DE83E5	5943219ECFBB8B447DC6AFA9D627E5117D17B959	850F1653408BDC94142A1B36ACFE04E5EBBA7222EBF21A9C2E638974830F480B
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json	JSON data	35BFC3F1AF75974988EDF2CE8A88303C	E050FBC7E359E7E3103379B24E28DB2CAED8CEC4	99807BCE6978094E95BA99AAED063AD91E8BA35C9ED11707815C80B98F71EB06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents	SQLite 3.x database, last written using SQLite version 3040000, file counter 20, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 20	FFE357EA863399FB37A7D7F4DEB25FDF	5597B9609B97B05055E17785BA2EEDEDFB9202B6	7D9D8299D6AD2A840ACFE84DD36235A0EC275995BEC27047E8A28A5B9F4915D9
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal	SQLite Rollback Journal	C7E0AAF969CE275409F9C46BBF1C1543	867334B4079D02E561BB1A44E91FD0CE63FA6D02	2691C9A04C65601922AD1ADB3AC2DEB0D1EE7D2DF1C5E2291260005C6FE45E62
C:\Users\user\AppData\Local\Temp\MSI3e453.LOG	Unicode text, UTF-16, little-endian text, with CRLF line terminators	E6108DBC6B5D71EB587C3B919C365AB4	D7EDCCFCB35C2DE96594EB21E45914D260B3C536	B8EC16D3EFE790D29BEED6E43EEEF9A041BFCBF644A4DDBC478B4CE61064B23F
C:\Users\user\AppData\Local\Temp\acrobat_sbx\A91y5eixc_1o01wyb_5hk.tmp	PDF document, version 1.6, 0 pages	95657690669AF135714C1C0091B63E92	4FEE43B659A0B6B0B02E5533D79F7DFEE2832613	CA78771DF2F3041C8A92072ED4F28F61E63C6DA254A11EEB75026FBC58F261F6
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-06-11 14-14-05-341.log	ASCII text, with very long lines (393)	91F06491552FC977E9E8AF47786EE7C1	8FEB27904897FFCC2BE1A985D479D7F75F11CEFC	06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB
C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log	ASCII text, with very long lines (393), with CRLF line terminators	54E67273676C647FCAAF81635111BC97	0197F6C55DA06EC05E77CC7541C5E01C12D18454	C1138F9C1A9C03220150D5BA62A94AEA513803AA4E1E5E9AFD277F787ACBF1A3
C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt	ASCII text, with CRLF line terminators	7CA100E5ED2CD95F055C78398F1EDF3E	E7C082035FB25DC67259F22189832E4B96B60A0A	3AF740574DE7F612FF2FC33B4DEC3717C23DB9C83BEAB5EFBF23492108240A43
C:\Users\user\AppData\Local\Temp\acrocef_low\04f4d674-f0ca-439b-b431-8963982d8d6c.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142	AAAAB43627E96B02BC54A78F0EE8E32C	03808205C51BA031BF69F0DF07C9C80835098104	B9ED5860C1528CAE5717E553381762D9C4ED093E546F7500F55B6B18B5C20CEA
C:\Users\user\AppData\Local\Temp\acrocef_low\344bc31d-88e3-4f19-a8cc-7a029459317b.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081	8B9FA2EC5118087D19CFDB20DA7C4C26	E32D6A1829B18717EF1455B73E88D36E0410EF93	4782624EA3A4B3C6EB782689208148B636365AA8E5DAF00814FA9AB722259CBD
C:\Users\user\AppData\Local\Temp\acrocef_low\67e0c551-849e-4e86-8dc9-981823b5c077.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022	5C48B0AD2FEF800949466AE872E1F1E2	337D617AE142815EDDACB48484628C1F16692A2F	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
C:\Users\user\AppData\Local\Temp\acrocef_low\81e9c91f-04e1-479c-bac7-8566969613e4.tmp	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538	3A49135134665364308390AC398006F1	28EF4CE5690BF8A9E048AF7D30688120DAC6F126	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobData	ASCII text	4AC65FD0505524C840E4B8ED9352125F	F914B6F0DF85ED7B5AA059AFDBD993E18748493F	913EF675AA4754FBB1A0B07E73B75D515B05C2058CB1144BC115E0430A90CC11
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\JSCache\GlobSettings	ASCII text	DD4A3BD8B9FF61628346391EA9987E1D	474076C122CACAAF112469FC62976BB69187AA2B	7C22C759CA704106556BBC4FC10B7F53404CA1F8B40F01038D3F7C4B8183F486
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMDocs.sav	data	5C6B932A79952B4B27833691305E61DB	09804DB0986A989C2C49CDCEA563567FB4C7B1A0	DEE5A5925227B125F4AC6D9B70A277E6EC8494FFC73D1CCE9E08CC7A78D6208A
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\TMGrpPrm.sav	data	6A614A7743B0C781AAECA60448E861D6	67B7DF5EBEB4527E4C31F3F9B7E52A0581DC4B6D	9703120DC62C2C3F843BAD5B1E77594682CA7820F0345AE0BBD73021C1427146

System Summary

Source: classification engine

Classification label: clean0.winPDF@16/52@0/50

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7112

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-06-11 14-14-05-341.log

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File read: C:\Windows\System32\DriverStore\FileRepository\prnms009.inf_amd64_b1142994fb10cf54\MPDW-manifest.ini

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Carlton House Insurance 2024.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2224 --field-trial-handle=1592,i,18387352740843586625,9196825002832080474,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\System32\msiexec.exe C:\Windows\System32\MsiExec.exe -Embedding 4C1072F75BF18063249BD0AF732802C2
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2224 --field-trial-handle=1592,i,18387352740843586625,9196825002832080474,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Carlton House Insurance 2024.pdf

Initial sample: PDF keyword stream count = 44

Source: Carlton House Insurance 2024.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Carlton House Insurance 2024.pdf

Initial sample: PDF keyword obj count = 110

Data Obfuscation

Source: Carlton House Insurance 2024.pdf

Initial sample: PDF keyword /OpenAction

Hooking and other Techniques for Hiding and Protection

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX