File: a640924fec7be22f49776f55607bf79e
Metadata
| HCPCS 2017 EBOOK.pdf | |
| PDF document, version 1.6 | 3660756 bytes |
| 2016-12-01 14:24:50 | |
| a640924fec7be22f49776f55607bf79e | |
| 05144d4241763dc1df8a60d3dbe39ac56cff03a0 | |
| 41fc1aaf0584b38342d0a7b404572ffad35de5b228e2df7d18fb645ad6a1d87d | |
| 707c7e6a149e18c32cbbcc7abf56b43a3265f00689b8245924ed8183f0056def9a71d4ec5b93d6dc74fce991590210b0d6306d0a2fb90d0b905b316e6046580e | |
| 49152:LaHLLIqs8X4Sr3+U87AQXnMi6iqIbOtJaCxcs88d4IH1K6hCX5b1kOJQVLGW1vza:mHL3zVz9vcbVqIiuYcsYIVLkML/ANx | |
| N/A | |
| N/A | |
APTNotes
Cyber threat intelligence reports associated with a640924fec7be22f49776f55607bf79e.
Cyber threat intelligence reports associated with a640924fec7be22f49776f55607bf79e.
Domains
Domains the malware sample communicates with.
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
HTTP requests the malware sample makes.
AV Detections
AV detection names associated with the malware sample.
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Registry keys created by the malware sample.
| HKEY_LOCAL_MACHINE\Software\Adobe\Adobe Acrobat\9.0\Security |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\ORO |
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\IMM |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers |
| HKEY_CURRENT_USER\SOFTWARE\Microsoft\CTF |
| HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\SystemShared |
| HKEY_LOCAL_MACHINE\System |
| HKEY_LOCAL_MACHINE\System\Acrobatviewercpp304 |
| HKEY_LOCAL_MACHINE\Software\Adobe |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Installer\Migrated |
| HKEY_LOCAL_MACHINE\Software\Adobe\Repair\Acrobat Reader\9.0\IOD |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Language\current |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Installer |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Managed\S-1-5-21-1547161642-507921405-839522115-1004\Installer\Products\68AB67CA7DA73301B7449A0400000010 |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\Software\Microsoft\Installer\Products\68AB67CA7DA73301B7449A0400000010 |
| HKEY_LOCAL_MACHINE\Software\Classes\Installer\Products\68AB67CA7DA73301B7449A0400000010 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68AB67CA7DA73301B7449A0400000010\InstallProperties |
| HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Installer\Migrated |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Distiller\9.0\Installer\Migrated |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Elements\9.0\Installer\Migrated |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Installer\Migrate |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Language\path |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Language\path |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Language\select |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Language\next |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Language\next |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Language\UseMUI |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AdobeViewer |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVGeneral |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\SDI |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Originals |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVPrivate |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Private |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Private |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Hotfix |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Hotfix |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVGeneral |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\AcroRd32.exe |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{20D04FE0-3AEA-1069-A2D8-08002B30309D} |
| HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32 |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{475c7950-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{475c7952-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{475c7952-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{475c7950-e3d2-11e0-8d7a-806d6172696f}\ |
| HKEY_CLASSES_ROOT\Directory |
| HKEY_CLASSES_ROOT\Directory\CurVer |
| HKEY_CLASSES_ROOT\Directory\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced |
| HKEY_CLASSES_ROOT\Directory\\ShellEx\IconHandler |
| HKEY_CLASSES_ROOT\Directory\\Clsid |
| HKEY_CLASSES_ROOT\Folder |
| HKEY_CLASSES_ROOT\Folder\Clsid |
| HKEY_CLASSES_ROOT\CLSID |
| HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046} |
| HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\InProcServer32 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Type 1 Installer\Type 1 Fonts |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVConversionToPDF |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVConversionToPDF |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVConversionFromPDF |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVConversionFromPDF |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Language\current |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Intl |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVPrivate |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Intl |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\RIF |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\RIF |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Selection |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Selection |
| HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown |
| HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultExecMenuItems |
| HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultLaunchAttachmentPerms |
| HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe\Acrobat Reader\9.0\FeatureLockdown\cDefaultLaunchURLPerms |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Originals |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVDisplay |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVDisplay |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004 |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Ole |
| HKEY_CLASSES_ROOT\AppID\AcroRd32.exe |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\ComputerName |
