[2021-02-12 07:41:02:0257] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-02-12 07:41:02:0260] CreateProcessAsUser succeeded
[2021-02-12 07:41:02:0260] Helper succeeded



[2021-02-12 07:41:10:0011] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:20.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-02-12 07:41:10:0331] Helper succeeded



[2021-02-24 14:23:01:0640] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-02-24 14:23:01:0644] CreateProcessAsUser succeeded
[2021-02-24 14:23:01:0644] Helper succeeded



[2021-02-24 14:23:08:0694] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-02-24 14:23:09:0056] Helper succeeded



[2021-02-27 14:35:17:0292] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-02-27 14:35:17:0292] CreateProcessAsUser succeeded
[2021-02-27 14:35:17:0292] Helper succeeded



[2021-02-27 14:35:24:0308] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-02-27 14:35:24:0667] Helper succeeded



[2021-03-11 10:23:35:0464] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:exploitfil1 /SESSIONID:3
[2021-03-11 10:23:35:0468] CreateProcessAsUser succeeded
[2021-03-11 10:23:35:0468] Helper succeeded



[2021-03-11 10:23:43:0334] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2021-03-11 10:23:43:0696] Helper succeeded



[2021-04-17 07:58:48:0479] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-04-17 07:58:48:0495] CreateProcessAsUser succeeded
[2021-04-17 07:58:48:0495] Helper succeeded



[2021-04-17 07:58:55:0464] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-04-17 07:58:55:0807] Helper succeeded



[2021-04-23 10:50:55:0555] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-04-23 10:50:55:0555] CreateProcessAsUser succeeded
[2021-04-23 10:50:55:0555] Helper succeeded



[2021-04-23 10:51:03:0461] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-04-23 10:51:03:0805] Helper succeeded



[2021-05-11 17:51:40:0992] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-05-11 17:51:40:0996] CreateProcessAsUser succeeded
[2021-05-11 17:51:40:0996] Helper succeeded



[2021-05-11 17:51:47:0831] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-05-11 17:51:48:0186] Helper succeeded



[2021-05-30 01:05:42:0284] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:{291AA914-A987-4CE9-BD63-AC0A92D435E5} /VERSION:21.0 /LANG:ENU /Svc /USER:SYSTEM /SESSIONID:2
[2021-05-30 01:05:42:0565] Helper succeeded



[2021-07-15 04:44:19:0814] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-07-15 04:44:19:0818] CreateProcessAsUser succeeded
[2021-07-15 04:44:19:0818] Helper succeeded



[2021-07-15 04:44:22:0324] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-07-15 04:44:22:0646] Helper succeeded



[2021-07-18 07:00:16:0653] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-07-18 07:00:16:0659] CreateProcessAsUser succeeded
[2021-07-18 07:00:16:0659] Helper succeeded



[2021-07-18 07:00:20:0087] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-07-18 07:00:20:0405] Helper succeeded



[2021-07-21 07:26:38:0243] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-07-21 07:26:38:0247] CreateProcessAsUser succeeded
[2021-07-21 07:26:38:0247] Helper succeeded



[2021-07-21 07:26:41:0851] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-07-21 07:26:42:0175] Helper succeeded



[2021-07-24 10:47:25:0346] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-07-24 10:47:25:0350] CreateProcessAsUser succeeded
[2021-07-24 10:47:25:0350] Helper succeeded



[2021-07-24 10:47:27:0784] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-07-24 10:47:28:0107] Helper succeeded



[2021-07-27 14:16:11:0213] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-07-27 14:16:11:0217] CreateProcessAsUser succeeded
[2021-07-27 14:16:11:0217] Helper succeeded



[2021-07-27 14:16:14:0710] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-07-27 14:16:15:0034] Helper succeeded



[2021-07-28 10:53:48:0190] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:{291AA914-A987-4CE9-BD63-AC0A92D435E5} /VERSION:21.0 /LANG:ENU /Svc /USER:SYSTEM /SESSIONID:2
[2021-07-28 10:53:48:0463] Helper succeeded



[2021-07-30 17:47:43:0029] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-07-30 17:47:43:0033] CreateProcessAsUser succeeded
[2021-07-30 17:47:43:0033] Helper succeeded



[2021-07-30 17:47:49:0217] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-07-30 17:47:49:0540] Helper succeeded



[2021-08-02 18:30:57:0382] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-02 18:30:57:0388] CreateProcessAsUser succeeded
[2021-08-02 18:30:57:0388] Helper succeeded



[2021-08-02 18:31:03:0179] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-02 18:31:03:0499] Helper succeeded



[2021-08-05 21:24:41:0742] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-05 21:24:41:0746] CreateProcessAsUser succeeded
[2021-08-05 21:24:41:0746] Helper succeeded



[2021-08-05 21:24:48:0616] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-05 21:24:48:0939] Helper succeeded



