26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 30:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T488,{"@context":"https://schema.org","@type":"TechArticle","headline":"Malicious Unavailable Sample 72e22c4ca31c… — Score 100/100 — Hybrid Analysis","description":"Malicious verdict for sample 72e22c4ca31c…. Malware family: Unavailable. Threat score 100/100. 5/29 AV engines flagged this file. 1 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398","keywords":["Malicious","Unavailable","malware analysis","sandbox report","threat intelligence","72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398"],"about":{"@type":"SoftwareApplication","name":"watch-zack-snyders-justice-league-online.pdf","applicationCategory":["pdf"],"identifier":"72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398","additionalType":"Malicious sample"},"threatScore":100,"malwareFamily":"Unavailable","antivirusDetections":{"malicious":5,"total":29},"behavioralIndicators":{"malicious":1,"suspicious":6},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T5ee,Object ID 6 contains compressed stream data: No filters Object ID 16 contains compressed stream data: No filters Object ID 18 contains compressed stream data: No filters Object ID 20 contains compressed stream data: No filters Object ID 22 contains compressed stream data: No filters Object ID 27 contains compressed stream data: /CIDInit/ProcSet findresource begin 12 dict begin begincmap /CIDSystemInfo<< /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName/Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <00> <FF> endcodespacerange 3 ... Object ID 30 contains compressed stream data: /CIDInit/ProcSet findresource begin 12 dict begin begincmap /CIDSystemInfo<< /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName/Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <00> <FF> endcodespacerange 8 ... Object ID 32 contains compressed stream data: true\x00?\x00\x80\x00\x03\x00@cmap\xac\xb5\xac\xa2\x00\x00\x00\xcc\x00\x00\x01\x12cvt \xf2\x92\xd0$\x00\x00\x01\xe0\x00\x00\x078fpgmu\xe7\x00K\x00\x00\x18\x00\x00\x05Gglyf\x86\x15\x84\xcf\x00\x00\x0e`\x00\x00' head-U\x9c\x10\x00\x005\x80\x00\x00\x006hheat ... Object ID 34 contains compressed stream data: true\x00?\x00\x80\x00\x03\x00@cmaps\xa0\x8br\x00\x00\x00\xcc\x00\x00\x01\x12cvt \x95\xdct\xda\x00\x00\x01\xe0\x00\x00\x060fpgmW\xa2*\x11\x00\x00\x08\x10\x00\x00\x05\xb0glyf%5WW\x00\x00 \xc0\x00\x00YBhead;@\xb5\x10\x00\x00g\x04\x00\x00\x006hhea\xa4\xfe\x82\ ...28:T442,"urlblockindex_1_.bin" has type "data" "6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442" has type "data" "A2Z4A8UD.txt" has type "ASCII text" "8ISGOX15.txt" has type "ASCII text" "en-US.3" has type "data" "A9Rzdb4gn_1v7t7be_2vk.tmp" has type "data" "H4FAUCSJ.txt" has type "ASCII text" "_815488C6-83E2-11EB-95CA-08002744DAA3_.dat" has type "Composite Document File V2 Document Cannot read section info" "7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776" has type "data" "GlobSettings" has type "ASCII text" "LWM88FTA.txt" has type "ASCII text" "57C8EDB95DF3F0AD4EE2DC2B8CFD4157" has type "Microsoft Cabinet archive data 4795 bytes 1 file" "SharedDataEvents-journal" has type "SQLite Rollback Journal" "WWEARQHJ.txt" has type "ASCII text" "T3V24OFJ.txt" has type "ASCII text" "RecoveryStore._815488C4-83E2-11EB-95CA-08002744DAA3_.dat" has type "Composite Document File V2 Document Cannot read section info" "data_1" has type "data" "P1HEZ8GC.txt" has type "ASCII text" "Visited Links" has type "data" "70ZGMXDR.txt" has type "ASCII text"29:T278b,Pattern match: "https://4kmovies.xyz/en/movie/791373/zack-snyders-justice-league" Pattern match: "www.msn.com/" Pattern match: "https://go.microsoft.com/fwlink/?LinkID=401352" Pattern match: "https://go.microsoft.com/fwlink/?LinkID=513071" Pattern match: "https://aka.ms/FlashEOLUpdate" Pattern match: "https://4kmovies.xyz/bg/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/zh/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/cs/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/da/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/nl/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/fr/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/ka/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/de/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/el/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/hu/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/id/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/it/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/ko/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/pl/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/pt/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/ro/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/ru/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/sr/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/sk/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/es/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/sv/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/th/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/tr/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/uk/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/uz/movie/791373/zack-snyders-justice-league" Pattern match: "https://4kmovies.xyz/vi/movie/791373/zack-snyders-justice-league" Pattern match: "i0.wp.com/image.tmdb.org/t/p/original/etMMkqObJ74eZkzW44zbbIAqyOF.jpg" Pattern match: "https://use.fontawesome.com/3db27005e3.js" Pattern match: "https://use.fontawesome.com/3db27005e3.css" Pattern match: "https://4kmovies.xyz/assets/v1/css/v1.css" Pattern match: "https://4kmovies.xyz/assets/v1/js/js.js" Pattern match: "https://www.googletagmanager.com/gtag/js?id=UA-160039646-1" Pattern match: "https://4kmovies.xyz/en/loading" Pattern match: "https://4kmovies.xyz/en/switch/bg" Pattern match: "https://4kmovies.xyz/en/switch/zh" Pattern match: "https://4kmovies.xyz/en/switch/cs" Pattern match: "https://4kmovies.xyz/en/switch/da" Pattern match: "https://4kmovies.xyz/en/switch/nl" Pattern match: "https://4kmovies.xyz/en/switch/fr" Pattern match: "https://4kmovies.xyz/en/switch/ka" Pattern match: "https://4kmovies.xyz/en/switch/de" Pattern match: "https://4kmovies.xyz/en/switch/el" Pattern match: "https://4kmovies.xyz/en/switch/hu" Pattern match: "https://4kmovies.xyz/en/switch/id" Pattern match: "https://4kmovies.xyz/en/switch/it" Pattern match: "https://4kmovies.xyz/en/switch/ko" Pattern match: "https://4kmovies.xyz/en/switch/pl" Pattern match: "https://4kmovies.xyz/en/switch/pt" Pattern match: "https://4kmovies.xyz/en/switch/ro" Pattern match: "https://4kmovies.xyz/en/switch/ru" Pattern match: "https://4kmovies.xyz/en/switch/sr" Pattern match: "https://4kmovies.xyz/en/switch/sk" Pattern