Overview
overview
10Static
static
827-07-2021...de.pdf
windows7_x64
127-07-2021...de.pdf
windows10_x64
127-07-2021...58.doc
windows7_x64
1027-07-2021...58.doc
windows10_x64
1027-07-2021...58.exe
windows7_x64
1027-07-2021...58.exe
windows10_x64
1027-07-2021...1.docx
windows7_x64
427-07-2021...1.docx
windows10_x64
127-07-2021...1.docx
windows7_x64
427-07-2021...1.docx
windows10_x64
127-07-2021...80.exe
windows7_x64
1027-07-2021...80.exe
windows10_x64
1027-07-2021...PO.exe
windows7_x64
1027-07-2021...PO.exe
windows10_x64
1027-07-2021...ST.exe
windows7_x64
1027-07-2021...ST.exe
windows10_x64
1027-07-2021...ON.exe
windows7_x64
1027-07-2021...ON.exe
windows10_x64
1027-07-2021...21.pdf
windows7_x64
127-07-2021...21.pdf
windows10_x64
127-07-2021...PY.exe
windows7_x64
1027-07-2021...PY.exe
windows10_x64
1027-07-2021...AT.exe
windows7_x64
1027-07-2021...AT.exe
windows10_x64
1027-07-2021...ry.exe
windows7_x64
27-07-2021...ry.exe
windows10_x64
10Analysis
-
max time kernel
76s -
max time network
151s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
27-07-2021 09:08
Static task
static1
Behavioral task
behavioral1
Sample
27-07-2021/27-07-2021/Dike-Infocert-Upgrade.pdf
Resource
win7v20210408
Behavioral task
behavioral2
Sample
27-07-2021/27-07-2021/Dike-Infocert-Upgrade.pdf
Resource
win10v20210410
Behavioral task
behavioral3
Sample
27-07-2021/27-07-2021/ETL_013265_601_0758.doc
Resource
win7v20210408
Behavioral task
behavioral4
Sample
27-07-2021/27-07-2021/ETL_013265_601_0758.doc
Resource
win10v20210410
Behavioral task
behavioral5
Sample
27-07-2021/27-07-2021/ETL_013265_601_0758.exe
Resource
win7v20210408
Behavioral task
behavioral6
Sample
27-07-2021/27-07-2021/ETL_013265_601_0758.exe
Resource
win10v20210410
Behavioral task
behavioral7
Sample
27-07-2021/27-07-2021/FL_6110_32_75_21.docx
Resource
win7v20210410
Behavioral task
behavioral8
Sample
27-07-2021/27-07-2021/FL_6110_32_75_21.docx
Resource
win10v20210408
Behavioral task
behavioral9
Sample
27-07-2021/27-07-2021/IMG_1026001780541.docx
Resource
win7v20210410
Behavioral task
behavioral10
Sample
27-07-2021/27-07-2021/IMG_1026001780541.docx
Resource
win10v20210408
Behavioral task
behavioral11
Sample
27-07-2021/27-07-2021/Inv_7623980.exe
Resource
win7v20210410
Behavioral task
behavioral12
Sample
27-07-2021/27-07-2021/Inv_7623980.exe
Resource
win10v20210408
Behavioral task
behavioral13
Sample
27-07-2021/27-07-2021/New PO.exe
Resource
win7v20210410
Behavioral task
behavioral14
Sample
27-07-2021/27-07-2021/New PO.exe
Resource
win10v20210410
Behavioral task
behavioral15
Sample
27-07-2021/27-07-2021/ORDER LIST.exe
Resource
win7v20210408
Behavioral task
behavioral16
Sample
27-07-2021/27-07-2021/ORDER LIST.exe
Resource
win10v20210410
Behavioral task
behavioral17
Sample
27-07-2021/27-07-2021/REQUEST FOR QUOTATION.exe
Resource
win7v20210408
Behavioral task
behavioral18
Sample
27-07-2021/27-07-2021/REQUEST FOR QUOTATION.exe
Resource
win10v20210410
Behavioral task
behavioral19
Sample
27-07-2021/27-07-2021/Remittance Copy 22-07-21.pdf
Resource
win7v20210408
Behavioral task
behavioral20
Sample
27-07-2021/27-07-2021/Remittance Copy 22-07-21.pdf
Resource
win10v20210410
Behavioral task
behavioral21
Sample
27-07-2021/27-07-2021/SWIFT COPY.exe
Resource
win7v20210410
Behavioral task
behavioral22
Sample
27-07-2021/27-07-2021/SWIFT COPY.exe
Resource
win10v20210408
Behavioral task
behavioral23
Sample
27-07-2021/27-07-2021/WE09858577444.BAT.exe
Resource
win7v20210410
Behavioral task
behavioral24
Sample
27-07-2021/27-07-2021/WE09858577444.BAT.exe
Resource
