Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
x3Z0zcwiAh.pdf

Overview

General Information

Sample Name:x3Z0zcwiAh.pdf
Original Sample Name:CE0170A8135D37D8B2FD9F701AB34996F5935B2AA9FC7035E02B3AF3C482A78A.pdf
Analysis ID:869250
MD5:9d424a909088c34527cecce57ec4bb9f
SHA1:e3bcc3837f91d88e8769523536a65bfafa4aafb9
SHA256:ce0170a8135d37d8b2fd9f701ab34996f5935b2aa9fc7035e02b3af3c482a78a
Infos:

Detection

Score:56
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Multi AV Scanner detection for submitted file
PDF has an OpenAction (likely to launch a dropper script)

Classification

Process Tree

  • System is w10x64
  • AcroRd32.exe (PID: 5456 cmdline: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\x3Z0zcwiAh.pdf MD5: B969CF0C7B2C443A99034881E8C8740A)
    • RdrCEF.exe (PID: 7084 cmdline: "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043 MD5: 9AEBA3BACD721484391D15478A4080C7)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Antivirus / Scanner detection for submitted sample
Source: x3Z0zcwiAh.pdfAvira: detected
Multi AV Scanner detection for submitted file
Source: x3Z0zcwiAh.pdfReversingLabs: Detection: 51%
Source: x3Z0zcwiAh.pdfVirustotal: Detection: 54%Perma Link
Source: x3Z0zcwiAh.pdfString found in binary or memory: https://www.upload.ee/download/14997302/52132a31bf081c8c8a49/Svchost.exe
Source: x3Z0zcwiAh.pdfReversingLabs: Detection: 51%
Source: x3Z0zcwiAh.pdfVirustotal: Detection: 54%
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeFile created: C:\Users\user\AppData\Local\Temp\acrord32_sbx\A9R1ughlch_1k6biy2_4d4.tmpJump to behavior
Source: classification engineClassification label: mal56.winPDF@8/55@0/1
Source: unknownProcess created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\x3Z0zcwiAh.pdf
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess created: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess created: unknown unknown
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeFile created: C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIconsJump to behavior
Source: x3Z0zcwiAh.pdfInitial sample: PDF keyword /JS count = 0
Source: x3Z0zcwiAh.pdfInitial sample: PDF keyword /JavaScript count = 0
Source: x3Z0zcwiAh.pdfInitial sample: PDF keyword /EmbeddedFile count = 0
Source: x3Z0zcwiAh.pdfInitial sample: PDF keyword /OpenAction
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOX
Source: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exeProcess information set: NOOPENFILEERRORBOX

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid AccountsWindows Management InstrumentationPath Interception1
Process Injection		1
Masquerading		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local SystemExfiltration Over Other Network MediumData ObfuscationEavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Process Injection		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable MediaExfiltration Over BluetoothJunk DataExploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
x3Z0zcwiAh.pdf51%ReversingLabsDocument-PDF.Exploit.Talu
x3Z0zcwiAh.pdf54%VirustotalBrowse
x3Z0zcwiAh.pdf100%AviraEXP/KAB.Talu.xqgvk

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

⊘No contacted domains info

URLs from Memory and Binaries

NameSourceMaliciousAntivirus DetectionReputation
https://www.upload.ee/download/14997302/52132a31bf081c8c8a49/Svchost.exex3Z0zcwiAh.pdffalse
    		high

    World Map of Contacted IPs

    • No. of IPs < 25%
    • 25% < No. of IPs < 50%
    • 50% < No. of IPs < 75%
    • 75% < No. of IPs

    Public IPs

    IPDomainCountryFlagASNASN NameMalicious

    Private

    IP
    192.168.2.1

    General Information

    Joe Sandbox Version:37.1.0 Beryl
    Analysis ID:869250
    Start date and time:2023-05-18 20:43:25 +02:00
    Joe Sandbox Product:CloudBasic
    Overall analysis duration:0h 5m 24s
    Hypervisor based Inspection enabled:false
    Report type:light
    Cookbook file name:defaultwindowspdfcookbook.jbs
    Analysis system description:Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
    Number of analysed new started processes analysed:4
    Number of new started drivers analysed:0
    Number of existing processes analysed:0
    Number of existing drivers analysed:0
    Number of injected processes analysed:0
    Technologies:
    • HCA enabled
    • EGA enabled
    • HDC enabled
    • AMSI enabled
    Analysis Mode:default
    Analysis stop reason:Timeout
    Sample file name:x3Z0zcwiAh.pdf
    Original Sample Name:CE0170A8135D37D8B2FD9F701AB34996F5935B2AA9FC7035E02B3AF3C482A78A.pdf
    Detection:MAL
    Classification:mal56.winPDF@8/55@0/1
    EGA Information:Failed
    HDC Information:Failed
    HCA Information:
    • Successful, ratio: 100%
    • Number of executed functions: 0
    • Number of non-executed functions: 0
    Cookbook Comments:
    • Found application associated with file extension: .pdf
    • Found PDF document
    • Close Viewer

    Warnings

    • Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe
    • Excluded IPs from analysis (whitelisted): 2.21.22.179, 2.21.22.155, 23.36.224.131
    • Excluded domains from analysis (whitelisted): ssl.adobe.com.edgekey.net, armmf.adobe.com, acroipm2.adobe.com.edgesuite.net, e4578.dscb.akamaiedge.net, a122.dscd.akamai.net, ctldl.windowsupdate.com, acroipm2.adobe.com
    • Report size getting too big, too many NtSetInformationFile calls found.

    Simulations

    Behavior and APIs

    TimeTypeDescription
    20:44:27API Interceptor1x Sleep call for process: RdrCEF.exe modified

