Windows Analysis Report CUNA-uncashed check.pdf

Overview

General Information

Sample Name:	CUNA-uncashed check.pdf
Analysis ID:	458993
MD5:	8bc64f6d8200077dd1b20dcb60e6b07a
SHA1:	6d2cbe3e6fc619376d906f6d4b95eb71b80e0c19
SHA256:	ff391ed81da3dbf1b72b40e0939193af6e9d6a67f1445dd3f3d45f0d2279d89e
Infos:
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: classification engine

Classification label: clean0.winPDF@13/55@0/2

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File created: C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons

Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File created: C:\Users\user\AppData\Local\Temp\acrord32_sbx\A9R1c3vc6q_1nt6smj_5hk.tmp

Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' 'C:\Users\user\Desktop\CUNA-uncashed check.pdf'
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' --type=renderer /prefetch:1 'C:\Users\user\Desktop\CUNA-uncashed check.pdf'
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --backgroundcolor=16514043
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=16643864859160111475 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=16643864859160111475 --renderer-client-id=2 --mojo-platform-channel-handle=1716 --allow-no-sandbox-job /prefetch:1
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=gpu-process --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --lang=en-US --gpu-preferences=KAAAAAAAAACAAwABAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --service-request-channel-token=8013375785811497341 --mojo-platform-channel-handle=1744 --allow-no-sandbox-job --ignored=' --type=renderer ' /prefetch:2
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=7474857484354196562 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=7474857484354196562 --renderer-client-id=4 --mojo-platform-channel-handle=1840 --allow-no-sandbox-job /prefetch:1
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=14789584177783671881 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14789584177783671881 --renderer-client-id=5 --mojo-platform-channel-handle=1980 --allow-no-sandbox-job /prefetch:1
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe' --type=renderer /prefetch:1 'C:\Users\user\Desktop\CUNA-uncashed check.pdf'	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --backgroundcolor=16514043	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=16643864859160111475 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=16643864859160111475 --renderer-client-id=2 --mojo-platform-channel-handle=1716 --allow-no-sandbox-job /prefetch:1	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=gpu-process --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --lang=en-US --gpu-preferences=KAAAAAAAAACAAwABAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --service-request-channel-token=8013375785811497341 --mojo-platform-channel-handle=1744 --allow-no-sandbox-job --ignored=' --type=renderer ' /prefetch:2	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=7474857484354196562 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=7474857484354196562 --renderer-client-id=4 --mojo-platform-channel-handle=1840 --allow-no-sandbox-job /prefetch:1	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe 'C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe' --type=renderer --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --touch-events=enabled --field-trial-handle=1720,6803796534539775004,11392875392024183128,131072 --disable-features=VizDisplayCompositor --disable-gpu-compositing --service-pipe-token=14789584177783671881 --lang=en-US --disable-pack-loading --log-file='C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log' --log-severity=disable --product-version='ReaderServices/19.12.20035 Chrome/80.0.0.0' --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=14789584177783671881 --renderer-client-id=5 --mojo-platform-channel-handle=1980 --allow-no-sandbox-job /prefetch:1	Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File opened: C:\Windows\SysWOW64\Msftedit.dll

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: CUNA-uncashed check.pdf	Initial sample: PDF keyword /JS count = 0
Source: CUNA-uncashed check.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: CUNA-uncashed check.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious

