Windows Analysis Report 46.896.524.pdf

Overview

General Information

Sample Name:	46.896.524.pdf
Analysis ID:	438549
MD5:	62b935b490a6b135623d5f50ab63364c
SHA1:	09161204aa313c21fdb597e1d4fe0c8a5e511644
SHA256:	83b25d7d8ab99cedcabc6aecc183b3c949b95c886c9940ab0d2e149edfeb823e
Infos:
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: classification engine

Classification label: clean0.winPDF@13/48@0/1

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File created: C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons

Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File created: C:\Users\user\AppData\Local\Temp\acrord32_sbx\A9Rnup6z2_1sv9yvo_4eo.tmp

Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File read: C:\Program Files (x86)\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' 'C:\Users\user\Desktop\46.896.524.pdf'
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' --type=renderer /prefetch:1 'C:\Users\user\Desktop\46.896.524.pdf'
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --backgroundcolor=16514043
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=18154713270360583040 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=18154713270360583040 --renderer-client-id=2 --mojo-platform-channel-handle=1744 --allow-no-sandbox-job /prefetch:1
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=gpu-process --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --lang=en-US --gpu-preferences=KAAAAAAAAACAAwABAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --service-request-channel-token=5327604125794324983 --mojo-platform-channel-handle=1696 --allow-no-sandbox-job --ignored=' --type=renderer ' /prefetch:2
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=11484347080584688627 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11484347080584688627 --renderer-client-id=4 --mojo-platform-channel-handle=1832 --allow-no-sandbox-job /prefetch:1
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=9495211575289344956 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9495211575289344956 --renderer-client-id=5 --mojo-platform-channel-handle=2140 --allow-no-sandbox-job /prefetch:1
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' --type=renderer /prefetch:1 'C:\Users\user\Desktop\46.896.524.pdf'	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --backgroundcolor=16514043	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=18154713270360583040 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=18154713270360583040 --renderer-client-id=2 --mojo-platform-channel-handle=1744 --allow-no-sandbox-job /prefetch:1	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=gpu-process --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --lang=en-US --gpu-preferences=KAAAAAAAAACAAwABAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --service-request-channel-token=5327604125794324983 --mojo-platform-channel-handle=1696 --allow-no-sandbox-job --ignored=' --type=renderer ' /prefetch:2	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=11484347080584688627 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11484347080584688627 --renderer-client-id=4 --mojo-platform-channel-handle=1832 --allow-no-sandbox-job /prefetch:1	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1748,247041772033505157,3887638589712820161,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=9495211575289344956 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9495211575289344956 --renderer-client-id=5 --mojo-platform-channel-handle=2140 --allow-no-sandbox-job /prefetch:1	Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File opened: C:\Windows\SysWOW64\Msftedit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: 46.896.524.pdf	Initial sample: PDF keyword /JS count = 0
Source: 46.896.524.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: 46.896.524.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious

Private

IP
192.168.2.1

ID:	438549
Product:	CloudBasic
Start time:	18:28:23
Start date:	22.06.2021
Sample:	46.896.524.pdf
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS
MD5:	62b935b490a6b135623d5f50ab63364c
SHA1:	09161204aa313c21fdb597e1d4fe0c8a5e511644
SHA256:	83b25d7d8ab99cedcabc6aecc183b3c949b95c886c9940ab0d2e149edfeb823e
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0	data	72F74A80A78AB35FBCAA6A790AAD8E3B	386AF0D85F0E736D776F972C7AE6F2C53FD615CD	882875E32FAAB192713567EC4C80E2E8134D26B5D486691BC89C6DDD4F84B9E5
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0	data	6B59700391DE1CC3AB48333E40C784F5	1E8DC495ABB5101C3BFD4CE5E88FFE8A424927BB	2C6E8DAA8CBBB98424B67AF3CFB09CA56554488A5893ACF025700D2A5C9D3F64
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0	data	DD24B9C252C154115ECBD347F97FC2A1	8882ADFAFDA1FFC6FF86B477859194A6D32B1443	391E400690A06DB8F7643E76F5FDC486AAFE0D2A327485B1F93F42FF337ED3E0
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0	data	E648BDDAD2A86367F73CEF200459E75F	C6F17D033DA78DB23C7A3781AF57F459FAEE1FEF	0CCD1991264840B6419CD57EE2E35DC0D4A5DBAE9D66F3CA17B959A084924E22
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0	data	2F590CDC7A1F1D9A130CBA708DF33952	25A203E5150B62AFCCF49263DB33BA9029A29EEC	A94F1578F19CCB1C176C87ECFB4D8D9E7855059BD2085A9E613BFCB28318B6C7
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0	data	A26FBB263E2408EAFDE096D9F79C9A68	7454CB2660F45633A310923F12972ED8BDBD8161	397665BBC74F3823F95969E1B15CB26A13EB89A44C231A8DFA83EC1D43D75D12
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0	data	4238028DD42A7B3C7F5125B7CC5880BB	A458223F0623C87A0C2EBCF3291D481445286B85	26F872BF6487E1BDB51CCC9DEC51EC02A65C32E161187AB98BCAE36178D79E84
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0	data	FF7E853057D1198EF3058B564AAAB35D	94CE80CB1730D76398585FE183D1F6DD982F81B9	6B12B4FFCA1B7C8E2669DAEFB51CF1B59827CE329A89BF10547DBBE952BC0005
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0	data	792E44C3EB9CB1928E6DDF017F01EC96	B98F1C741CDF01F71F9674B580F253466E5AA893	C90FF7E4F7BA20FA4FED4750CA186AD3D2543593333178B85A4FC23DF577BFFC
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0	data	E681DA8264211D404BCA91658ABA0E70	30571FB06993EA66E62F6CC55891D8028280AF8C	19CC12F597C682F46E92E83AE0F3E28CA6F6D1E14D765AE3F0005621F972C4BB
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0	data	E79394EAD84AAE464EB27827449531E9	5ACB45C79C06D5B8C4F790F789A9E96E2E9BBDFD	AD62E50113139D5029E596F93BA92E47A198CFE4CE671EA5FAE32A3F3609544F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0	data	73E4FAACE7166B0584E30F15798A858F	71124980D570B653826412E5B5FCEBCDFD544B04	61E2927F0F71EA353DE8EF5425A70302E549D968030F6F88BF02862505412EBC
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0	data	39DF203AA8966E4DD4ED69DB0A53A7D3	59D26C0A6E185B4CE16575C38EA915D29012F30F	3C418EE0885FE9E80C35299F7D2FC40B7B514CD3F2A18A684F445639BE84F8CD
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0	data	7995BBA1CD3050CAEA634F8D2819FD08	22789307A71C51B4A2359D81DF214EA6CB2214CA	8B81E1C67EB9F6238C228C38F3BC839984C1CA63ECF17F95CB9F349A179DC62A
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0	data	069E764E21D8A3C08BA921228270AD6D	50BA5990584DE441462DB18FFF76D8F08FD6E744	6F9EFD61B4E21BDDA6F6A51E01352D762E414BDB65F15BC8C59DB5CB666F1592
