Watch FREE Movies Online & TV shows | Watch Mulan (2020) Movies Online - MongFilm

26:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2e:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 25:T439,{"@context":"https://schema.org","@type":"TechArticle","headline":"Sample 7a208347e2a0… — Score 0/100 — Hybrid Analysis","description":"Threat analysis for sample 7a208347e2a0…. Malware family: Unavailable. Threat score 0/100. 2/28 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88","keywords":["Unavailable","malware analysis","sandbox report","threat intelligence","7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88"],"about":{"@type":"SoftwareApplication","name":"full-hd-mulan-2020-full-online-for-free.pdf","applicationCategory":["pdf"],"identifier":"7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88"},"threatScore":0,"malwareFamily":"Unavailable","antivirusDetections":{"malicious":2,"total":28},"behavioralIndicators":{"malicious":0,"suspicious":3},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T793,Object ID 4 contains compressed stream data: No filters Object ID 122 contains compressed stream data: No filters Object ID 128 contains compressed stream data: No filters Object ID 130 contains compressed stream data: No filters Object ID 132 contains compressed stream data: No filters Object ID 134 contains compressed stream data: No filters Object ID 136 contains compressed stream data: No filters Object ID 138 contains compressed stream data: No filters Object ID 140 contains compressed stream data: No filters Object ID 142 contains compressed stream data: No filters Object ID 144 contains compressed stream data: No filters Object ID 146 contains compressed stream data: No filters Object ID 155 contains compressed stream data: /CIDInit /ProcSet findresource begin 16 dict begin begincmap /CIDSystemInfo << /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName /Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <0000> <FFFF> endcodespace ... Object ID 157 contains compressed stream data: \x00\x01\x00\x00\x00 \x00\x80\x00\x03\x00PDSIG\xc8O\xde\x03\x00\x000\x9c\x00\x00\x14\xe8OS/2~\xbd\x89[\x00\x00\x01X\x00\x00\x00Vcmap\x86\x92\x9c\x15\x00\x00\x03\xdc\x00\x00\x01\xdacvt \x04\xe0\x05\xb7\x00\x00\x05\xd0\x00\x00\x00\x18glyfS\xe85s\x00\x00\x05\ ... Object ID 159 contains compressed stream data: \x00\x01\x00\x00\x00\x14\x01\x00\x00\x04\x00@EBDT\xd53\xd7\x8a\x00\x01\x14t\x00\x00\x1e EBLC\x88\x1d\xb1\xd2\x00\x01?<\x00\x008GDEF\xce\xd7\xe7\xbc\x00\x03E\xfc\x00\x00\x040GPOSB\xf9\xd6\x80\x00\x012\x80\x00\x02\x13zGSUB\x05\x87"Z\x00\x03J,\x00\x00u\xf ..., Object ID 161 contains compressed stream data: \x00\x01\x00\x00\x00\x15\x01\x00\x00\x04\x00PDSIG33\xb1?\x00\x039@\x00\x00\x17xEBDTy"X_\x00\x00\xa48\x00\x00\x128EBLC"\xd2\x15\x9c\x00\x00\x9ex\x00\x00\x05\xc0GDEF\x10\xe9\x1bl\x00\x033\xe8\x00\x00\x05VGPOSv\xad\x02 \x00\x00\xb6p\x00\x02?