24:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 23:T4a8,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious PDF/Phishinggent Sample 2c5a763c7796… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 2c5a763c7796…. Malware family: PDF/Phishinggent. Threat score 100/100. 2/27 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac","keywords":["Malicious","PDF/Phishinggent","malware analysis","sandbox report","threat intelligence","2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac"],"about":{"@type":"SoftwareApplication","name":"watch123-hd-after-we-collided-online-full-movie-2020.pdf","applicationCategory":["pdf"],"identifier":"2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"PDF/Phishinggent","antivirusDetections":{"malicious":2,"total":27},"behavioralIndicators":{"malicious":1,"suspicious":4},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}25:T1de0,Pattern match: "https://onemoviespro.ltd/movie/613504/after-we-collided.html" Pattern match: "https://onemoviespro.ltd:443/movie/613504/after-we-collided.html" Pattern match: "https://image.tmdb.org/t/p/original/lcoEUsxTM6QWZH3HlraA3Qmb5yx.jpg" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/bootstrap.min.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/font-awesome.min.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/owl.carousel.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/owl.transitions.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/magnific-popup.css" Pattern match: "https://cdnjs.cloudflare.com/ajax/libs/video.js/7.5.0/video-js.min.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/style.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/responsive.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/style.min.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/custom.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/css/share.css" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/images/template/favicon.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/images/template/apple-touch-icon.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/images/template/icon-72x72.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/images/template/icon-114x114.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/html5shiv.min.js" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/respond.min.js" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/images/template/logo.gif" Pattern match: "https://onemoviespro.ltd:443/genre/action/28" Pattern match: "https://onemoviespro.ltd:443/genre/animation/16" Pattern match: "https://onemoviespro.ltd:443/genre/comedy/35" Pattern match: "https://onemoviespro.ltd:443/genre/crime/80" Pattern match: "https://onemoviespro.ltd:443/genre/documentary/99" Pattern match: "https://onemoviespro.ltd:443/genre/drama/18" Pattern match: "https://onemoviespro.ltd:443/genre/family/10751" Pattern match: "https://onemoviespro.ltd:443/genre/fantasy/14" Pattern match: "https://onemoviespro.ltd:443/genre/foreign/10769" Pattern match: "https://onemoviespro.ltd:443/genre/history/36" Pattern match: "https://onemoviespro.ltd:443/genre/horror/27" Pattern match: "https://onemoviespro.ltd:443/genre/music/10402" Pattern match: "https://onemoviespro.ltd:443/genre/mystery/9648" Pattern match: "https://onemoviespro.ltd:443/genre/romance/10749" Pattern match: "https://onemoviespro.ltd:443/genre/sci-fi/878" Pattern match: "https://onemoviespro.ltd:443/genre/TV-Movie/10770" Pattern match: "https://onemoviespro.ltd:443/genre/thriller/53" Pattern match: "https://onemoviespro.ltd:443/genre/war/10752" Pattern match: "https://onemoviespro.ltd:443/genre/western/37" Pattern match: "https://image.tmdb.org/t/p/w185/kiX7UYfOpYrMFSAGbI6j1pFkLzQ.jpg" Pattern match: "https://schema.org/Organization" Pattern match: "https://schema.org/Person" Pattern match: "translate.google.com/translate_a/element.js?cb=googleTranslateElementInit" Pattern match: "https://www.facebook.com/share.php?u=https://onemoviespro.ltd:443/movie/613504/after-we-collided.html" Pattern match: "https://twitter.com/share?url=https://onemoviespro.ltd:443/movie/613504/after-we-collided.html&text=After" Pattern match: "https://pinterest.com/pin/create/button/?url=https://onemoviespro.ltd:443/movie/613504/after-we-collided.html&media=https://image.tmdb.org/t/p/original/lcoEUsxTM6QWZH3HlraA3Qmb5yx.jpg&description=After" Pattern match: "https://www.facebook.com/sharer/sharer.php?u=https://onemoviespro.ltd:443/movie/613504/after-we-collided.html" Pattern match: "https://image.tmdb.org/t/p/w300/6CoRTJTmijhBLJTUNoVSUNxZMEI.