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0	data	A3D489E7F671F109ECE19AFC41DE381B	1F4075EE25D9565CCC26598277217A67A070865A	52A0E3C5723D3818ACD982770DD2223B616FC628E42480591E6946BBDE572FAD
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0	data	FFA527C58808733DCCC5325E68FE839C	654DFBE989848BDDEA7CD932715DF4D2F4B9A337	1732734AEDA7F9DCD339E721A89D1BE2CF3B7E42394E72014113DD1ECC5843FE
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0	data	9077EA56BFF507671E013020EAC54243	DE005FEB8590B478BE92ED5D949A35A99D1D643F	A6AEA1FA64F477CA600B39B9A5B3449B5B1437EA4B7BD55A11AA184A4D659CE9
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0	data	734E94143FFBE0C90E8D22BD2748AA19	BD29D21CBCC4D660241C10B049C0830474FB3291	6B57F374C4F638F83678948EA61E64CD37705B080685FF1F0ED6B13FB8E4F6B0
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0	data	A58CDFC149EFF0E3F8451EEABCF304C1	6653F9200687BDCF6A1CC4773699C6ED1093FB43	AB67B7C194D460F0EB18C02390DBB0F51A2CA8745ABBF4CB12E17DB14D6D370B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0	data	DA76BD3A328C507434E542D7C6D0CDD9	FA09D39637F32A3C412B69F2D408AE363C5642F9	950AE3651E47C238D8E1BA153CA287D62DF577AB0F18355286906368827B007D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0	data	BF9341321E4B365575936D038C4F203D	83B309FFC820FF61CAEBF24512B36AAC24619596	177DAF0E0B14D13A106DE0F91D088DBD99C61940389081195A6E229C11521B03
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0	data	D224D7B4F36D1F165905B873B95D7A5C	60D8DA2F682065CB2FE885F97384B297779832F4	29124ED305AA1807C98B1A328D6476F704053475AA5AF234304C06E005BB9D94
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0	data	A4D73DEAD1EF6CF6BA0FF132DE71ED43	58121E093F6E2C7EFE165C94E23474351F9DC7BB	7D6F6D0B8C7708456513E495EA842864204587ECF99E990BD1E42762E9B0DEEA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0	data	94842761AC6612AF3B0EA21904CCD903	E71178AD45CC34CE732A251F05BAD133A0F7DEF9	7D6A628118028452162F00D9B9BA0E7B434C5C1D86B290056947B526DC5FDA8D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0	data	4855D0FB8D021C63F85116EC4D22CFD6	FA500407D8E797096A95A571AF66DC31649C9123	20295A6679547C2FC961A3506DE018244D6D9810104CB413CC285E8CFC40841D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0	data	453DA6AF8C92DA821B292578547DAA2B	A1F27C72E7EA67B866DCACDB1145FD4C763F8138	291B2086ABA5368966083253D8F63F3AD786D6C3EF888ED526540696FBD320E7
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0	data	308C2F83E52F7B2E9DE6CD15ADD4FC39	0FA8179D50DE0D4EC8983B11B63238996C4A440F	208489A622F18628711FB11453F43B3E9EE982DD09F8BA3442FCD4D7E97549C6
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0	data	971C764234452D9267D9FFA59D1C7869	0A06FB878585188AFA6A49B08FA7ACACA4AE0518	B73F51C8E37994197AB708C7030152DF8968B01EB2EC200DE8CF16ECBD947FD5
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0	data	1449763468F2E223AE41CE1C2590BB0D	768016DE27175804DE4EDD7F1D6665123CBF07BF	01A00181DE328148D9EF5255B4A542AF871F7509854061A29F12A228F6286417
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0	data	EAE761436320CC180EB3E56A6867A3E7	403201E304A3F3B06027EF06504D843E6E4B4D01	E18EC08FA7A8528D495AE967BF36ECF3025815B24F51F9F1748D60FB210D3642
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0	data	2F585974C84E27D691ED9584FE912F6E	98C23EE634D00002AA1F7BC1993625F770023365	0AD81AC9B6A8811DC5FBB30A7838E7B8940BB68781C221009A94CDA1950C2BD5
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0	data	DB551B06BDAF78EFF75383E783BD8533	BA974BA3DA10DA1109E126ED168E1F82DC34C181	C99D0EDB95742BFB2C444569AFDA0E78273B93FEA58DA7262320BC4F33B41B83