win10v20210408
Behavioral task
behavioral25
Sample
27-07-2021/27-07-2021/inquiry.exe
Resource
win7v20210410
General
-
Target
27-07-2021/27-07-2021/Dike-Infocert-Upgrade.pdf
-
Size
166KB
-
MD5
79d72109de10fb216e198acc18fa2a9b
-
SHA1
5a6379f5049fc32a789b9ee352e4aeb81aa02e85
-
SHA256
997faf26c74e06deed8c11b029e87c5eb1e577b31f1be8646bb583be4d9bf131
-
SHA512
616057afa72f5c2e014e5a9e75b10dd6941968a5ee9430beac84214205953362242a3dd47cd6b8d5586e002c5475edbe01b820545b252406d3e1bfc0242c5417
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
Processes:
AcroRd32.exedescription ioc process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
Processes:
AcroRd32.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3686645723-710336880-414668232-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious behavior: EnumeratesProcesses 18 IoCs
Processes:
AcroRd32.exepid process 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
AcroRd32.exepid process 3980 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
AcroRd32.exepid process 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe 3980 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
AcroRd32.exeRdrCEF.exedescription pid process target process PID 3980 wrote to memory of 184 3980 AcroRd32.exe RdrCEF.exe PID 3980 wrote to memory of 184 3980 AcroRd32.exe RdrCEF.exe PID 3980 wrote to memory of 184 3980 AcroRd32.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 408 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe PID 184 wrote to memory of 3612 184 RdrCEF.exe RdrCEF.exe
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\27-07-2021\27-07-2021\Dike-Infocert-Upgrade.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=776D3D555A2184E3DB13D9215C9514C1 --mojo-platform-channel-handle=1640 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=1E4826F8D32A00BBB75C7A67772D7C6E --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=1E4826F8D32A00BBB75C7A67772D7C6E --renderer-client-id=2 --mojo-platform-channel-handle=1652 --allow-no-sandbox-job /prefetch:13⤵
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=D4CF29D371A3AB0EB924C33800E5895F --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=D4CF29D371A3AB0EB924C33800E5895F --renderer-client-id=4 --mojo-platform-channel-handle=2072 --allow-no-sandbox-job /prefetch:13⤵
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=0DAF8794AFDFD8AA0EC3835641271AFD --mojo-platform-channel-handle=2328 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=AE1BE1B4D695FDAC50F649945BE0CF50 --mojo-platform-channel-handle=1780 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=5BCCC69C2116018142B365E2E3EBED32 --mojo-platform-channel-handle=2336 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/184-114-0x0000000000000000-mapping.dmp
-
memory/408-117-0x0000000000000000-mapping.dmp
-
memory/408-115-0x0000000076FA2000-0x0000000076FA200C-memory.dmpFilesize
12B
-
memory/1784-131-0x0000000076FA2000-0x0000000076FA200C-memory.dmpFilesize
12B
-
memory/1784-133-0x0000000000000000-mapping.dmp
-
memory/2392-135-0x0000000076FA2000-0x0000000076FA200C-memory.dmpFilesize
12B
-
memory/2392-137-0x0000000000000000-mapping.dmp
-
memory/3220-127-0x0000000000000000-mapping.dmp
-
memory/3220-125-0x0000000076FA2000-0x0000000076FA200C-memory.dmpFilesize
12B
-
memory/3412-139-0x0000000076FA2000-0x0000000076FA200C-memory.dmpFilesize
12B
-
memory/3412-141-0x0000000000000000-mapping.dmp
-
memory/3612-121-0x0000000000000000-mapping.dmp
-
memory/3612-118-0x0000000076FA2000-0x0000000076FA200C-memory.dmpFilesize
12B