[2021-08-08 22:18:04:0389] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-08 22:18:04:0394] CreateProcessAsUser succeeded
[2021-08-08 22:18:04:0394] Helper succeeded



[2021-08-08 22:18:10:0848] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-08 22:18:11:0124] Helper succeeded



[2021-08-12 00:51:14:0871] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-12 00:51:14:0875] CreateProcessAsUser succeeded
[2021-08-12 00:51:14:0875] Helper succeeded



[2021-08-12 00:51:21:0495] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-12 00:51:21:0823] Helper succeeded



[2021-08-15 04:20:46:0897] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-15 04:20:46:0902] CreateProcessAsUser succeeded
[2021-08-15 04:20:46:0902] Helper succeeded



[2021-08-15 04:20:53:0268] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-15 04:20:53:0542] Helper succeeded



[2021-08-18 04:25:56:0096] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-18 04:25:56:0096] CreateProcessAsUser succeeded
[2021-08-18 04:25:56:0096] Helper succeeded



[2021-08-18 04:26:04:0174] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-18 04:26:04:0299] Helper succeeded



[2021-08-21 05:24:43:0982] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-21 05:24:43:0998] CreateProcessAsUser succeeded
[2021-08-21 05:24:43:0998] Helper succeeded



[2021-08-21 05:24:52:0014] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-21 05:24:52:0342] Helper succeeded



[2021-08-24 07:00:11:0424] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-24 07:00:11:0428] CreateProcessAsUser succeeded
[2021-08-24 07:00:11:0428] Helper succeeded



[2021-08-24 07:00:18:0160] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-24 07:00:18:0480] Helper succeeded



[2021-08-27 08:08:40:0373] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-27 08:08:40:0388] CreateProcessAsUser succeeded
[2021-08-27 08:08:40:0388] Helper succeeded



[2021-08-27 08:08:48:0357] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-27 08:08:48:0685] Helper succeeded



[2021-08-30 11:12:48:0863] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-08-30 11:12:48:0868] CreateProcessAsUser succeeded
[2021-08-30 11:12:48:0868] Helper succeeded



[2021-08-30 11:12:55:0845] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-08-30 11:12:56:0175] Helper succeeded



[2021-09-02 12:08:53:0567] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-02 12:08:53:0572] CreateProcessAsUser succeeded
[2021-09-02 12:08:53:0572] Helper succeeded



[2021-09-02 12:08:59:0247] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-02 12:08:59:0523] Helper succeeded



[2021-09-05 14:26:29:0549] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-05 14:26:29:0549] CreateProcessAsUser succeeded
[2021-09-05 14:26:29:0549] Helper succeeded



[2021-09-05 14:26:37:0518] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-05 14:26:37:0831] Helper succeeded



[2021-09-08 17:55:14:0017] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-08 17:55:14:0023] CreateProcessAsUser succeeded
[2021-09-08 17:55:14:0023] Helper succeeded



[2021-09-08 17:55:20:0353] Helper started, Command Line: /ArmElevate /MODE:3 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-08 17:55:20:0672] Helper succeeded



[2021-09-10 21:25:53:0311] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\19272" /Svc /USER:admop /SESSIONID:2
[2021-09-10 21:25:53:0604] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_001824448449_49996404046353386514835241811889099719.msi
[2021-09-10 21:25:56:0146] CreateProcessAsUser succeeded
[2021-09-10 21:25:56:0146] Helper succeeded
[2021-09-10 21:25:56:0149] CreateProcessAsUser succeeded
[2021-09-10 21:25:56:0149] Helper succeeded



[2021-09-11 18:18:58:0551] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-11 18:18:58:0555] CreateProcessAsUser succeeded
[2021-09-11 18:18:58:0555] Helper succeeded



[2021-09-11 18:19:05:0126] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-11 18:19:05:0447] Helper succeeded



[2021-09-14 18:24:32:0323] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-14 18:24:32:0330] CreateProcessAsUser succeeded
[2021-09-14 18:24:32:0330] Helper succeeded



[2021-09-14 18:24:39:0447] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-14 18:24:39:0773] Helper succeeded



[2021-09-17 21:00:21:0880] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-17 21:00:21:0884] CreateProcessAsUser succeeded
[2021-09-17 21:00:21:0884] Helper succeeded



[2021-09-17 21:00:28:0467] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-17 21:00:28:0787] Helper succeeded



[2021-09-20 21:20:25:0080] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-20 21:20:25:0084] CreateProcessAsUser succeeded
[2021-09-20 21:20:25:0084] Helper succeeded



[2021-09-20 21:20:31:0063] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-20 21:20:31:0384] Helper succeeded



[2021-09-24 00:49:19:0649] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-24 00:49:19:0654] CreateProcessAsUser succeeded
[2021-09-24 00:49:19:0654] Helper succeeded