    Joe Sandbox View / Context

    IPs

    ⊘No context

    Domains

    ⊘No context

    ASNs

    ⊘No context

    JA3 Fingerprints

    ⊘No context

    Dropped Files

    ⊘No context

    Created / dropped Files

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\05349744be1ad4ad_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):205
    Entropy (8bit):5.621995976318027
    Encrypted:false
    SSDEEP:3:m+lvns8RzYOCGLvHkWBGKuKjXKLNjKLuV5zfLktVXBiTFJrqzOJkvP5m1:men9YOFLvEWdM9QaotXi7Z+P41
    MD5:F536159A5057FE5B0C66054292E79800
    SHA1:306D9848AC5DBE67B1C4CC55A6ABB498C9AD932B
    SHA-256:5CBA1B6EBEF7BA6351B3494876244308012A871440FF810AD79A720FE4B6C7E5
    SHA-512:B62F0B07E012DB8367D7F3200184CC7BAE50ED977BA2ACB9D3D683334975D26F61BCD4678FBFA3B75E0415DFB234CDD2BF7E250FF60689DAB29A44492F70DF99
    Malicious:false
    Reputation:low
    Preview:0\r..m......M..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/reviews/js/plugin.js ...;{.Z/....."#.D..9....A.A..Eo.......X..............d.{v.^.G...d.W.:...P..k%..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0786087c3c360803_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):174
    Entropy (8bit):5.534533954565679
    Encrypted:false
    SSDEEP:3:m+lF9NX6v8RzYOCGLvHktWVDEeP+1Tkt7O98fZe/O+/rkwGhkg4m1:mi9NqEYOFLvEkFUot7a8Be7Ywcr1
    MD5:1898C7418757EA7312597A9BCC7E11C7
    SHA1:00966AB42062B1BB19592FEE6AAA4D85F4235B83
    SHA-256:5D86560829DFA69FAFD309DFDA7180CEFB8ED2EBEB65F914586B09CF166EAD11
    SHA-512:2C86119783C8DAC8385CBB6F28FA6EB3138EDA67936A0538076A012A639048788A67211DDB71883B165228F137513EE0F1E88DAA40DE01AF2C0D761D3360310A
    Malicious:false
    Reputation:low
    Preview:0\r..m............,....._keyhttps://rna-resource.acrobat.com/init.js .4.!{.Z/....."#.D.:.....A.A..Eo.......9...........1.x.'.vI..*|Z..o...+.4....0..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0998db3a32ab3f41_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):246
    Entropy (8bit):5.524030432604521
    Encrypted:false
    SSDEEP:6:mMyEYOFLvEWdVFLBKFjVFLBKFlQhux/OjtBiet/RlUoSjGY1:DyeRVFAFjVFAFwjLtZlUo6
    MD5:AFD46A39CAB308DF7EC7587EAB3E5E24
    SHA1:01B9CA68643653A66B456DB83F583ED133A8B0AB
    SHA-256:FF800313DE540752972D31F7222C6CB1B22F204A8359F9722BD8BADAAEA72740
    SHA-512:65B8C3A5B72D9195AEB32795018E8F0BFD1C3B484E5E640E50612FD57FC2CD8DF6BE7D8BED174BE9E3583EF5B9E0B920713980285DFEF5134B72BB8C03444898
    Malicious:false
    Reputation:low
    Preview:0\r..m......v...n......._keyhttps://rna-resource.acrobat.com/static/js/plugins/tracked-send/js/plugins/tracked-send/js/home-view/selector.js ..:{.Z/....."#.D.k*....A.A..Eo......!N.o..........hvDO.N.t@.....n.*...... ....A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0ace9ee3d914a5c0_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):232
    Entropy (8bit):5.664006872369721
    Encrypted:false
    SSDEEP:6:mNtVYOFLvEWdFCi5RsVkFjot39lTuiWulHyA1:IbRkiDxiR9lTjWus
    MD5:432622D5A5B7132C97CDFFC5DE9281FF
    SHA1:A745A245DF3FC84FCA2AC9422CF5E2589D923EDB
    SHA-256:DD758C3D602D97525C5B9D4EE7C3444DA40C4261BBF0AFFA2ADD20D59CA19D6D
    SHA-512:DFFAF9A912AFB44DD65600921919745873141C8760DA0E49BC4A3A17BB85268E990D8EBFAD090E62143F899528D32D08B5DA91E38539B881351ADCB9FB79B9E7
    Malicious:false
    Reputation:low
    Preview:0\r..m......h.....'....._keyhttps://rna-resource.acrobat.com/static/js/plugins/aicuc/js/plugins/rhp/exportpdf-rna-tool-view.js ....z.Z/....."#.D.. ....A.A..Eo.......m}...........8 P..a...R..Y....7.@..2Dm{..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\0f25049d69125b1e_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):210
    Entropy (8bit):5.6045826954181015
    Encrypted:false
    SSDEEP:6:m+yiXYOFLvEWd7VIGXVufyJtjt6cVyh9PT41:pyixRuJytjEcV41T
    MD5:A43DBD179C9BD2BEEF087190BBD834BA
    SHA1:7EF4C3E62607B84243413C191F4C87BF82560AD7
    SHA-256:99FCD73D6F6AFDA3564E3EA34576BE136B83C23AA4063DD7D8E56D80DAB104DD
    SHA-512:27AA9C99E5E60D0DC74B59302B76150D6784EC1E9595615D085BE96F58FB2C2268384D5E5FA33ED4B9F790D0E0F23EB61B3C6640F73B0CF2F074BEA22EA66801
    Malicious:false
    Reputation:low
    Preview:0\r..m......R...kP]g...._keyhttps://rna-resource.acrobat.com/static/js/plugins/app-center/js/selector.js .w%;{.Z/....."#.D.O4....A.A..Eo......=.~........k.Q.....-_..y.....O...>..1....A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\230e5fe3e6f82b2c_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):216
    Entropy (8bit):5.647156122295386
    Encrypted:false
    SSDEEP:3:m+lifll08RzYOCGLvHkWBGKuKjXKoyNjXKLuVVTvdUkt39//3lYo2sZI8xeGvP5y:mvYOFLvEWdhwjQuLt3NV3ZIl6P41
    MD5:E2A72BA43894EA56C0A5064E20466F47
    SHA1:9926582E857A604C3D4B790E6DE006249FA78B58
    SHA-256:1F2B76CB61F02B72F387FF4B138939BBCE296C99F16893BD09F8185E539B3984
    SHA-512:7A5E0F6FF36DD09D7ECAD815ECFB37358E085954EE3E4C55AE895054F142C6A97E1A3A00E48A33DF0BC4666D0D67A090514CF39892EC357CCA9692763394217E
    Malicious:false
    Reputation:low
    Preview:0\r..m......X.....V....._keyhttps://rna-resource.acrobat.com/static/js/plugins/sign-services-auth/js/plugin.js .).6{.Z/....."#.D?X.....A.A..Eo.......U...........].>....uUf..N...k......c..l.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2798067b152b83c7_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):209
    Entropy (8bit):5.567527481332831
    Encrypted:false
    SSDEEP:3:m+lZd8RzYOCGLvHkWBGKuKjXKX7KoQRA/KVdKLuVr299WkteNlVcyxMtv9EWm1:mJYOFLvEWdGQRQOdQ5jtiD6g1
    MD5:1F04D016108C944931B11B5123E62D6F
    SHA1:9709579F03A8B3BF129E950B0A375A696CB0CFD2
    SHA-256:060A67E313E00323FBE808C273201989CD02EE6B814F0648079C18089C35E8FD
    SHA-512:F62ACBC85100A8B91C2E14A22453CD69D2710371F17B9828C6521CC3EBD6FC86787B273040A1C1183F8BAC20626B9B85D225BA01D7604599800D0A9211D09D13
    Malicious:false
    Preview:0\r..m......Q..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-computer/js/plugin.js ...;{.Z/....."#.D1.4....A.A..Eo.......u............c..y/L....|y.n..C/I.....X7-ne.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\2a426f11fd8ebe18_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):179
    Entropy (8bit):5.5766614908982595
    Encrypted:false
    SSDEEP:3:m+lLp08RzYOCGLvHkfaMMuV7YfkUktDtNQMWqg4nRb7om5m1:mOYOFLvECML7mQtD0uR/41
    MD5:5757AB7ACA9170F84D6CA40A978CC0DB
    SHA1:795EBDCCAD7CE4471EFE44B3714FCACA8C79384A
    SHA-256:889EF4377F79EFDABD7558107A837D96B8ADF7DB8C3CA9A9BCEFEE9A7168E913
    SHA-512:45AC1FF3B036BC0DAFFFE21AD292567C6E4556FCCC64B830F4E98653425B9CB8F6584CC0E7B488C7E25C5C5D6D1412C25682486D563CFC7EAD06DB1B95466028
    Malicious:false
    Preview:0\r..m......3....<lb...._keyhttps://rna-resource.acrobat.com/base_uris.js ...!{.Z/....."#.DL3....A.A..Eo...................y...L<?W.Xi..A\Q3...J.}...d..~G.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\3a4ae3940784292a_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):214
    Entropy (8bit):5.520804483226742
    Encrypted:false
    SSDEEP:6:m4fPYOFLvEWdtuv+t0jtI3by0zBUKSAA1:pR3t0j23b
    MD5:DBCED4E559CE05C2AD12D5F7D115EAE7
    SHA1:A1C4ECD001034528B8420EF6405AA755051E4897
    SHA-256:2479A8DAEDB880A3340E72EC2A03012C87F57020B1354A02E3857659D3CD7E58
    SHA-512:2ECE3EA01013CF6D6F9F035EE94E07194DE00A5034645FFF9F441EE29C167B2F1177D0E289812B92B4F8C47F8C7EE548A4D098AE45BAEB6D8F93387E0FFBBB46
    Malicious:false
    Preview:0\r..m......V..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/search-summary/js/selector.js ...<{.Z/....."#.D.:B....A.A..Eo.......\Z.........Q..E.=....=h`t..t..3%A.F$..w..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\4a0e94571d979b3c_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):177
    Entropy (8bit):5.523181111363456
    Encrypted:false