^GSUB*\xe2\x9aY\x0 ...28:T2316,Pattern match: "https://mongfilm.com/en/movie/337401/mulan" Pattern match: "http://www.w3.org/1999/xhtml" Pattern match: "http://ogp.me/ns#" Pattern match: "http://mongfilm.com/en/movie/337401/mulan" Pattern match: "https://fonts.googleapis.com/css?family=Montserrat:400,700" Pattern match: "https://mongfilm.com/en/movie/337401/mulansitemap.xml" Pattern match: "https://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js" Pattern match: "https://oss.maxcdn.com/respond/1.3/respond.min.js" Pattern match: "https://mongfilm.com/rc" Pattern match: "https://mongfilm.com/en" Pattern match: "https://mongfilm.com/en/genres/action/28" Pattern match: "https://mongfilm.com/en/genres/animation/16" Pattern match: "https://mongfilm.com/en/genres/comedy/35" Pattern match: "https://mongfilm.com/en/genres/crime/80" Pattern match: "https://mongfilm.com/en/genres/documentary/99" Pattern match: "https://mongfilm.com/en/genres/drama/18" Pattern match: "https://mongfilm.com/en/genres/family/10751" Pattern match: "https://mongfilm.com/en/genres/fantasy/14" Pattern match: "https://mongfilm.com/en/genres/history/36" Pattern match: "https://mongfilm.com/en/genres/horror/27" Pattern match: "https://mongfilm.com/en/genres/music/10402" Pattern match: "https://mongfilm.com/en/genres/mystery/9648" Pattern match: "https://mongfilm.com/en/genres/romance/10749" Pattern match: "https://mongfilm.com/en/genres/sci-fi/878" Pattern match: "https://mongfilm.com/en/genres/tv-movie/10770" Pattern match: "https://mongfilm.com/en/genres/thriller/53" Pattern match: "https://mongfilm.com/en/genres/war/10752" Pattern match: "https://mongfilm.com/en/genres/western/37" Pattern match: "https://mongfilm.com/en/countries/AR" Pattern match: "https://mongfilm.com/en/countries/AT" Pattern match: "https://mongfilm.com/en/countries/AU" Pattern match: "https://mongfilm.com/en/countries/BE" Pattern match: "https://mongfilm.com/en/countries/BG" Pattern match: "https://mongfilm.com/en/countries/BR" Pattern match: "https://mongfilm.com/en/countries/CA" Pattern match: "https://mongfilm.com/en/countries/CL" Pattern match: "https://mongfilm.com/en/countries/CN" Pattern match: "https://mongfilm.com/en/countries/CO" Pattern match: "https://mongfilm.com/en/countries/CZ" Pattern match: "https://mongfilm.com/en/countries/HR" Pattern match: "https://mongfilm.com/en/countries/XC" Pattern match: "https://mongfilm.com/en/countries/DK" Pattern match: "https://mongfilm.com/en/countries/EG" Pattern match: "https://mongfilm.com/en/countries/FI" Pattern match: "https://mongfilm.com/en/countries/FR" Pattern match: "https://mongfilm.com/en/countries/DE" Pattern match: "https://mongfilm.com/en/countries/GE" Pattern match: "https://mongfilm.com/en/countries/GR" Pattern match: "https://mongfilm.com/en/countries/HK" Pattern match: "https://mongfilm.com/en/countries/HU" Pattern match: "https://mongfilm.com/en/countries/ID" Pattern match: "https://mongfilm.com/en/countries/IE" Pattern match: "https://mongfilm.com/en/countries/IL" Pattern match: "https://mongfilm.com/en/countries/IN" Pattern match: "https://mongfilm.com/en/countries/IR" Pattern match: "https://mongfilm.com/en/countries/IS" Pattern match: "https://mongfilm.com/en/countries/IT" Pattern match: "https://mongfilm.com/en/countries/JP" Pattern match: "https://mongfilm.com/en/countries/KR" Pattern match: "https://mongfilm.com/en/countries/MX" Pattern