match: "https://4kmovies.xyz/en/switch/es" Pattern match: "https://4kmovies.xyz/en/switch/sv" Pattern match: "https://4kmovies.xyz/en/switch/th" Pattern match: "https://4kmovies.xyz/en/switch/tr" Pattern match: "https://4kmovies.xyz/en/switch/uk" Pattern match: "https://4kmovies.xyz/en/switch/uz" Pattern match: "https://4kmovies.xyz/en/switch/vi" Pattern match: "https://4kmovies.xyz/en" Pattern match: "https://4kmovies.xyz/assets/v1/logo.png" Pattern match: "https://4kmovies.xyz/en/movie-popular" Pattern match: "https://4kmovies.xyz/en/movie-now-playing" Pattern match: "https://4kmovies.xyz/en/movie-top-rated" Pattern match: "https://4kmovies.xyz/en/movie-upcoming" Pattern match: "https://4kmovies.xyz/en/tv-popular" Pattern match: "https://4kmovies.xyz/en/tv-top-rated" Pattern match: "https://4kmovies.xyz/en/tv-on-the-air" Pattern match: "https://4kmovies.xyz/en/tv-airing-to-day" Pattern match: "https://4kmovies.xyz/en/genre/28/action" Pattern match: "https://4kmovies.xyz/en/genre/12/adventure" Pattern match: "https://4kmovies.xyz/en/genre/16/animation" Pattern match: "https://4kmovies.xyz/en/genre/35/comedy" Pattern match: "https://4kmovies.xyz/en/genre/80/crime" Pattern match: "https://4kmovies.xyz/en/genre/99/documentary" Pattern match: "https://4kmovies.xyz/en/genre/18/drama" Pattern match: "https://4kmovies.xyz/en/genre/10751/family" Pattern match: "https://4kmovies.xyz/en/genre/14/fantasy" Pattern match: "https://4kmovies.xyz/en/genre/36/history" Pattern match: "https://4kmovies.xyz/en/genre/27/horror" Pattern match: "https://4kmovies.xyz/en/genre/10402/music" Pattern match: "https://4kmovies.xyz/en/genre/9648/mystery" Pattern match: "https://4kmovies.xyz/en/genre/10749/romance" Pattern match: "https://4kmovies.xyz/en/genre/878/science-fiction" Pattern match: "https://4kmovies.xyz/en/genre/10770/tv-movie" Pattern match: "https://4kmovies.xyz/en/genre/53/thriller" Pattern match: "https://4kmovies.xyz/en/genre/10752/war" Pattern match: "https://4kmovies.xyz/en/genre/37/western" Pattern match: "https://4kmovies.xyz/en/person/popular" Pattern match: "https://just-watch-it.com/themes/cpa-movies-tv-landers-v1-theme/assets/os/Movie.mp4" Pattern match: "https://4kmovies.xyz/en/loading?id=791373&title=Zack%20Snyder%27s%20Justice%20League" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/tnAuB8q5vv7Ax9UAEje5Xi4BXik.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/genre/28" Pattern match: "https://4kmovies.xyz/en/person/880" Pattern match: "https://4kmovies.xyz/en/person/282" Pattern match: "https://4kmovies.xyz/en/movie/246655/x-men-apocalypse" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/2mtQwJKVKQrZgTz49Dizb25eOQQ.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/9738/fantastic-four" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/8HLQLILZLhDQWO6JDpvY6XJLH75.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/1771/captain-america-the-first-avenger" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/vSNxAJTlD0r02V9sPYpOjqDZXUK.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/68721/iron-man-3" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/qhPtAc1TKbMPqNvcdXSOn9Bn7hZ.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/299537/captain-marvel" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/AtsgWhDnHTq68L0lLsUrCnM7TjG.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/1726/iron-man" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/78lPtwv72eTNqFW9COBYI0dWDJa.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/10138/iron-man-2" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/6WBeq4fCfn7AN0o21W9qNcRF2l9.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/13640/superman-doomsday" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/itvuWm7DFWWzWgW0xgiaKzzWszP.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/1924/superman" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/d7px1FQxW4tngdACVRsCSaZq0Xl.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/9531/superman-iii" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/c4oR6qgZW2s5foGkQi2Dd86KuAS.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/8536/superman-ii" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/r9ZRah6rYBoRuPyj8g5Ei411XNM.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/1452/superman-returns" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/qIegbn6DSUYmggfwxOBNOVS35q.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/320288/dark-phoenix" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/kZv92eTc0Gg3mKxqjjDAM73z9cy.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/141052/justice-league" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/eifGNCSDuxJeS1loAXil5bIGgvC.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/640146/ant-man-and-the-wasp-quantumania" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/mYCBuVGQGWPlUNZQusdHfbSzP1h.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/429617/spider-man-far-from-home" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/4q2NNj4S5dG2RLF9CpXsej7yXl.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/340102/the-new-mutants" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/xZNw9xxtwbEf25NYoz52KdbXHPM.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/315635/spider-man-homecoming" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/c24sv2weTHPsmDa7jEMN0m2P3RT.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/447365/guardians-of-the-galaxy-vol-3" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/6rsLfXqlZSXa6zLfbofHVhXs8Yr.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/movie/363088/ant-man-and-the-wasp" Pattern match: "i0.wp.com/image.tmdb.org/t/p/w300/eivQmS3wqzqnQWILHLc4FsEfcXP.jpg?resize=300,450" Pattern match: "https://4kmovies.xyz/en/page/dmca" Pattern match: "https://4kmovies.xyz/en/page/privacy-policy" Pattern match: "https://4kmovies.xyz/en/page/term-condition" Pattern match: "https://4kmovies.xyz/assets/v1/js/s.js"2a:T7ec,"iexplore.exe" wrote bytes "b033706e" to virtual address "0x74B81038" (part of module "VERSION.DLL") "iexplore.exe" wrote bytes "a035706e" to virtual address "0x77851144" (part of module "LPK.DLL") "iexplore.exe" wrote bytes "c0bf716e" to virtual address "0x76AB1F68" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "a035706e" to virtual address "0x76A31064" (part of module "IMM32.DLL") "iexplore.exe" wrote bytes "a035706e" to virtual address "0x76AB202C" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "a035706e" to virtual address "0x75951298" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "a035706e" to virtual address "0x7602B0CC" (part of module "IERTUTIL.DLL") "iexplore.exe" wrote bytes "3030706e" to virtual address "0x6DDFFE90" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "a035706e" to