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/aKx1ARwG55zZ0GpRvU2WrGrCG9o.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/qzA87Wf4jo1h8JMk9GilyIYvwsA.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/sy6DvAu72kjoseZEjocnm2ZZ09i.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/uOw5JD8IlD546feZ6oxbIjvN66P.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/4BgSWFMW2MJ0dT5metLzsRWO7IJ.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/irkse1FMm9dWemwlxKJ7RINT9Iy.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/gzFatNrw0lhKD5NxaU6zC7S2KjP.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/kiX7UYfOpYrMFSAGbI6j1pFkLzQ.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/sDi6wKgECUjDug2gn4uODSqZ3yC.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/7W0G3YECgDAfnuiHG91r8WqgIOe.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/vQgXwuJrlpzGDI8169tRQRy71Nv.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/f4aul3FyD3jv3v4bul1IrkWZvzq.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/7G2VvG1lU8q758uOqU6z2Ds0qpA.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/hPkqY2EMqWUnFEoedukilIUieVG.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/zGVbrulkupqpbwgiNedkJPyQum4.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/4w1ItwCJCTtSi9nPfJC1vU6NIVg.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/ucktgbaMSaETUDLUBp1ubGD6aNj.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/4V2nTPfeB59TcqJcUfQ9ziTi7VN.jpg" Pattern match: "https://image.tmdb.org/t/p/w300/k68nPLbIST6NP96JmTxmZijEvCA.jpg" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/img/720p.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/img/1080p.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/img/2k.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/img/4k.png" Pattern match: "gtranslate.net/flags/blank.png" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/images/template/logo-footer.png" Pattern match: "https://onemoviespro.ltd:443/p/popular-movies/" Pattern match: "https://onemoviespro.ltd:443/p/toprated-movies/" Pattern match: "https://onemoviespro.ltd:443/p/movies-nowplay/" Pattern match: "https://onemoviespro.ltd:443/p/upcoming-movies/" Pattern match: "https://onemoviespro.ltd:443/p/tv-popular/" Pattern match: "https://onemoviespro.ltd:443/p/tv-airing/" Pattern match: "https://onemoviespro.ltd:443/p/tv-ontheair/" Pattern match: "https://onemoviespro.ltd:443/p/privacy-policy/" Pattern match: "https://onemoviespro.ltd:443/p/dmca-notice/" Pattern match: "https://docs.google.com/forms/d/e/1FAIpQLScc-EzYRvFWIx93fJ0E0JXchAmLzjhLXKRG5jkVhBuk4x_KqQ/viewform" Pattern match: "https://onemoviespro.ltd:443/sitemap.xml" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/jquery.min.js" Pattern match: "https://cdnjs.cloudflare.com/ajax/libs/modernizr/2.8.3/modernizr.min.js" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/bootstrap.min.js" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/owl.carousel.js" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/jquery.magnific-popup.min.js" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/jquery.ajaxchimp.min.js" Pattern match: "https://onemoviespro.ltd:443/themes/g-silvers/js/scripts.js" Pattern match: "https://cdnjs.cloudflare.com/ajax/libs/video.js/7.5.0/video.min.js" Pattern match: "https://cdnjs.cloudflare.com/ajax/libs/videojs-youtube/2.6.0/Youtube.min.js" Pattern match: "https://www.youtube.com/watch?v=OT9HsNszYCI" Pattern match: "https://s10.histats.com/js15_as.js"26:T4e6,"" (Indicator: "facebook.com") "" (Indicator: "twitter") "" (Indicator: "facebook.com") "" (Indicator: "youtube") "" (Indicator: "twitter") "" (Indicator: "youtube") "techOrder: ['youtube']," (Indicator: "youtube") "src: 'https://www.youtube.com/watch?v=OT9HsNszYCI'," (Indicator: "youtube") "type: 'video/youtube'" (Indicator: "youtube")27:Tdc3,Embedded object type "/ObjStm" (ID: 4, References: 7 0 R,6 0 R,9 0 R,17 0 R,26 0 R,42 0 R,62 0 R,78 0 R,92 0 R,118 0 R,8 0 R,10 0 R,11 0 R,12 0 R,13 0 R,14 0 R,15 0 R,16 0 R,22 0 R,25 0 R,31 0 R,32 0 R,33 0 R,34 0 R,35 0 R,36 0 R,37 0 R,38 0 R,39 0 R,40 0 R,41 0 R,43 0 R,44 0 R,45 0 R,46 0 R,47 0 R,48 0 R,49 0 R,50 0 R,51 0 R,52 0 R,53 0 R,54 0 R,55 0 R,56 0 R,57 0 R,58 0 R,59 0 R,60 0 R,61 0 R,63 0 R,64 0 R,65 0 R,66 0 R,67 0 R,68 0 R,69 0 R,70 0 R,71 0 R,72 0 R,73 0 R,74 0 R,75 0 R,76 0 R,77 0 R,79 0 R,80 0 R,81 0 R,82 0 R,83 0 R,84 0 R,85 0 R,86 0 R,87 0 R,88 0 R,89 0 R,90 0 R,91 0 R,93 0 R,94 0 R,95 0 R,96 0 R,97 0 R,98 0 R,99 0 R,100 0 R,101 0 R,102 0 R,103 0 R,104 0 R,105 0 R,106 0 R,107 0 R,108 0 R,109 0 R,110 0 R,111 0 R,112 0 R,113 0 R,114 0 R,115 0 R,116 0 R,117 0 R,119 0 R,120 0 R,121 0 R,122 0 R,123 0 R,124 0 R,125 0 R,126 0 R,127 0 R,128 0 R,129 0 R,130 0 R,131 0 R,132 0 R,133 0 R,134 0 R,5 0 R,7 0 R,135 0 R,8 0 R,10 0 R,11 0 R,12 0 R,13 0 R,14 0 R,15 0 R,20 0 R,21 0 R,24 0 R,29 0 R,30 0 R,31 0 R,32 0 R,33 0 R,34 0 R,35 0 R,36 0 R,37 0 R,38 0 R,39 0 R,40 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,17 0 R,20 0 R,21 0 R,7 0 R,135 0 R,18 0 R,19 0 R,16 0 R,135 0 R,141 0 R,135 0 R,17 0 R,135 0 R,16 0 R,135 0 R,16 0 R,135 0 R,23 0 R,24 0 R,7 0 R,135 0 R,22 0 R,135 0 R,22 0 R,135 0 R,26 0 R,29 0 R,30 0 R,7 0 R,135 0 R,27 0 R,28 0 R,25 0 R,135 0 R,142 0 R,135 0 R,26 0 R,135 0 R,25 0 R,135 0 R,25 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,135 0 R,7 0 R,136 0 R,41 0 R,43 0 R,44 0 R,45 0 R,46 0 R,47 0 R,48 0 R,49 0 R,50 0 R,51 0 R,52 0 R,53 0 R,54 0 R,55 0 R,56 0 R,57 0 R,58 0 R,59 0 R,60 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,136 0 R,7 0 R,137 0 R,61 0 R,63 0 R,64 0 R,65 0 R,66 0 R,67 0 R,68 0 R,69 0 R,70 0 R,71 0 R,72 0 R,73 0 R,74 0 R,75 0 R,76 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,137 0 R,7 0 R,138 0 R,77 0 R,79 0 R,80 0 R,81 0 R,82 0 R,83 0 R,84 0 R,85 0 R,86 0 R,87 0 R,88 0 R,89 0 R,90 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,138 0 R,7 0 R,139 0 R,91 0 R,93 0 R,94 0 R,95 0 R,96 0 R,97 0 R,98 0 R,99 0 R,100 0 R,101 0 R,102 0 R,103 0 R,104 0 R,105 0 R,106 0 R,107 0 R,108 0 R,109 0 R,110 0 R,111 0 R,112 0 R,113 0 R,114 0 R,115 0 R,116 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,139 0 R,7 0 R,140 0 R,117 0 R,119 0 R,120 0 R,121 0 R,122 0 R,123 0 R,124 0 R,125 0 R,126 0 R,127 0 R,128 0 R,129 0 R,130 0 R,131 0 R,132 0 R,133 0 R,134 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R,7 0 R,140 0 R)28:T4d0,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAADY0lEQVR42u2VS08TURiG+ytceVmYGI260gUmaNzJRuMlaBQXYlgYNTEhxI3RmGBwwQJj3BjcqISF8YIYTIyXyKVCBRQskrZaCr1QCvQy05ne4XW+AzOcGaY4rZK48CRPmtOe0+c93/k6tdn+9REMBkEEAgEN9b1QKITp6WmEw2HMzMwwIpEIZmdnMTc3x3A6nfjjAKrY7/drAUhuDEByPsD8/DzcbjdcLlfxEPEtNqwHFIgCTE5OsqBer9c8RFRZLO7d8Feh76RKUQB6TSaT2jWuChDZbIORvFLWdF8vYg1XlubhaWS+jSJaW8PmBaXMGecopJcvYLafoJNHo1EmzWQyEASBVcLn8+lDhJXFRrITXkSOVSH92bE0900gXLET8od3K3OTfTxqACq92kP0nsfj0YcIbrLBSF5pIqn7IyIX6tichPSa+flj6XOltGmqyN0WmO0nSBaLxRCPx5FIJBhUBVEUGVqAKWWxkYxSAd1cCRA4WAH5y7A2N9unY2qqqJx6Qgvg3WiDkdT4d908q/SANPIV/ppqNk+7XTDbx0M/2WJySZJWAniUxesB3XkxuS6AS1m8HtDPzkwuyzLD8pOwp6cH3d3dGr29vYy+vj7Y7Xb09/djYGCA4XA4MDg4iLGxMfZEVMVGeSqVsh6AmskI3a+K2X8EyakB+ZLz8nQ6bT0AfZERtbkI8X0XkpdOQnxwR1dus1Or8pIC8DK+q1WS95ogesYhnq3SiYvJ6alIWA7Ay/im0k7b0Y7kszaI54+vKVbl2WyWYTnAKuHyKbXThkMQDmxH8n7LmmJensvlrAfQyZZPyENCYf8OyCPDlsREPp+3HsAo4yGZPDIE4XAlxJsNlsREoVCwHsAo5CGZeL0e0qNWyJ1PIT1p+62YWFhYsB7AWFYdoQBie7YiNeSA9LAViboaxE8dgdjcBOHWDYi3G1eJicXFResBjGVVkd++RryqEolz1ZDfdCEnS+y0cudzCNeuQmp/jNld23RyEhM0LAfgS0pkgn4IF2uRbG5EdN9uZEVBV2Z2Ygr9yY6cf0onVuUlBVDvUSVRe5qFiB09hLS9Z9X9GkvNS/lhOQB/MiJRfxnxMyeQetWxprSYuOQAvMRMWIq0rAC8yExYirSsAEZZucKyA2Cdhu3/WB6/ADuvDu+77R/qAAAAAElFTkSuQmCC29:T5c2,--type=renderer --primordial-pipe-token=A3B8899C272206F6D63CF0EB001B0BAB --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=A3B8899C272206F6D63CF0EB001B0BAB --renderer-client-id=2 --mojo-platform-channel-handle=1264 --allow-no-sandbox-job /prefetch:12a:T5c2,--type=renderer --primordial-pipe-token=0F1948DCB131154BDF71C02DBE6D975D --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=0F1948DCB131154BDF71C02DBE6D975D --renderer-client-id=3 --mojo-platform-channel-handle=1312 --allow-no-sandbox-job /prefetch:11b:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$23"}}],["$","$L24",null,{"initialData":{"schema_version":"1.0.15","sha256":"2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1790712512068,"unified_at":"2026-09-29T20:08:32.068Z","metadata":{"hashes":{"sha256":"2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac","sha1":"b3bb121605ec67c927c5e553252420c526ff5482","md5":"10de5f305fd0f971a2e72887bbd19a3f","sha512":"4f0bb585802fcff7481d651c9c1e8cca2a3f27b96786d3a2fe19662487164828d37c67d33f0998056471d73b69eff10c9418ad0967a0257b8432f0235160686a","ssdeep":"12288:LIHmrZ/ZZ7jGnNNNNNNNNr8IeCf8roGUtbmK5GZgbekGhyWnapX:LBZvE8zdaHk2bekGhVnMX","ssdeep_chunks":["12288:LIHmrZ/","12288:IHmrZ/Z","12288:HmrZ/ZZ","12288:mrZ/ZZ7","12288:rZ/ZZ7j","12288:Z/ZZ7jG","12288:/ZZ7jGn","12288:ZZ7jGnN","12288:Z7jGnNN","12288:7jGnNNN","12288:jGnNNNN","12288:GnNNNNN","12288:nNNNNNN","12288:NNNNNNN","12288:NNNNNNr","12288:NNNNNr8","12288:NNNNr8I","12288:NNNr8Ie","12288:NNr8IeC","12288:Nr8IeCf","12288:r8IeCf8","12288:8IeCf8r","12288:IeCf8ro","12288:eCf8roG","12288:Cf8roGU","12288:f8roGUt","12288:8roGUtb","12288:roGUtbm","12288:oGUtbmK","12288:GUtbmK5","12288:UtbmK5G","12288:tbmK5GZ","12288:bmK5GZg","12288:mK5GZgb","12288:K5GZgbe","12288:5GZgbek","12288:GZgbekG","12288:ZgbekGh","12288:gbekGhy","12288:bekGhyW","12288:ekGhyWn","12288:kGhyWna","12288:GhyWnap","12288:hyWnapX","24576:LIHmrZ/","24576:IHmrZ/Z","24576:HmrZ/ZZ","24576:mrZ/ZZ7","24576:rZ/ZZ7j","24576:Z/ZZ7jG","24576:/ZZ7jGn","24576:ZZ7jGnN","24576:Z7jGnNN","24576:7jGnNNN","24576:jGnNNNN","24576:GnNNNNN","24576:nNNNNNN","24576:NNNNNNN","24576:NNNNNNr","24576:NNNNNr8","24576:NNNNr8I","24576:NNNr8Ie","24576:NNr8IeC","24576:Nr8IeCf","24576:r8IeCf8","24576:8IeCf8r","24576:IeCf8ro","24576:eCf8roG","24576:Cf8roGU","24576:f8roGUt","24576:8roGUtb","24576:roGUtbm","24576:oGUtbmK","24576:GUtbmK5","24576:UtbmK5G","24576:tbmK5GZ","24576:bmK5GZg","24576:mK5GZgb","24576:K5GZgbe","24576:5GZgbek","24576:GZgbekG","24576:ZgbekGh","24576:gbekGhy","24576:bekGhyW","24576:ekGhyWn","24576:kGhyWna","24576:GhyWnap","24576:hyWnapX","12288:LBZvE8z","12288:BZvE8zd","12288:ZvE8zda","12288:vE8zdaH","12288:E8zdaHk","12288:8zdaHk2","12288:zdaHk2b","12288:daHk2be","12288:aHk2bek","12288:Hk2bekG","12288:k2bekGh","12288:2bekGhV","12288:bekGhVn","12288:ekGhVnM","12288:kGhVnMX"],"imphash":"Unknown"},"file_info":{"file_name":"watch123-hd-after-we-collided-online-full-movie-2020.pdf","file_type":["pdf"],"file_type_id":"pdf","file_size":494728,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1601956335000,"last_seen":1605477144000,"last_multi_scan":1605477144000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":null},"stats":{"av":{"malicious_count":2,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":3},"sandbox_signatures":{"informative_count":14,"suspicious_count":4,"malicious_count":1,"total":19},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"Ahnlab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"BitDefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"PDF/Phishing.Agent.MQS trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"Ikarus","success":true,"verdict":"malicious","threat_name":"Trojan.PDF.Phishing","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"TrendMicro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"TrendMicro House Call","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xviruspersonalguard":{"name":"Xvirus Personal Guard","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"PDF/Phishinggent","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Found a string that may be used as part of an injection method"}],"sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"tactic":"Defense Evasion","technique":"DCShadow","attack_id":"T1207","attack_id_wiki":"https://attack.mitre.org/techniques/T1207","identifiers":[{"type":"informative","value":"Contains object with compressed stream data"}],"sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Scanning for window