match: "https://mongfilm.com/en/countries/MY" Pattern match: "https://mongfilm.com/en/countries/NL" Pattern match: "https://mongfilm.com/en/countries/NO" Pattern match: "https://mongfilm.com/en/countries/NZ" Pattern match: "https://mongfilm.com/en/countries/PH" Pattern match: "https://mongfilm.com/en/countries/PK" Pattern match: "https://mongfilm.com/en/countries/PL" Pattern match: "https://mongfilm.com/en/countries/PT" Pattern match: "https://mongfilm.com/en/countries/RO" Pattern match: "https://mongfilm.com/en/countries/RU" Pattern match: "https://mongfilm.com/en/countries/ES" Pattern match: "https://mongfilm.com/en/countries/RS" Pattern match: "https://mongfilm.com/en/countries/CH" Pattern match: "https://mongfilm.com/en/countries/SA" Pattern match: "https://mongfilm.com/en/countries/SE" Pattern match: "https://mongfilm.com/en/countries/SG" Pattern match: "https://mongfilm.com/en/countries/SK" Pattern match: "https://mongfilm.com/en/countries/ZA" Pattern match: "https://mongfilm.com/en/countries/SU" Pattern match: "https://mongfilm.com/en/countries/TH" Pattern match: "https://mongfilm.com/en/countries/TR" Pattern match: "https://mongfilm.com/en/countries/TW" Pattern match: "https://mongfilm.com/en/countries/UA" Pattern match: "https://mongfilm.com/en/countries/GB" Pattern match: "https://mongfilm.com/en/countries/US" Pattern match: "https://mongfilm.com/en/countries/VE" Pattern match: "https://mongfilm.com/en/countries/VN" Pattern match: "https://mongfilm.com/en/year/2001" Pattern match: "https://mongfilm.com/en/year/2002" Pattern match: "https://mongfilm.com/en/year/2003" Pattern match: "https://mongfilm.com/en/year/2004" Pattern match: "https://mongfilm.com/en/year/2005" Pattern match: "https://mongfilm.com/en/year/2006" Pattern match: "https://mongfilm.com/en/year/2007" Pattern match: "https://mongfilm.com/en/year/2008" Pattern match: "https://mongfilm.com/en/year/2009" Pattern match: "https://mongfilm.com/en/year/2010" Pattern match: "https://mongfilm.com/en/year/2011" Pattern match: "https://mongfilm.com/en/year/2012" Pattern match: "https://mongfilm.com/en/year/2013" Pattern match: "https://mongfilm.com/en/year/2014" Pattern match: "https://mongfilm.com/en/year/2015" Pattern match: "https://mongfilm.com/en/year/2016" Pattern match: "https://mongfilm.com/en/year/2017" Pattern match: "https://mongfilm.com/en/year/2018" Pattern match: "https://mongfilm.com/en/year/2019" Pattern match: "https://mongfilm.com/en/year/2020" Pattern match: "https://mongfilm.com/en/movies" Pattern match: "https://mongfilm.com/en/series" Pattern match: "https://mongfilm.com/en/movie-popular" Pattern match: "https://mongfilm.com/bg/movie/337401/mulan" Pattern match: "https://mongfilm.com/zh/movie/337401/mulan" Pattern match: "https://mongfilm.com/cs/movie/337401/mulan" Pattern match: "https://mongfilm.com/da/movie/337401/mulan" Pattern match: "https://mongfilm.com/nl/movie/337401/mulan" Pattern match: "https://mongfilm.com/fi/movie/337401/mulan" Pattern match: "https://mongfilm.com/fr/movie/337401/mulan" Pattern match: "https://mongfilm.com/ka/movie/337401/mulan" Pattern match: "https://mongfilm.com/de/movie/337401/mulan" Pattern match: "https://mongfilm.com/el/movie/337401/mulan" Pattern match: "https://mongfilm.com/hu/movie/337401/mulan" Pattern match: "https://mongfilm.com/id/movie/337401/mulan" Pattern match: "https://mongfilm.com/ja/movie/337401/mulan" Pattern match: "https://mongfilm.com/it/movie/337401/mulan" Pattern match: "https://mongfilm.com/ko/movie/337401/mulan" Pattern match: "https://mongfilm.com/no/movie/337401/mulan" Pattern match: "https://mongfilm.com/pl/movie/337401/mulan" Pattern match: "https://mongfilm.com/pt/movie/337401/mulan" Pattern match: "https://mongfilm.com/ro/movie/337401/mulan" Pattern match: "https://mongfilm.com/ru/movie/337401/mulan" Pattern match: "https://mongfilm.com/ar/movie/337401/mulan" Pattern match: "https://mongfilm.com/sr/movie/337401/mulan" Pattern match: "https://mongfilm.com/sk/movie/337401/mulan" Pattern match: "https://mongfilm.com/es/movie/337401/mulan" Pattern match: "https://mongfilm.com/sv/movie/337401/mulan" Pattern match: "https://mongfilm.com/th/movie/337401/mulan" Pattern match: "https://mongfilm.com/tr/movie/337401/mulan" Pattern match: "https://mongfilm.com/uk/movie/337401/mulan" Pattern match: "https://mongfilm.com/uz/movie/337401/mulan" Pattern match: "https://mongfilm.com/vi/movie/337401/mulan" Pattern match: "http://schema.org/Movies" Pattern match: "https://schema.org/BreadcrumbList" Pattern match: "https://schema.org/ListItem" Pattern match: "https://mongfilm.com/en/" Pattern match: "https://mongfilm.com/en/datamovie/337401/mulan" Pattern match: "https://image.tmdb.org/t/p/original/vjMrfX3aNDXfgW8igmoWmF4UjQ0.jpg" Pattern match: "www.youtube.com/embed/01ON04GCwKs?rel=0&modestbranding=0&autoplay=0&autohide=1&showinfo=0&controls=0" Pattern match: "https://schema.org/Person" Pattern match: "https://mongfilm.com/en/keyword/china/478" Pattern match: "https://image.tmdb.org/t/p/w780/m7TH3tOD1krBRNcEfXMIsqVsifW.jpgwidth=272.667" Pattern match: "www.youtube.com/embed/01ON04GCwKs?rel=0&modestbranding=1&autoplay=0&autohide=1&showinfo=1&controls=0" Pattern match: "https://mongfilm.com/p/privacy" Pattern match: "http://mongfilm.com/dq-content/themes/movie/img/bg-register.jpg" Pattern match: "s10.histats.com/js15_as.js" Pattern match: "sstatic1.histats.com/0.gif?4450015&101"29:T5af,"" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "youtube") "

youtube

" (Indicator: "youtube") "" (Indicator: "youtube") " " (Indicator: "twitter")2a:Ta3b,Embedded object type "/ObjStm" (ID: 4, References: 8 0 R,7 0 R,6 0 R,10 0 R,15 0 R,19 0 R,19 0 R,30 0 R,33 0 R,51 0 R,54 0 R,64 0 R,71 0 R,82 0 R,90 0 R,96 0 R,100 0 R,9 0 R,11 0 R,12 0 R,13 0 R,14 0 R,23 0 R,24 0 R,25 0 R,26 0 R,27 0 R,28 0 R,29 0 R,31 0 R,32 0 R,34 0 R,35 0 R,36 0 R,37 0 R,38 0 R,39 0 R,40 0 R,41 0 R,42 0 R,43 0 R,44 0 R,45 0 R,46 0 R,47 0 R,48 0 R,49 0 R,50 0 R,52 0 R,53 0 R,55 0 R,56 0 R,57 0 R,58 0 R,59 0 R,60 0 R,61 0 R,62 0 R,63 0 R,65 0 R,66 0 R,67 0 R,68 0 R,69 0 R,70 0 R,72 0 R,73 0 R,74 0 R,75 0 R,76 0 R,77 0 R,78 0 R,79 0 R,80 0 R,81 0 R,83 0 R,84 0 R,85 0 R,86 0 R,87 0 R,88 0 R,89 0 R,91 0 R,92 0 R,93 0 R,94 0 R,95 0 R,97 0 R,98 0 R,99 0 R,101 0 R,102 0 R,103 