EchoTrail

FullTrustNotifier.exe

by Microsoft
Operating System

Sources: 300M+ executions observed in the wild and observed in the EchoTrail lab on Windows 11.

Summary

Full Trust Notifier - mediates between UWP app containers and full-trust desktop components.

FullTrustNotifier.exe is the 193rd most commonly executed Windows program in EchoTrail's dataset, observed 79,653 times across enterprise environments. It typically runs from C:\Program Files\Adobe\Acrobat DC\Acrobat\RDCNotificationClient and it is most often launched by AdobeCollabSync.exe.

Get this in your tools

The same record for fulltrustnotifier.exe, by REST or as an MCP tool. Free key, no card.

Get a free key
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
  https://api.echotrail.io/v1/process/fulltrustnotifier.exe

Free returns the summary. Team returns the full record you see on this page. Endpoint docs

193rd
most commonly executed Windows program
79,653
observed endpoint executions

Behavior

Top Paths

  • C:\Program Files\Adobe\Acrobat DC\Acrobat\RDCNotificationClient53.82%
  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader34.98%
  • C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat6.25%
  • C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r3.39%
  • C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r1.19%
  • C:\Program Files\Adobe\Acrobat DC\Acrobat\ADCNotificationClient0.37%

Top Hashes (SHA256)

  • f72ae9e2704e97d9c31b3128003296ae46b20acdda49bf2e85d5b6799085bb4f57.42%
  • 4653df6eb852f717ac03d5ecdfdd5e1e2c1ac70b012049f1188e0e7d5b5f898331.85%
  • 79f2749d62da14edd4b797d0af539e996841c237795932c299b847bb7d2cd1595.97%
  • e4572d5929da0ee07bf6c2de6361e247db96149dee5a6f3e7e61074c5b1dae623.11%
  • 97c8b3d07e2eff84ef294df45ee98cfc590ba136409d81fc7835d1f89c1b0c521.25%
  • 168fab3c871e7403b1ce6aa64c9a8f023de20ac928ff44a2db37c0747e9dd1440.4%

Code Signing

Signers by share of executions

  • Adobe Inc.Valid
    Embedded signature · 1 hash
    100%
    Chain
    1. Adobe Inc.
    2. DigiCert EV Code Signing CA (SHA2)
    3. DigiCert High Assurance EV Root CA
    Valid
    • Dec 19, 2020 to Dec 21, 2022
    Hashes
    • f72ae9e2704e97d9c31b3128003296ae46b20acdda49bf2e85d5b6799085bb4f100% of executions, first seen Sep 25, 2026

Full certificate detail on Team.

Process Ancestry

Top Grandparents

Top Parents

Lab record

Installed from
winget Adobe.Acrobat.Reader.64-bit 26.002.21931
Publisher
Adobe Inc.
Persistence
none
Network
none
Command lines
1 pattern (1 launch)
DLL loads
34 patterns (35 loads)
Registry writes
0 patterns (0 writes)
File writes
0 patterns (0 writes)
HTTP requests
0 patterns (0 requests)
TLS connections
0 patterns (0 handshakes)
Named pipes
0 patterns (0 events)
Process access
0 patterns (0 events)
Driver loads
0 patterns (0 loads)
PowerShell blocks
0 patterns (0 blocks)
Remote threads
0 patterns (0 events)
Audit events
0 patterns (0 events)

Full record on Team.

Ask Rocky about FullTrustNotifier.exe

Rocky is the free chat demo. It answers from this same dataset, no account needed.

This page is the Team-tier API record for FullTrustNotifier.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.