[2021-09-24 00:49:26:0226] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-24 00:49:26:0544] Helper succeeded



[2021-09-24 21:00:36:0592] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:{291AA914-A987-4CE9-BD63-AC0A92D435E5} /VERSION:21.0 /LANG:ENU /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-24 21:00:36:0865] Helper succeeded



[2021-09-27 03:19:06:0742] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-27 03:19:06:0742] CreateProcessAsUser succeeded
[2021-09-27 03:19:06:0742] Helper succeeded



[2021-09-27 03:19:15:0133] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-27 03:19:15:0446] Helper succeeded



[2021-09-30 04:21:53:0624] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-09-30 04:21:53:0628] CreateProcessAsUser succeeded
[2021-09-30 04:21:53:0628] Helper succeeded



[2021-09-30 04:22:00:0211] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-09-30 04:22:00:0488] Helper succeeded



[2021-10-03 04:36:31:0353] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-03 04:36:31:0359] CreateProcessAsUser succeeded
[2021-10-03 04:36:31:0359] Helper succeeded



[2021-10-03 04:36:37:0372] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-03 04:36:37:0695] Helper succeeded



[2021-10-06 07:25:51:0413] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-06 07:25:51:0418] CreateProcessAsUser succeeded
[2021-10-06 07:25:51:0418] Helper succeeded



[2021-10-06 07:25:58:0014] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-06 07:25:58:0338] Helper succeeded



[2021-10-09 07:30:29:0971] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-09 07:30:29:0987] CreateProcessAsUser succeeded
[2021-10-09 07:30:29:0987] Helper succeeded



[2021-10-09 07:30:38:0534] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-09 07:30:38:0831] Helper succeeded



[2021-10-10 10:51:18:0648] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:{291AA914-A987-4CE9-BD63-AC0A92D435E5} /VERSION:21.0 /LANG:ENU /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-10 10:51:18:0923] Helper succeeded



[2021-10-12 10:48:46:0308] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-12 10:48:46:0324] CreateProcessAsUser succeeded
[2021-10-12 10:48:46:0324] Helper succeeded



[2021-10-12 10:48:54:0683] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-12 10:48:55:0027] Helper succeeded



[2021-10-15 11:05:08:0091] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-15 11:05:08:0097] CreateProcessAsUser succeeded
[2021-10-15 11:05:08:0097] Helper succeeded



[2021-10-15 11:05:15:0521] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-15 11:05:15:0865] Helper succeeded



[2021-10-18 12:09:43:0442] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-18 12:09:43:0447] CreateProcessAsUser succeeded
[2021-10-18 12:09:43:0447] Helper succeeded



[2021-10-18 12:09:50:0446] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-18 12:09:50:0773] Helper succeeded



[2021-10-21 14:25:29:0132] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-21 14:25:29:0132] CreateProcessAsUser succeeded
[2021-10-21 14:25:29:0132] Helper succeeded



[2021-10-21 14:25:37:0444] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-21 14:25:37:0725] Helper succeeded



[2021-10-24 14:44:10:0719] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-24 14:44:10:0723] CreateProcessAsUser succeeded
[2021-10-24 14:44:10:0723] Helper succeeded



[2021-10-24 14:44:17:0941] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-24 14:44:18:0265] Helper succeeded



[2021-10-28 07:20:28:0145] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-28 07:20:28:0150] CreateProcessAsUser succeeded
[2021-10-28 07:20:28:0150] Helper succeeded



[2021-10-28 07:20:35:0505] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-28 07:20:35:0827] Helper succeeded



[2021-10-31 06:48:01:0075] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-10-31 06:48:01:0079] CreateProcessAsUser succeeded
[2021-10-31 06:48:01:0079] Helper succeeded



[2021-10-31 06:48:08:0066] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-10-31 06:48:08:0387] Helper succeeded



[2021-11-03 07:51:42:0033] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-03 07:51:42:0038] CreateProcessAsUser succeeded
[2021-11-03 07:51:42:0038] Helper succeeded



[2021-11-03 07:51:49:0163] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-03 07:51:49:0496] Helper succeeded



[2021-11-06 10:57:41:0617] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-06 10:57:41:0621] CreateProcessAsUser succeeded
[2021-11-06 10:57:41:0621] Helper succeeded



[2021-11-06 10:57:48:0308] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-06 10:57:48:0640] Helper succeeded



[2021-11-09 14:20:27:0368] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-09 14:20:27:0373] CreateProcessAsUser succeeded
[2021-11-09 14:20:27:0373] Helper succeeded



[2021-11-09 14:20:34:0075] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-09 14:20:34:0396] Helper succeeded



[2021-11-12 14:51:44:0281] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-12 14:51:44:0286] CreateProcessAsUser succeeded
[2021-11-12 14:51:44:0286] Helper succeeded



