Ransomware blocker shows Acrobat constantly modifying system files daily, even when not updating.

A mac user, I downloaded an appcalled "RansomWhere" recentlythat monitors when anyone, anything or any app is trying to modify system files. It allows you to terminate or allow and provides a comprehensive description of whats happening. 

Several times a day now I get notices that Acrobat is trying to modify my system. Why?

The most recent script was Acrobat instructing something to "SearchDataCache" I terminated it immediately. Acrobat does not need to be in my root level system at any time.

These are not updates, which happen to frequently anyway.

My suspicion is that this is Adobe Spyware and that Adobe is scraping my system and selling the data.

From now on I am going to copy, log, journal and report these actions and when I have enough will post here.

Has anyone else noticed this? Ransomware blockers and warning software are relatively new and these processes previously would have been completely invisible to us users.