names"}],"sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}],"sandbox_signatures":[{"level":"informative","category":"External Systems","name":"Detected Suricata Alert","description":"Detected alert \"ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent\" (SID: 2027390, Rev: 3, Severity: 3) categorized as \"Unknown Traffic\"\n Detected alert \"ET INFO Windows OS Submitting USB Metadata to Microsoft\" (SID: 2025275, Rev: 3, Severity: 3) categorized as \"Misc activity\"","origin":"Suricata Alerts","relevance":10,"id":"suricata-0","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"NISxF2Pavb.scl3.dc\"\n \"_ldap._tcp.dc._msdcs.scl3.dc\"\n \"isatap.scl3.dc\"\n \"wpad.scl3.dc\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"General","name":"Contains object with compressed stream data","description":"Object ID 4 contains compressed stream data: No filters\n Object ID 143 contains compressed stream data: No filters\n Object ID 148 contains compressed stream data: No filters\n Object ID 150 contains compressed stream data: No filters\n Object ID 152 contains compressed stream data: No filters\n Object ID 154 contains compressed stream data: No filters\n Object ID 156 contains compressed stream data: No filters\n Object ID 163 contains compressed stream data: /CIDInit /ProcSet findresource begin\n28 dict begin\nbegincmap\n/CIDSystemInfo\n<< /Registry (Adobe)\n/Ordering (UCS)\n/Supplement 0\n>> def\n/CMapName /Adobe-Identity-UCS def\n/CMapType 2 def\n1 begincodespacerange\n<0000> <FFFF>\nendcodespace ...","origin":"Static Parser","mitre_attack_id":"T1207","relevance":10,"id":"static-66","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\Acrobat Instance Mutex\"\n \"DBWinMutex\"\n \"Local\\Acrobat Instance Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"\n \"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex\"\n \"com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"General","name":"PDF file has an embedded URL","description":"\"https://onemoviespro.ltd/movie/613504/after-we-collided.html\" (Based on: \"2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac.bin\")","origin":"File/Memory","relevance":3,"id":"string-25","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"RdrCEF.exe\" (UID: 00064644-00003636) was launched with modified environment variables: \"Path\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"AcroRd32.exe\" searching for class \"Acrobat Instance Window Class\"\n \"AcroRd32.exe\" searching for class \"AdobeAcrobatSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for class \"AdobeReaderSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for window \"_AcroAppTimer\"\n \"AcroRd32.exe\" searching for class \"ACROSEMAPHORE_R18\"\n \"AcroRd32.exe\" searching for class \"JFWUI2\"\n \"AcroRd32.exe\" searching for class \"Shell_TrayWnd\"","origin":"API Call","mitre_attack_id":"T1010","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"RdrCEF.exe\" with commandline \"--backgroundcolor=16448250\" (UID: 00064644-00003636)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=A3B8899C272206F6D63CF0EB ...\" (UID: 00064729-00002724)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=0F1948DCB131154BDF71C02D ...\" (UID: 00064759-00002876)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"\"A9Ru75fj1_650kq1_220.tmp\" has type \"Zip data (MIME type \"application/vnd.adobe.air-ucf-package+zip\"?)\"\n \"GlobSettings\" has type \"ASCII text\"\n \"A9Rxbyhqe_650kpy_220.tmp\" has type \"data\"\n \"SharedDataEvents-journal\" has type \"SQLite Rollback Journal\"\n \"data_1\" has type \"data\"\n \"Visited Links\" has type \"data\"\n \"0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl\" has type \"data\"\n \"SharedDataEvents\" has type \"SQLite 3.x database\"\n \"A9Rvu849z_650kq0_220.tmp\" has type \"data\"\n \"A9R25p6ar_650kpx_220.tmp\" has type \"data\"\n \"A9Rxy1f3h_650kpz_220.tmp\" has type \"data\"\n \"CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl\" has type \"data\"\n \"IconCacheRdr65536.dat\" has type \"data\"\n \"urlref_httpsonemoviespro.ltdmovie613504after-we-collided.html\" has type \"HTML document ASCII text with very long lines\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"Installation/Persistence","name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)","origin":"File/Memory","mitre_attack_id":"T1055","relevance":4,"id":"string-4","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"Installation/Persistence","name":"Touches files in the Windows directory","description":"\"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\KBDUS.DLL\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\drivers\\etc\\hosts\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arial.