    SSDEEP:3:m+l64HXlA8RzYOCGLvHkjXMLOWFv0i+Gi1Uktt/lWd1dn76KohyP5m1:md4HXXYOFLvEjMSWFvPS19tt/lWjUdyA
    MD5:8A4B654E4EC4FA5FC8D959287B6A7A0E
    SHA1:9682521DE63754B3C124277EBD29E8D80D10DF42
    SHA-256:4E2E961C134420F9F1D2C6AE7B9D9A459DFACEAE2226367E0D6FCDFBB1EA35A3
    SHA-512:E1F341434E29DB7CE170A0F65D83518285B79456FA20C868D9FF69B628D04FA2793AD0BB8647A8B07DA030C31E31320839EED97A26E04AF69AB345346E34836A
    Malicious:false
    Preview:0\r..m......1......5...._keyhttps://rna-resource.acrobat.com/plugins.js ...!{.Z/....."#.D.h.....A.A..Eo.......l...........PU ....t^.....a.k..u.7.M.BW6#}..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\560e9c8bff5008d8_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):187
    Entropy (8bit):5.598764503748294
    Encrypted:false
    SSDEEP:3:m+lpSUlIv8RzYOCGLvHkWBGKuK2fKVLI03/K/hfLktg//RUPqf9tsDMaPV44m1:mkl9YOFLvEWsfOLrK/hotg/KPqVyM+VI
    MD5:9EFFB3FEEC8B72852D60161DCD01CD4C
    SHA1:512A54198EACE0247B12B994C430D9A56D1B8A5F
    SHA-256:5DF410BBC14FCFA0BC1BF632D1C744EB0E67767ACD22F2C4C5596E4104DF78ED
    SHA-512:003D6B3D6FDC291BAA45164957D20DE1C4D5483A05115C73C1A57CF9340F7098129A6A0195BC4B16A3E6D6A4F0AD8E92B2B10CBA4641846319548AB96F6B29C9
    Malicious:false
    Preview:0\r..m......;...I......._keyhttps://rna-resource.acrobat.com/static/js/desktop.js ...0{.Z/....."#.DQ......A.A..Eo........5...........q.O...j....._y..L^z...?..@N..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\56c4cd218555ae2b_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):244
    Entropy (8bit):5.587986571321443
    Encrypted:false
    SSDEEP:6:mt9YOFLvEWdVFLBKFjVFLBKFlyINBTt26twSeKaT9pr1:URVFAFjVFAFtBTbtwSeKaTL
    MD5:9ECF49DB1E843604E5344FC2403A8F4B
    SHA1:9E80849D4D9738C4633232C119D0EA862FE56869
    SHA-256:DC5BE7F11F624E8B3C826298E9A6CAEE6E8B0DD52EEDA80BB10B0C3737617E77
    SHA-512:78E42207F56AE5F45371763B3D1B8AB100B5D29AC3B2FA921AFAE6D3D938A2F54083ADC8EE27A1F6E2831DDAEB0DE5581062A274609E75C3E96E50B2F7B5F569
    Malicious:false
    Preview:0\r..m......t...R.1<...._keyhttps://rna-resource.acrobat.com/static/js/plugins/tracked-send/js/plugins/tracked-send/js/home-view/plugin.js .e.;{.Z/....."#.D..<....A.A..Eo.......v................H...{...2../.k`..r4.C. .A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\6fb6d030c4ebbc21_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):211
    Entropy (8bit):5.518423690292057
    Encrypted:false
    SSDEEP:6:ms2VYOFLvEWdvBIEGdeXuvBt0jt83G11:BsR2Ese26j6
    MD5:90E9BBE004454E561C2362FD9BCA86F3
    SHA1:5ABC865FA2C2448CC88C3A9C367BD1A2F27D5324
    SHA-256:98EB49AF98D5C7721C389B7C8D718F43652D5B82977672BF4CAFDB5C73A324A4
    SHA-512:6552CD9A651D0861A376FA0508A9A88F2BC535BDD638D9999C34D352AACEB5DE2CE9F7484E7DA151566411B221FB905903121FA1B07FF2D7C41D9C6ED5B11A37
    Malicious:false
    Preview:0\r..m......S...]......._keyhttps://rna-resource.acrobat.com/static/js/plugins/add-account/js/selector.js ...:{.Z/....."#.D .*....A.A..Eo..................A.o]@r..Q.....<w.....].n\....A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\7120c35b509b0fae_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):202
    Entropy (8bit):5.61815825631675
    Encrypted:false
    SSDEEP:3:m+lOy08RzYOCGLvHkWBGKuKjXKrAUWCKLuV9Tey9Tkt5Rx4Z/7Ov9PPKMkvg4m1:maVYOFLvEWdwAPCQYeDtPxm7OhKlvA1
    MD5:ACE1935F5403E4D1B27C59FF95541965
    SHA1:4882D307643A88D50872C943D5F136A03938653F
    SHA-256:740573732794AABEFA2016725CBB7C9D81855874CCC5096AE18689D91140A853
    SHA-512:03133E2BA05F5524D52360DD2A2387B3C3779B0C1BA50DA4878378A1A9A283664A91B1E65CA971624935A72404E091CF7D46EA0D0906B216EC7C4DC5FD118F78
    Malicious:false
    Preview:0\r..m......J......{...._keyhttps://rna-resource.acrobat.com/static/js/plugins/home/js/plugin.js ...6{.Z/....."#.Dh......A.A..Eo.......=y\..........4T].....Tw.....(..b...EO....9.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\71febec55d5c75cd_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):211
    Entropy (8bit):5.586590914795672
    Encrypted:false
    SSDEEP:6:ms2gEYOFLvEWdGQRQVu0ZOii3jtCdFt1:B2geRHRQDG3j
    MD5:D8E369AB767DA9E6D5E279FDE61E427C
    SHA1:0192918478675224E7E033B22C4128AA9A460A45
    SHA-256:385B2706FCB70B068B7AB98B42D4EF96D2430141231BA085865AF6B73FDB0B77
    SHA-512:B312A5487BA68F228CA86BB1377E6187AFEE076ACFA9D6EF75FAE633F958921E14833AD57F0E45A3183929E377F40435922B73E035933EF67C2307131AF9BE74
    Malicious:false
    Preview:0\r..m......S...W.%z...._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-computer/js/selector.js .J.:{.Z/....."#.Dr.*....A.A..Eo..................@..{o]...9o|..qY....T....{..u.b..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\86b8040b7132b608_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):206
    Entropy (8bit):5.622281650040131
    Encrypted:false
    SSDEEP:3:m+lerlyv8RzYOCGLvHkWBGKuKjXKX+IAHKLuV1XLtmktqFYoEnNWQ1SUm1:mzyEYOFLvEWdrIOQoLxt+YoEt1S/1
    MD5:0F2BE3549AEDE5184C99CC9EC2D9747C
    SHA1:DF9F7206ABA2E94BC17B84356933B8ECE606346F
    SHA-256:05188C215E7F543953D2E2D09D658AA54F78BF5AF2B808D0428F0F7D13067991
    SHA-512:E6C383149F41C94C17A22B4426D536082FE340215151B0BF54774A921655A51F86BAD1295AD2B96C2F2AB6B43AC3511FD5CECF65C08D2BDA1ED0428E64C21385
    Malicious:false
    Preview:0\r..m......N..../......_keyhttps://rna-resource.acrobat.com/static/js/plugins/my-files/js/plugin.js .X.2{.Z/....."#.D.J.....A.A..Eo.......G ..........t\a......x5.'OuE.C..@......x..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c159cc5880890bc_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):218
    Entropy (8bit):5.585123348396612
    Encrypted:false
    SSDEEP:3:m+lKcv8RzYOCGLvHkWBGKuKjXKoyNH/KPWFvlKllycUktcolwJNqww6U+5m1:mnYOFLvEWdhwyu6/yc9tcolwrqwK+41
    MD5:1A7A00F7A6610EC3B8D61B0BE9AA298B
    SHA1:57145BB1C89DB197BCBD8BC0413DFC9D575A0702
    SHA-256:0F1E9C3EA546DCAF297D9F065AD81119CDE0EECE407E06D64D4A62D1861BFBFA
    SHA-512:91A1AF985CC0612B5769544ADC8725F869D437658B01587D8346D2CC02AAA1C80F80A5433A93273E130313819B8019B14CF5AABA6F51C43F4E07EECFA9C539A6
    Malicious:false
    Preview:0\r..m......Z.........._keyhttps://rna-resource.acrobat.com/static/js/plugins/sign-services-auth/js/selector.js ..5{.Z/....."#.D.v.....A.A..Eo.......V.................7...o..a=.98I......(3.$G.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8c84d92a9dbce3e0_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):230
    Entropy (8bit):5.561287520666426
    Encrypted:false
    SSDEEP:3:m+l26Xa8RzYOCGLvHkWBGKuKjXKeRKVIJ/2NAJVKH/KPWFvRPk8mktv+/hX8AL2U:mYXYOFLvEWdrROk/RJbuLxtvXfO441
    MD5:33D3D56C6A8FCA4D89EC88A4336C4905
    SHA1:C8C06047662B82FD34BFF2051EB8DCB16ACE8132
    SHA-256:14A69D6694355D7500E1DEA5A140D34C33E9BD2355E88CEB178E955339D68E7C
    SHA-512:FB092C1F1FB86A1B1CC29FBDC6C39B4D4EAD7E57C8507B467F4BFF8A86143842C0988C9FE9F839F51D687DB5B52D186072D24C63FFB25091E6538854274A950A
    Malicious:false
    Preview:0\r..m......f...F......._keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files-select/js/selector.js .T.2{.Z/....."#.D}......A.A..Eo.......Re...........~..rw.+[....!.)?..f.U..(=.=.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\8e417e79df3bf0e9_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):186
    Entropy (8bit):5.567305610867358
    Encrypted:false
    SSDEEP:3:m+lhD4ll08RzYOCGLvHkWBGKuKdTSV9RxjG1UktVufzoIN1OFPL4m1:mmDEYOFLvEWXIPV8tV8zV1QPLr1
    MD5:E90F886C9CA93BD881BBC41B4457DE38
    SHA1:42A80E93AA1EB1513FE5CCF5CEC6C3FE79B8487C
    SHA-256:1B458F4C613EF34A3A19B9DCD410C09953C40D82DD2579AAE5D508249562797B
    SHA-512:2B513267985AA52C06FF4292321EE8C2F3FEC5EFFF85D0B126FBBDD9CD2A296AFE045A6F053741AE1BC1383C3262038B4B8A512EB4E2065EEB2258EACA7DC2AB
    Malicious:false