virtual address "0x740C139C" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "b033706e" to virtual address "0x766A11B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "60d2736e" to virtual address "0x766A13B8" (part of module "SHLWAPI.DLL") "iexplore.exe" wrote bytes "b033706e" to virtual address "0x75951100" (part of module "MSCTF.DLL") "iexplore.exe" wrote bytes "60d2736e" to virtual address "0x76AB1D7C" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "c03a706e" to virtual address "0x76AB1FB0" (part of module "SHELL32.DLL") "iexplore.exe" wrote bytes "60d2736e" to virtual address "0x6DDFFEC4" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b033706e" to virtual address "0x740C1250" (part of module "UXTHEME.DLL") "iexplore.exe" wrote bytes "b033706e" to virtual address "0x769017CC" (part of module "ADVAPI32.DLL") "iexplore.exe" wrote bytes "c03a706e" to virtual address "0x6DDFFE80" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "60cd736e" to virtual address "0x6DDFFEC0" (part of module "IEFRAME.DLL") "iexplore.exe" wrote bytes "b033706e" to virtual address "0x76861164" (part of module "USP10.DLL")2b:T2431,"\x2d8\x2c7\x2d9\x2dd\x2db\x2dd\x2da\x2dc !!"#$!# \x2d8\x2c7\x2c6\x2d9\x2da\x2dc !\x2c6"!#$%$&'!(()+('\x2da ,-\x2db\x2da\x2dc !"!'!(('\x2da-./\x2da\x2dc"!$%$0'!(()+(-\x2c7\x2c6 \x2db\x2da\x2dc !"!)+('\x2da-\x2da\x2dc !"!)'!((\x2c7\x2c6+('\x2da+11( 2!3\x2da\x2c6\x2da4\x2c64\x2c656,\x2dc 78"97+(#$%$&'!(( \x2d8,::;4\x2c6\x2db\x2da\x2dc !"!#$%$&'7"")+('\x2da<=\x2db\x2db\x2c6>!\x2c6!? @\x2db.0\x2db\x2da\x2dc !\x2c6"!#$%$&'!(()\x2c7\x2c6(1\x2da ./\x2d9\x2db\x2da\x2dc"!$%$09(,\x2da\x2d8\x2db\x2da\x2dc !"!#$%$&'!(()\x2c7\x2c6(6 7A($B)/\x2da\x2dc"!$%$+(:: 8\x2da\x2dc !"!-\x2c6??!\x2c6\x2c6\x2db\x2c6\x2da\x2c6!\x2da\x2c6\x2da1\x2c6\x2da4- \x2c6A(\x2da4((\x2c6?\x2da*A\x2da\x2c6!41\x2da\x2da\x2db\x2db\x2da\x2c6\x2c64!\x2c6\x2c6A\x2c64\x2da(\x2db\x2dc\x2c6 \x2db\x2da!\x2da\x2dc !"!#$%$&.0C\x2c7\x2c6\x2da\x2dc !"!+( $%$'!(()'\x2da,D$%3EC\x2c7\x2c6\x2db\x2da\x2dc !\x2c6"!+($%$'!(()'\x2da,:: \x2db\x2da\x2dc !\x2c6"!#$%$&4\x2c6(!?\x2c6\x2c6(\x2da\x2db1\x2da\x2db4(\x2db-\x2db\x2da\x2dc !"!$%$D$%A- %F%A-2\x2daA-,*\x2dbA-!\x2c6!?-\x2db\x2db\x2c6-)!(\x2c6(!\x2db=!(\x2c6 \x2c7\x2c6\x2da\x2dc !"!+('\x2da\x2c6\x2da-\x2c7\x2c6\x2db\x2da\x2dc !"!+('!(( \x2c6\x2da8,=!(\x2c6-"\x2c6\x2dc\x2c64\x2c6\x2c6(\x2c61!\x2da1*\x2da\x2c6\x2da\x2dc !"! G!: \x2c7\x2c6AA\x2db\x2c6< 8\x2da1\x2da!8\x2c6\x2dc\x2c61\x2da\x2da\x2da1\x2c6\x2db\x2c6\x2db\x2da(\x2da\x2db\x2da\x2c6\x2c6\x2db!A:*\x2da \x2db11\x2da\x2c6H2(\x2db,H\x2c6\x2da\x2da\x2c6\x2c6\x2db\x2c6\x2da\x2da\x2c6\x2da\x2dc !"!9- ?!\x2c644((11\x2da\x2c6\x2c6\x2da\x2db4((A\x2c6<", "!A\x2da\x2c6\x2da,\x2da\x2da\x2da??\x2da\x2c7\x2da\x2c6!\x2da\x2c6\x2da(\x2db\x2db1!-"!- \x2da\x2db\x2da\x2c6\x2c6\x2db\x2db(AI?\x2da\x2da!\x2db(A\x2daA\x2da?\x2db4\x2c6\x2c6(((\x2dbJ(\x2c6 \x2c6\x2da((\x2c61\x2da\x2da2!\x2c6A4\x2da1!(1\x2da\x2db\x2db!-\x2c6\x2c6EA(\x2c6\x2c6A\x2dc \x2da!A\x2daA\x2da\x2c61\x2da\x2c6\x2da4A!\x2daA??4((\x2db\x2da\x2c6\x2c6\x2c6A(\x2db(\x2c6?\x2c6\x2da\x2da1 \x2db4\x2db\x2da!\x2db\x2c6A\x2c6\x2c6((1\x2da(1\x2c6?1\x2c6\x2da(( 3!?(9\x2da!A $!\x2c6 \x2da\x2c7\x2c6+(\x2db\x2da\x2dc !"!KA(\x2c6'\x2da+('!((\x2c6\x2da\x2c6\x2da!\x2db\x2da \x2db!\x2c6)\x2da\x2db\x2da\x2da?((\x2db\x2c62\x2da\x2c64 4(!1((A\x2db!\x2da\x2db\x2da\x2dc !"!)<!\x2c6\x2da\x2db\x2c6 \x2daA(\x2db\x2da\x2dc !"!8*\x2da??(\x2c6\x2c6\x2da)1\x2c6(8\x2db\x2db\x2c6 ?\x2db(1\x2da\x2c6\x2db\x2c6\x2dbA\x2c6\x2c6\x2c6 \x2c7\x2c6\x2da\x2dc !\x2c6"!\x2c72I,"(((1(1\x2da\x2da\x2da\x2dc !"!-(6\x2c61(E-@\x2db !(!-\x2da\x2dc !"!\x2da((-,\x2da+-223(\x2da-\x2c6\x2da(\x2da4\x2c6\x2c6 \x2da\x2db4(\x2db\x2db\x2c6\x2da!(\x2db\x2c6\x2da?!\x2c6\x2c6- M!(\x2c6M!\x2c6\x2db?!\x2c6\x2c6\x2daI\x2db\x2db@\x2db\x2da#$NO\x2da$NP&\x2db!\x2db#B\x2d8\x2db\x2da\x2dc !"!&\x2da!((E\x2c6\x2da\x2db1\x2da\x2daL@\x2db\x2db\x2c6\x2da\x2c6((\x2db\x2c6\x2c6)5@\x2c6\x2da4\x2c6!\x2c6 1M!(\x2c6,4(\x2db!A\x2da))N+1\x2c6\x2da \x2c7\x2c6\x2da\x2dc !\x2c6"!)()\x2da(G!\x2da(1?\x2c64?\x2db\x2db((!\x2db\x2c6\x2db ?\x2d9\x2da\x2dc !"! 4\x2da-4\x2c7(Q5ARA\x2da((\x2db\x2da-\x2c6\x2daA\x2c6\x2c6\x2c61\x2da\x2c6\x2da\x2db-3\x2c6\x2da 3\x2da\x2dd\x2da-\x2db\x2c6((\x2db\x2db!A\x2c6)(\x2db \x2c73\x2c6\x2da\x2c6\x2da\x2db\x2c6)(\x2c6\x2c6?\x2c6\x2c6\x2da-A\x2db\x2daI-\x2c6G\x2db1!\x2da\x2c6\x2da\x2da\x2dc !"!1\x2da \x2c6QA\x2db\x2daI@\x2daR2!((\x2c61(\x2db?\x2c6\x2db\x2da2\x2da\x2dd(-)(!\x2c6(A\x2c6\x2da A\x2db\x2da\x2c6!\x2da\x2da\x2c6\x2c6\x2da4\x2db \x2c6\x2db!\x2da?\x2c6A\x2c6,@,\x2db!\x2da411\x2c6(\x2c6\x2c6\x2db\x2da!?AA!(\x2da( \x2c6\x2c6\x2da1\x2c6\x2da\x2db!\x2db\x2c61((1,@,\x2da\x2c6(A2(?!\x2da8 !( $%$-\x2da\x2c61\x2da\x2c664\x2da\x2ddA!?(\x2db\x2da\x2c6?!\x2c66\x2c61(E,@,-6'\x2da\x2db$8\x2c64\x2c6\x2db\x2c6\x2c6 6\x2c61(E4\x2c6!\x2c6\x2da,@,66'\x2da\x2db$4\x2c6PB((\x2da441\x2c6\x2db1\x2da\x2c6 A\x2da!\x2da+\x2c6\x2c6\x2da\x2db-\x2c6\x2da\x2da-6'\x2da\x2db$NP((?\x2da8)\x2da$%$!\x2db \x2c6\x2c6\x2dbQ8A11\x2c6\x2da\x2db\x2c6(,@,)\x2c6(\x2c641!\x2db\x2c6\x2c6\x2da\x2db\x2c6\x2db\x2db \x2c6?!,@,\x2da(!-1\x2da-?!\x2da\x2db\x2c6\x2dd\x2da\x2c6\x2da\x2c6 4\x2c6\x2da\x2db\x2c6!\x2da-\x2da\x2da(\x2da\x2c6\x2da(\x2db\x2da?!\x2c64\x2c64((\x2c6$)7 \x2db11\x2da\x2c61\x2da\x2c6A\x2da!$%)71( \x2c7\x2c6(A$J)N-4\x2da\x2db\x2dc\x2c6\x2db\x2da\x2c6M!(\x2c61\x2c6\x2db11\x2da1\x2c6(?\x2c64 ,@,\x2db(\x2da3\x2da?(\x2c6\x2c6\x2da\x2db\x2c6\x2daA\x2db\x2c6\x2db\x2c6?A\x2da*\x2db?\x2da !\x2db11\x2da4\x2da\x2db\x2da\x2da4\x2db1!-\x2db\x2da1!\x2da\x2c6(\x2c6\x2c6\x2c6\x2daM!(\x2c6 \x2db!\x2da4(((\x2c6-?!\x2db\x2da\x2c6\x2da!\x2c6!\x2c6\x2da!(? \x2db!\x2c6\x2daA\x2da\x2db\x2c61\x2da\x2c6A\x2da\x2db!\x2c61M!(\x2c6\x2c6\x2c6", "4\x2db\x2dc\x2c6AA\x2c6((-2\x2da"\x2da\x2dc\x2daA\x2da\x2da?A( \x2db1(\x2c64\x2da(\x2db+1\x2c61!\x2db4\x2c64\x2dbA(\x2da(@\x2db\x2da#?\x2db\x2da& 4+\x2da$%N4\x2c61\x2da)\x2da(\x2da4\x2c61((\x2db\x2da\x2db-4((A(8\x2c6 \x2db?AA(1\x2da1!\x2c6!\x2daA(\x2c61\x2daA\x2da\x2db!\x2db\x2c6\x2c6\x2da 74\x2c6\x2c6\x2da(A!?($%N-\x2c6Q?\x2da\x2da(R4\x2db4\x2da\x2db1\x2da?\x2c6\x2da1\x2da\x2daA\x2c6 AA\x2da\x2c6QR-\x2c6\x2c6\x2da!\x2da1444(\x2db4\x2c6\x2da(\x2db?A\x2da\x2db\x2c6\x2da\x2db\x2da\x2c6\x2c6 2(\x2c6\x2c6\x2db1\x2da"4\x2da-?\x2c61\x2c6\x2db\x2d9\x2db\x2da\x2dc !"!!\x2c61\x2c6\x2c6!?!\x2c6(\x2da(\x2c6\x2c6 A(\x2db\x2da \x2c7\x2c6\x2da\x2dc !\x2c6"!)+(2(!I\x2da\x2da2(!\x2da\x2daA\x2db\x2da(1\x2da2(!I\x2da\x2db\x2c6%F%A\x2daD$%A #\x2dbA\x2db!\x2da&-\x2db!\x2c6E$NO\x2db?(1\x2da2,$P\x2da2,P%\x2db#\x2da7,2(!I\x2da\x2c6 \x2da\x2da(!\x2c6 2,A1\x2da2(!I\x2da\x2db\x2db\x2da\x2db\x2db\x2c6(4\x2da\x2da(!\x2c6!\x2da#%F%A\x2c6D$%A\x2d8PDNA\x2d8OF%A&2A \x2db\x2c6\x2c6?\x2db\x2db\x2c6,\x2da(!\x2c6#!!((%F%A&4\x2c6\x2c6\x2da?\x2db\x2c6,\x2da(!\x2c6\x2c7\x2c6 \x2da\x2dc !"!2,\x2d82A) @ A\x2da(!\x2c6(?\x2c6\x2c6\x2da-4\x2da-?!