What is AdobeARM.exe?

AdobeARM.exe is part of Adobe Reader and Acrobat Manager and developed by Adobe Systems according to the AdobeARM.exe version information.

AdobeARM.exe's description is "Adobe Reader and Acrobat Manager"

AdobeARM.exe is digitally signed by Adobe Inc..

AdobeARM.exe is usually located in the 'C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\' folder.

None of the anti-virus scanners at VirusTotal reports anything malicious about AdobeARM.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

The following is the available information on AdobeARM.exe:

Property	Value
Product name	Adobe Reader and Acrobat Manager
Company name	Adobe Systems
File description	Adobe Reader and Acrobat Manager
Internal name	AdobeARM.exe
Original filename	AdobeARM.exe
Legal copyright	Copyright 2019 Adobe Systems
Product version	1.824.35.0289
File version	1.824.35.0289

Here's a screenshot of the file properties when displayed by Windows Explorer:

Product name	Adobe Reader and Acrobat Manager
Company name	Adobe Systems
File description	Adobe Reader and Acrobat Manager
Internal name	AdobeARM.exe
Original filename	AdobeARM.exe
Legal copyright	Copyright 2019 Adobe Systems
Product version	1.824.35.0289
File version	1.824.35.0289

Digital signatures [?]

AdobeARM.exe has a valid digital signature.

Property	Value
Signer name	Adobe Inc.
Certificate issuer name	DigiCert EV Code Signing CA (SHA2)
Certificate serial number	0ee3f1c8f451cbf21203341a53f23e71

VirusTotal report

None of the 71 anti-virus programs at VirusTotal detected the AdobeARM.exe file.

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

Successfully executed process in sandbox.

Summary

{
    "file_created": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\AdobeARM.log",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini"
    ],
    "regkey_written": [
        "HKEY_CURRENT_USER\\Software\\Adobe\\Adobe ARM\\1.0\\ARM\\iSpeedLauncherLogonTime"
    ],
    "dll_loaded": [
        "rpcrt4.dll",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\061f173d6a2a68c83a45ebb353241f896d6c5b9141bb2682cfdac78a1c216188ENU.dll",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\061f173d6a2a68c83a45ebb353241f896d6c5b9141bb2682cfdac78a1c216188LOC.dll"
    ],
    "file_opened": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini",
        "C:\\"
    ],
    "regkey_opened": [
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\68AB67CA00000000ABE7E7A854000000",
        "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\Rpc",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\68AB67CA000000007706E7A854000000",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Adobe\\Adobe ARM\\1.0\\ARM",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32",
        "HKEY_CLASSES_ROOT\\.pdf",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\66EDAE6A408000009195000000000000",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Adobe\\Adobe ARM\\Legacy\\AdobeARM",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\68AB67CA000000007716E7A854000000",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\66EDAE6A0000000084E4E7A854000000",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\66EDAE6A0000000084E4E7A854000000",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\66EDAE6A0000000084E4E7A854000000",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\68AB67CA000000007716E7A854000000",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\68AB67CA000000007716E7A854000000",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc",
        "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\66EDAE6A408000009195000000000000",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\66EDAE6A408000009195000000000000",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Adobe\\Adobe ARM\\Products",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\68AB67CA000000007706E7A854000000",
        "HKEY_CURRENT_USER\\SOFTWARE\\Adobe\\Adobe ARM\\1.0\\ARM",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\68AB67CA000000007706E7A854000000",
        "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Installer",
        "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\68AB67CA00000000ABE7E7A854000000",
        "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\68AB67CA00000000ABE7E7A854000000"
    ],
    "file_written": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\AdobeARM.log",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini"
    ],
    "regkey_deleted": [
        "HKEY_CURRENT_USER\\Software\\Adobe\\Adobe ARM\\1.0\\ARM\\iNotify"
    ],
    "file_exists": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\Acrobat\\Acrobat_sl.exe",
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini",
        "C:\\ProgramData\\Adobe\\ARM\\ArmReport.ini"
    ],
    "file_failed": [
        "\\\\?\\pipe\\32B6B37A-4A7D-4e00-95F2-6F0BF3DE3E009210454653thsnYaVieBoda",
        "C:\\ProgramData\\Adobe\\ARM\\ArmReport.ini"
    ],
    "file_read": [
        "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini"
    ],
    "regkey_read": [
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\MaxRpcSize",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\ComputerName\\ActiveComputerName\\ComputerName",
        "HKEY_CURRENT_USER\\.pdf\\(Default)",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
        "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OOBEInProgress",
        "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en"
    ]
}