    Preview:0\r..m......:....f......_keyhttps://rna-resource.acrobat.com/static/js/config.js ..0{.Z/....."#.D.j.....A.A..Eo.......O\]..........~]...%s..<...n.f..<.....1#..U..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\91cec06bb2836fa5_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):207
    Entropy (8bit):5.603332751060552
    Encrypted:false
    SSDEEP:3:m+l+nq1A8RzYOCGLvHkWBGKuKjXKLNfKPWFv7eoU0WkttXH/u8D6EsEJeUm1:m52YOFLvEWdMAuTU0jtEEvsEJ41
    MD5:D58DFE9187D49C1F668859EA826BF1E8
    SHA1:D075390A4483B89A7835FFC43D1DFA09CA14DA9A
    SHA-256:99F0028FCCC0A2299B6D84E51AE4E87B69342203CBA5736DC6CD19FD09D1C6EE
    SHA-512:F5BDE55E844EDDDDD344C0397EF2DE4A141BB2DAEA1F89EBC4364E0C7DADF3B61518FAB6455A2EB39E9308B478886FB11D8D40EFEC209373C4B604A0A7A674F1
    Malicious:false
    Preview:0\r..m......O...a.Y....._keyhttps://rna-resource.acrobat.com/static/js/plugins/reviews/js/selector.js ...;{.Z/....."#.Dn.4....A.A..Eo...... ..2..........z._a...'.v.......4p3..1.']...A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\927a1596c37ebe5e_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):210
    Entropy (8bit):5.61256991448175
    Encrypted:false
    SSDEEP:3:m+lf1UldA8RzYOCGLvHkWBGKuKjXK9QXAdWKfKPWFvn90WktYIFoDb7T2/Mm1:mYilPYOFLvEWd8CAdAuT0jtYyong1
    MD5:30ED3B042C71E3C551341E93E34A33A5
    SHA1:CB6030DA3F0568DDAE2AB65425B028435D53367B
    SHA-256:E9BE1EC35D4313A13A322E7AB9AB666A848C957C9A4C18BE9A38365087C2DD96
    SHA-512:51248B5242BCFECBB9DFA64AF1A6B4A1E22B7BC87C41A11CA76876B705F6399F283F1F6ED1DC67D0784E72775B12E4B5770DC594B65796C91269804671760CFB
    Malicious:false
    Preview:0\r..m......R....|....._keyhttps://rna-resource.acrobat.com/static/js/plugins/signatures/js/selector.js ..#;{.Z/....."#.D+04....A.A..Eo......1...........c}.H7M=M..-.....Ix..R.l...}Rl.$q.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\92c56fa2a6c4d5ba_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):223
    Entropy (8bit):5.572820744435801
    Encrypted:false
    SSDEEP:3:m+l18t08RzYOCGLvHkWBGKuKjXKeRKVIJ/2oKPWFvCktrxLOe28WIJLkxwy4m1:mY8nYOFLvEWdrROk/Iu1tr5N16wG1
    MD5:B561907FF48EC00E749D01335446D351
    SHA1:133A6F76708A00B57F6D613957F679C5BFC5902C
    SHA-256:6B9AA41E58F409A45877D564DEEC87B691B18F77065D6F9BD3E30986266310EE
    SHA-512:07D25F30FF391DA6402A35E6FB7CA0B4E240C42E6891AB34D80CDAC47C998471ADF6026C562D8EC3D86F9D9B4B72FEC8A859088385AB8EEDCE0A0CAFBCDEEBBF
    Malicious:false
    Preview:0\r..m......_...h......_keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files/js/selector.js .F.2{.Z/....."#.Dj......A.A..Eo........y...........%.k.SZ..~W.....:)'B..ad......A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\946896ee27df7947_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):213
    Entropy (8bit):5.681807325818411
    Encrypted:false
    SSDEEP:6:mLrnYOFLvEWdrIoJUQwy/ut9t+WeJIi1:ehRcry/aAWeJI
    MD5:DE1691F02DB2A08BF5BAF683B5FD7D99
    SHA1:0BAE627FB375490EAC002D4D644073AED97DDEBC
    SHA-256:430E7E4B721D5E56796FFFF32263478C23868EF5B2D2671FF8C2396070704A6D
    SHA-512:78869C25AA56EF2C0B5E4184D72FDF91A6B04F07D13B2B0554EDF15AB349BDDD31AE758B911B2564736AA5A7CD154C06169338C0AA6C2B3502589E9B8483996F
    Malicious:false
    Preview:0\r..m......U..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-files-select/js/plugin.js .7.3{.Z/....."#.D.......A.A..Eo......`f.z.........;"./N_.,.:C..2....9L.H...3:...A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\983b7a3da8f39a46_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):208
    Entropy (8bit):5.5840968497332275
    Encrypted:false
    SSDEEP:3:m+lQ/pqv8RzYOCGLvHkWBGKuKjXKX+IALKPWFvVheynaRktHBt/P6mgmOZLhT7Uy:mOEYOFLvEWdrIhu/herCtHLnzgm2d/1
    MD5:F24DF49E219C57D1C8DE05BE2C816C8D
    SHA1:AB18A9C7A3053C57DE674C30A6B52ADF766F8610
    SHA-256:D6140DA925505A3488DB5CF2DED82301B8EDB687A364D428C865BE108D3D67AF
    SHA-512:ACD24827D7291299DCF75B94EF3CAC8D9717128FAC40E8AA4B4D9CF4C9082F396D606B21CC2D2695C364C4A11E6C78C2E7898A3A38FA8509B1DB2D0823F89063
    Malicious:false
    Preview:0\r..m......P....r......_keyhttps://rna-resource.acrobat.com/static/js/plugins/my-files/js/selector.js ...2{.Z/....."#.D<......A.A..Eo......'..+........Z.Z}Q..4.o....0+..[|..n:*..U.W.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\aba6710fde0876af_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):188
    Entropy (8bit):5.620974049832268
    Encrypted:false
    SSDEEP:3:m+l8UElLA8RzYOCGLvHkWBGKuKPK7Cvybivktd/lGBiaQ562HvpMm1:mAElVYOFLvEW1KFbi8trx56uvp1
    MD5:7D274C128CEEEAF63BA1A53BB7C6B454
    SHA1:05372159967FBAC6176C252AAB9B05A38539BD02
    SHA-256:9FC690DC7A0029EE925065BF349E4FC88AF96DFBFBE1F2BD2F543BB5E6DB8D4A
    SHA-512:F9FA390532F88A406090D5ECD537A227B8F059FE1132A91F0F5FB48CAEB39C443E6F1175D36B497FBA705BDFBFB7492111649E15DB78148C50594623F1AF4C27
    Malicious:false
    Preview:0\r..m......<...)6......_keyhttps://rna-resource.acrobat.com/static/js/rna-main.js ..z${.Z/....."#.D8.....A.A..Eo........*.........z?...SwC...^..y.....V..7R-O.....A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\b6d5deb4812ac6e9_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):214
    Entropy (8bit):5.642125461382875
    Encrypted:false
    SSDEEP:6:mWYOFLvEWdBJvvuMZkk9tXFTUDLYtmOZn1:xRBJ1L9dFYDcFZ
    MD5:51E6927E33CF8453BF9D7223CFB61CE9
    SHA1:C59491CBBF07F475EF7310012D8D51B660B71F58
    SHA-256:06BF7FBFC4CB3D13C7F490E3328FAB978A009468F25B7672933F2E0267EE498D
    SHA-512:7FDEF5548A804E80455EFA456188472260ED896D82B3F41FECD105E3FC36FE5815FA72FC9931A9ADA27442AFCD83F361BCFEFAE0FDD9A79B329A2902B28F3620
    Malicious:false
    Preview:0\r..m......V.....h....._keyhttps://rna-resource.acrobat.com/static/js/plugins/activity-badge/js/selector.js ...:{.Z/....."#.DR.3....A.A..Eo......................t.q..W.EZ....1...[.zC.7mD..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bba29d2e6197e2f4_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):211
    Entropy (8bit):5.641726851670929
    Encrypted:false
    SSDEEP:3:m+lxCq//6v8RzYOCGLvHkWBGKuKCH6U4LJzWHK7WFvap05WUktOBmNlnpSKGoSSh:msRPYOFLvEWIa7zp7/p9tumNt8VPu1
    MD5:69F7EE48BC4F418A2C69405FC73FD81C
    SHA1:192BC33D657002A509F3BD0B7FDDC4FF99075223
    SHA-256:75C57A867720B43E38184CE04D87F10DD16D78857C184EC639B21145E8854E1E
    SHA-512:763911356D92285D16F8770B06356FA3802BD164513ADFB747FAE8741DB46CFEA2741A96728453A32CB5EB3A0A23B1BCF3683273BA9A897A574B6988198300A5
    Malicious:false
    Preview:0\r..m......S...{.j....._keyhttps://rna-resource.acrobat.com/static/js/libs/require/2.1.15/require.min.js ...!{.Z/....."#.D<.....A.A..Eo......B..C...........L...Im.@.........E.nW...IP..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\bf0ac66ae1eb4a7f_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):208
    Entropy (8bit):5.596436272538276
    Encrypted:false
    SSDEEP:3:m+lQi9lC8RzYOCGLvHkWBGKuKjXKVRNUpXKLuVW/KTTkt19/f6F4XVAZ+8cV3vRy:mKPYOFLvEWdENU9Q3KTot3/CwiM3Y1
    MD5:108417BD6CB6EEAAF30F282910D255B2
    SHA1:298A1F92F90CE2CAB2B497A0A881A940DB8F1392
    SHA-256:E16E8C9382B77ECE42EC61A4692B012BA9C927B7F9C1AC8A8A865E36A98D401C
    SHA-512:87F853224E508A4DEF6F064EC30F24DA1E6CEB7F48449551516D2B445CFB19A713A7A9A49128BDCC5B21CE0309F3392BBE577D23C660D5C668549551F637F1AF
    Malicious:false
    Preview:0\r..m......P...Yft....._keyhttps://rna-resource.acrobat.com/static/js/plugins/uss-search/js/plugin.js ...6{.Z/....."#.DX."....A.A..Eo......;.h]...........M....m+lS..e.....<7.U.P8*.0K.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\cf3e34002cde7e9c_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):208
    Entropy (8bit):5.6330210825115286
    Encrypted:false
    SSDEEP:6:mQt6EYOFLvEWdccAHQZ2F3jthIjBRCh/41:XRc9Mk3jjIDi/
    MD5:D6F4064E3C897716B7F457C1FED4E4B7
    SHA1:091B04C14AFE833403E2D922305DFE87ED0899B2