\x2c6 \x2db1\x2da\x2daM!(\x2c6!\x2da 2A(1\x2da,\x2da(!\x2c6\x2c6,\x2da(!\x2c64(2,A\x2c61\x2da$N%A\x2c6%F%A-\x2c6-(\x2c6 \x2db\x2daA\x2c6!\x2da\x2db\x2da(!\x2c6\x2c7\x2c6\x2db\x2da\x2dc !\x2c6"!)'!((2,A\x2c6\x2c6\x2da\x2db\x2db \x2db41\x2da\x2c6-?!\x2c62A(\x2db4\x2c6,\x2da(!\x2c6?!\x2c6\x2da\x2c6\x2da?\x2db \x2c6\x2c61$N-\x2c6\x2c61\x2c6+\x2da-4\x2daAA\x2da\x2db?(!!L\x2db\x2da\x2c6\x2da\x2db\x2dbI\x2da\x2db \x2da\x2db\x2c6((\x2db\x2dc\x2c6\x2c6\x2da!? 2,\x2d82A,@,A\x2da(!\x2c6\x2da?\x2c64,\x2daE$NO\x2db#\x2da((!\x2daD%%)2\x2dbP92\x2db \x2c61,@,P\x2da,@,SKOP92\x2daFO92&4(\x2da\x2da-\x2c61(!\x2c6!\x2c6\x2dbA\x2db\x2c6(\x2c6\x2dbM!(\x2c61 \x2da(-?!\x2c6(\x2c6\x2da\x2c6-\x2c6\x2da((\x2c6\x2da\x2c6!\x2c6E$NO\x2db \x2c7\x2c6\x2c6\x2db\x2c6?!\x2c6-\x2c6(1\x2da1\x2da\x2c64\x2c6!\x2c64Q$ !A \x2c6\x2da\x2c6R4\x2c6\x2c6!-\x2dbQ\x2da? !\x2db\x2dbA\x2c64\x2db\x2daA\x2da\x2c6\x2da( 1\x2da "4\x2da-9(9\x2db\x2c6\x2da\x2da(\x2c6\x2c6-2\x2da"\x2da\x2dbI\x2c6\x2da\x2c6\x2db(4\x2c6)\x2da( \x2da\x2c6(\x2c6\x2c64\x2c6\x2c7\x2c6!\x2da1""(\x2da'\x2da+(-4\x2db(?4\x2db\x2c6 1(\x2c7\x2dc\x2c6?\x2c611!((I1\x2c6!\x2da\x2dbA\x2da\x2da-\x2da(,\x2da\x2db\x2da\x2dc !"! 6\x2da\x2db\x2da\x2dc !\x2c6"!\x2c6I\x2da\x2c6A?(\x2dbA\x2da\x2c6?\x2da\x2dbA\x2db\x2c6\x2c6 \x2c6\x2da\x2c6K1\x2c6A\x2da\x2da!M!-4\x2da\x2c6(\x2db-\x2c6\x2c6\x2c6?(\x2c6(\x2db\x2db-\x2db\x2c6? \x2da\x2db(\x2db(-\x2c6\x2db(?\x2db\x2c6\x2dc\x2c6!\x2c61(\x2c6\x2c6\x2db!AA(\x2c6(T\x2da\x2da\x2da \x2da\x2db\x2da(\x2c6\x2daA(\x2c6\x2db\x2dbA?(\x2c6?\x2da\x2db \x2daM!1\x2c6\x2c6\x2da\x2c6\x2da!(\x2db\x2c6\x2da2\x2da"\x2da1(\x2db\x2c6\x2dd\x2da\x2da\x2c6\x2da\x2da A\x2db\x2c6\x2dbA(\x2da\x2db\x2da\x2db(-!\x2da!\x2c6\x2c6\x2c6!\x2db\x2c6!((4A\x2c6\x2dbA\x2da\x2c6\x2c6 !\x2db1\x2da!\x2db\x2db\x2da\x2c6\x2c6\x2db\x2da\x2db1\x2c6\x2da?\x2db-?!\x2c6\x2c6A11\x2da*\x2da\x2db \x2c6\x2c6\x2c6A\x2da!\x2db\x2c6\x2da\x2db\x2c6\x2db!6'!\x2da\x2db?\x2c6#\x2c61(\x2c6\x2ddA(\x2c6SS%8\x2c6 -1!(\x2dc\x2daG!\x2c6?\x2db\x2c6(\x2c6(A\x2da-\x2c6((!(1\x2da1+\x2c6 \x2da*\x2da\x2c6\x2da\x2c6\x2c6M!1-\x2c6111\x2c6\x2da\x2db\x2da\x2db1\x2c6\x2da! ,\x2c6(?!\x2c6\x2c64\x2c6\x2c6\x2db\x2c6(1\x2da\x2c6!\x2c6(((\x2c6(\x2c61\x2da9-\x2c6\x2c6-44((\x2c6\x2da?!\x2c6\x2da(\x2c6 \x2c6QEA\x2da (\x2da\x2db\x2c6$1(1\x2da\x2c6?()\x2da*(4(!\x2db%\x2da-\x2db4(4\x2c61\x2da\x2c6M!(\x2c6%% N)4\x2da1\x2c6#%%N)-\x2da(\x2dbA\x2da($O&-\x2c64", "4\x2da!\x2c6?(\x2db\x2da?!\x2c6\x2da!(\x2c6(\x2db?1\x2da\x2c6?\x2db\x2db\x2c6?\x2da((\x2da1\x2da"\x2c6\x2dcA\x2c6\x2c61((4 \x2c6\x2db\x2c6!\x2da1\x2c6\x2da\x2da-)\x2da(\x2db\x2c6(*(\x2dbA\x2da?\x2c6\x2c6\x2da ,4(\x2db\x2dd\x2db\x2da\x2dc !\x2c6"!#$%$&)* A \x2c72I "A,4(\x2db\x2dd\x2db\x2da\x2dc !\x2c6"!#$%$& )*\x2dd\x2db\x2da\x2dc !\x2c6"!#$%$&1!(()*\x2c7\x2c6 +(\x2c7\x2db\x2da\x2c7 SFO#$%$&1!((('!(()\x2d9\x2da\x2dc !\x2c6"!#$%$& 1!(('!(()-\x2db\x2da\x2dc !"!#$%$&1!(('!(() \x2c7\x2c6\x2da\x2dc !"!#$%$&1!((('!(()+( \x2da\x2dc !"!#$%$&1!(((+( \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(((( \x2da\x2dc !"!#$%$&1!(()\x2da1\x2da \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(()!?\x2db \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(()!?\x2c6\x2c6( \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(()A(\x2da \x2da\x2dc !"!#$%$&1!(()\x2c6( \x2da\x2dc !"!#$%$&1!(()\x2c6(\x2db4(\x2db \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(()\x2c6\x2db4(\x2db \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(()\x2c6(!! \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(()\x2c6(\x2db!??\x2db\x2db4(\x2db \x2da\x2dc !"!#$%$&1!(()\x2c64\x2c6\x2c7\x2c61!(()\x2db \x2da\x2dc !"!#$%$&1!(() \x2c7\x2c6\x2da\x2dc !"!#$%$&1!(()\x2db()\x2c6R"2c:T13fc,Potential IP "12.0.4.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "12.0.4.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "1.6.0.0" found in string "" Potential IP "12.0.4.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "12.0.4.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "12.0.4.0" found in string "" Potential IP "11.161.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IP "10.171.0.0" found in string "" Potential IPs "0.0.0.0" "0.0.0.0" found in string ""2d:T4d0,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:T5c2,--type=renderer --primordial-pipe-token=A9517B7964A0857EDD8A22BF9D53253F --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=A9517B7964A0857EDD8A22BF9D53253F --renderer-client-id=2 --mojo-platform-channel-handle=1260 --allow-no-sandbox-job /prefetch:12f:T5c2,--type=renderer --primordial-pipe-token=21E6C21BD2AEF35D52CE86347E31630C --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=21E6C21BD2AEF35D52CE86347E31630C --renderer-client-id=3 --mojo-platform-channel-handle=1316 --allow-no-sandbox-job /prefetch:11d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"malicious","threat_score":100,"unified_at_epoch_ms":1791173088107,"unified_at":"2026-10-05T04:04:48.107Z","metadata":{"hashes":{"sha256":"72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398","sha1":"728a2b0a14acda75c3fcda8846a5d033b8361648","md5":"3bbb02ced3e34747ba9a3061fa3f10fd","sha512":"d34b8b52a269c4d4622a76aaa99a79e3145f580e85d3b614366b48d313f12c0a08759b745376088abfa34d73102f5122f5646bba45aea7f221167d93eb35bd9e","ssdeep":"1536:4JTt0xKg27Qr9srfBHMR8EOXRFFpXm1Y2XkBDeR8M:yXF7wsrfpiuFFpXshXkBCRx","ssdeep_chunks":["1536:4JTt0xK","1536:JTt0xKg","1536:Tt0xKg2","1536:t0xKg27","1536:0xKg27Q","1536:xKg27Qr","1536:Kg27Qr9","1536:g27Qr9s","1536:27Qr9sr","1536:7Qr9srf","1536:Qr9srfB","1536:r9srfBH","1536:9srfBHM","1536:srfBHMR","1536:rfBHMR8","1536:fBHMR8E","1536:BHMR8EO","1536:HMR8EOX","1536:MR8EOXR","1536:R8EOXRF","1536:8EOXRFF","1536:EOXRFFp","1536:OXRFFpX","1536:XRFFpXm","1536:RFFpXm1","1536:FFpXm1Y","1536:FpXm1Y2","1536:pXm1Y2X","1536:Xm1Y2Xk","1536:m1Y2XkB","1536:1Y2XkBD","1536:Y2XkBDe","1536:2XkBDeR","1536:XkBDeR8","1536:kBDeR8M","3072:4JTt0xK","3072:JTt0xKg","3072:Tt0xKg2","3072:t0xKg27","3072:0xKg27Q","3072:xKg27Qr","3072:Kg27Qr9","3072:g27Qr9s","3072:27Qr9sr","3072:7Qr9srf","3072:Qr9srfB","3072:r9srfBH","3072:9srfBHM","3072:srfBHMR","3072:rfBHMR8","3072:fBHMR8E","3072:BHMR8EO","3072:HMR8EOX","3072:MR8EOXR","3072:R8EOXRF","3072:8EOXRFF","3072:EOXRFFp","3072:OXRFFpX","3072:XRFFpXm","3072:RFFpXm1","3072:FFpXm1Y","3072:FpXm1Y2","3072:pXm1Y2X","3072:Xm1Y2Xk","3072:m1Y2XkB","3072:1Y2XkBD","3072:Y2XkBDe","3072:2XkBDeR","3072:XkBDeR8","3072:kBDeR8M","1536:yXF7wsr","1536:XF7wsrf","1536:F7wsrfp","1536:7wsrfpi","1536:wsrfpiu","1536:srfpiuF","1536:rfpiuFF","1536:fpiuFFp","1536:piuFFpX","1536:iuFFpXs","1536:uFFpXsh","1536:FFpXshX","1536:FpXshXk","1536:pXshXkB","1536:XshXkBC","1536:shXkBCR","1536:hXkBCRx"],"imphash":"Unknown"},"file_info":{"file_name":"watch-zack-snyders-justice-league-online.pdf","file_type":["pdf"],"file_type_id":"pdf","file_size":127331,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1615632787000,"last_seen":1655863062000,"last_multi_scan":1655863062000}},"detections":{"summary":{"verdict":"malicious","score":100,"tags":null},"stats":{"av":{"malicious_count":5,"suspicious_count":0,"total_engines":29},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":5},"sandbox_signatures":{"informative_count":18,"suspicious_count":6,"malicious_count":1,"total":25},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"malicious","threat_name":"PDF/Phishing.A.Gen