» AcroRd32.exe
Overview
Analysis
File Details
Programs (7)
Downloads (8)

AcroRd32.exe

Adobe Reader

Adobe Systems, Incorporated

This is a setup program which is used to install the application. This is installed with multiple programs including Adobe Reader X (10.1.6) and Adobe Reader X (10.1.0). The file has been seen being downloaded from nm20.abv.bg and multiple other hosts.

File name:

AcroRd32.exe

Publisher:

Adobe Systems Incorporated (signed by Adobe Systems, Incorporated)

Product:

Adobe Reader

Description:

Adobe Reader

Version:

10.1.6.1

MD5:

b96f045d571747f8700cb43e8c458ff0

SHA-1:

02f48177bc777009f5343b1cd539383ce3e167a1

SHA-256:

e092e535cb1c4d388c3fc5459880079ef6e7381b4dbbe1f3f5d4388664dc51a3

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 3:18:06 AM UTC (today)

File size:

1.4 MB (1,430,592 bytes)

Product version:

10.1.6.1

Original file name:

AcroRd32.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\adobe\reader 10.0\reader\acrord32.exe

Digital Signature

Signed by:

Adobe Systems, Incorporated

Authority:

VeriSign, Inc.

Valid from:

9/26/2012 9:00:00 PM

Valid to:

9/27/2013 8:59:59 PM

Subject:

CN="Adobe Systems, Incorporated", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=AcrobatX, O="Adobe Systems, Incorporated", L=San Jose, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5C31104515F7A396D8B834CBE5D3D969

File PE Metadata

Compilation timestamp:

2/15/2013 6:06:21 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:jDg88SqXOtMu9g5YtPUjzcXxs974O8b8ITDnlyj0:488RsMaguczchs974O8b8ITDnlc0

Entry address:

0x8812F

Entry point:

E8, BA, C8, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 53, 56, 8B, 75, 08, 33, DB, 57, 39, 5D, 14, 75, 10, 3B, F3, 75, 10, 39, 5D, 0C, 75, 12, 33, C0, 5F, 5E, 5B, 5D, C3, 3B, F3, 74, 07, 8B, 7D, 0C, 3B, FB, 77, 1B, E8, 1F, 13, 00, 00, 6A, 16, 5E, 89, 30, 53, 53, 53, 53, 53, E8, C7, EF, FF, FF, 83, C4, 14, 8B, C6, EB, D5, 39, 5D, 14, 75, 04, 88, 1E, EB, CA, 8B, 55, 10, 3B, D3, 75, 04, 88, 1E, EB, D1, 83, 7D, 14, FF, 8B, C6, 75, 0F, 8A, 0A, 88, 08, 40, 42, 3A, CB, 74, 1E, 4F, 75, F3, EB, 19, 8A, 0A, 88... 
[+]

Code size:

763 KB (781,312 bytes)

The file AcroRd32.exe has been discovered within the following programs.

Adobe Acrobat X Pro by Adobe Systems Incorporated

Adobe Acrobat is a set of application software to view, create, manipulate, print and manage files in Portable Document Format (PDF). Acrobat and Reader are widely used as a method of presenting information with a fixed layout similar to a paper publication.

www.adobe.com

6% remove it

Adobe Acrobat X Standard by Adobe Systems Incorporated

3% remove it

Adobe Reader X by Adobe Systems Incorporated

Adobe Acrobat X (version 10.0) is an applications designed to view, create, manipulate, print and manage files in Portable Document Format (PDF). Acrobat and Reader are widely used as a method of presenting information with a fixed layout similar to a paper publication.

12% remove it

Adobe Reader X (10.1.0) by Adobe Systems Incorporated

Adobe Acrobat and Adobe Reader X are a set of applications designed to view, create, manipulate, print and manage files in Portable Document Format (PDF). Acrobat and Reader are widely used as a method of presenting information with a fixed layout similar to a paper publication.

5% remove it

Adobe Reader X (10.1.4) by Adobe Systems Incorporated

Publisher's description - “Adobe Reader software is the free trusted standard for reliably viewing, printing, and annotating PDF documents. It's the only PDF file viewer that can open and interact with all types of PDF content, including forms and multimedia. Say goodbye to paper forms.”

3% remove it

Adobe Reader X (10.1.5) by Adobe Systems Incorporated

4% remove it

Adobe Reader X (10.1.6) by Adobe Systems Incorporated

Publisher's description - “Adobe Reader lets you read and print from any system any document created as an Adobe Portable Document Format (PDF) file, with its original appearance preserved.”

12% remove it

The file AcroRd32.exe has been seen being distributed by the following 8 URLs.

https://nm20.abv.bg/.../download?mid=13368234125&fid=10&aid=2

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-0r05PLrSU5TBHojmbR-eSVFXZ5xHoTST_p7tCb6hc64ryV_d05k4IyveVp81Po0-TUumqKH9KD_QSKjPXQ7XJA/messages/@.id==AH3sw0MAAEnbV0dXxQjtKC2_1h4/content/parts/@.id==2/raw?appid=YahooMailNeo&ymreqid=79759e9f-3d13-bbff-0154-220045010000&token=Pl2hpGuj1OOYGa7UQlBXoHIR7po90oUMR4Y9RnmlC5iZi7MLg6QQ79aIoO9_8AFJWMQPhnI4Auo7iijwuPiz80yVSV5jrvbxub1YWjlmr88&error=https://us-mg6.mail.yahoo.com/.../iframemsg?id=bb0e50ef-7d45-71d2-00a9-b327ec072554

https://mg.mail.yahoo.com/.../download?m=YaDownload&mid=2_0_0_3_6078_AFDFCmoAAJcNVUCw7Aay2CUeei0&fid=Draft&pid=2&clean=0&appid=YahooMailNeo

https://mail.google.com/mail/u/.../?ui=2&ik=b9a0549e1b&view=att&th=13f8f726c2508eb3&attid=0.1&disp=safe&realattid=f_hiinsnsh0&zw

https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=b9a0549e1b&view=att&th=13f8f726c2508eb3&attid=0.1&disp=safe&realattid=f_hiinsnsh0&zw&saduie=AG9B_P_58E6UgbRvj4X-jYJISEbQ&sadet=1372501261351&sads=Zy5THx_9_mxek5m1vY2cF7qE1Nk

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.