[2021-11-12 14:51:50:0840] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-12 14:51:51:0163] Helper succeeded



[2021-11-15 17:48:48:0341] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-15 17:48:48:0347] CreateProcessAsUser succeeded
[2021-11-15 17:48:48:0347] Helper succeeded



[2021-11-15 17:48:55:0220] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-15 17:48:55:0542] Helper succeeded



[2021-11-18 17:58:10:0335] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-18 17:58:10:0340] CreateProcessAsUser succeeded
[2021-11-18 17:58:10:0340] Helper succeeded



[2021-11-18 17:58:17:0291] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-18 17:58:17:0571] Helper succeeded



[2021-11-21 21:00:21:0210] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-21 21:00:21:0210] CreateProcessAsUser succeeded
[2021-11-21 21:00:21:0210] Helper succeeded



[2021-11-21 21:00:29:0554] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-21 21:00:29:0882] Helper succeeded



[2021-11-24 21:42:44:0527] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-24 21:42:44:0527] CreateProcessAsUser succeeded
[2021-11-24 21:42:44:0527] Helper succeeded



[2021-11-24 21:42:51:0980] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-24 21:42:52:0308] Helper succeeded



[2021-11-25 21:38:57:0591] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:{291AA914-A987-4CE9-BD63-AC0A92D435E5} /VERSION:21.0 /LANG:ENU /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-25 21:38:57:0872] Helper succeeded



[2021-11-28 00:51:47:0994] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-11-28 00:51:48:0010] CreateProcessAsUser succeeded
[2021-11-28 00:51:48:0010] Helper succeeded



[2021-11-28 00:51:57:0338] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-11-28 00:51:57:0666] Helper succeeded



[2021-12-01 00:54:13:0568] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-12-01 00:54:13:0572] CreateProcessAsUser succeeded
[2021-12-01 00:54:13:0572] Helper succeeded



[2021-12-01 00:54:20:0650] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-12-01 00:54:20:0973] Helper succeeded



[2021-12-03 10:58:20:0441] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:exploitfil1 /SESSIONID:3
[2021-12-03 10:58:20:0446] CreateProcessAsUser succeeded
[2021-12-03 10:58:20:0446] Helper succeeded



[2021-12-03 10:58:28:0049] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /MANIFEST:"C:\ProgramData\Adobe\ARM\Reader_21.005.20048\exploitfil1\ReaderDCManifest3.msi" /Svc /USER:SYSTEM /SESSIONID:3
[2021-12-03 10:58:28:0372] Helper succeeded



[2021-12-07 07:30:10:0495] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-12-07 07:30:10:0502] CreateProcessAsUser succeeded
[2021-12-07 07:30:10:0502] Helper succeeded



[2021-12-07 07:30:17:0657] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-12-07 07:30:17:0981] Helper succeeded



[2021-12-10 07:36:31:0656] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-12-10 07:36:31:0660] CreateProcessAsUser succeeded
[2021-12-10 07:36:31:0660] Helper succeeded



[2021-12-10 07:36:38:0977] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-12-10 07:36:39:0303] Helper succeeded



[2021-12-13 10:55:41:0117] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-12-13 10:55:41:0122] CreateProcessAsUser succeeded
[2021-12-13 10:55:41:0122] Helper succeeded



[2021-12-13 10:55:48:0323] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-12-13 10:55:48:0648] Helper succeeded



[2021-12-16 11:26:58:0015] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-12-16 11:26:58:0020] CreateProcessAsUser succeeded
[2021-12-16 11:26:58:0020] Helper succeeded



[2021-12-16 11:27:04:0296] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-12-16 11:27:04:0627] Helper succeeded



[2021-12-19 14:36:32:0624] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2021-12-19 14:36:32:0624] CreateProcessAsUser succeeded
[2021-12-19 14:36:32:0624] Helper succeeded



[2021-12-19 14:36:41:0280] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2021-12-19 14:36:41:0609] Helper succeeded



[2022-01-14 09:43:39:0507] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\21630" /Svc /USER:Administrator /SESSIONID:2
[2022-01-14 09:43:39:0510] finished without process token
[2022-01-14 09:43:39:0510]  Error Code: 883
[2022-01-14 09:43:39:0829] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_001824458876_150832253432600331335466033429854586.msi
[2022-01-14 09:43:42:0551] finished without process token
[2022-01-14 09:43:42:0551]  Error Code: 883
[2022-01-14 09:43:42:0551] Unable to get valid token
[2022-01-14 09:43:42:0551]  Error Code: 883
[2022-01-14 09:43:42:0551] Helper failed
[2022-01-14 09:43:42:0551]  Error Code: 883
[2022-01-14 09:43:42:0553] finished without process token
[2022-01-14 09:43:42:0553]  Error Code: 883
[2022-01-14 09:43:42:0553] Unable to get valid token
[2022-01-14 09:43:42:0553]  Error Code: 883
[2022-01-14 09:43:42:0553] Helper failed
[2022-01-14 09:43:42:0553]  Error Code: 883