Private

IP
192.168.2.1
192.168.2.3

ID:	458993
Product:	CloudBasic
Start time:	01:20:55
Start date:	04.08.2021
Sample:	CUNA-uncashed check.pdf
Cookbook:	defaultwindowspdfcookbook.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS
MD5:	8bc64f6d8200077dd1b20dcb60e6b07a
SHA1:	6d2cbe3e6fc619376d906f6d4b95eb71b80e0c19
SHA256:	ff391ed81da3dbf1b72b40e0939193af6e9d6a67f1445dd3f3d45f0d2279d89e
Filetype:	Adobe Portable Document Format (5005/1) 100.00%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0	data	C902FC0AD9F4BD0B57B0D35FF8FD01BE	4B9758D3014386A9108CA956FC9460C2FDD1E50F	038A2E03DCB691A9FC51841AEA9BD84D623C9CFEC2E99D2E55284CC5EFA9E25D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0	data	C91CA85B49D248FF9BEA00A1FA51299C	DFBD50642CE4C8FF4001943DAE302EBCE1A1A3D4	84FBCFF90D657F35F57B3598C1AB81752DCD452393EEC275ED393E20585AB2CA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0	data	A48E698C3FF9DA47EB75F8503A0844B5	A841D68870D328EF549E4E32FE495120E003054B	7E2A9A5CD1B5F6190B307B8639B5C82EB62BCE103BEA6E659879CF310E70E9FE
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0	data	71BA03EBC73862E6409560AAE64F5084	F789ED29F605E8CFA96A5062E6F4E355A917E819	915A0F27D986958DF26CADF9446F9500304CF45D8620B185B30E6DCA7E05E610
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0	data	1E252954D8D7BBD096CB0D4503FB4223	1461E24582A1F1015EDD5FD5270920D8E3BC412C	B654AC6C0E1FAB5FBB61CC446C5C3B6716DA234DAFD266D4B4F30F76D0ECD7DE
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0	data	CC6BE06BB35A7F0B2702BA157334A2A3	98980D0FA82831DECCEA39C604E5D7BA282CA349	C45A2FCB62798326C3533B0AA81CFEF9B86712BBB211475377E2FBEC83EB1613
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0	data	5E04FB87131A82350CE827E995917637	DCF98C0CEF9AB8A65D96A10B31408D041F3839C7	74899002F23C16632AD33C1BEB31BCE2C9779AE8D9185FC90606E77CE0C5A244
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0	data	54D7B47FF3A3DC313FB4DD78BD9322F6	BE49C8988DD55CB9F2FA0D3CF351DA38EFA80B6F	7F61FB24DDA21E509B0069CBFB328D1A485AC8761AAEC359CF218ABA859399AC
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0	data	CE7CD70B8717B826F37AA850B22962CA	F91D6B304D477D2F6BCDD63F1DFC2E5B9D99D89A	22AC4FB657348AC1FDDA70C36E134505D4AAAC8957D79EDC5D0CC24B5AB9D31D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0	data	88A28501A0ADEC78830858E86B856523	24D524340CCB536C258EF754A2A70A8487FD6DF6	4BC29E0EC8C43E9AEF34D00CA8842D89C104B99061146DE3F512CF41EF202E38
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0	data	104A0E14339D6512E7A9040684F17EBA	E8CEA19DB49D817E1FE16229CFB06278298C815B	B1ADEAFB87688C58049AA1F750A6E22F32C58AC4F0A3C490AF3B00A2FB8C3EF1
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0	data	E2D0A9BEAE6FD53CD93C8FC2B333F6EF	848D2DF3E7533F42352BBE454F49DEE1B86DDB13	3861129FC70DDD4291B8A12B3C79D4AC9903F84EE1A00A49C8ACD56B423140F2
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0	data	66482B47741587722FDB82D5FDCAF954	F8B9B7A415AE232F08EB5836ADAF59DD6C79EB0D	62008A55654A69E04FD262EED0DCCA59E48E359865102CD87C5624B41B3A6C48
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0	data	AB36269753A9291776D67A6A8A234681	AF395C1304D9D4EF6F1F4D8068616A83EA98A491	CB8D04ED232932242F9E59EDAD398283202B29A81DFF5D7DC598D54FBFC5FE48
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0	data	337F4551AD4796024811102F3B02E40B	1762AC6C82189FA8DE19F941FEBF88C728967E2C	8CD713C5D51C2B8591206E58C005F8EBBA84C3E3FB45B08FC54D4E06C98BD6D3
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0	data	D98D4BD3053286FA6D540EA158F135BF	0750AB12878C313F8998E83B9903151ACEDBE8A2	F290C485E3C3FA0830F24711A15223EDE68B46CAAC856A2D21332F5CA8EE5C50
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0	data	DA656468B51AB2FDE2AA19F66428B652	84E666AB4957F029671E0AE5F6544CFFA52331EF	7DE9372B0125AD030115DD7C886EA06B9E968A9C4A7C1DDBD85A88E735098E86
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0	data	4461DDDC0E2E460D74A120971C6BF5B0	349FEE48A87F6CA86E052B74CBE6A4EFC9E95E5A	879F80E29CADAFC74A8F911BB2725C9F8A99F932494457273DE57BF5E249394C