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALN.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariali.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbd.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNB.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbi.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNBI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariblk.ttf\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$25","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"$26","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"informative","category":"Unusual Characteristics","name":"Contains embedded objects that might be interesting to investigate","description":"$27","origin":"Static Parser","relevance":5,"id":"static-10","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Possible heap spraying attempt detected","description":"\"RdrCEF.exe\" issued more than 3000 memory allocations","origin":"API Call","relevance":10,"id":"api-88","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/79 reputation engines marked \"https://image.tmdb.org\" as malicious (1% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Creates new processes","description":"\"AcroRd32.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 788)\n \"RdrCEF.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 1420)\n \"RdrCEF.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 1328)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"suspicious","category":"Network Related","name":"Contacts Random Domain Names","description":"\"NISxF2Pavb.scl3.dc\" seems to be random\n \"_ldap._tcp.dc._msdcs.scl3.dc\" seems to be random\n \"wpad.scl3.dc\" seems to be random","origin":"Network Traffic","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Document analysis contacts a domain","description":"Often seen on documents with macro droppers\n embedded files or exploits","origin":"Indicator Combinations","relevance":3,"id":"summary-1","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 4 domains and 4 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}]},"activity":{"stats":{"process_count":4,"spawned_processes_count":4,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":6,"imported_dlls_count":136,"dropped_files_count":0,"extracted_files_count":14,"files_written_count":155,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":7,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":7,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":4,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment"],"sandbox_reports":[{"id":"5f7be9eeb4a1dc4ad7733dca","environment_id":110,"environment_description":"Windows 7 32 bit (HWP Support)","state":"SUCCESS","verdict":"no specific threat","submit_name":"watch123-hd-after-we-collided-online-full-movie-2020.pdf","analysis_start_time":"2020-10-06T03:52:25+00:00","indicators_count":{"informative":14,"suspicious":4,"malicious":1},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":[{"domain":"NISxF2Pavb.scl3.dc","ttl":86391,"country":"-","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"domain":"_ldap._tcp.dc._msdcs.scl3.dc","ttl":86397,"country":"-","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"domain":"isatap.scl3.dc","ttl":86395,"country":"-","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"domain":"wpad.scl3.dc","ttl":86384,"country":"-","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}],"processes":[{"pid":2664,"ppid":0,"name":"AcroRd32.exe","command_line":"\"C:\\watch123-hd-after-we-collided-online-full-movie-2020.pdf\"","sha256":"2e9b9635469ff056f09023f7d671120d0c0f86f30767b06daa545c01242bcbef","