[2022-02-11 15:20:50:0010] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:exploitfil1 /SESSIONID:2
[2022-02-11 15:20:50:0016] CreateProcessAsUser succeeded
[2022-02-11 15:20:50:0016] Helper succeeded



[2022-02-11 15:20:57:0776] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /MANIFEST:"C:\ProgramData\Adobe\ARM\Reader_21.005.20048\exploitfil1\ReaderDCManifest3.msi" /Svc /USER:SYSTEM /SESSIONID:2
[2022-02-11 15:20:58:0057] Helper succeeded



[2022-02-23 15:45:36:0971] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:3
[2022-02-23 15:45:36:0971] CreateProcessAsUser succeeded
[2022-02-23 15:45:36:0971] Helper succeeded



[2022-02-23 15:45:45:0752] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2022-02-23 15:45:46:0096] Helper succeeded



[2022-02-28 09:22:56:0407] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-02-28 09:22:56:0407] CreateProcessAsUser succeeded
[2022-02-28 09:22:56:0407] Helper succeeded



[2022-02-28 09:23:05:0173] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-02-28 09:23:05:0454] Helper succeeded



[2022-03-06 12:28:19:0737] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:3
[2022-03-06 12:28:19:0737] CreateProcessAsUser succeeded
[2022-03-06 12:28:19:0737] Helper succeeded



[2022-03-06 12:28:28:0675] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2022-03-06 12:28:29:0003] Helper succeeded



[2022-03-07 17:23:57:0625] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:3
[2022-03-07 17:23:57:0641] CreateProcessAsUser succeeded
[2022-03-07 17:23:57:0641] Helper succeeded



[2022-03-07 17:24:06:0235] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2022-03-07 17:24:06:0547] Helper succeeded



[2022-03-23 16:30:21:0910] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:3
[2022-03-23 16:30:21:0926] CreateProcessAsUser succeeded
[2022-03-23 16:30:21:0926] Helper succeeded



[2022-03-23 16:30:40:0769] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2022-03-23 16:30:41:0254] Helper succeeded



[2022-04-05 16:19:04:0581] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:3
[2022-04-05 16:19:04:0588] CreateProcessAsUser succeeded
[2022-04-05 16:19:04:0588] Helper succeeded



[2022-04-05 16:19:12:0869] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2022-04-05 16:19:13:0205] Helper succeeded



[2022-04-10 00:57:08:0183] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-04-10 00:57:08:0188] CreateProcessAsUser succeeded
[2022-04-10 00:57:08:0188] Helper succeeded



[2022-04-10 00:57:15:0601] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-04-10 00:57:15:0883] Helper succeeded



[2022-04-14 10:13:04:0473] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-04-14 10:13:04:0477] CreateProcessAsUser succeeded
[2022-04-14 10:13:04:0477] Helper succeeded



[2022-04-14 10:13:12:0013] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-04-14 10:13:12:0291] Helper succeeded



[2022-04-20 08:27:06:0981] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-04-20 08:27:06:0997] CreateProcessAsUser succeeded
[2022-04-20 08:27:06:0997] Helper succeeded



[2022-04-20 08:27:15:0966] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-04-20 08:27:16:0247] Helper succeeded



[2022-04-27 09:39:11:0906] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-04-27 09:39:11:0911] CreateProcessAsUser succeeded
[2022-04-27 09:39:11:0911] Helper succeeded



[2022-04-27 09:39:19:0058] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-04-27 09:39:19:0335] Helper succeeded



[2022-05-28 03:28:42:0970] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:3
[2022-05-28 03:28:42:0976] CreateProcessAsUser succeeded
[2022-05-28 03:28:42:0976] Helper succeeded



[2022-05-28 03:28:50:0256] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2022-05-28 03:28:50:0579] Helper succeeded



[2022-06-08 14:32:49:0849] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-06-08 14:32:49:0854] CreateProcessAsUser succeeded
[2022-06-08 14:32:49:0854] Helper succeeded



[2022-06-08 14:32:57:0422] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-06-08 14:32:57:0750] Helper succeeded



[2022-06-13 10:42:18:0768] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-06-13 10:42:18:0773] CreateProcessAsUser succeeded
[2022-06-13 10:42:18:0773] Helper succeeded



[2022-06-13 10:42:26:0410] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-06-13 10:42:26:0734] Helper succeeded



[2022-06-16 14:36:43:0925] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-06-16 14:36:43:0932] CreateProcessAsUser succeeded
[2022-06-16 14:36:43:0932] Helper succeeded



[2022-06-16 14:36:51:0921] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-06-16 14:36:52:0263] Helper succeeded