trojan","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"IKARUS","success":true,"verdict":"malicious","threat_name":"Trojan.PDF.Phishing","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"malicious","threat_name":"PDF.Phishing.42708","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"scrutiny":{"name":"Scrutiny","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xvirusantimalware":{"name":"Xvirus Anti-Malware","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Unavailable","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Persistence","technique":"Hooking","attack_id":"T1179","attack_id_wiki":"https://attack.mitre.org/techniques/T1179","identifiers":[{"type":"informative","value":"Installs hooks/patches the running process"}],"sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Found a string that may be used as part of an injection method"},{"type":"suspicious","value":"Writes data to a remote process"}],"sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"tactic":"Defense Evasion","technique":"DCShadow","attack_id":"T1207","attack_id_wiki":"https://attack.mitre.org/techniques/T1207","identifiers":[{"type":"informative","value":"Contains object with compressed stream data"}],"sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"suspicious","value":"Contains escaped byte string (often part of obfuscated shellcode)"}],"sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Scanning for window names"}],"sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contacts domains","description":"\"4kmovies.xyz\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Contains object with compressed stream data","description":"$27","origin":"Static Parser","mitre_attack_id":"T1207","relevance":10,"id":"static-66","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Creates a writable file in a temporary directory","description":"\"iexplore.exe\" created file \"%TEMP%\\~DF2BEF499884796ACA.TMP\"\n \"iexplore.exe\" created file \"%TEMP%\\~DF6AF195FAAC49626E.TMP\"","origin":"API Call","relevance":1,"id":"api-4","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\Acrobat Instance Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex\"\n \"Local\\Acrobat Instance Mutex\"\n \"DBWinMutex\"\n \"com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"\n \"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"\n \"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1048\"\n \"IsoScope_418_IE_EarlyTabStart_0x7e8_Mutex\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Drops files marked as clean","description":"Antivirus vendors marked dropped file \"urlblockindex_1_.bin\" as clean (type is \"data\")","origin":"Binary File","relevance":10,"id":"binary-16","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Launches a browser","description":"Launches browser \"iexplore.exe\" (UID: 00071467-00001048)\n Launches browser \"iexplore.exe\" (UID: 00071498-00002196)","origin":"Monitored Target","relevance":3,"id":"target-21","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"PDF file has an embedded URL","description":"\"https://4kmovies.xyz/en/movie/791373/zack-snyders-justice-league\" (Based on: \"72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398.bin\")","origin":"File/Memory","relevance":3,"id":"string-25","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"RdrCEF.exe\" (UID: 00064614-00002516) was launched with modified environment variables: \"Path\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"AcroRd32.exe\" searching for class \"AdobeAcrobatSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for class \"AdobeReaderSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for window \"_AcroAppTimer\"\n \"AcroRd32.exe\" searching for class \"Acrobat Instance Window Class\"\n \"AcroRd32.exe\" searching for class \"ACROSEMAPHORE_R18\"\n \"AcroRd32.exe\" searching for class \"JFWUI2\"\n \"AcroRd32.exe\" searching for class \"Shell_TrayWnd\"","origin":"API Call","mitre_attack_id":"T1010","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"RdrCEF.exe\" with commandline \"--backgroundcolor=16448250\" (UID: 00064614-00002516)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=A9517B7964A0857EDD8A22BF ...\" (UID: 00064722-00003344)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=21E6C21BD2AEF35D52CE8634 ...\" (UID: 00064755-00002328)\n Spawned process \"iexplore.exe\" with commandline \"https://4kmovies.xyz/en/movie/791373/zack-snyders-justice-league\" (UID: 00071467-00001048)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:1048 CREDAT:275457 /prefetch:2\" (UID: 00071498-00002196)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"iexplore.exe\" with commandline \"https://4kmovies.xyz/en/movie/791373/zack-snyders-justice-league\" (UID: 00071467-00001048)\n Spawned process \"iexplore.exe\" with commandline \"SCODEF:1048 CREDAT:275457 /prefetch:2\" (UID: 00071498-00002196)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"$28","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"Installation/Persistence","name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)","origin":"File/Memory","mitre_attack_id":"T1055","relevance":4,"id":"string-4","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"Installation/Persistence","name":"Touches files in the Windows directory","description":"\"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\KBDUS.DLL\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\drivers\\etc\\hosts\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arial.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALN.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariali.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbd.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNB.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbi.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNBI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariblk.ttf\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$29","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"\"\" (Indicator: \"twitter\"), \"\" (Indicator: \"twitter\")\n \"\" (Indicator: \"twitter\")","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"Unusual Characteristics","name":"Drops cabinet archive files","description":"\"57C8EDB95DF3F0AD4EE2DC2B8CFD4157\" has type \"Microsoft Cabinet archive data 4795 bytes 1 file\"","origin":"Binary File","relevance":10,"id":"binary-5","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"informative","category":"Unusual Characteristics","name":"Installs hooks/patches the running process","description":"$2a","origin":"Hook Detection","mitre_attack_id":"T1179","relevance":10,"id":"hooks-8","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Contains escaped byte string (often part of obfuscated shellcode)","description":"$2b","origin":"File/Memory","mitre_attack_id":"T1140","relevance":10,"id":"string-15","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Possible heap spraying attempt detected","description":"\"RdrCEF.exe\" issued more than 3000 memory allocations","origin":"API Call","relevance":10,"id":"api-88","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Creates new processes","description":"\"RdrCEF.exe\" is creating a new process (Name: \"%WINDIR%\\System32\\dllhost.exe\", Handle: 1328)\n \"iexplore.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\", Handle: 892)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Writes data to a remote process","description":"\"iexplore.exe\" wrote 32 bytes to a remote process \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\" (Handle: 892)\n \"iexplore.exe\" wrote 52 bytes to a remote process \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\" (Handle: 892)\n \"iexplore.exe\" wrote 4 bytes to a remote process \"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe\" (Handle: 892)","origin":"API Call","mitre_attack_id":"T1055","relevance":6,"id":"api-0","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"suspicious","category":"Network Related","name":"Contacts Random Domain Names","description":"\"4kmovies.xyz\" seems to be random","origin":"Network Traffic","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"suspicious","category":"Network Related","name":"Found potential IP address in binary/memory","description":"$2c","origin":"File/Memory","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Document analysis contacts a domain","description":"Often seen on documents with macro droppers\n embedded files or exploits","origin":"Indicator Combinations","relevance":3,"id":"summary-1","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 1 domain and 1 host"}],"sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}]},"activity":{"stats":{"process_count":6,"spawned_processes_count":6,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":28,"imported_dlls_count":152,"dropped_files_count":0,"extracted_files_count":21,"files_written_count":232,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":13,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":13,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":1,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files","User Comment"],"sandbox_reports":[{"id":"604c99929bc1ac19472b5f23","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","contacted_countries":["USA"],"submit_name":"watch-zack-snyders-justice-league-online.pdf","analysis_start_time":"2021-03-13T10:53:08+00:00","indicators_count":{"informative":18,"suspicious":6,"malicious":1},"tags":["Network Traffic","Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":[{"domain":"4kmovies.xyz","address":"172.67.180.151","ttl":299,"country":"United States","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}],"processes":[{"pid":3728,"ppid":0,"name":"AcroRd32.exe","command_line":"\"C:\\watch-zack-snyders-justice-league-online.pdf\"","sha256":"2e9b9635469ff056f09023f7d671120d0c0f86f30767b06daa545c01242bcbef","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe","uid":"00064077-00003728","icon":"$2d"},{"pid":2516,"ppid":3728,"name":"RdrCEF.exe","command_line":"--backgroundcolor=16448250","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064077-00003728","uid":"00064614-00002516"},{"pid":3344,"ppid":2516,"name":"RdrCEF.exe","command_line":"$2e","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064614-00002516","uid":"00064722-00003344"},{"pid":2328,"ppid":2516,"name":"RdrCEF.exe","command_line":"$2f","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064614-00002516","uid":"00064755-00002328"},{"pid":1048,"ppid":3728,"name":"iexplore.exe","command_line":"https://4kmovies.xyz/en/movie/791373/zack-snyders-justice-league","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00064077-00003728","uid":"00071467-00001048"},{"pid":2196,"ppid":1048,"name":"iexplore.exe","command_line":"SCODEF:1048 CREDAT:275457 /prefetch:2","sha256":"8abc7daa81c8a20bfd88b6a60ecc9ed1292fbb6cedbd6f872f36512d9a194bba","normalized_path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","parent_uid":"00071467-00001048","uid":"00071498-00002196"}],"all_imported_dlls":["webio.dll","winnsi.dll","dnsapi.dll","shlwapi.dll","ole32.dll","wininet.dll","dxva2.dll","netprofm.dll","IEShims.dll","WindowsCodecs.dll","dwmapi.dll","msasn1.dll","urlmon.dll","ieframe.dll","cryptocme.dll","shell32.dll","sqlite.dll","KBDUS.DLL","iertutil.dll","gpapi.dll","wship6.dll","cryptui.dll","ntdll.dll","AXSLE.dll","ncrypt.dll","credssp.dll","ieui.dll","mshtml.dll","WSHTCPIP.DLL","AdobeXMP.dll","d2d1.dll","version.dll","clbcatq.dll","sqmapi.dll","mscoree.dll","profapi.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","nlaapi.dll","WSDApi.dll","bcrypt.dll","wlanutil.dll","user32.dll","oleaut32.dll","api-ms-win-downlevel-version-l1-1-0.dll","userenv.dll","IPHLPAPI.DLL","gdi32.dll","advapi32.dll","msvcr120.dll","apphelp.dll","rpcss.dll","ExplorerFrame.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","ccme_ecc.dll","usp10.dll","srvcli.dll","wtsapi32.dll","wintrust.dll","linkinfo.dll","tzres.dll","ccme_base.dll","RpcRtRemote.dll","hid.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","GdiPlus.dll","d3d8thk.dll","AXE8SharedExpat.dll","secur32.dll","dhcpcsvc6.dll","bcryptprimitives.dll","duser.dll","normaliz.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","imm32.dll","FWPUCLNT.DLL","api-ms-win-core-synch-l1-2-0.dll","MMDevAPI.dll","sxs.dll","comctl32.dll","cryptnet.dll","mscoreei.dll","uxtheme.dll","AcroRd32Res.dll","BIBUtils.dll","d3d11.dll","BIB.dll","cfgmgr32.dll","ccme_asym.dll","oleacc.dll","wevtapi.dll","ACE.dll","sspicli.dll","ccme_base_non_fips.dll","lpk.dll","kernel32.dll","cryptbase.dll","msimg32.dll","KernelBase.dll","devobj.dll","libcef.dll","chrome_elf.dll","AcroRd32.dll","AGM.dll","psapi.dll","winmm.dll","dhcpcsvc.dll","oleaccrc.dll","mscorwks.dll","credui.dll","msctf.dll","ws2_32.dll","ntmarta.dll","SensApi.dll","wshqos.dll","netutils.dll","api-ms-win-downlevel-user32-l1-1-0.dll","npmproxy.dll","wsock32.dll","mscms.dll","rpcrt4.dll","dbghelp.dll","wkscli.dll","CoolType.dll","msvcrt.dll","mswsock.dll","samcli.dll","dxgi.dll","rasadhlp.dll","AudioSes.dll","wlanapi.dll","xmllite.dll","setupapi.dll","d3d9.dll","ieproxy.dll","dui70.dll","winhttp.dll","sechost.dll","comdlg32.dll","netapi32.dll","schannel.dll","msvcp120.dll","Wldap32.