Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
15/01/2024, 05:19
Behavioral task
behavioral1
Sample
5c3c53b8d179455b6f84d051541fe9a2.pdf
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c3c53b8d179455b6f84d051541fe9a2.pdf
Resource
win10v2004-20231215-en
General
-
Target
5c3c53b8d179455b6f84d051541fe9a2.pdf
-
Size
76KB
-
MD5
5c3c53b8d179455b6f84d051541fe9a2
-
SHA1
da0fa05679d50a07fcde911e4ca717be10d926ea
-
SHA256
967ef3a48e43444520fdd43fbe9c65df49c89605618017a1546706f32035f8b9
-
SHA512
42a5206d1e828b36e6315f139c2a05492757bbc780d379687d2f7cfdc18f9adb6aaf186c534ace9e68e5d53bf2817df8c680b7be334072c324b216e9bb216311
-
SSDEEP
1536:luiTt4aWwsj6tgc0j8wS0qjoNrbl+kxW1LCL8jo9LaSA:4iVWwsjS0jS0tzC1Lu8joRu
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3073191680-435865314-2862784915-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious behavior: EnumeratesProcesses 22 IoCs
pid Process 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3248 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe 3248 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3248 wrote to memory of 3576 3248 AcroRd32.exe 92 PID 3248 wrote to memory of 3576 3248 AcroRd32.exe 92 PID 3248 wrote to memory of 3576 3248 AcroRd32.exe 92 PID 3248 wrote to memory of 2816 3248 AcroRd32.exe 94 PID 3248 wrote to memory of 2816 3248 AcroRd32.exe 94 PID 3248 wrote to memory of 2816 3248 AcroRd32.exe 94 PID 3248 wrote to memory of 3244 3248 AcroRd32.exe 97 PID 3248 wrote to memory of 3244 3248 AcroRd32.exe 97 PID 3248 wrote to memory of 3244 3248 AcroRd32.exe 97 PID 3248 wrote to memory of 868 3248 AcroRd32.exe 98 PID 3248 wrote to memory of 868 3248 AcroRd32.exe 98 PID 3248 wrote to memory of 868 3248 AcroRd32.exe 98 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 3996 3244 RdrCEF.exe 99 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100 PID 3244 wrote to memory of 5036 3244 RdrCEF.exe 100
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c3c53b8d179455b6f84d051541fe9a2.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3248 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵PID:3576
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵PID:2816
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:3244 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=41C02BCEA78DD5F2EA52ABD8F7FAE374 --mojo-platform-channel-handle=1756 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3996
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=CD2B5A7D0357B4E78AA8F7796726B919 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=CD2B5A7D0357B4E78AA8F7796726B919 --renderer-client-id=2 --mojo-platform-channel-handle=1768 --allow-no-sandbox-job /prefetch:13⤵PID:5036
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=6296684178A4F6109EB40A186FE8420C --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=6296684178A4F6109EB40A186FE8420C --renderer-client-id=4 --mojo-platform-channel-handle=2160 --allow-no-sandbox-job /prefetch:13⤵PID:684
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=8D81F56B53CE3DC5628FF21807C925FD --mojo-platform-channel-handle=2560 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3268
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=3BC636CE6F188B15965C6F6864EADB0C --mojo-platform-channel-handle=1772 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4420
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=D542B1A6FB070B7FC203B7D4FF5215D1 --mojo-platform-channel-handle=2676 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3480
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=B5E2360C4D696302B6AF7E5A87E86905 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=B5E2360C4D696302B6AF7E5A87E86905 --renderer-client-id=10 --mojo-platform-channel-handle=2712 --allow-no-sandbox-job /prefetch:13⤵PID:4840
-
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵PID:868
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:5000
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD564b02a9ff4159688cd73c1c82b2218fc
SHA12cb5f0fd179a88d8d51e8bf23b7ede9aed4f3770
SHA2562cdafa758db6ef35917a6d4896a67d7f1ff96a7736ec001906f1d0069526031f
SHA5129c473f534453b751908e430bd162b28b98158d68bf066fa1239755d0b4d385ed8023bd73b88b79e9e431111bceba6ae43de3401c41a17b4143b63d2bbaf89fa3
-
Filesize
36KB
MD5b30d3becc8731792523d599d949e63f5
SHA119350257e42d7aee17fb3bf139a9d3adb330fad4
SHA256b1b77e96279ead2b460de3de70e2ea4f5ad1b853598a4e27a5caf3f1a32cc4f3
SHA512523f54895fb07f62b9a5f72c8b62e83d4d9506bda57b183818615f6eb7286e3b9c5a50409bc5c5164867c3ccdeae88aa395ecca6bc7e36d991552f857510792e
-
Filesize
56KB
MD5752a1f26b18748311b691c7d8fc20633
SHA1c1f8e83eebc1cc1e9b88c773338eb09ff82ab862
SHA256111dac2948e4cecb10b0d2e10d8afaa663d78d643826b592d6414a1fd77cc131
SHA512a2f5f262faf2c3e9756da94b2c47787ce3a9391b5bd53581578aa9a764449e114836704d6dec4aadc097fed4c818831baa11affa1eb25be2bfad9349bb090fe5