[2022-06-21 12:08:15:0849] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-06-21 12:08:15:0853] CreateProcessAsUser succeeded
[2022-06-21 12:08:15:0853] Helper succeeded



[2022-06-21 12:08:22:0811] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-06-21 12:08:23:0149] Helper succeeded



[2022-06-27 15:50:44:0785] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-06-27 15:50:44:0790] CreateProcessAsUser succeeded
[2022-06-27 15:50:44:0790] Helper succeeded



[2022-06-27 15:50:52:0265] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-06-27 15:50:52:0599] Helper succeeded



[2022-07-01 11:32:26:0730] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-07-01 11:32:26:0734] CreateProcessAsUser succeeded
[2022-07-01 11:32:26:0734] Helper succeeded



[2022-07-01 11:32:33:0915] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-07-01 11:32:34:0241] Helper succeeded



[2022-08-02 11:08:49:0873] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:3
[2022-08-02 11:08:49:0877] CreateProcessAsUser succeeded
[2022-08-02 11:08:49:0877] Helper succeeded



[2022-08-02 11:08:56:0995] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:3
[2022-08-02 11:08:57:0317] Helper succeeded



[2022-08-31 16:36:53:0330] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:exploitfil1 /SESSIONID:2
[2022-08-31 16:36:53:0335] CreateProcessAsUser succeeded
[2022-08-31 16:36:53:0335] Helper succeeded



[2022-08-31 16:37:01:0081] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /MANIFEST:"C:\ProgramData\Adobe\ARM\Reader_21.005.20048\exploitfil1\ReaderDCManifest3.msi" /Svc /USER:SYSTEM /SESSIONID:2
[2022-08-31 16:37:01:0420] Helper succeeded



[2022-09-08 14:35:04:0470] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\23329" /Svc /USER:exploitfil1 /SESSIONID:3
[2022-09-08 14:35:04:0766] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601013_3133275718325072754137812021935218560.msi
[2022-09-08 14:35:08:0172] CreateProcessAsUser succeeded
[2022-09-08 14:35:08:0172] Helper succeeded
[2022-09-08 14:35:08:0176] CreateProcessAsUser succeeded
[2022-09-08 14:35:08:0176] Helper succeeded



[2022-09-08 14:35:17:0744] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:exploitfil1 /SESSIONID:3
[2022-09-08 14:35:17:0749] CreateProcessAsUser succeeded
[2022-09-08 14:35:17:0749] Helper succeeded



[2022-09-08 14:35:24:0976] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /MANIFEST:"C:\ProgramData\Adobe\ARM\Reader_21.005.20048\exploitfil1\ReaderDCManifest3.msi" /Svc /USER:SYSTEM /SESSIONID:3
[2022-09-08 14:35:25:0303] Helper succeeded



[2022-09-27 15:43:54:0463] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:exploitfil1 /SESSIONID:3
[2022-09-27 15:43:54:0478] CreateProcessAsUser succeeded
[2022-09-27 15:43:54:0478] Helper succeeded



[2022-09-27 15:44:03:0119] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /MANIFEST:"C:\ProgramData\Adobe\ARM\Reader_21.005.20048\exploitfil1\ReaderDCManifest3.msi" /Svc /USER:SYSTEM /SESSIONID:3
[2022-09-27 15:44:03:0525] Helper succeeded



[2022-10-05 15:48:58:0194] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\20808" /Svc /USER:Administrator /SESSIONID:2
[2022-10-05 15:48:58:0196] finished without process token
[2022-10-05 15:48:58:0196]  Error Code: 883
[2022-10-05 15:48:58:0560] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601032_119579333180132795518446922571500808926.msi
[2022-10-05 15:49:01:0144] finished without process token
[2022-10-05 15:49:01:0144]  Error Code: 883
[2022-10-05 15:49:01:0144] Unable to get valid token
[2022-10-05 15:49:01:0144]  Error Code: 883
[2022-10-05 15:49:01:0144] Helper failed
[2022-10-05 15:49:01:0144]  Error Code: 883
[2022-10-05 15:49:01:0145] finished without process token
[2022-10-05 15:49:01:0145]  Error Code: 883
[2022-10-05 15:49:01:0145] Unable to get valid token
[2022-10-05 15:49:01:0145]  Error Code: 883
[2022-10-05 15:49:01:0145] Helper failed
[2022-10-05 15:49:01:0145]  Error Code: 883



[2022-10-27 15:00:30:0418] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:exploitfil1 /SESSIONID:2
[2022-10-27 15:00:30:0423] CreateProcessAsUser succeeded
[2022-10-27 15:00:30:0423] Helper succeeded



[2022-10-27 15:00:38:0852] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /MANIFEST:"C:\ProgramData\Adobe\ARM\Reader_21.005.20048\exploitfil1\ReaderDCManifest3.msi" /Svc /USER:SYSTEM /SESSIONID:2
[2022-10-27 15:00:39:0172] Helper succeeded