    SHA-256:6D806BED247569C53994C0B6D844B2760AE6141DEFE383D5205E895382A5DC8F
    SHA-512:8655ACBFE4B30AB27582EA426EE1AC0C686C68B48CD5FDE05FFC70D0C50FE05BD7A4662836A372FB69128F2053A5348ECF135C42D1F6E969CDBE2AC80D754A78
    Malicious:false
    Preview:0\r..m......P...W3......_keyhttps://rna-resource.acrobat.com/static/js/plugins/scan-files/js/plugin.js .w.;{.Z/....."#.D.S@....A.A..Eo........EH........PJm...0x.x..RD...BB!@5..<..]....A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d449e58cb15daaf1_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):231
    Entropy (8bit):5.625483727467442
    Encrypted:false
    SSDEEP:6:mqs6XYOFLvEWdFCi5mhuxYetIFkULlF4r1:bs6xRkiXuF7LlF4
    MD5:9FC63E8F29A9D557F16718EC3D3EBBB5
    SHA1:D03FA7B4895F83A2A58583A6D89F2190E61BA248
    SHA-256:968D64AD4904F34253F3F85E6D94070B2F2275541B1E4E113015AFAD94362706
    SHA-512:953710892AFE3747D1411812AB817817DC156662E9936D7FFD724F348D370BF300D69F42430691516B6AEECAA44FB55D030C8AD91AD632E11A758EABAB8DC993
    Malicious:false
    Preview:0\r..m......g...~.I?...._keyhttps://rna-resource.acrobat.com/static/js/plugins/aicuc/js/plugins/rhp/exportpdf-rna-selector.js .>..z.Z/....."#.D.:.....A.A..Eo...................P...#4..l....5...5..).w.. .h.~..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\d88192ac53852604_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):215
    Entropy (8bit):5.537979923769992
    Encrypted:false
    SSDEEP:3:m+lPHYs8RzYOCGLvHkWBGKuKjXKXqjuSKPWFv4fyt80WktQPECcu1isLK5m1:mhYOFLvEWd/aFuUD0jt6EN941
    MD5:1735845206D45848D75F23E95A4FF9E0
    SHA1:7384E8FE6B4E0C9E78974636FD898991A6AA0706
    SHA-256:27DBBF8851B40866B3EB8A05009A26198E3EF28BD5F81FCF390E7C77C8B93B25
    SHA-512:9A83B63A847E1812EA260C0EFE86BE14F2BB99D514257F7DF2C34C49632F7574CB79A45ED142F13784B9BD6712F748BB8FCB9ACC0EEF5E246C8ED22F9E8FBC24
    Malicious:false
    Preview:0\r..m......W....w.m...._keyhttps://rna-resource.acrobat.com/static/js/plugins/my-recent-files/js/selector.js ...={.Z/....."#.D|&C....A.A..Eo......Y`.............a.f.m.i.o.p..3U5.....^...I.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\de789e80edd740d6_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):208
    Entropy (8bit):5.57862407592746
    Encrypted:false
    SSDEEP:6:mR9YOFLvEWd7VIGXOdQ1COnjtfBMqVd3G4K41:2DRuRYjZB9Vd2
    MD5:5A3BF06B70EDFD883EFDD3D80796239B
    SHA1:A11679838409730562D471DBE9D2A67BB0F059DA
    SHA-256:C1BE5B562C5003FECD2138BC3B3A8154A73D4993394514B593B0DE585CF1A179
    SHA-512:DCF08D12FE752DA341557C13BE2971F701A309C4E2099B3CD74FFDFFB32E47BDA0AD66BB008ABEA1AC11BC1A0D53EED373C07BD452F231E6B1CF68B1B8A34B8C
    Malicious:false
    Preview:0\r..m......P...y.p....._keyhttps://rna-resource.acrobat.com/static/js/plugins/app-center/js/plugin.js ...<{.Z/....."#.D6.5....A.A..Eo......0.R~..........y.$..$.v5j...T...z.]..._S....A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f0cf6dfa8a1afa3d_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):208
    Entropy (8bit):5.565713390203839
    Encrypted:false
    SSDEEP:6:mkqYOFLvEWd8CAd9QjS58jtTDuA424r1:+RQNogr
    MD5:E57662553DB16B2F8B22E3A4C9E1C57F
    SHA1:48FE4C51DB6C6FC2DC55F3DFFDDCFE2472A5DA4D
    SHA-256:C091CDD3418407569718598318D1E947AB48D33FE2F920107B3FAD9FA5152B18
    SHA-512:DF6BBDD7F947BBB2538EE9EF20D67D284ABE86C08FA59271D1BA34B5426125E0C7B8F1A214499AEECBDC2C3A9C599DE18463C12E090EE1836EA055745E9DE454
    Malicious:false
    Preview:0\r..m......P...gT....._keyhttps://rna-resource.acrobat.com/static/js/plugins/signatures/js/plugin.js ..0<{.Z/....."#.Dc`A....A.A..Eo......_;+u........#..@..k(v.8g..5.~_....]Pj.*..6.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f4a0d4ca2f3b95da_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):210
    Entropy (8bit):5.577999627407754
    Encrypted:false
    SSDEEP:3:m+lS5Etla8RzYOCGLvHkWBGKuKjXKVRNUp/KPWFvGoPKllSvLktodH/TAg2iHio9:moXXYOFLvEWdENUAuty/SvQtouyC8n1
    MD5:5289F85CCA78E6946FC739B57E275FE7
    SHA1:559CFCB70CF3ABF312D90CE499F3F0EE7393DF97
    SHA-256:EFF6B1C142F689FEB3E7C6DB133B7CF30AC2F7D5029053B8BEC7D2C56D085CF8
    SHA-512:838A03D9364A3432EFD11C92F6A1631843DF262188B56A53C4854492F9780FEA121920491C86AA98FBD45055B268346D84CDB399602BC21C1F3C69E2CA3C1082
    Malicious:false
    Preview:0\r..m......R..........._keyhttps://rna-resource.acrobat.com/static/js/plugins/uss-search/js/selector.js .#.5{.Z/....."#.D.V.....A.A..Eo.......H8........8.../...;.\\o....1..........+..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f941376b2efdd6e6_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):221
    Entropy (8bit):5.6218534433884235
    Encrypted:false
    SSDEEP:6:mQZYOFLvEWdrROk/VQiSMr9toVsLmB41:nRrROk/VDSMr9YN
    MD5:3E02086D8A88F92C75D4D8C6B8EEC8D2
    SHA1:E4D25439E62CE7650F7C16E74F0693BF74F2D512
    SHA-256:E94663F61A4FECDD98CFF4F2D8C3EF8BEA06368C50B91D42B943717C7A3646A0
    SHA-512:6257D2AD2A215B8AAD7DB92C8318CDD1FA5721CBF0C55B175DA548CA2F8AFC612A5D4E684DD0B3BE190473BE3275688885F98E57AA69F1FC92C4A8613AB5157F
    Malicious:false
    Preview:0\r..m......]......,...._keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files/js/plugin.js ..`3{.Z/....."#.D.......A.A..Eo......F..p........ ./.ev......N~..6.b.....$.j;:C...A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\f971b7eda7fa05c3_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):210
    Entropy (8bit):5.554442266407842
    Encrypted:false
    SSDEEP:6:mZ/lXYOFLvEWdccAWuWQSV6jtTLdm9741:qxRcu6jxLdu7
    MD5:3B3473BF69C94E1905DD28033AC8A891
    SHA1:208F54D988A88A92F0A1AD1001213E4A9B8851E7
    SHA-256:642CDC3DB97C008DB8536E20507C49A894DF5C873B975DF152690FFB283C8FA2
    SHA-512:DFA6BDBA63A4780DEF38C5297E09AEEE9277D15B03B067EEAF09A049767BFEBCB2D545A8DCA00417C15A7E1AB500164AEF5C999C4399FB2486E684A387797095
    Malicious:false
    Preview:0\r..m......R...F......._keyhttps://rna-resource.acrobat.com/static/js/plugins/scan-files/js/selector.js .A.:{.Z/....."#.Dt~*....A.A..Eo......(.t9...........U...I.>P...X...x..0U.~;m.x.k.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fd17b2d8331c91e8_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):204
    Entropy (8bit):5.5757281666613165
    Encrypted:false
    SSDEEP:3:m+lUg18RzYOCGLvHkWBGKuKjXKrAUWiKPWFvYliO8iTktH9/sB6shoq+Nem1:mMOYOFLvEWdwAPVu6iO8jtH9/sB6Jn1
    MD5:143521AD8E1F7C41E9C49FE30E995374
    SHA1:745866ABFFF3B197D784EDE869A2BCEEED6E7D45
    SHA-256:B688E7D51E7CC2392662467E3F1301520E20DFBE41B9F49B92C8D4C0FF6922F3
    SHA-512:A69712F01AB6B441BDB888F91DB6E3A3D18C779476E76F5BF23D7202DA9759275F26EEB889108E3381AB44CB642C6E21DA4F519E32A1C782DC0650D55A6AF912
    Malicious:false
    Preview:0\r..m......L....Ey....._keyhttps://rna-resource.acrobat.com/static/js/plugins/home/js/selector.js .._5{.Z/....."#.D.+.....A.A..Eo.........j.............k....F..D..O.n;[.1m.....=..A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\fdd733564de6fbcb_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):212
    Entropy (8bit):5.6347982562804955
    Encrypted:false
    SSDEEP:3:m+lUDflllla8RzYOCGLvHkWBGKuKjXKBRSJvBCvlKLuVzeL/63f0Wkt8SlltyN/S:m3PXYOFLvEWdBJvYQi8jt8DhcsBXIh1
    MD5:97508038964F4D4212FC892B11E94A6B
    SHA1:2FD452CFCFFAF409CB9A2467F58B5375EEED90A6
    SHA-256:5A60CDDBF3A82A1B64DA778A8A61B735B6A5A9543CE8C3BAEDEECF8270FC27F6
    SHA-512:B53572F6CB46ABC7D724CCEFA960B48B0F922E90AE5F93AF70C82D2C9580A73A71C11FE75D53BB804956E8442F0A5438031AA3BCA6E2C735C9D7329139FDE96A
    Malicious:false
    Preview:0\r..m......T......z...._keyhttps://rna-resource.acrobat.com/static/js/plugins/activity-badge/js/plugin.js ...;{.Z/....."#.D._5....A.A..Eo......R/.............k..`..N3.... ..d..$[.....{.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\febb41df4ea2b63a_0