| ActiveComputerName |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Workflows |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Workflows |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\SDI |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Annots |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Annots |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVAlert |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVAlert |
| HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat |
| HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0 |
| HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\DiskCabs |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Collab |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Collab |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVTracker |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVTracker |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\TaskButtons |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\TaskButtons |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AutoSaveDocs |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AutoSaveDocs |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AdobeViewer |
| HKEY_CURRENT_USER\Software\Adobe\Adobe Synchronizer\9.0 |
| HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.1024\AVPrivate |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Security |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Security |
| HKEY_CURRENT_USER\Software\Adobe\Adobe Synchronizer\9.0\Acrobat.com |
| HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\9.0\JavaScriptPerms |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Collab\cDocumentCenter |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Collab\cDocumentCenter\cSettings |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Collab\cEmailDistribution |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Collab\cEmailDistribution\cSettings |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Collab\cInitiationWizardFirstLaunch |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\JSPrefs |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\JSPrefs |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004\SOFTWARE\Microsoft\Cryptography\Providers\Type 001 |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Strong Cryptographic Provider |
| HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Offload |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Preview |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Preview |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Access |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Access |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\FormsPrefs |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\FormsPrefs |
| HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96E-E325-11CE-BFC1-08002BE10318}\0000 |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM |
| HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ICM\RegisteredProfiles |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\RememberedViews |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\RememberedViews |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AVBookmark |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\AVBookmark |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\TrustManager |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\TrustManager |
| HKEY_LOCAL_MACHINE\Software\Microsoft\COM3 |
| HKEY_USERS\S-1-5-21-1547161642-507921405-839522115-1004_Classes |
| HKEY_LOCAL_MACHINE\Software\Classes |
| \REGISTRY\USER |
| HKEY_LOCAL_MACHINE\Software\Classes\CLSID |
| CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4} |
| CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\TreatAs |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4} |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocServer32 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocServerX86 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\LocalServer32 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocHandler32 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\InprocHandlerX86 |
| \CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\LocalServer |
| HKEY_CLASSES_ROOT\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4} |
| HKEY_CLASSES_ROOT\CLSID\{7B8A2D94-0AC9-11D1-896C-00C04FB6BFC4}\TreatAs |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ |
| HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ |
| HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ |
| HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\\Ranges\ |
| HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\ |
| HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\C\ |
| HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\*\ |
| HKEY_CURRENT_USER\SOFTWARE\Classes\PROTOCOLS\Handler\C |
| HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\C |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\LayoutAndZoom |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\LayoutAndZoom |
| CLSID\{B801CA65-A1FC-11D0-85AD-444553540000} |
| CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\TreatAs |
| \CLSID\{B801CA65-A1FC-11D0-85AD-444553540000} |
| \CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\InprocServer32 |
| \CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\InprocServerX86 |
| \CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\LocalServer32 |
| \CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\InprocHandler32 |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\MeasuringGeo |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\MeasuringGeo |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\UsageMeasurement |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\UsageMeasurement |
| HKEY_CURRENT_USER\Software\Adobe\CommonFiles\Usage\Reader 9 |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\General |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\General |
| HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Updater |
| HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\9.0\Updater |
| HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System |
| HKEY_LOCAL_MACHINE\System\WSZXSGANXFJVAYSXYQGNXKQY |
| HKEY_LOCAL_MACHINE\Software\Adobe\Adobe ARM\1.0\ARM |
Comments
User comments about a640924fec7be22f49776f55607bf79e.
User comments about a640924fec7be22f49776f55607bf79e.