[2022-11-28 10:37:47:0174] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2022-11-28 10:37:47:0174] CreateProcessAsUser succeeded
[2022-11-28 10:37:47:0174] Helper succeeded



[2022-11-28 10:37:58:0143] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2022-11-28 10:37:58:0439] Helper succeeded



[2023-03-03 10:31:08:0103] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\1474" /Svc /USER:Administrator /SESSIONID:2
[2023-03-03 10:31:08:0119] finished without process token
[2023-03-03 10:31:08:0119]  Error Code: 883
[2023-03-03 10:31:08:0431] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601042_1033775330182024566620488078731650819191.msi
[2023-03-03 10:31:11:0103] finished without process token
[2023-03-03 10:31:11:0103]  Error Code: 883
[2023-03-03 10:31:11:0103] Unable to get valid token
[2023-03-03 10:31:11:0103]  Error Code: 883
[2023-03-03 10:31:11:0103] Helper failed
[2023-03-03 10:31:11:0103]  Error Code: 883
[2023-03-03 10:31:11:0103] finished without process token
[2023-03-03 10:31:11:0103]  Error Code: 883
[2023-03-03 10:31:11:0103] Unable to get valid token
[2023-03-03 10:31:11:0103]  Error Code: 883
[2023-03-03 10:31:11:0103] Helper failed
[2023-03-03 10:31:11:0103]  Error Code: 883



[2023-04-13 18:02:20:0535] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\13472" /Svc /USER:Administrator /SESSIONID:2
[2023-04-13 18:02:20:0538] finished without process token
[2023-04-13 18:02:20:0538]  Error Code: 883
[2023-04-13 18:02:20:0843] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601047_175879979219105522781378404122008575282.msi
[2023-04-13 18:02:23:0483] finished without process token
[2023-04-13 18:02:23:0483]  Error Code: 883
[2023-04-13 18:02:23:0483] Unable to get valid token
[2023-04-13 18:02:23:0483]  Error Code: 883
[2023-04-13 18:02:23:0483] Helper failed
[2023-04-13 18:02:23:0483]  Error Code: 883
[2023-04-13 18:02:23:0484] finished without process token
[2023-04-13 18:02:23:0484]  Error Code: 883
[2023-04-13 18:02:23:0484] Unable to get valid token
[2023-04-13 18:02:23:0484]  Error Code: 883
[2023-04-13 18:02:23:0484] Helper failed
[2023-04-13 18:02:23:0484]  Error Code: 883



[2023-09-19 11:20:33:0088] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\2104" /Svc /USER:Administrator /SESSIONID:2
[2023-09-19 11:20:33:0090] finished without process token
[2023-09-19 11:20:33:0090]  Error Code: 883
[2023-09-19 11:20:34:0979] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601052_23682081226482447818827598521936095957.msi
[2023-09-19 11:20:36:0828] finished without process token
[2023-09-19 11:20:36:0828]  Error Code: 883
[2023-09-19 11:20:36:0828] Unable to get valid token
[2023-09-19 11:20:36:0828]  Error Code: 883
[2023-09-19 11:20:36:0828] Helper failed
[2023-09-19 11:20:36:0828]  Error Code: 883
[2023-09-19 11:20:36:0829] finished without process token
[2023-09-19 11:20:36:0829]  Error Code: 883
[2023-09-19 11:20:36:0829] Unable to get valid token
[2023-09-19 11:20:36:0829]  Error Code: 883
[2023-09-19 11:20:36:0829] Helper failed
[2023-09-19 11:20:36:0829]  Error Code: 883



[2023-10-17 11:36:40:0398] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\8272" /Svc /USER:Administrator /SESSIONID:2
[2023-10-17 11:36:40:0398] finished without process token
[2023-10-17 11:36:40:0398]  Error Code: 883
[2023-10-17 11:36:40:0711] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601053_121014304715035670871225098520755897876.msi
[2023-10-17 11:36:43:0179] finished without process token
[2023-10-17 11:36:43:0179]  Error Code: 883
[2023-10-17 11:36:43:0179] Unable to get valid token
[2023-10-17 11:36:43:0179]  Error Code: 883
[2023-10-17 11:36:43:0179] Helper failed
[2023-10-17 11:36:43:0179]  Error Code: 883
[2023-10-17 11:36:43:0179] finished without process token
[2023-10-17 11:36:43:0179]  Error Code: 883
[2023-10-17 11:36:43:0179] Unable to get valid token
[2023-10-17 11:36:43:0179]  Error Code: 883
[2023-10-17 11:36:43:0179] Helper failed
[2023-10-17 11:36:43:0179]  Error Code: 883