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","crypt32.dll","cryptsp.dll","rsaenh.dll","DWrite.dll","icudt.dll","propsys.dll","nsi.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"urlblockindex_1_.bin","sha256":"775853600060162c4b4e5f883f9fd5a278e61c471b3ee1826396b6d129499aa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"39HQPMS7.txt","sha256":"03d728e152c1607f5327895b5b093dd25ef2904e4dc0d3fa2f0972d7ccfb4215","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"70ZGMXDR.txt","sha256":"e7cff6b74f12f0f85eecf7dfb866b6e0fbd514a6b277777577c9b04561daebeb","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"8ISGOX15.txt","sha256":"ce7a2e71346ef40bc8b4690d1fa748f2ea05a3b6afe389dcd876126e05172244","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"A2Z4A8UD.txt","sha256":"4e895edf2fb75c4c3655a0b4d8a37c1be3074d52387d772c5f65be6d1200d2f5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"H4FAUCSJ.txt","sha256":"44e008ec40d4433dca447ca5ef15d45e8e7006e23f6fc4d9d544a97512eb70e1","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"LWM88FTA.txt","sha256":"c1f7d8fa2a56e34dab6f308a287fbaeb7ce1af2144d70634fa8fd7b2520d61c0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"OH5A7R8Y.txt","sha256":"329639473d05893398263a04a85da84aba4e967eead9f9ad107f7480a4fbeef3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"P1HEZ8GC.txt","sha256":"ef1f5bf7bda09c627d71820f1b114f9aae215615f958ac92126ba6517258e368","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"T3V24OFJ.txt","sha256":"0144450342322be6e189fba9936f37ee1e47f651ffb353d734ad83519bfd1a20","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"WWEARQHJ.txt","sha256":"9d9b53de367e173d1d960cbe3234bdb0bcd64bb12d668abcab5d58704ff001e5","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"data_1","sha256":"c45bfaf29377b71a138baa084cde0e4994491919cdf52f8d1dd7ef403acead6f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Visited Links","sha256":"9d1c9dc432b2e97f7a54b4da2724e4ff96dc719e60cb89c9f82dbec9226856c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"IconCacheRdr65536.dat","sha256":"0b2433ccf46ef5215843d9457d20c33c9b13668ba8359bd60f41b2ac8b843454","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"SharedDataEvents","sha256":"bd4be4cc75510111b6c27d724e36fa092a26644ca20c640ad95ad21574766105","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"en-US.3","sha256":"c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"verE77F.tmp","sha256":"159bd4343f344a08f6af3b716b6fa679859c1bd1d7030d26ff5ef0255b86e1d9","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sha256":"f301def41c09940885a5d6299fa53b61eb736d985e0976a074b865e53a842e9c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sha256":"c3dcc07a4d83a59b76bd29288f97bc278844525c754b5b29a79bd964a3a09dc3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sha256":"23b269a3c16be6e726afdf4ab138cb77bec842625a7757ee830a12f463c83a6c","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sha256":"b15d095fd7152d134ce3e691ead25a46941d69db2a5640d2dea190a6fb85b5f6","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}],"files_written":[{"path":"C:","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\crash_reporter.cfg","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\UrlBlockManager\\urlblocklist.bin","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\History\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Adobe\\Flash Player\\NativeCache","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Internet Explorer\\UserData\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%USERPROFILE%\\Favorites","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Tracking Protection","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Feeds","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\TabRoaming","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\PrivacIE\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\DNTException\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatCache\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\IECompatUACache\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\Low","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\en\\iexplore.exe.mui","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\KBDUS.DLL","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\drivers\\etc\\hosts","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\{815488C6-83E2-11EB-95CA-08002744DAA3}.dat","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\File System\\primary.origin","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\cep-plugins\\PIPViewer\\index.html","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\arialn.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Recent\\CustomDestinations\\28c8b86deab549a1.customDestinations-ms","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Res.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\UserCache.bin","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"C:\\watch-zack-snyders-justice-league-online.pdf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\ARIALN.TTF","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\ARIALNI.TTF","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\ARIALNB.TTF","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\ARIALNBI.TTF","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"pipe\\com.adobe.reader.rna.8W3Ue9K.DC.0","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\SharedDataEvents","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages-journal","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000027.db","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\SEGOEUISL.TTF","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"C:\\Program Files","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeComFnt18.lst","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeCMapFnt18.lst","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeSysFnt18.lst","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt18.lst","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\A9Rzdb4gn_1v7t7be_2vk.tmp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\A9R6xpmr3_1v7t7bf_2vk.tmp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\A9R1iyext7_1v7t7bg_2vk.tmp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\A9R1dx13kp_1v7t7bh_2vk.tmp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\A9R1ubjj0r_1v7t7bi_2vk.tmp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_137095CCA1922136C4B9E18EE962B463","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\69C6F6EC64E114822DF688DC12CDD86C","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6DB145CFEEC544B1582FED1ADA3370DD","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_AA1E8580D4EBC816148CE81268683776","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\urlblockindex[1].bin","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\VersionManager\\verE77F.tmp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\37NU00GP\\suggestions[1].en-US","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_1DC6D7385EA816C957BA2B715AC5C442","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\A2Z4A8UD.