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):228
    Entropy (8bit):5.585652899980231
    Encrypted:false
    SSDEEP:6:msPYOFLvEWdrROk/RJUQTJS5jt6tZc3Me/1:3RrROk/skSFU
    MD5:DCC4F55D543A38B64ABDAA326F7F641E
    SHA1:659C0E3A54F2CA5F166670A80CFBB0775155FF8F
    SHA-256:6A6DC053D36BAC0192C4E390DA0126DD0BE67C7CDEA252A317D67F5A5ACC36AC
    SHA-512:9741C65CAA663CE5F77F634A2F69032FAE1DE9CCF53B7F7C6D23D374BCD0C811609AA84EE53AC5FF6212146A7499837B75C4952404E8A234D66318A930358C91
    Malicious:false
    Preview:0\r..m......d...<.s....._keyhttps://rna-resource.acrobat.com/static/js/plugins/desktop-connector-files-select/js/plugin.js .q.3{.Z/....."#.D.#.....A.A..Eo.......U%).............9Q].8O.z....=..:.N.{....N{.A..Eo..................

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\temp-index

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:modified
    Size (bytes):1032
    Entropy (8bit):4.983360989715007
    Encrypted:false
    SSDEEP:12:QUPuEG5MTUn4JHGrMzlaZ2lXVD8HPtL8puUURXBPS1PEFd5tAuLQqiYAcgAgh2PU:wOTHHoMEZ2tVQHPSu+PEFXFEPYAMA
    MD5:E6380858BFFEF7AA535D0783B5C43ACB
    SHA1:EFB007C6C7DBCBCE29B08DD2FD3EF572D3EA8A56
    SHA-256:BB9630F029BE014A6139E6C2FF34EB11FC0B2A74D574DC388A9562B640FC3186
    SHA-512:FA4556C225A37E1083AA68BBFAB2B7B9B4DA0D3DD64CAA0BE3E357BCF527A828B223781A9D2B9D807B0FC35FDFE2FFEC212715C253E9FA8C0FE34313B0A5E95C
    Malicious:false
    Preview:....);!.oy retne....)........T............3.....1{.Z/..........v...q...."{.Z/..........C..M.....k...............#...(...k.............]...I....z.Z/...................z.Z/...........6<|....z.{.Z/.........<...W..J.z.{.Z/..............oB*.z.{.Z/...........a.....z.{.Z/...........;.y~A..."{.Z/...........P....V.."{.Z/.........F..=z;...1{.Z/.............o...1{.Z/...........*....1{.Z/...........2q......1{.Z/.........Gy.'.h...1{.Z/.........:..N.A....1{.Z/.............k7A...1{.Z/..........;/.....1{.Z/..................1{.Z/............P[. q..1{.Z/.........,+..._.#..1{.Z/..........J..j.....1{.Z/.........A?.2:....1{.Z/..............q...1{.Z/..........u\]..q..1{.Z/.........!...0.o..1{.Z/...........*......1{.Z/..........o..k....1{.Z/.........^.~..z...1{.Z/..........[.i..%...1{.Z/..........+.{..'..1{.Z/............MV3....1{.Z/..........@..x...1{.Z/.............D.4...1{.Z/.........+.U.!..V..1{.Z/..........~.,.4>...1{.Z/.........=....m....1{.Z/.........*)....J:..1{.Z/.........

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\the-real-index (copy)

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):1032
    Entropy (8bit):4.983360989715007
    Encrypted:false
    SSDEEP:12:QUPuEG5MTUn4JHGrMzlaZ2lXVD8HPtL8puUURXBPS1PEFd5tAuLQqiYAcgAgh2PU:wOTHHoMEZ2tVQHPSu+PEFXFEPYAMA
    MD5:E6380858BFFEF7AA535D0783B5C43ACB
    SHA1:EFB007C6C7DBCBCE29B08DD2FD3EF572D3EA8A56
    SHA-256:BB9630F029BE014A6139E6C2FF34EB11FC0B2A74D574DC388A9562B640FC3186
    SHA-512:FA4556C225A37E1083AA68BBFAB2B7B9B4DA0D3DD64CAA0BE3E357BCF527A828B223781A9D2B9D807B0FC35FDFE2FFEC212715C253E9FA8C0FE34313B0A5E95C
    Malicious:false
    Preview:....);!.oy retne....)........T............3.....1{.Z/..........v...q...."{.Z/..........C..M.....k...............#...(...k.............]...I....z.Z/...................z.Z/...........6<|....z.{.Z/.........<...W..J.z.{.Z/..............oB*.z.{.Z/...........a.....z.{.Z/...........;.y~A..."{.Z/...........P....V.."{.Z/.........F..=z;...1{.Z/.............o...1{.Z/...........*....1{.Z/...........2q......1{.Z/.........Gy.'.h...1{.Z/.........:..N.A....1{.Z/.............k7A...1{.Z/..........;/.....1{.Z/..................1{.Z/............P[. q..1{.Z/.........,+..._.#..1{.Z/..........J..j.....1{.Z/.........A?.2:....1{.Z/..............q...1{.Z/..........u\]..q..1{.Z/.........!...0.o..1{.Z/...........*......1{.Z/..........o..k....1{.Z/.........^.~..z...1{.Z/..........[.i..%...1{.Z/..........+.{..'..1{.Z/............MV3....1{.Z/..........@..x...1{.Z/.............D.4...1{.Z/.........+.U.!..V..1{.Z/..........~.,.4>...1{.Z/.........=....m....1{.Z/.........*)....J:..1{.Z/.........