Dropped

[
    {
        "yara": [],
        "sha1": "6c8d177890067152c6914f0e7df79b1503343e4a",
        "name": "b881b4fc6eaa7c65_adobearm.log",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\AdobeARM.log",
        "type": "ASCII text, with CRLF, CR line terminators",
        "sha256": "b881b4fc6eaa7c6502ea9804bcb09f3728664288f1871849c978df794b8523a6",
        "urls": [],
        "crc32": "8BE8024B",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2986\/files\/b881b4fc6eaa7c65_adobearm.log",
        "ssdeep": null,
        "size": 457,
        "sha512": "469273ecba29bf22e977e1d3a2e6e7470a1b91d64d8b4c5938dfa33f78eb80b6d24e6aa42e0b52d9c0475f4b07ce3b9671b44c580ff0b335aec0fb78144961b5",
        "pids": [
            2732
        ],
        "md5": "8e466f6d903818217a38e163a3108675"
    },
    {
        "yara": [],
        "sha1": "bf636f8baed998a1eb4531af9e833e6d3d8df129",
        "name": "b4d4dcd9594d372d_armui.ini",
        "filepath": "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini",
        "type": "Little-endian UTF-16 Unicode text, with CRLF line terminators",
        "sha256": "b4d4dcd9594d372d7c0c975d80ef5802c88502895ed4b8a26ca62e225f2f18b0",
        "urls": [],
        "crc32": "21C6A2BA",
        "path": "\/home\/hpuser\/.cuckoo\/storage\/analyses\/2986\/files\/b4d4dcd9594d372d_armui.ini",
        "ssdeep": null,
        "size": 257928,
        "sha512": "ff23616ee67d51daa2640ae638f59a8d331930a29b98c2d1bd3b236d2f651f243f9bae38d58515714886cfbb13b9be721d490aad4f2d10cbba74d7701ab34e09",
        "pids": [
            2732
        ],
        "md5": "864c22fb9a1c0670edf01c6ed3e4fbe4"
    }
]

Generic

[
    {
        "process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\061f173d6a2a68c83a45ebb353241f896d6c5b9141bb2682cfdac78a1c216188.bin",
        "process_name": "061f173d6a2a68c83a45ebb353241f896d6c5b9141bb2682cfdac78a1c216188.bin",
        "pid": 2732,
        "summary": {
            "file_created": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\AdobeARM.log",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini"
            ],
            "regkey_written": [
                "HKEY_CURRENT_USER\\Software\\Adobe\\Adobe ARM\\1.0\\ARM\\iSpeedLauncherLogonTime"
            ],
            "dll_loaded": [
                "rpcrt4.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\061f173d6a2a68c83a45ebb353241f896d6c5b9141bb2682cfdac78a1c216188ENU.dll",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\061f173d6a2a68c83a45ebb353241f896d6c5b9141bb2682cfdac78a1c216188LOC.dll"
            ],
            "file_opened": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini",
                "C:\\"
            ],
            "regkey_opened": [
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\68AB67CA00000000ABE7E7A854000000",
                "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows NT\\Rpc",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\68AB67CA000000007706E7A854000000",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Adobe\\Adobe ARM\\1.0\\ARM",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32",
                "HKEY_CLASSES_ROOT\\.pdf",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\66EDAE6A408000009195000000000000",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Adobe\\Adobe ARM\\Legacy\\AdobeARM",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\68AB67CA000000007716E7A854000000",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\66EDAE6A0000000084E4E7A854000000",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\66EDAE6A0000000084E4E7A854000000",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\66EDAE6A0000000084E4E7A854000000",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\68AB67CA000000007716E7A854000000",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\68AB67CA000000007716E7A854000000",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Rpc",
                "HKEY_LOCAL_MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Installer\\Managed\\S-1-5-21-699399860-4089948139-3198924279-1001\\Installer\\UpgradeCodes\\66EDAE6A408000009195000000000000",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\66EDAE6A408000009195000000000000",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Adobe\\Adobe ARM\\Products",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\68AB67CA000000007706E7A854000000",
                "HKEY_CURRENT_USER\\SOFTWARE\\Adobe\\Adobe ARM\\1.0\\ARM",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\68AB67CA000000007706E7A854000000",
                "HKEY_LOCAL_MACHINE\\Software\\Policies\\Microsoft\\Windows\\Installer",
                "HKEY_LOCAL_MACHINE\\Software\\Classes\\Installer\\UpgradeCodes\\68AB67CA00000000ABE7E7A854000000",
                "HKEY_CURRENT_USER\\Software\\Microsoft\\Installer\\UpgradeCodes\\68AB67CA00000000ABE7E7A854000000"
            ],
            "file_written": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\AdobeARM.log",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini"
            ],
            "regkey_deleted": [
                "HKEY_CURRENT_USER\\Software\\Adobe\\Adobe ARM\\1.0\\ARM\\iNotify"
            ],
            "file_exists": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\Acrobat\\Acrobat_sl.exe",
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini",
                "C:\\ProgramData\\Adobe\\ARM\\ArmReport.ini"
            ],
            "file_failed": [
                "\\\\?\\pipe\\32B6B37A-4A7D-4e00-95F2-6F0BF3DE3E009210454653thsnYaVieBoda",
                "C:\\ProgramData\\Adobe\\ARM\\ArmReport.ini"
            ],
            "file_read": [
                "C:\\Users\\cuck\\AppData\\Local\\Temp\\ArmUI.ini"
            ],
            "regkey_read": [
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en-US",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Rpc\\MaxRpcSize",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\SystemSetupInProgress",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\ComputerName\\ActiveComputerName\\ComputerName",
                "HKEY_CURRENT_USER\\.pdf\\(Default)",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\GRE_Initialize\\DisableMetaFiles",
                "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\SQMClient\\Windows\\CEIPEnable",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en-US",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\ExtendedLocale\\en",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\Setup\\OOBEInProgress",
                "HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\Nls\\CustomLocale\\en"
            ]
        },
        "first_seen": 1571745185.6094,
        "ppid": 1564
    },
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1571745185.3438,
        "ppid": 376
    }
]