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe","uid":"00064107-00002664","icon":"$28"},{"pid":3636,"ppid":2664,"name":"RdrCEF.exe","command_line":"--backgroundcolor=16448250","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064107-00002664","uid":"00064644-00003636"},{"pid":2724,"ppid":3636,"name":"RdrCEF.exe","command_line":"$29","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064644-00003636","uid":"00064729-00002724"},{"pid":2876,"ppid":3636,"name":"RdrCEF.exe","command_line":"$2a","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064644-00003636","uid":"00064759-00002876"}],"all_imported_dlls":["api-ms-win-downlevel-version-l1-1-0.dll","winhttp.dll","webio.dll","cryptui.dll","ntdll.dll","cfgmgr32.dll","AcroRd32Res.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","GdiPlus.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","AdobeXMP.dll","MMDevAPI.dll","gdi32.dll","rpcss.dll","dxgi.dll","netutils.dll","DWrite.dll","devobj.dll","CoolType.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","msvcrt.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","rpcrt4.dll","sspicli.dll","wshqos.dll","uxtheme.dll","AXE8SharedExpat.dll","winnsi.dll","dhcpcsvc.dll","d3d9.dll","wintrust.dll","Wldap32.dll","npmproxy.dll","winmm.dll","normaliz.dll","crypt32.dll","WSDApi.dll","KBDUS.DLL","KernelBase.dll","msctf.dll","AcroRd32.dll","wlanapi.dll","rsaenh.dll","dhcpcsvc6.dll","credui.dll","sqlite.dll","wkscli.dll","dwmapi.dll","msvcp120.dll","secur32.dll","urlmon.dll","SensApi.dll","ieframe.dll","d3d11.dll","kernel32.dll","BIB.dll","ACE.dll","netapi32.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","IPHLPAPI.DLL","rasadhlp.dll","chrome_elf.dll","propsys.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","wlanutil.dll","wship6.dll","user32.dll","api-ms-win-downlevel-user32-l1-1-0.dll","oleaccrc.dll","apphelp.dll","cryptbase.dll","profapi.dll","BIBUtils.dll","dnsapi.dll","dbghelp.dll","srvcli.dll","credssp.dll","netprofm.dll","version.dll","oleaut32.dll","libcef.dll","api-ms-win-core-synch-l1-2-0.dll","sechost.dll","ntmarta.dll","imm32.dll","bcrypt.dll","WSHTCPIP.DLL","FWPUCLNT.DLL","tzres.dll","cryptocme.dll","mscms.dll","ccme_base.dll","AudioSes.dll","samcli.dll","wtsapi32.dll","ole32.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","gpapi.dll","AGM.dll","iertutil.dll","usp10.dll","ExplorerFrame.dll","wininet.dll","AXSLE.dll","icudt.dll","lpk.dll","shell32.dll","comctl32.dll","dxva2.dll","oleacc.dll","nlaapi.dll","msasn1.dll","shlwapi.dll","ccme_base_non_fips.dll","d3d8thk.dll","comdlg32.dll","nsi.dll","psapi.dll","setupapi.dll","userenv.dll","advapi32.dll","clbcatq.dll","ccme_ecc.dll","hid.dll","wsock32.dll","msimg32.dll","duser.dll","ncrypt.dll","ws2_32.dll","dui70.dll","cryptsp.dll","ccme_asym.dll","mswsock.dll","msvcr120.dll","RpcRtRemote.dll","wevtapi.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"data_1","sha256":"db2e0bf1ab2c6907b38af3f6da4882a0cae55d9a0c8c7f65f5e197b8e4f45c7f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"Visited Links","sha256":"9d1c9dc432b2e97f7a54b4da2724e4ff96dc719e60cb89c9f82dbec9226856c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"IconCacheRdr65536.dat","sha256":"67efa5e77ec77592659f5ac52a9dd517154f89c11b041488cc47658994a2322e","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"SharedDataEvents","sha256":"693265ec5aac5f9e5f24058a861474870d49c1185772c1236cf213e752ee348a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"A9R25p6ar_650kpx_220.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"A9Ru75fj1_650kq1_220.tmp","sha256":"42a850147cf596396bede5dab89e19580c09b58b610ece5e525b37618b4826d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"A9Rvu849z_650kq0_220.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"A9Rxbyhqe_650kpy_220.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"A9Rxy1f3h_650kpz_220.