Windows Analysis Report
Send for Peter Bayliss.msg

Overview

General Information

Sample Name:	Send for Peter Bayliss.msg
Analysis ID:	756112
MD5:	7aee648f7e5934f4fd9738292ce01721
SHA1:	b0da84770c7cf47d5f6d09fbecf6e0ba7f11f314
SHA256:	a1e682ff53fb34ac511a618c6add7c26c6000f86a7e31c129e4772179310295e
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_13929_20386-20221129T1644340163-6624.etl

Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: classification engine

Classification label: clean0.winMSG@12/56@0/1

Source: unknown	Process created: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE C:\Program Files\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\Send for Peter Bayliss.msg
Source: unknown	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\R172JYD4\Peter Bayliss 273238652.pdf
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt16.lst.7052

Jump to behavior

Source: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious

Private

IP
192.168.2.1

ID:	756112
Product:	CloudBasic
Start time:	16:43:59
Start date:	29.11.2022
Sample:	Send for Peter Bayliss.msg
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 64 bit version 1909 (MS Office 2019, IE 11, Chrome 104, Firefox 88, Adobe Reader DC 21, Java 8 u291, 7-Zip)
Architecture:	WINDOWS
MD5:	7aee648f7e5934f4fd9738292ce01721
SHA1:	b0da84770c7cf47d5f6d09fbecf6e0ba7f11f314
SHA256:	a1e682ff53fb34ac511a618c6add7c26c6000f86a7e31c129e4772179310295e
Filetype:	Outlook Message (71009/1) 58.92%