Signatures

[
    {
        "markcount": 1,
        "families": [],
        "description": "This executable has a PDB path",
        "severity": 1,
        "marks": [
            {
                "category": "pdb_path",
                "ioc": "D:\\CB\\ARM_Main\\BuildResults\\bin\\Win32\\Release\\AdobeARM.pdb",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "has_pdb"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available",
        "severity": 1,
        "marks": [
            {
                "call": {
                    "category": "system",
                    "status": 1,
                    "stacktrace": [],
                    "api": "GlobalMemoryStatusEx",
                    "return_value": 1,
                    "arguments": {},
                    "time": 1571745185.7034,
                    "tid": 2660,
                    "flags": {}
                },
                "pid": 2732,
                "type": "call",
                "cid": 142
            }
        ],
        "references": [],
        "name": "antivm_memory_available"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "The file contains an unknown PE resource name possibly indicative of a packer",
        "severity": 1,
        "marks": [
            {
                "category": "resource name",
                "ioc": "ARM_UI_INI",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "pe_unknown_resource_name"
    }
]

Yara

The Yara rules did not detect anything in the file.

Network

{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 546,
            "time": 3.0790188312531,
            "dport": 137,
            "sport": 137
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 3130,
            "time": 3.0317277908325,
            "dport": 5355,
            "sport": 51001
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 3458,
            "time": 1.0469789505005,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 3786,
            "time": 3.0420768260956,
            "dport": 5355,
            "sport": 53848
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 4114,
            "time": 1.6386799812317,
            "dport": 5355,
            "sport": 54255
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 4442,
            "time": -0.098942995071411,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 4770,
            "time": 1.5799629688263,
            "dport": 1900,
            "sport": 1900
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 9246,
            "time": 1.078125,
            "dport": 3702,
            "sport": 49152
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 13438,
            "time": 3.1449029445648,
            "dport": 1900,
            "sport": 53598
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "40af376146fdaae26a127afc4eb37b50a1d23dacd5abc68aa3f572d8847dd1a6",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "6f6e4400206c5ec66e4499ad71e4a97b0cdd9171a5f2193d3414c75d732ab19e",
    "irc": [],
    "https_ex": []
}

Screenshots

Folder name variants

AdobeARM.exe may also be located in other folders than C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\. The most common variants are listed below:

C:\Program Files\Common Files\Adobe\ARM\1.0\
B:\Program Files\Common Files\Adobe\ARM\1.0\

Other files also named AdobeARM.exe

AdobeARM.exe (2141 votes)

Hashes [?]

Property	Value
MD5	5986970cb7197142c04f348ffa91f258
SHA256	061f173d6a2a68c83a45ebb353241f896d6c5b9141bb2682cfdac78a1c216188

Error Messages

These are some of the error messages that can appear related to adobearm.exe:

adobearm.exe has encountered a problem and needs to close. We are sorry for the inconvenience.

adobearm.exe - Application Error. The instruction at "0xXXXXXXXX" referenced memory at "0xXXXXXXXX". The memory could not be "read/written". Click on OK to terminate the program.

Adobe Reader and Acrobat Manager has stopped working.

End Program - adobearm.exe. This program is not responding.

adobearm.exe is not a valid Win32 application.

adobearm.exe - Application Error. The application failed to initialize properly (0xXXXXXXXX). Click OK to terminate the application.

What will you do with AdobeARM.exe?

To help other users, please let us know what you will do with AdobeARM.exe:

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

Free online surveys

And now some shameless self promotion ;)

Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/2008/2016/2019/Vista/7/8/8.1/10. Supports both 32- and 64-bit Windows.

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

No comments posted yet.

What is AdobeARM.exe?

Vendor and version information [?]

Digital signatures [?]

VirusTotal report

Sandbox Report

Summary

Summary

Dropped

Generic

Signatures

Yara

Network

Screenshots

Folder name variants

Other files also named AdobeARM.exe

Hashes [?]

Error Messages

What will you do with AdobeARM.exe?

Malware or legitimate?

And now some shameless self promotion ;)

Comments

Leave a reply