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Code Cache\js\index-dir\the-real-index~RF4aead5.TMP (copy)

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):1032
    Entropy (8bit):4.983360989715007
    Encrypted:false
    SSDEEP:12:QUPuEG5MTUn4JHGrMzlaZ2lXVD8HPtL8puUURXBPS1PEFd5tAuLQqiYAcgAgh2PU:wOTHHoMEZ2tVQHPSu+PEFXFEPYAMA
    MD5:E6380858BFFEF7AA535D0783B5C43ACB
    SHA1:EFB007C6C7DBCBCE29B08DD2FD3EF572D3EA8A56
    SHA-256:BB9630F029BE014A6139E6C2FF34EB11FC0B2A74D574DC388A9562B640FC3186
    SHA-512:FA4556C225A37E1083AA68BBFAB2B7B9B4DA0D3DD64CAA0BE3E357BCF527A828B223781A9D2B9D807B0FC35FDFE2FFEC212715C253E9FA8C0FE34313B0A5E95C
    Malicious:false
    Preview:....);!.oy retne....)........T............3.....1{.Z/..........v...q...."{.Z/..........C..M.....k...............#...(...k.............]...I....z.Z/...................z.Z/...........6<|....z.{.Z/.........<...W..J.z.{.Z/..............oB*.z.{.Z/...........a.....z.{.Z/...........;.y~A..."{.Z/...........P....V.."{.Z/.........F..=z;...1{.Z/.............o...1{.Z/...........*....1{.Z/...........2q......1{.Z/.........Gy.'.h...1{.Z/.........:..N.A....1{.Z/.............k7A...1{.Z/..........;/.....1{.Z/..................1{.Z/............P[. q..1{.Z/.........,+..._.#..1{.Z/..........J..j.....1{.Z/.........A?.2:....1{.Z/..............q...1{.Z/..........u\]..q..1{.Z/.........!...0.o..1{.Z/...........*......1{.Z/..........o..k....1{.Z/.........^.~..z...1{.Z/..........[.i..%...1{.Z/..........+.{..'..1{.Z/............MV3....1{.Z/..........@..x...1{.Z/.............D.4...1{.Z/.........+.U.!..V..1{.Z/..........~.,.4>...1{.Z/.........=....m....1{.Z/.........*)....J:..1{.Z/.........

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):292
    Entropy (8bit):5.233114430340586
    Encrypted:false
    SSDEEP:6:kCjo8Cvlyq2Pwkn2nKuAl9OmbnIFUtvjo8rV11Zmwdjo80RkwOwkn2nKuAl9Omb5:kCjZjvYfHAahFUtvjZP1/djZ05JfHAae
    MD5:8521B0BCC526189AA189F5BC848FDF57
    SHA1:D1AF5D19797C653736B12234B1DE51D4457BB2AA
    SHA-256:28B1E6095C6EF7D34C62A497136794F738A7DF0B7641220020864DD41BBD6795
    SHA-512:DE3076C69731F8BC6790896CA8384EBA3891A5B946B126DFDF5173476660A7761CD966B18E758976BB8CEA93A5C9DDF90AB4A7C39A25257EEAF087CBB2BB239E
    Malicious:false
    Preview:2023/05/18-20:44:32.876 1c50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2023/05/18-20:44:32.877 1c50 Recovering log #3.2023/05/18-20:44:32.878 1c50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):292
    Entropy (8bit):5.233114430340586
    Encrypted:false
    SSDEEP:6:kCjo8Cvlyq2Pwkn2nKuAl9OmbnIFUtvjo8rV11Zmwdjo80RkwOwkn2nKuAl9Omb5:kCjZjvYfHAahFUtvjZP1/djZ05JfHAae
    MD5:8521B0BCC526189AA189F5BC848FDF57
    SHA1:D1AF5D19797C653736B12234B1DE51D4457BB2AA
    SHA-256:28B1E6095C6EF7D34C62A497136794F738A7DF0B7641220020864DD41BBD6795
    SHA-512:DE3076C69731F8BC6790896CA8384EBA3891A5B946B126DFDF5173476660A7761CD966B18E758976BB8CEA93A5C9DDF90AB4A7C39A25257EEAF087CBB2BB239E
    Malicious:false
    Preview:2023/05/18-20:44:32.876 1c50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2023/05/18-20:44:32.877 1c50 Recovering log #3.2023/05/18-20:44:32.878 1c50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old~RF4a6d39.TMP (copy)

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):292
    Entropy (8bit):5.233114430340586
    Encrypted:false
    SSDEEP:6:kCjo8Cvlyq2Pwkn2nKuAl9OmbnIFUtvjo8rV11Zmwdjo80RkwOwkn2nKuAl9Omb5:kCjZjvYfHAahFUtvjZP1/djZ05JfHAae
    MD5:8521B0BCC526189AA189F5BC848FDF57
    SHA1:D1AF5D19797C653736B12234B1DE51D4457BB2AA
    SHA-256:28B1E6095C6EF7D34C62A497136794F738A7DF0B7641220020864DD41BBD6795
    SHA-512:DE3076C69731F8BC6790896CA8384EBA3891A5B946B126DFDF5173476660A7761CD966B18E758976BB8CEA93A5C9DDF90AB4A7C39A25257EEAF087CBB2BB239E
    Malicious:false
    Preview:2023/05/18-20:44:32.876 1c50 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2023/05/18-20:44:32.877 1c50 Recovering log #3.2023/05/18-20:44:32.878 1c50 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

    C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Visited Links

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    File Type:Unknown
    Category:dropped
    Size (bytes):131072
    Entropy (8bit):0.008907738108328683
    Encrypted:false
    SSDEEP:3:ImtV/CuttMTLS/Jf0lt+urQTlD7vt/lcvmllP62/X:IiV1kTLLlousTxvv6m
    MD5:0A339004BCB425813505AE2871E61E20
    SHA1:9BDA040B5589E1B919A259DB212F4CE8E32AAA8F
    SHA-256:46828E139BE167C9E36B556EB137571DE93A29930C366CE0666B1385BC106517
    SHA-512:DA3CE56FFA0538D022A80F7F6DAE1E89586E27FC484E82CCCAADC9EE163BEBBEDA2CAB446D507C622BAE868086E382F5436E328418BB877FBBF0A2192CB61DF8
    Malicious:false
    Preview:VLnk.....?......).0k.....................................................................................................................................................................................................................................................U....n.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

    C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-230518184428Z-209.bmp

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:PC bitmap, Windows 3.x format, 143 x -152 x 32, cbSize 86998, bits offset 54
    Category:dropped
    Size (bytes):86998
    Entropy (8bit):0.007994691580567568
    Encrypted:false
    SSDEEP:3:5Eml/nasxRj:5Vl/Jj
    MD5:6FE0519CA02CF92B04AC967270CA27F8
    SHA1:1B25B8AA8D5B36CD7888FEDC2BA74F29F5BB3150
    SHA-256:601BAF7F82A563C87F5921968048CCDB9D87F8F0D163E7F1F7236B51E26C4CB6
    SHA-512:59C66A62F60853F4CEE44B5A1B3148B09A26785A6C256A40809C859C3CE5D993F81363EE8F2CC48545C441C92E4DF2D7C9A14AA742C9232AA5C171BA48BE6968
    Malicious:false
    Preview:BM.S......6...(.......h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

    C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:SQLite 3.x database, last written using SQLite version 3024000, file counter 16, database pages 15, cookie 0x5, schema 4, UTF-8, version-valid-for 16
    Category:dropped
    Size (bytes):61440
    Entropy (8bit):3.5687320129113793
    Encrypted:false
    SSDEEP:384:XeT9dThBtELJ8fwRRwZsLRGlKhsvXh+vSc:qkYZsLQhUSc
    MD5:815D4C366BC8F50D2762D8C1C6D47117
    SHA1:DC8958FA3A613A0FC054DD03EF45A916573A73BC
    SHA-256:0B3A88F03C5AEF073F221B152409941A27BE7403E95CB987E1FCE27C015D56A8
    SHA-512:8825C2D2BF01621F3D75C970C4B9DF6036FFB131CF4B7C5AF715D50700794A6F0C593A1C1BADEB399461A1583DDD313C07A2F56246C2AA9C6D344A44A6CDE494
    Malicious:false
    Preview:SQLite format 3......@ ..........................................................................$.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

    C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:SQLite Rollback Journal
    Category:dropped
    Size (bytes):8720
    Entropy (8bit):3.316720381925005
    Encrypted:false
    SSDEEP:48:7Mi2iomVQYom1Ckiom8Vom1Nom1Aiom1RROiom1Com1pom1jiomVKiom6SqQlmF1:7ACgkOhfCKWN49IVXEBodRBk1
    MD5:CA5908949309B6553A9A38412FEF676C
    SHA1:881C830F4C9C8C2A855AF75473591208D8CA5F0C
    SHA-256:F169DF000D3C149FA4258A69417E140EF3926E92A377D626E4AF34A5D0D6B3FB
    SHA-512:1C26FA42019AB7C82EA3253703930006EC97D3313D2CDFE4D43D77E3B53FA107D00122483D2A282744F1026BB6B997ED98C49BCF817BB4D6309BC1DCC8C8AA71
    Malicious:false
    Preview:.... .c.....i .h..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................W....<.W.L...y.......~........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

    C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt19.lst (copy)

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:PostScript document text
    Category:dropped
    Size (bytes):536
    Entropy (8bit):5.17576513886526
    Encrypted:false
    SSDEEP:12:T4RFQ8idRuMgxg6dxs3yBFTtDcSTAzidRuOPgxg601s3yBFDHpcSa:kNid8HxPs3yTTtPmid8OPgx4s3yTDHBa
    MD5:4D5E3CD969F14362210F0473720C5528
    SHA1:AFD90E9888759B809F78E87D5550B601A288A0A3
    SHA-256:79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
    SHA-512:B10C157945432CC8944E63A28CA3420CAD0C6B87BABC77BB5437DA5E3DF0CDEB657D410F28FA61D314E86269B8D1AC5972B0792D3E78787DFCE496EEE979DF64
    Malicious:false
    Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..