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0	data	6988E4A2906A49AA3303CFBE23FE02C7	433A5DFA36AA384679AD6A9098F425E41986E07A	7E6C948EE07804D357AED084FB1AAD2462EEA1B717B1BCDDD1415807068DA485
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0	data	FE7EE665D0FF5ED1FBC95F5FB8605CE8	4367CCE85588D91A1A5758A0B9641D1A8C03245D	E6C2B46555F8CF1CD02DB4ABF40A0F6A1EEE54AB6B26A69E576079FC932928EA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0	data	CC45D338885CC922CD4DFE9FCBC06934	F2AD2277ACB0006F3EB0F3CB2231433EAC06EA67	8D3CAC93D22CE01242B0F71BCA34F55EF35FCF04C577FB1FAFAA4F3CDC2EDBB2
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0	data	53F53E99C43DB1234A696941AA575BAB	E6E1062949F321DAAA5D648A83E383CE15D50BED	81343054CF3F6050A1B57731CE3A0E0299DC6C445FCEC09EAC654887D6E8025E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0	data	A26AC369C79C8BDA90DD31A8DEC1A9C6	5F1ED2FC3435931E2A1931E3CCA6C39475D9AC77	5C921ACAAEA36B73954EF3804D2726FD375D8EF236BA1F4B6D19921AC81B4F46
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0	data	7ADD62E888F8DC9FE7CF55037D0DE116	2EB06B3B1EB239FC30A4EA5173CF50C5FA08E11E	A63A265EEDA8514EBFAFE8E81B20A827FE91553CB7504075C7599E98672D2CEA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0	data	2625FD9116D6D711D2C860A9254AA7BF	3CBE9DD3D678274BA9696A74DD83871FE2AD0BB6	69639404BC95D1E2A53A6F67CCA3CCCC1D6A2989A84609D95E0E375EC471F5C6
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0	data	3E403BF3D244CBF7A61972A7628BC4CE	D3C371A7D2C30F60265D6028047711D9264098BD	F1F6BA6BCE5C47CF5BBBAC660F8B8AE7F32C0963534A0940A75C55100827F256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0	data	771EDD31E4F440B11F5B0100A4BF45A2	3563112FBFA728572A8BA387D23EFE4C20710DC8	2220214C340FCB04CEA4FC9448C6423304A79D8BB4DF156E9BA5979B62DCB3D3
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0	data	3B2E124CCCB0D0542B1BB7A492E42D0D	DF1E763BA5547D31EA6C9247EEC2CBFC5702CB8A	D6D083B688175A559B0C3CD15A869861D46774355F0D0A5B2B29720A8B392E4B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0	data	EB378D01055529351F61F3B00F11C853	A99444C6B209CD6FF1A395F8731BC9B03C1F2EDC	2488DF4D63786F6EECA3F86B73BBDB3078D9652723496C712FAEC4CF68B49F0E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0	data	513CBDD13A36F37BC54836EE29E3E850	DC8AC0902E9B14055D9B9DC8DF47D2CABE0957B6	7A497B33487DC5C3B26BB69AF96984C91829711BA991681F1175A4907A8404D2
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0	data	2D962F1A48CEDC40667AEE532D69D87F	A3A16F18031A3DF7CB212859319E82318657F340	0FC523EF7692B63BD49A7D8E4351F010EE3FF1D838F9375823D462F15212CC04
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0	data	6828BABCE1D5280B5A20A680326CA7DD	B490143F2428164515AB5B9416B9BD0BE233935E	2E1C253B6D759809C9A80D04464081FF681D20750630976109116F62FE18F206
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0	data	52D14A7C9AFDD89BCBFDEC308061CD81	24D0AD5DAA7DAD3EAA31B6DD20CE5C5B34690C31	BDBBDF29FF649A4C79B9E6455DF813EF8352F41A69422DE8885AC8E37814DDCF
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0	data	164186C50A46BA9050FBE394A7988D3E	B88577BC1630C27618C73FCD5AD6BA33032DFDA2	83D6B4A95F25E0BABAEECE57E1BD2BA11B7EA4982D6D08B296D84F6C9F5F5BD5
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0	data	B36B994F5EB92B636CB7D909D3A96792	37D7ADCC8B722BBAB562B7E31DCB0B319906A422	B020B2538FFABB3577A4BF0BC6A82AC6F07535C0335DA32BFF7F180A3DFA2F4F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0	data	B01DAAF3D8CE54FEE6E547097663EF1F	808425B260D2F6193DC776829223F8D14DBEE538	9D3F6E931E0A7C714F14957233329E62977300257B4D74A40E89BEC1C4B66FBC
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0	data	7B799798C5263412650BAB85A3DF1CDD	132D7433218A6C92DD6AC29FD5BD14DE835C07D1	6A11C3556D5B48E8CB879EB0EEE92F6D84FCFE6E7CF723D84478D8AB1184AB39
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0	data	1273821F51EBA7D5A4167ABD5177705B	AD0A5F7064C25A4791EA5EF7112B59B9D4245C4F	7FFD4A3B8941F289AA31EB7418D67595FA9F9D726A8CD6BD0875671ADF8E0F2A
