File details
File name: AcroRd32.exe
Name: Adobe Reader
Description: Adobe Reader 9.0
Version: 9.5.3.305
Size: 351.73 KB
Original file name: AcroRd32.exe
Digital certificate
Certificate authority:
VeriSign
Effective date: 9/18/2006
Expiration date: 11/5/2009
Resource utilization
 | CPU utilization averages |
Total CPU: 0.0028718147%
Privileged CPU:
0.0015474341%

User CPU:
0.00132438054655%

Privileged CPU time: 3666.02 ms
Privileged CPU time /min: 16 ms
CPU cycle count:
1,750,770,041
CPU cycle count /min: 1,549,611,907
Context switches /sec:
88
 | Memory utilization averages |
Committed memory:
237.48 MB
Peak committed memory: 307.96 MB
Paged memory:
47.32 MB
Peak paged memory: 104.3 MB
Paged system memory:
308.87 KB
Non-paged system memory: 25.97 KB
Working set memory:
4.16 MB
Peak working set memory: 102.98 MB
Min working set memory: 3.91 MB
Private memory:
47.32 MB
Page faults:
155,842
Page faults /min: 665
 | Process I/O averages |
Total read operations:
4,880
Read operations /min: 21
Total read transfer: 5 MB
Read transfer /min: 21.85 KB
Total write operations:
20
Write operations /min: 1
Total write transfer: 139.52 KB
Write transfer /min: 609 Bytes
Total other operations:
7,408
Other operations /min: 32
Total other transfer: 360.47 KB
Other Transfer /min: 1.54 KB
 | GUI Object Averages |
GDI objects:
194
Peak GDI objects: 272
USER objects:
163
Peak USER objects: 257
Resources
Handle count average: 266
Thread count average: 10
Thread resource averages
Total CPU: 0.026381737131%
Privileged CPU: 0.005257057837%
User CPU: 0.021124679294%
CPU Cycle count /sec: 5,562,761
Context switches /sec: 29
Module memory size: 344 KB
Process details
Runs as (owner): User
Integrety level: Medium
Windows platform: 64-bit
Child Process
Process Command
"C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\users\user\documents\Paul's Stuff\Finincials\TurboTax\2012 Malsam P Form 1040 Individual Tax Return_Records.pdf"
Scheduled task details
CLSID: {4BD76361-419D-4920-8936-F6F03D4420BA}
Command: \{4BD76361-419D-4920-8936-F6F03D4420BA}
Network connectivity
Windows Firewall allowed program: Yes
Image hashes
MD5: f7f2f299dd5019c67d9fddb18e5d3916
SHA-1: de4cdb61778a443cf4359e4cfc44e3b68eea16e9
SHA-256: c5455b708c1a1afe61aa5cff80dff19f07972a5b047fd398536c8377dc68a19b
PE image details
Subsystem: Windows GUI
Langauge*: Microsoft Visual C++ 8.0
File entropy: 5.35179
File packed: No
Import Table
advapi32.dll

RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
CryptGenKey
GetSecurityInfo
SetEntriesInAclW
SetSecurityInfo
GetTokenInformation
AllocateAndInitializeSid
OpenProcessToken
EqualSid
FreeSid
RegCreateKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExW
RegEnumValueW
ConvertSidToStringSidW
RegDisablePredefinedCache
RevertToSelf
SetThreadToken
CreateProcessAsUserW
SetTokenInformation
GetLengthSid
ConvertStringSidToSidW
GetSecurityDescriptorSacl
DuplicateTokenEx
CreateRestrictedToken
DuplicateToken
LookupPrivilegeValueW
CopySid
CreateWellKnownSid
AccessCheck
MapGenericMask
GetNamedSecurityInfoW
OpenThreadToken
CheckTokenMembership
CryptGetProvParam
CryptSetProvParam
CryptGenRandom
CryptDecrypt
CryptHashData
CryptSignHashA
CryptSignHashW
CryptGetHashParam
CryptSetKeyParam
CryptAcquireContextA
CryptAcquireContextW
CryptImportKey
CryptGetUserKey
CryptCreateHash
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
RegFlushKey
RegQueryValueW
gdi32.dll

CreateBitmap
CreateCompatibleBitmap
GetMapMode
BitBlt
GetTextMetricsW
CreateEnhMetaFileW
CreateMetaFileW
SetMapMode
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
StretchDIBits
CloseEnhMetaFile
DeleteEnhMetaFile
SetBkColor
GetCurrentObject
GetRgnBox
CreateRectRgn
CombineRgn
SetPolyFillMode
GetObjectType
SetDIBits
CloseMetaFile
DeleteMetaFile
GetEnhMetaFileHeader
GetObjectW
GetDIBits
GetEnhMetaFileBits
GetWorldTransform
EnumEnhMetaFile
PlayEnhMetaFileRecord
SetWorldTransform
ModifyWorldTransform
SetEnhMetaFileBits
PlayEnhMetaFile
SelectObject
GetFontData
CreateScalableFontResourceW
RemoveFontResourceW
DeleteDC
DeleteObject
CreateFontIndirectW
CreateDCW
GetClipBox
GetTextColor
GetTextAlign
GetBkMode
GetStretchBltMode
GetPolyFillMode
GetMiterLimit
AddFontResourceW
ExtEscape
Escape
ResetDCW
EndDoc
EndPage
StartPage
AbortDoc
StartDocW
CreateDCA
CreateICW
DPtoLP
GetTextExtentPoint32W
GetStockObject
GetBkColor
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
kernel32.dll