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"GlobSettings","sha256":"7c22c759ca704106556bbc4fc10b7f53404ca1f8b40f01038d3f7c4b8183f486","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"SharedDataEvents-journal","sha256":"46714da324d9282b053ba8bbd508ebe7451a7ed49792d255b9c87e76f5f88bd0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl","sha256":"d1bb4b163fe01acc368a92b385bb0bd3a9fc2340b6d485b77a20553a713166d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl","sha256":"9009ab7605c35a2b5121b8b5c966b3c893edba9966925268c45ad05b348671c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"urlref_httpsonemoviespro.ltdmovie613504after-we-collided.html","sha256":"073cd8d522c5b738add7b650864c366caa95b4ba57643f17a6bd370b1e69e275","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}],"files_written":[{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\crash_reporter.cfg","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\KBDUS.DLL","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\drivers\\etc\\hosts","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\File System\\primary.origin","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\cep-plugins\\PIPViewer\\index.html","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\arialn.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\arialnb.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\arialnbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\arialni.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\ARIALN.TTF","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\ARIALNI.TTF","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\ARIALNB.TTF","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\ARIALNBI.TTF","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\SEGOEUISL.TTF","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000027.db","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"C:\\Program Files","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeCMapFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeComFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeSysFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"pipe\\com.adobe.reader.rna.W54RACD.DC.0","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\SharedDataEvents","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\segoeuisl.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\css\\home-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\home-view\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Res.dll","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\UserCache.bin","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"C:\\watch123-hd-after-we-collided-online-full-movie-2020.pdf","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages-journal","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%TEMP%\\A9R25p6ar_650kpx_220.tmp","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%TEMP%\\A9Rxbyhqe_650kpy_220.tmp","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%TEMP%\\A9Rxy1f3h_650kpz_220.tmp","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%TEMP%\\A9Rvu849z_650kq0_220.tmp","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"path":"%TEMP%\\A9Ru75fj1_650kq1_220.tmp","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"key":"HKLM\\SYSTEM\\ACROBATVIEWERCPP473\\","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]},{"name":"com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5f7be9eeb4a1dc4ad7733dca"}]}]}},"report_ids":{"sandbox_job_ids":["5f7be9eeb4a1dc4ad7733dca"]}}}]]}] 1e:null 22:[["$","title","0",{"children":"Malicious PDF/Phishinggent Sample 2c5a763c7796… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 2c5a763c7796…. Malware family: PDF/Phishinggent. Threat score 100/100. 2/27 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac"}],["$","meta","4",{"property":"og:title","content":"Malicious PDF/Phishinggent Sample 2c5a763c7796… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 2c5a763c7796…. Malware family: PDF/Phishinggent. Threat score 100/100. 2/27 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/2c5a763c7796299dbfd83cbf782ffa05fc63b9a372a7cf8a631157f86d957cac"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious PDF/Phishinggent Sample 2c5a763c7796… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 2c5a763c7796…. Malware family: PDF/Phishinggent. Threat score 100/100. 2/27 AV engines flagged this file. 1 malicious and 4 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]