ba9ab41442d061eb787066fb77b0f1613657a3a73f2c50aaab06dfd1532213a8

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 04:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
05048a6799be8ea6da0e2f65c37807ec.pdf
Size 244KB
Sample231225-e1l4zsghb9
SHA256 ba9ab41442d061eb787066fb77b0f1613657a3a73f2c50aaab06dfd1532213a8
MD5 05048a6799be8ea6da0e2f65c37807ec
SHA1 6cf614dbea69f4d1721796c57d2de77a5ddd17ba
SHA512 17d8b63bd0c2cd323fc73697c38239a14f8c4e2374793cce4366b89c7544370ec78e360ce34f332a3220c62feb8c0e357a3a452c50a793cde91a0562fdfdb204
SSDEEP 1536:DLK4+34uWqT44JMA4G5bZ3aMSZZ8cOxH/K1M/KL3BAi2TjJlJ/UfFOz9g5wyV7Jl:D3+bTVJHP3QZCs2lbJWwyhJdhAzdi
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\CMap\AdobeFnt16.lst.2672	AcroRd32.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\AdobeFnt16.lst.2672	AcroRd32.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\prc\AdobeFnt16.lst.2672	AcroRd32.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	AcroRd32.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	AcroRd32.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3803511929-1339359695-2191195476-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION	AcroRd32.exe

Suspicious behavior: EnumeratesProcesses 20 IoCs

pid	Process
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2672	AcroRd32.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe
2672	AcroRd32.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2672 wrote to memory of 4732	2672	AcroRd32.exe	92
PID 2672 wrote to memory of 4732	2672	AcroRd32.exe	92
PID 2672 wrote to memory of 4732	2672	AcroRd32.exe	92
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 2224	4732	RdrCEF.exe	95
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94
PID 4732 wrote to memory of 1416	4732	RdrCEF.exe	94

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05048a6799be8ea6da0e2f65c37807ec.pdf"
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2672
- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
  "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=16514043
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4732
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=772BA90C28E23EF3A68D6E560B51313B --mojo-platform-channel-handle=1800 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    PID:1416
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=9BE1EDA8382743B11709A84047770968 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=9BE1EDA8382743B11709A84047770968 --renderer-client-id=2 --mojo-platform-channel-handle=1752 --allow-no-sandbox-job /prefetch:1
    3⤵
    PID:2224
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=1F7B1D4BE04EB70785C13BE409F23391 --mojo-platform-channel-handle=2340 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    PID:2412
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=69EB60A1AC037F1E040697FFDE9DE2CC --mojo-platform-channel-handle=1992 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    PID:3484
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=C189F9149F3C84FC62CA03B12EFE7195 --mojo-platform-channel-handle=2104 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:2
    3⤵
    PID:4076
- - C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe
    "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=7223E5D6EC0F5EF08D91EA42E63B4223 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=7223E5D6EC0F5EF08D91EA42E63B4223 --renderer-client-id=6 --mojo-platform-channel-handle=2416 --allow-no-sandbox-job /prefetch:1
    3⤵
    PID:2288

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

ReaderMessages

Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
Size 1KB
SHA256 d9b3defaabe76765a363ea9dfc3e3b598f08c9eeff5becabd5bb24d3b91e5062
MD5 7319b126796069e135d3fd2bbaf5d3eb
SHA1 7ed290ba43dba5a49082025335aec8111aeaa0f2
SHA512 ff0f8dd4473a4d6f1fc5b330f27e5275d8ce71b9f08c646ef6053eaaed8d3264fffa703d9b6ccf29d48cc5a13a1d5070e78d39fcdd0029f9e03bf2fb66bfb437
MD5 SHA1 SHA512

Submit Download

ReaderMessages

Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
Size 17KB
SHA256 1270c32dae872c10244e631acbd58092096ecc547ddfdc781ebe39ba2e76ea93
MD5 1d04b29f39e899c787c450e74a5903af
SHA1 32da17947d4190e1da738c187f8c676ee7f713e9
SHA512 1e530ae10356cc587ab606bd3d40d327d11ded2a20237d7674ce9aa597bfd117c096df1d220ca1a6ef6fc8214d653f60d53d53b1f1d350afc512bd0c1786dc91
SSDEEP 24:TLiXlzkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9Mzm+Zs3tGl:TqlmFTIF3XmHjBoGGR+jMz+LhT
MD5 SHA1 SHA512 SSDEEP

Submit Download

ReaderMessages

Path C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages
Size 27KB
SHA256 9792e9fa4b8393b8370ea9055e174f3f013f7d32a0106ba879f97b1cc8a53f77
MD5 d6a1e372d930494a9e28aa6076335034
SHA1 296519e325f9c55e32d29db44cd497f92d25dfc1
SHA512 57a531f7964d4dec0358094bbcc70544e2f7feb884abac5ad948c7ad1af59cfb13c3a0b3fc66e31e47c2ee8a0451e00bef7de02c6894d35605d7d6fca54dea9f
SSDEEP 96:r49IVXEBodRBkTkVN9MAdxh8U84nCr84n:wedRBvVrThe4p4
MD5 SHA1 SHA512 SSDEEP

Submit Download

AdobeSysFnt19.lst

Path C:\Users\Admin\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt19.lst
Size 19KB
SHA256 03261e854c2c54bde3ffea03da3e51824a9fbcfb3ae50981d509d9a687c0293a
MD5 998a244c6c5d507a7e0a312260a83f99
SHA1 1aa8dde12aa3e20490717a18eae6e53a092e734d
SHA512 dd327127caea8d851a0a7b2007402c179e34a0e371506c45b1654de9cd101f8f3319843f00925c4de1255bea3cd33256521ff3b98b81f59d180ebe1e2413992c
SSDEEP 96:/h8VYLX7RL+KvpBr31HrXAHDB3A5nTXwjfGx/DGLlD5ZW0MGpZ87DVm2+H2fCoWU:/h8WLX7RPBD22aB1a
MD5 SHA1 SHA512 SSDEEP

Submit Download