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0	data	A60104E0D9BEBFAFF9E6A02277BC619E	B8A021B6A86097999BAE8BB6E5E8D4C1A01011F7	687ED671E22961560AD2199D786C9737581761D412CC05E853F93A10850323E4
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0	data	EE94B06144904009CB5659B80F9B76AA	A1802A6630298C38F33B9079B46FFE11B6D0F6F8	4D5E9A86FA6C3206C1F9076ACBA6F60AE8AE0707404053FE18D1F09DAB8AE97B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0	data	FAAAF321E1E13D575529F8B986FAAE02	D24A09D06394AB721C1B804D688653E7CBA68E2D	43176D88CEE60671471BCFC90B4494B48EFFFA5295F0F811B660648EB65D0E1A
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0	data	B5884DFD9042445C4D528315A782FA52	D24736D09AC9B518DC2BBF8928B63C438DDB834C	CD7EFBB1973005B992DA2E0081B7BCC5AF4C179106E9E0C7019EE16F35F3C68E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0	data	197F13FEC0ECBDA127D0648D8F2C9883	35183BF53F634548915B562A87A57841E341A33A	1EC4A9A2DE6764BE0D3A7DC7AA6E816DA8D395C790B81B49F4E05053DDFE3BC7
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0	data	9434C61DE0B5EA545E24C2D5C0401607	59205F144B1F1FFD6C7E303F5874B27751137B6D	B190C9D6D4112909B45DE9F5034208FE29763C6461B43E5B07982928A9DABB0F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0	data	6838E80ABBDA121A8BD013C13528472E	18485ADC12328D6B65B125C815A28F9EFFBB77B8	0771923851562F53BF5B8930E21C2E56601BC5F70BC4F240017EC323D7323A24
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0	data	11F2BCF9345ED60202E876F7C1F6657F	92347DF1552AFF43A5C5AA57486BAE42E41B0A96	CB0C949DD4E8D5D692B60EC009DDF83453B1A00A038E30E05189FBEC1A097B0C
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0	data	AF1A5C18D31352223A761CC5BF33EF35	A3AD07E6F0F89F3B391ACFAE63E1D741F063B1C2	45143E930D3FE1228BE628098AD7CAE5818A24FEE2706FCA39A0E8973B6E865D
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4ca3cb58378aaa3f_0	data	79567DDE1A1FA357DC51D981781AF246	67E19A44615AECB31B701B60DFA991116A37DC1E	4BD7404D746FA790E1CB5E52FFD3DDBE0C6FD2A912B9F999E229A75B927E78CB
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0	data	33DF68F8F4FE1B2B93A27951094DCD6D	F49062F036239DF95B884EE25F5D6896F965B2BB	032F534925CBFFBC185394791484A59CEEE8B4DBF1402F6E0F0716BF26B18892
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0	data	19214AA7999D29EE3834114F302E1404	1250D3D44AA7E96CDB5B26505E381F017635FC36	DB8B8B2E92146DE31F430EA290F8D4E098EFC65D11F3839155A191F193450263
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\64766d63a539c3ca_0	data	83624C19FE408487808928F55C8841C1	4451EF89087FAC790D016164B670298EA5BCDFF0	49851A12DEBFCF86971B8C6AEB309E0A2DD44B05FCE7528E3FC31BE5DFDB1CBA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0	data	CF5E95A3D557EC58740B39E8CAB8230F	9AA90493603A41DE18667890223593D3E6522788	2C9D636FB0778FA53ED25A534D13D3C8E573C841311C2C7D181758C26150C36F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0	data	2C67092037DF61CF1314A90AE1C3D2B7	8BED394DAC43CB9852187482899154196D7D30BE	5B9D2E48430E6CF72C63300F1FB2CD9112CC1EC08938F95B70B304C065F91713
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0	data	DBA8F0EAD3AF66467F855289BEB78B54	9D1613AD31F5DDE2942CDF455F91A661D152441F	637AE61B73A43D855352BB003AA27F05257F0093AC84C37A2288E722911F9403
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\72d9f526d2e2e7c8_0	data	E1978E7D3E7EF8A5718408475997B7E8	7D47625326A194E70BC1D4DEE446D1CC6311946F	93F9031C2F134181F59152C7AA7C461222921FD2E47D4848603453208A1D4E3C
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\78bff3512887b83d_0	data	979604FB7D02BE830AC0054117EA5D2D	6C185A8F53DF9AC7BE745E970201B7521ACE3D56	1DE8715B698EA5EF7478395C82D5F3FDAA83E3198CC1D7666327C10EBB2E9A7E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0	data	378D515EAEE8D64CDAB65A96348537E4	163F6BD1502AA2A6601D79118DEFB3A2EE15D44E	224D09FBAAC4FC940533E473CFF13C6F94D50C64DE6FF83DEF76EC3A5FDCF5F2
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0	data	9ED4DE80D9B5CA1107B8C9572ECA883C	AC672D2A0AEC12ABAD6D3522598C7F7F4414F7BD	F24E524143B8C16E7067739F60093EE238693C97C9189060E1E9307A15AB6E38