    C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt16.lst.5656

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:PostScript document text
    Category:dropped
    Size (bytes):536
    Entropy (8bit):5.17576513886526
    Encrypted:false
    SSDEEP:12:T4RFQ8idRuMgxg6dxs3yBFTtDcSTAzidRuOPgxg601s3yBFDHpcSa:kNid8HxPs3yTTtPmid8OPgx4s3yTDHBa
    MD5:4D5E3CD969F14362210F0473720C5528
    SHA1:AFD90E9888759B809F78E87D5550B601A288A0A3
    SHA-256:79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
    SHA-512:B10C157945432CC8944E63A28CA3420CAD0C6B87BABC77BB5437DA5E3DF0CDEB657D410F28FA61D314E86269B8D1AC5972B0792D3E78787DFCE496EEE979DF64
    Malicious:false
    Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..

    C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst (copy)

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:PostScript document text
    Category:dropped
    Size (bytes):536
    Entropy (8bit):5.17576513886526
    Encrypted:false
    SSDEEP:12:T4RFQ8idRuMgxg6dxs3yBFTtDcSTAzidRuOPgxg601s3yBFDHpcSa:kNid8HxPs3yTTtPmid8OPgx4s3yTDHBa
    MD5:4D5E3CD969F14362210F0473720C5528
    SHA1:AFD90E9888759B809F78E87D5550B601A288A0A3
    SHA-256:79D95D01FDE7FC7C890CD62734A7F203B12A5D44A56D6009D0E43E40D99682AE
    SHA-512:B10C157945432CC8944E63A28CA3420CAD0C6B87BABC77BB5437DA5E3DF0CDEB657D410F28FA61D314E86269B8D1AC5972B0792D3E78787DFCE496EEE979DF64
    Malicious:false
    Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..

    C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt19.lst (copy)

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:PostScript document text
    Category:dropped
    Size (bytes):9566
    Entropy (8bit):5.226610011802065
    Encrypted:false
    SSDEEP:192:eTA2j6Q6T766x626Oz6r606+6bfs6JtRZ65tsu6rtG16lMXY5B5Cfk:es4p0vTLcdfIfsmtRZEtsuatG1gMIzV
    MD5:63B24EA3A13EAC476D6309BB202EF459
    SHA1:89502C393549C20C933E4553F51F74F3DBE085EF
    SHA-256:2B4BE0BED267BBD4E4FFFC912A6C7ED6A8D4735DCF9B69FF90F37CDDEF4110EA
    SHA-512:2CB315DD00867DEE3A2CBC4017B59C53B41E817216FE0111A60947E1F0D81FF6767D8F7B5C406AAF9E6516BE716A086642AFFABBEFBE4C5B260437C89E3535EC
    Malicious:false
    Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:Type1.FontName:AdobePiStd.FamilyName:Adobe Pi Std.StyleName:Regular.FullName:Adobe Pi Std.MenuName:Adobe Pi Std.StyleBits:0.WritingScript:Roman.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobePiStd.otf.DataFormat:sfntData.UsesStandardEncoding:yes.isCFF:yes.FileLength:92588.FileModTime:1426577650.WeightClass:400.WidthClass:5.AngleClass:0.DesignSize:240.NameArray:0,Mac,4,Adobe Pi Std.

    C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt16.lst.5656

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:PostScript document text
    Category:dropped
    Size (bytes):9566
    Entropy (8bit):5.226610011802065
    Encrypted:false
    SSDEEP:192:eTA2j6Q6T766x626Oz6r606+6bfs6JtRZ65tsu6rtG16lMXY5B5Cfk:es4p0vTLcdfIfsmtRZEtsuatG1gMIzV
    MD5:63B24EA3A13EAC476D6309BB202EF459
    SHA1:89502C393549C20C933E4553F51F74F3DBE085EF
    SHA-256:2B4BE0BED267BBD4E4FFFC912A6C7ED6A8D4735DCF9B69FF90F37CDDEF4110EA
    SHA-512:2CB315DD00867DEE3A2CBC4017B59C53B41E817216FE0111A60947E1F0D81FF6767D8F7B5C406AAF9E6516BE716A086642AFFABBEFBE4C5B260437C89E3535EC
    Malicious:false
    Preview:%!Adobe-FontList 1.16.%Locale:0x409..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1426577652.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:Type1.FontName:AdobePiStd.FamilyName:Adobe Pi Std.StyleName:Regular.FullName:Adobe Pi Std.MenuName:Adobe Pi Std.StyleBits:0.WritingScript:Roman.OutlineFileName:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobePiStd.otf.DataFormat:sfntData.UsesStandardEncoding:yes.isCFF:yes.FileLength:92588.FileModTime:1426577650.WeightClass:400.WidthClass:5.AngleClass:0.DesignSize:240.NameArray:0,Mac,4,Adobe Pi Std.

    C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache.bin

    Download File
    Process:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    File Type:data
    Category:dropped
    Size (bytes):63598
    Entropy (8bit):5.4331110334817385
    Encrypted:false
    SSDEEP:768:PCbGNFYGpiyVFiC0ZFmAYGqB5mRxV0aolBXGQSnlO4Yyu:J0GpiyVFihFnYGqB5bB2QSnl9K
    MD5:6CE9B6F665C8A24C77C8BB44C43BD6B2
    SHA1:9D924D4D1E1480BE34549E8D925A882E468A1936
    SHA-256:F4F892BB84524C62DBC6389C8A77B3C95EEDE374565031D318A428A00423D054
    SHA-512:BA7FDE6B812CEFE73D67798D0B8A8F97C4DC6CE369062C435D5F2D7FA54BF55E703242FDE9B5FE861B8A5EB20702E90C36FECC1A289AB7C238BF9ED9CBE2F624
    Malicious:false
    Preview:4.382.88.FID.2:o:........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.94.FID.2:o:........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.82.FID.2:o:........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.93.FID.2:o:........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.107.FID.2:o:........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.103.FID.2:o:........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.116.FID.2:o:........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.75.FID.2:o:........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.89.FID.2:o:........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.85.FID.2:o:........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.98.FID.2:o:........:F:Arial-B

    Static File Info

    General

    File type:PDF document, version 1.1
    Entropy (8bit):0.015605843107496261
    TrID:
    • Adobe Portable Document Format (5005/1) 100.00%
    File name:x3Z0zcwiAh.pdf
    File size:5067668
    MD5:9d424a909088c34527cecce57ec4bb9f
    SHA1:e3bcc3837f91d88e8769523536a65bfafa4aafb9
    SHA256:ce0170a8135d37d8b2fd9f701ab34996f5935b2aa9fc7035e02b3af3c482a78a
    SHA512:5cfe3c19e0798053caae451cb265d8e672cf647fe007ab184db50f785ad0c2767e3bfa6c33a1479b96f2a24cf49a19dbe71d67e68c3e701eaa55a622e03239e7
    SSDEEP:24:DbKZ75Lgf63lB6E28MMJIWg6LtQm8coxSYapAakwOerXdr/3SlJiNno2fuxky88K:a5I6TJMKLimZNkmXdbOiN0e
    TLSH:AC367BD2765FDC9CD4D387F01F39FC72A8A6B00E05C068B9FD6C8206A34CE54A472644
    File Content Preview:%PDF-1.1..'''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''

    File Icon

    Icon Hash:62ceacaeb29e8aa0

    Static PDF Info

    General

    Header:%PDF-1.1
    Total Entropy:0.015606
    Total Bytes:5067668
    Stream Entropy:4.697633
    Stream Bytes:373
    Entropy outside Streams:0.014376
    Bytes outside Streams:5067295
    Number of EOF found:1
    Bytes after EOF:

    Keywords Statistics

    NameCount
    obj5
    endobj5
    stream1
    endstream0
    xref1
    trailer1
    startxref1
    /Page1
    /Encrypt0
    /ObjStm0
    /URI0
    /JS0
    /JavaScript0
    /AA0
    /OpenAction1
    /AcroForm0
    /JBIG2Decode0
    /RichMedia0
    /Launch1
    /EmbeddedFile0

    Network Behavior

    ⊘No network behavior found

    Statistics

    Behavior

    Click to jump to process

    System Behavior

    General

    Target ID:1
    Start time:20:44:21
    Start date:18/05/2023
    Path:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
    Wow64 process (32bit):true
    Commandline:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\user\Desktop\x3Z0zcwiAh.pdf
    Imagebase:0x10e0000
    File size:2571312 bytes
    MD5 hash:B969CF0C7B2C443A99034881E8C8740A
    Has elevated privileges:true
    Has administrator privileges:true
    Programmed in:C, C++ or other language
    Reputation:high

    General

    Target ID:3
    Start time:20:44:26
    Start date:18/05/2023
    Path:C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    Wow64 process (32bit):true
    Commandline:"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
    Imagebase:0x1310000
    File size:9475120 bytes
    MD5 hash:9AEBA3BACD721484391D15478A4080C7
    Has elevated privileges:true
    Has administrator privileges:true
    Programmed in:C, C++ or other language
    Reputation:high

    Disassembly

    ⊘No disassembly