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0	data	04DB62823789FA4AC82827AF28179725	BB9E613CF75ADE02382EA2E03B0ECF83B423AB03	1C0BF53CF36353F86C230B149A5EDEE2944FF6A8B31567126D73960E67F10249
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index	Maple help database	B7C4D40EE6649D26A3CBAD3901A3E6EE	214A702BA6DC3F4AC76C646B3E5BBF874EDBDC5A	6D76CC721E45C4F48793DEDF003ADB60C847396FC05CF9C67616406A48CD8137
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\the-real-index (copy)	Maple help database	B7C4D40EE6649D26A3CBAD3901A3E6EE	214A702BA6DC3F4AC76C646B3E5BBF874EDBDC5A	6D76CC721E45C4F48793DEDF003ADB60C847396FC05CF9C67616406A48CD8137
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG	ASCII text	7A5819DB72CD769F686CD6049D08AFC4	D0357C40731543D8863426F387A7030B5447F6F4	DF4E7F6E5E272BCF833CF76D4E504E262819F71FB10C86A9C88896396BC2EEED
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)	ASCII text	7A5819DB72CD769F686CD6049D08AFC4	D0357C40731543D8863426F387A7030B5447F6F4	DF4E7F6E5E272BCF833CF76D4E504E262819F71FB10C86A9C88896396BC2EEED
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links	data	05C31564F5D129E37A363E150A042D4D	FA62CA0C75E503D2C5E83FE48A9846CD48FFF480	64044EF0EAA6C2CCA1F6D5E32B8C1AD305D642A8AF7F91C89CACC2BF8642C5D1
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-210804005158Z-195.bmp	PC bitmap, Windows 3.x format, 117 x -152 x 32	64FC6EA23EF5DC55CF652DB164628A31	42884BA4B430DC42306191761005661BF1AD3DC6	979B46F8CBB54FEBA8491196EB01DC73B6A2A023834973B08D701B6F8F40F9D3
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages	SQLite 3.x database, last written using SQLite version 3024000	8343AA2836ECB833F904C1428E6CE514	E31592D62B7B2FAF0DEC3962D186F7E2F5E8FA3C	A3C5A02B43C86C5C78CF72C5F5A3881FCC5E1EB0D11A7405B34AFDCAED95A523
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	data	2207AB020B42D385C3C55D021249162A	52412E3E2120B083DC8A606651EF99B3CAD976B4	B90BB1F5DDF8B54BBE3CE94917881712898064990ECB4A65B2A0C2304DACC8EB
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt19.lst (copy)	PostScript document text	159ACCAFBA209FBC642499809CE2B513	6D94F57B63CE3BE71EDFB081ECB848B7D06EB2BE	ACE286E29DFDB19080E514F3447F46E0E4ED658263AC209A9B4BBCECC36139D3
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt16.lst.7112	PostScript document text	159ACCAFBA209FBC642499809CE2B513	6D94F57B63CE3BE71EDFB081ECB848B7D06EB2BE	ACE286E29DFDB19080E514F3447F46E0E4ED658263AC209A9B4BBCECC36139D3
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst (copy)	PostScript document text	159ACCAFBA209FBC642499809CE2B513	6D94F57B63CE3BE71EDFB081ECB848B7D06EB2BE	ACE286E29DFDB19080E514F3447F46E0E4ED658263AC209A9B4BBCECC36139D3
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt19.lst (copy)	PostScript document text	63B24EA3A13EAC476D6309BB202EF459	89502C393549C20C933E4553F51F74F3DBE085EF	2B4BE0BED267BBD4E4FFFC912A6C7ED6A8D4735DCF9B69FF90F37CDDEF4110EA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt16.lst.7112	PostScript document text	63B24EA3A13EAC476D6309BB202EF459	89502C393549C20C933E4553F51F74F3DBE085EF	2B4BE0BED267BBD4E4FFFC912A6C7ED6A8D4735DCF9B69FF90F37CDDEF4110EA
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin	data	0DFFDDEFF6FC78D54CF34F941951611E	95EFE700D08A72FF68EE4316573309A11CB46C35	6C8190897870867E5A2FA262652F70592A8EC20EFB728606E941334913A144E8
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_store	data	5899D998731A4A9337869D49C04FD8DB	15859C86F73A4F8DFEF2C64F4A9833F02242D893	A0127D63E20482835F839E787AC3B684BD65EF1FDD1D381810240E3F94876AB6
C:\Users\user\AppData\Roaming\Adobe\Acrobat\DC\Security\ES_session_storei	MS Windows COFF PA-RISC object file	F4DA58794E43BC05D7FBFB49300A3D25	A089EB6F634C19B95A804EBBDDB8854316DD87AF	B81A2359D689BF6611E529F93A285E3E1827D07E8953DFA92CDE0F85646136C0

Windows Analysis Report CUNA-uncashed check.pdf

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary:

Hooking and other Techniques for Hiding and Protection:

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private