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0	data	E934B3D95A5AF7FBD273EAC69D5CC8D5	C4D6C1059CBBAC8940530783BC5EC4A9313AA6EF	83294445858ED0A7D6441091BFF6D1F0E186D2C0CAC8D6AB09D2519715CE2DC8
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0	data	837D76A6B2C47E5D213ED687F54C99DE	AEB3018A4405E89DF60CB4AE06D98E59E0152555	818A317624567CD3DB673D9CB4FB926BD1F1CC91826F6C9160B94C1382169EA4
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0	data	E303E9CCEFDE46762BA7CD49A0F09B0B	DEAA3D3E762844687A811F990A9C3AA7686DECC1	E363BBFEC534037BB8131BC0E262141F503A1BBBC35829A7BFBBC9A76A1B6470
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0	data	998E0C39AC484B3B16275CCD988E983B	5FC2967F620810B9D3AA61454B953EC3DE9B11F7	F4757A3D86C1FDEB73CA3C171B85FD6BF0B18149E449A4FB88044F7F0E4F6445
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0	data	3A494CC902394B97AFC22146D4D64688	7B2EA2A121BC6114E3E519528DE5EAAAC6A1D603	5CEFB2BEF2AD15B3D42447ACD8703CACE70313DDFCD06AA135074AECC26D7170
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0	data	93B17BAB278653FB6FFB8A9CE04917CF	39118EA6541889155091169F7E8FDD62804AEEAA	D75ABD6794031B072AAA9F0CB5FA8573C6CDDC0AA5D441460E79FB201337B072
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0	data	452F7210572685E3C53DBA47C6B5AA4F	22223A5DC2F456E52A8D92857E3508C3A0606356	B68A890C1B1BA991F8FE033BE9587BD64FE55664BB91019955B5559F89A17786
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0	data	EC7B5D3496B406BDF91C4508E8A33FBB	A97DC2C060D7287C8177784C11515BDF743BFA56	88E11C4865A43CBE99339652A7A5ADA20E77263A72D08BDE6E14434F67B4D085
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0	data	0665ADFE9441D10FA81C1CA1B5B24419	238792C9C6EF6A510E92C91CAF60394DECE3E4CE	ED5BC08DCCAFAB05ACBAB6D45B02D719ED8670629AF142E1BBD6D56B21EA1C6C
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0	data	A1EC951266806705258DD37B3C0A1E3B	22F93389680B175501E91604DE53098BFEE48FE1	CF625580039BF2041A32F1C511CBE9739F92B875B1DBDB769AE8B13D517B845B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0	data	FAC645386FC44352D6A57130CE1E12C7	1C775F0A87DB0704F0BA4FB3854D6B7FFD34E601	41B9E2CB3987C9A734ACF412C6B7FBAC59B64F9286942EBED0F4883A36671C8B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0	data	4D8211291E9198AEE0C31A59BA268A32	E6FE6AD26F04296420ECD987EF71A3AABE28CB49	DF002E4A5EC0A2829A0EF9277102917CD01C64668DFAE9534C3A5EA72F7A1176
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\e58e492b0f04240a_0	data	312677E11B2CBDC30F4F74D8B143C3E1	898AFC9E056ED7BF0E8256ED50C9F9A733A75B1B	E84E9F5F7AEE2D8C8719CB3930D559150465C416859D568DDAD84FBB9EB0374F
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0	data	17689DB208055395D56F59B39023FD12	4B5089057D5F82B620505ECCC3B88CEFB486F574	32C4B9ED8AC5E899E33B0375B80F8CCB3B94EC3FB0B095DC3DDF17BC28D6131E
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0	data	851A10D59BCE23A7F6CEA277A20B72E0	911B37A05467D63640FC98A0E0FC8EE7D01E7A9D	79EC88C343CB9C3B7D0E3363A599C01882D2ABAADD1302417B5F3589CA0CACBA
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0	data	4064CBB4C1D6FDB6FF893D718D015EBD	8BF63E99B3589241CE183A41B3419789097A1778	4CCEB99DB742616F0D5ADB63F685AA3AF10016A574A71EAA720433B9C2B9D485
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0	data	2F950D3E630848736FC605BC611EEC02	537B81D270FF8FC73C0C17E78009BDA15BF0D8C1	A8F07AD26EF151181E02975311A0E5E81BBFD981035D42157E9F1D546EF406EC
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0	data	C5EAE5F0F9E9C133FE0C47DEA31119DC	0F5EDDC881CF5306376D13A458A163EA7716F5A6	214428B113C6EDBF6C65AFDE8C40D6D031DAB0BBB986EBCE7206EB32FAB7A42B
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index	data	2E0D21983E2D8B57156E049BA4BA8E63	B7338C44B1A7231740A263F99B826F1A9A1B7985	1CB9ADC9FCF0F22D9895F0B906C6ED93BF4A887F8E31A9E6176A6EAA6EE02135