[2024-03-12 18:44:51:0094] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\29569" /Svc /USER:Administrator /SESSIONID:2
[2024-03-12 18:44:51:0096] finished without process token
[2024-03-12 18:44:51:0096]  Error Code: 883
[2024-03-12 18:44:51:0421] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601067_62454458721369818922131408339537339284.msi
[2024-03-12 18:44:53:0903] finished without process token
[2024-03-12 18:44:53:0903]  Error Code: 883
[2024-03-12 18:44:53:0903] Unable to get valid token
[2024-03-12 18:44:53:0903]  Error Code: 883
[2024-03-12 18:44:53:0903] Helper failed
[2024-03-12 18:44:53:0903]  Error Code: 883
[2024-03-12 18:44:53:0904] finished without process token
[2024-03-12 18:44:53:0904]  Error Code: 883
[2024-03-12 18:44:53:0904] Unable to get valid token
[2024-03-12 18:44:53:0904]  Error Code: 883
[2024-03-12 18:44:53:0904] Helper failed
[2024-03-12 18:44:53:0904]  Error Code: 883



[2024-07-03 12:15:46:0549] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\6353" /Svc /USER:admop /SESSIONID:2
[2024-07-03 12:15:46:0850] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601078_18311538876852183161835590077446626241.msi
[2024-07-03 12:15:49:0016] command line: /Skip /ArmCleanup
[2024-07-03 12:15:49:0025] CreateProcessAsUser succeeded
[2024-07-03 12:15:49:0025] Helper succeeded
[2024-07-03 12:15:49:0027] command line: /Skip /BackFromArmUpdate
[2024-07-03 12:15:49:0029] CreateProcessAsUser succeeded
[2024-07-03 12:15:49:0029] Helper succeeded



[2024-07-03 12:17:51:0813] Helper started, Command Line: /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2024-07-03 12:17:51:0816] command line: /Skip /ArmElevate /CollectFiles /Svc /USER:admop /SESSIONID:2
[2024-07-03 12:17:51:0817] CreateProcessAsUser succeeded
[2024-07-03 12:17:51:0817] Helper succeeded



[2024-07-03 12:17:59:0802] Helper started, Command Line: /ArmElevate /MODE:3 /UpdateSelection:0 /PRODUCT:Reader /VERSION:21.0 /LANG:FRA /Svc /USER:SYSTEM /SESSIONID:2
[2024-07-03 12:18:00:0120] Helper succeeded



[2024-08-26 17:27:19:0971] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\630" /Svc /USER:Administrator /SESSIONID:2
[2024-08-26 17:27:19:0971] finished without process token
[2024-08-26 17:27:19:0971]  Error Code: 883
[2024-08-26 17:27:20:0284] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601091_84544524115036360349322269291141921292.msi
[2024-08-26 17:27:22:0628] finished without process token
[2024-08-26 17:27:22:0628]  Error Code: 883
[2024-08-26 17:27:22:0628] Unable to get valid token
[2024-08-26 17:27:22:0628]  Error Code: 883
[2024-08-26 17:27:22:0628] Helper failed
[2024-08-26 17:27:22:0628]  Error Code: 883
[2024-08-26 17:27:22:0628] finished without process token
[2024-08-26 17:27:22:0628]  Error Code: 883
[2024-08-26 17:27:22:0628] Unable to get valid token
[2024-08-26 17:27:22:0628]  Error Code: 883
[2024-08-26 17:27:22:0628] Helper failed
[2024-08-26 17:27:22:0628]  Error Code: 883



[2024-10-28 15:25:51:0397] Helper started, Command Line: /ArmUpdate /MSI /MODE:3 /UpdateSelection:0 /PRODUCT:AdobeARM /VERSION:1.0 /LANG:ENU FOLDER:"C:\ProgramData\Adobe\ARM\S\3528" /Svc /USER:Administrator /SESSIONID:2
[2024-10-28 15:25:51:0397] finished without process token
[2024-10-28 15:25:51:0397]  Error Code: 883
[2024-10-28 15:25:51:0726] File copied: C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\Cache\Arm_018244601102_1153159625166303992307537317406103534.msi
[2024-10-28 15:25:54:0038] finished without process token
[2024-10-28 15:25:54:0038]  Error Code: 883
[2024-10-28 15:25:54:0038] Unable to get valid token
[2024-10-28 15:25:54:0038]  Error Code: 883
[2024-10-28 15:25:54:0038] Helper failed
[2024-10-28 15:25:54:0038]  Error Code: 883
[2024-10-28 15:25:54:0038] finished without process token
[2024-10-28 15:25:54:0038]  Error Code: 883
[2024-10-28 15:25:54:0038] Unable to get valid token
[2024-10-28 15:25:54:0038]  Error Code: 883
[2024-10-28 15:25:54:0038] Helper failed
[2024-10-28 15:25:54:0038]  Error Code: 883