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0	data	4C40D6CE950C0A9574C40B38B95DCB0F	5AE4AD581310FC1340FD140076F1C9679FF6791F	48BC903968C01909F19768F2DBBE7329E93DEDAC0660C14745E8316F60070712
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0	data	64001A2BBBDC223EDCA604B3716F2681	18D299423FD72F543CECA4DAEEB8699967B7FBC7	4EB67F205C977A79DACDBCDEDFEF0C4FFEC15C0A6AFD84993AE641F1484F8B47
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0	data	7AB9CD2ACF3F474804F22E3B3DDECA60	F114B897F048C0618C2E92168DDE10D12B2218B3	4E576D5579EC2CE185414930C744AACE1BBE113A67E6E18011A2A32453CA7BC5
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0	data	E46AE57E4D3B0A56FA9F623F0797D549	48D8F726E298F6D9E16D9F24F94F923E29C5F8A8	2DE41DC603C735E36687F1E365832D6B68CACA6E6A3F2319136CCDD849F29A67
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0	data	DDBF01627375871B051A7DFFE9A23FEA	6795761A11D1D366E8830C1AFC6701E1FC41E47F	7F3F29C11F1F79A0780796D89B17C9E16A573042B7CE2C8E1502F3A895D8CE3F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0	data	FDF2164FA980FD3FB07FCBD2C91A7A60	860B95D26A03856DADA958D0374BC7BC0FD272A4	1D131F9719069A70643B8E4121861B3A699BEB576BAB1EE9F6CE48F21D262AF5
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index	Maple help database	6EC91480F21B2460E5AD64FF56B07982	86E456A0A64D4E3521A99A0FCF900C84E2E38C99	90DB5283CDAF68E28FC191E6612E34FD854A3E236AB5864E45D3DD86B2D22045
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	9E16D1AF1872DBC949A774F7BB843D7F	8BF67B99D000498F538A2F1F0439D1E3F96E5366	E31F913138991B469E0A65BF2D31DE2A217539BD6366B09C3331E2D7424AF7C4
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links	data	434100DF64C916FE8366CC40E90C7EFD	FAC703A9255FD29AC8E8606BE59241C1F07C9A50	13731A1522DB031B5B50069DDDCAE2A03BACB6B75DFF565CFB25C980126A8DE9
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-210622181809Z-260.bmp	PC bitmap, Windows 3.x format, 107 x -152 x 32	289D67A01333FD6F020051216FFDDDD5	404F8A18B941AB0C4DF2E076B236795AE5ACE1FF	9FD24C51B45B3EB64CCD3D88834E88F52DEC6CBF0EE0D0144680D780A7C5A084
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3024000	60900469F77AA626E6C2AB452A1ABFBF	5D4BBEEAC17B927A153BF87AA4E05792D08CF21B	F64FBBB0AF766FDFFDF88CFEFAAE394582884985D42D58D7EF4D115FF4B30573
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	data	5609BC3F0D91B9B62DDBEF0F42C1A951	A3CFFA0EC3E4532664D78488236D7B252DD56756	C863708F0722CCE066D0233AD75F5C17D35359544E827F9AFD66B3DA3341604C
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin	data	57CD7A15901AF46340C5F935D2CE1264	30D8D1CFBADFEFF524D08350BF62AEFC699C9DD8	9652205F881C14B7B0865AE84847C6A4AA913337E6C80BD1558095FDE698031F
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_store	data	5899D998731A4A9337869D49C04FD8DB	15859C86F73A4F8DFEF2C64F4A9833F02242D893	A0127D63E20482835F839E787AC3B684BD65EF1FDD1D381810240E3F94876AB6
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storei	MS Windows COFF PA-RISC object file	F4DA58794E43BC05D7FBFB49300A3D25	A089EB6F634C19B95A804EBBDDB8854316DD87AF	B81A2359D689BF6611E529F93A285E3E1827D07E8953DFA92CDE0F85646136C0

Windows Analysis Report 46.896.524.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary:

Hooking and other Techniques for Hiding and Protection:

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private