CloseHandle
UnmapViewOfFile
CreateFileA
VirtualQueryEx
GetCurrentProcess
MapViewOfFile
CreateFileMappingW
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
ReadFile
SetFilePointer
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
SizeofResource
LockResource
LoadResource
FindResourceW
GetSystemInfo
MultiByteToWideChar
LoadLibraryW
FreeLibrary
GetProcAddress
GetSystemDirectoryW
GetModuleHandleW
WaitForSingleObject
CreateSemaphoreW
ReleaseSemaphore
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExA
IsDebuggerPresent
OutputDebugStringA
GetVersionExW
HeapSize
GetProcessHeap
GetCurrentThreadId
FindResourceExW
GetCurrentProcessId
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
Sleep
InterlockedCompareExchange
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
InterlockedExchange
DllMain
CreateFileMappingA
LoadLibraryA
GetModuleHandleA
CreateSemaphoreA
GetStartupInfoA
msvcp80.dll
msvcr80.dll
ole32.dll

CoCreateInstance
CoTaskMemFree
CLSIDFromString
GetHGlobalFromStream
CoMarshalInterface
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemRealloc
CoInitialize
StringFromGUID2
OleLockRunning
CoGetClassObject
OleInitialize
OleUninitialize
CoInitializeEx
CoLockObjectExternal
CoTaskMemAlloc
CLSIDFromProgID
CoRevokeClassObject
ReadClassStg
GetConvertStg
WriteFmtUserTypeStg
WriteClassStg
CreateDataAdviseHolder
CreateOleAdviseHolder
CoDisconnectObject
CoRegisterClassObject
CoResumeClassObjects
CoUninitialize
CoUnmarshalInterface
ReleaseStgMedium
MkParseDisplayName
CreateBindCtx
secur32.dll

FreeContextBuffer
FreeCredentialsHandle
InitializeSecurityContextA
AcquireCredentialsHandleA
DeleteSecurityContext
shell32.dll

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetFolderPathW
ShellExecuteExW
SHGetFileInfoW
FindExecutableW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHCreateDirectoryExW
CommandLineToArgvW
shlwapi.dll

PathRemoveBackslashW
PathAddBackslashW
PathCreateFromUrlW
PathFindFileNameW
UrlCanonicalizeW
PathIsUNCW
PathFindExtensionW
PathCombineW
PathIsDirectoryW
AssocQueryStringW
UrlGetPartW
PathIsRelativeW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
SHDeleteKeyW
PathIsURLW
UrlIsW
StrStrIW
StrStrIA
user32.dll

MessageBoxW
SendMessageW
FindWindowW
UnregisterClassA
GetDC
ReleaseDC
RegisterClipboardFormatW
DispatchMessageW
PeekMessageW
TranslateMessage
MsgWaitForMultipleObjects
DdeDisconnect
DdeConnect
DdeCreateDataHandle
DdeAddData
SystemParametersInfoW
GetThreadDesktop
GetProcessWindowStation
CloseWindowStation
GetDesktopWindow
CreateWindowStationW
CreateDesktopW
GetUserObjectInformationW
PostThreadMessageW
GetActiveWindow
SetTimer
GetAsyncKeyState
UnregisterClassW
RegisterClassW
EnableWindow
SetWindowTextW
GetWindowInfo
EnumChildWindows
GetRawInputDeviceList
GetRawInputDeviceInfoW
SetWindowPos
GetWindowRect
GetWindowTextW
GetWindowTextLengthW
CreateIconFromResourceEx
UnhookWindowsHookEx
SetDlgItemTextW
SetWindowsHookExW
GetParent
GetClassNameW
FindWindowExW
DdeClientTransaction
SetActiveWindow
IsWindowEnabled
CloseWindow
GetClipboardFormatNameA
GetClipboardData
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
EnumClipboardFormats
CountClipboardFormats
GetClipboardFormatNameW
GetClipboardSequenceNumber
GetClipboardOwner
GetOpenClipboardWindow
GetClipboardViewer
LoadCursorW
LoadIconW
SetFocus
GetFocus
SendDlgItemMessageW
MoveWindow
GetClientRect
UpdateWindow
GetClassInfoExW
IsChild
GetMessageW
GetSysColor
ClientToScreen
ScreenToClient
InvalidateRect
InvalidateRgn
RedrawWindow
SetCapture
ReleaseCapture
FillRect
CallWindowProcW
EndPaint
BeginPaint
DestroyAcceleratorTable
CreateAcceleratorTableW
IsDialogMessageW
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
SetCursor
LoadBitmapW
SetWindowContextHelpId
MapDialogRect
CreateDialogIndirectParamW
GetWindowDC
SetPropW
PostQuitMessage
GetPropW
DdeGetData
EnumThreadWindows
SetForegroundWindow
IsWindowVisible
DdeInitializeW
DdeUninitialize
DdeFreeStringHandle
DdeCreateStringHandleW
DdeNameService
FindWindowA
RegisterWindowMessageA
SetWindowLongW
ShowWindow
SetProcessWindowStation
SetThreadDesktop
OpenInputDesktop
CloseDesktop
DefWindowProcW
CreateWindowExW
RegisterClassExW
RegisterWindowMessageW
PostMessageW
DestroyWindow
EnumWindows
IsWindow
UserHandleGrantAccess
SetParent
GetWindowLongW
GetWindow
BringWindowToTop
GetSystemMetrics
GetForegroundWindow
EndDialog
GetDlgItem
AllowSetForegroundWindow
CharNextW
DialogBoxParamW
GetGUIThreadInfo
GetWindowThreadProcessId
GetPriorityClipboardFormat
ChangeClipboardChain
SetClipboardViewer
RegisterClipboardFormatA
SendNotifyMessageW
wsprintfW
SendMessageA
MessageBoxA