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\70ZGMXDR.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\WWEARQHJ.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\8ISGOX15.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\H4FAUCSJ.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\P1HEZ8GC.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\OH5A7R8Y.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.3","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\DomainSuggestions\\en-US.2","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\T3V24OFJ.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\80237EE4964FC9C409AAF55BF996A292_289911146CA8EA5846A770DE7BCA5AF4","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\8A7891822FCFF127E4EADADE9757112B","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\0AB67BD4882FB0E09822529CFEB33A58","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\80237EE4964FC9C409AAF55BF996A292_C0427F5F77D9B3A439FC620EDAAB6177","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\QQW0X29Y\\search[1].json","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\PlayReady","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\~DF2BEF499884796ACA.TMP","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%TEMP%\\~DF6AF195FAAC49626E.TMP","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Internet Explorer\\Recovery\\High\\Active\\RecoveryStore.{815488C4-83E2-11EB-95CA-08002744DAA3}.dat","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\clr.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.0.3705\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\clr.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v1.1.4322\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\clr.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v2.0.50727\\mscorwks.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\Microsoft.NET\\Framework\\v4.0.30319\\clr.dll","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Internet Explorer\\iexplore.exe.config","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_8FB29C35032AE1827A2754ED35D7F2E8","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\82CB34DD3343FE727DF8890D352E0D8F","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_182DAED95AA6F1285FE339A5B91AB604","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\MetaData\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\ow\\Microsoft\\CryptnetUrlCache\\Content\\6BADA8974A10C4BD62CC921D13E43B18_711ED44619924BA6DC33E69F97E7FF63","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\LWM88FTA.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%APPDATA%\\Microsoft\\Windows\\Cookies\\39HQPMS7.txt","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\arialnb.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\arialnbi.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\arialni.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\segoeuisl.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%WINDIR%\\fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\css\\home-selector.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\home-view\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKLM\\SYSTEM\\ACROBATVIEWERCPP473\\","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\SYSTEMCERTIFICATES\\AUTHROOT\\CERTIFICATES\\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4\\DF3C24F9BFD666761B268073FE06D1CC8D4F82A4","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\ADMINACTIVE\\{00000000-0000-0000-0000-000000000000}\\{00000000-0000-0000-0000-000000000000}","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\PROXYBYPASS\\PROXYBYPASS","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"key":"HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\ZONEMAP\\INTRANETNAME\\INTRANETNAME","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1048","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"IsoScope_418_IE_EarlyTabStart_0x7e8_Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"IsoScope_418_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"IsoScope_418_ConnHashTable<1048>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\!BrowserEmulation!SharedMemory!Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\VERMGMTBlockListFileMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_FILEMAPSWITCH_MUTEX_1048","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_HASHFILESWITCH_MUTEX","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\URLBLOCK_DOWNLOAD_MUTEX","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\ZonesLockedCacheCounterMutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_418_IE_EarlyTabStart_0x7e8_Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_418_ConnHashTable<1048>_HashTable_Mutex","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\{5312EE61-79E3-4A24-BFE1-132B85B23C3A}","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\IsoScope_418_IESQMMUTEX_0_519","sources":[{"report_type":"sandbox","report_id":"604c99929bc1ac19472b5f23"}]}]}},"report_ids":{"sandbox_job_ids":["604c99929bc1ac19472b5f23"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Malicious Unavailable Sample 72e22c4ca31c… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Malicious verdict for sample 72e22c4ca31c…. Malware family: Unavailable. Threat score 100/100. 5/29 AV engines flagged this file. 1 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398"}],["$","meta","4",{"property":"og:title","content":"Malicious Unavailable Sample 72e22c4ca31c… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Malicious verdict for sample 72e22c4ca31c…. Malware family: Unavailable. Threat score 100/100. 5/29 AV engines flagged this file. 1 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/72e22c4ca31c56b920eafdd22ee099a501d32d80d26a9dccbbfe9e1bb46ed398"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Malicious Unavailable Sample 72e22c4ca31c… — Score 100/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Malicious verdict for sample 72e22c4ca31c…. Malware family: Unavailable. Threat score 100/100. 5/29 AV engines flagged this file. 1 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L30","11",{}]]