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\the-real-index (copy)	data	2E0D21983E2D8B57156E049BA4BA8E63	B7338C44B1A7231740A263F99B826F1A9A1B7985	1CB9ADC9FCF0F22D9895F0B906C6ED93BF4A887F8E31A9E6176A6EAA6EE02135
C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\the-real-index~RF4da3ea.TMP (copy)	data	2E0D21983E2D8B57156E049BA4BA8E63	B7338C44B1A7231740A263F99B826F1A9A1B7985	1CB9ADC9FCF0F22D9895F0B906C6ED93BF4A887F8E31A9E6176A6EAA6EE02135
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-221129154453Z-191.bmp	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54	307D0A0624D28461CE957D9B4966BA8D	D4D4A91CC75A0F1FD045A1D63DCB4FF711ACA22B	C03CEF03B1D77D01554AC89B46E70FD27C780D8C722BE57FE8E2291E0634EFC2
C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal	SQLite Rollback Journal	4F0C894324FD7D9D82DB96DEFB24D8FB	F20FDF5606C6B0ADBB9F60796DE2018005E98B19	719C0C22B21D02416AF4C6AA830FF0E95EDC4A2B78C69DC05B90F6208ACA8756
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt21.lst (copy)	PostScript document text	4D5E3CD969F14362210F0473720C5528	AFD90E9888759B809F78E87D5550B601A288A0A3	79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt16.lst.7052	PostScript document text	4D5E3CD969F14362210F0473720C5528	AFD90E9888759B809F78E87D5550B601A288A0A3	79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt21.lst (copy)	PostScript document text	4D5E3CD969F14362210F0473720C5528	AFD90E9888759B809F78E87D5550B601A288A0A3	79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt21.lst (copy)	PostScript document text	3455517A7EA370FB26E41F9C0D1F2AEF	0A1DE15B520E538FE48BB82DC29CFF12D772EC51	F29BE4937BB25A377D75F64271D1C3CB44992AEABC41F1D0ACAAF830E5FA40D5
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt16.lst.7052	PostScript document text	3455517A7EA370FB26E41F9C0D1F2AEF	0A1DE15B520E538FE48BB82DC29CFF12D772EC51	F29BE4937BB25A377D75F64271D1C3CB44992AEABC41F1D0ACAAF830E5FA40D5
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Reader\Files\DC_READER_LAUNCH_CARD	JSON data	24170E2E178CFE2687D0C22429680A90	129964684C6117FCC987E5646634625316F3BA67	04F40BA44E4D013016249EC9985D8E82406C360B351A7B10061E5ED05A42A18D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Reader\Files\DC_Reader_RHP_Banner	JSON data	87FB8DA8698B1F5A64424D17D5C1BACE	019126CDAFE21D1557B7D30783B2EAF1654ABD8F	FFFFC505F8994B06A02455E87B6B19FCE9DE279F539542733CD1BCD34BFC7B3D
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Reader\Files\DC_Reader_RHP_Retention	JSON data	1B73F6453BA3D7D707B12BCB2DE16E45	FB3F2F7734C5A11D97FC30A68B1C21370E917362	86130D602645670D080E3A5923174937AC6BFF5D5515782E3B9E9BCF4A9747AE
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Reader\Files\Edit_InApp_Aug2020	JSON data	13867ECE467350ECB969DEEAB9435F71	66A8489B349391B0E214800919ADF6C1293070F5	1B3C208CD509515706830156B83EF8310AD3760ACCAB8D56E934896E92738420
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Reader\Files\TESTING	data	DC84B0D741E5BEAE8070013ADDCC8C28	802F4A6A20CBF157AAF6C4E07E4301578D5936A2	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Reader\SOPHIA.json	JSON data	862CA30A296A8C6C2EEE351DD683E5ED	0CBE828C6E1AAC5129B19CF543F7DB60B437CAEC	E06812187855752DD6ED66A60B8EAEB9EB70E2F4A0C4B28F466048D92E61390F
C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin	data	7713B84E9FECEAC145461DD08F5BEB5A	3408398F08F740D4B4E1D850202F757C6F369EB1	0DA38ED808D54FE17BDEC0A143EE42409D9A7B7130F1878FF73C820DE0B8652E
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_13929_20386-20221129T1644340163-6624.etl	data	9A481E460AC947D72EEF4FD1CB57383F	7AEA79EB876414700069F4A7D015DE902299D1DB	6AF63254C2CDDCC05C70DC0067E64DCFE19A61E4AD1DB0C87C10D7D36A08546C

Windows Analysis Report
Send for Peter Bayliss.msg

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Windows Analysis Report Send for Peter Bayliss.msg

Overview

General Information

Detection

Signatures

Classification

Signatures

System Summary

Hooking and other Techniques for Hiding and Protection

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Windows Analysis Report
Send for Peter Bayliss.msg