0 R,104 0 R,105 0 R,106 0 R,107 0 R,5 0 R,8 0 R,108 0 R,9 0 R,11 0 R,12 0 R,13 0 R,17 0 R,18 0 R,22 0 R,23 0 R,24 0 R,25 0 R,26 0 R,27 0 R,28 0 R,8 0 R,108 0 R,8 0 R,108 0 R,8 0 R,108 0 R,15 0 R,18 0 R,19 0 R,8 0 R,108 0 R,16 0 R,17 0 R,14 0 R,108 0 R,119 0 R,108 0 R,15 0 R,108 0 R,14 0 R,108 0 R,20 0 R,21 0 R,22 0 R,14 0 R,108 0 R,120 0 R,108 0 R,121 0 R,108 0 R,19 0 R,108 0 R,8 0 R,108 0 R,8 0 R,108 0 R,8 0 R,108 0 R,8 0 R,108 0 R,8 0 R,108 0 R,8 0 R,108 0 R,8 0 R,109 0 R,29 0 R,31 0 R,8 0 R,109 0 R,8 0 R,110 0 R,32 0 R,34 0 R,35 0 R,36 0 R,37 0 R,38 0 R,39 0 R,40 0 R,41 0 R,42 0 R,43 0 R,44 0 R,45 0 R,46 0 R,47 0 R,48 0 R,49 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,110 0 R,8 0 R,111 0 R,50 0 R,52 0 R,8 0 R,111 0 R,8 0 R,112 0 R,53 0 R,55 0 R,56 0 R,57 0 R,58 0 R,59 0 R,60 0 R,61 0 R,62 0 R,8 0 R,112 0 R,8 0 R,112 0 R,8 0 R,112 0 R,8 0 R,112 0 R,8 0 R,112 0 R,8 0 R,112 0 R,8 0 R,112 0 R,8 0 R,112 0 R,8 0 R,113 0 R,63 0 R,65 0 R,66 0 R,67 0 R,68 0 R,69 0 R,8 0 R,113 0 R,8 0 R,113 0 R,8 0 R,113 0 R,8 0 R,113 0 R,8 0 R,113 0 R,8 0 R,114 0 R,70 0 R,72 0 R,73 0 R,74 0 R,75 0 R,76 0 R,77 0 R,78 0 R,79 0 R,80 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,114 0 R,8 0 R,115 0 R,81 0 R,83 0 R,84 0 R,85 0 R,86 0 R,87 0 R,88 0 R,8 0 R,115 0 R,8 0 R,115 0 R,8 0 R,115 0 R,8 0 R,115 0 R,8 0 R,115 0 R,8 0 R,115 0 R,8 0 R,116 0 R,89 0 R,91 0 R,92 0 R,93 0 R,94 0 R,8 0 R,116 0 R,8 0 R,116 0 R,8 0 R,116 0 R,8 0 R,116 0 R,8 0 R,117 0 R,95 0 R,97 0 R,98 0 R,8 0 R,117 0 R,8 0 R,117 0 R,8 0 R,118 0 R,99 0 R,101 0 R,102 0 R,103 0 R,104 0 R,105 0 R,106 0 R,107 0 R,8 0 R,118 0 R,8 0 R,118 0 R,8 0 R,118 0 R,8 0 R,118 0 R,8 0 R,118 0 R,8 0 R,118 0 R,8 0 R,118 0 R)2b:T4d0,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAADY0lEQVR42u2VS08TURiG+ytceVmYGI260gUmaNzJRuMlaBQXYlgYNTEhxI3RmGBwwQJj3BjcqISF8YIYTIyXyKVCBRQskrZaCr1QCvQy05ne4XW+AzOcGaY4rZK48CRPmtOe0+c93/k6tdn+9REMBkEEAgEN9b1QKITp6WmEw2HMzMwwIpEIZmdnMTc3x3A6nfjjAKrY7/drAUhuDEByPsD8/DzcbjdcLlfxEPEtNqwHFIgCTE5OsqBer9c8RFRZLO7d8Feh76RKUQB6TSaT2jWuChDZbIORvFLWdF8vYg1XlubhaWS+jSJaW8PmBaXMGecopJcvYLafoJNHo1EmzWQyEASBVcLn8+lDhJXFRrITXkSOVSH92bE0900gXLET8od3K3OTfTxqACq92kP0nsfj0YcIbrLBSF5pIqn7IyIX6tichPSa+flj6XOltGmqyN0WmO0nSBaLxRCPx5FIJBhUBVEUGVqAKWWxkYxSAd1cCRA4WAH5y7A2N9unY2qqqJx6Qgvg3WiDkdT4d908q/SANPIV/ppqNk+7XTDbx0M/2WJySZJWAniUxesB3XkxuS6AS1m8HtDPzkwuyzLD8pOwp6cH3d3dGr29vYy+vj7Y7Xb09/djYGCA4XA4MDg4iLGxMfZEVMVGeSqVsh6AmskI3a+K2X8EyakB+ZLz8nQ6bT0AfZERtbkI8X0XkpdOQnxwR1dus1Or8pIC8DK+q1WS95ogesYhnq3SiYvJ6alIWA7Ay/im0k7b0Y7kszaI54+vKVbl2WyWYTnAKuHyKbXThkMQDmxH8n7LmmJensvlrAfQyZZPyENCYf8OyCPDlsREPp+3HsAo4yGZPDIE4XAlxJsNlsREoVCwHsAo5CGZeL0e0qNWyJ1PIT1p+62YWFhYsB7AWFYdoQBie7YiNeSA9LAViboaxE8dgdjcBOHWDYi3G1eJicXFResBjGVVkd++RryqEolz1ZDfdCEnS+y0cudzCNeuQmp/jNld23RyEhM0LAfgS0pkgn4IF2uRbG5EdN9uZEVBV2Z2Ygr9yY6cf0onVuUlBVDvUSVRe5qFiB09hLS9Z9X9GkvNS/lhOQB/MiJRfxnxMyeQetWxprSYuOQAvMRMWIq0rAC8yExYirSsAEZZucKyA2Cdhu3/WB6/ADuvDu+77R/qAAAAAElFTkSuQmCC2c:T5c2,--type=renderer --primordial-pipe-token=F95802574C299B2BF20B85F69062BC0D --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=F95802574C299B2BF20B85F69062BC0D --renderer-client-id=2 --mojo-platform-channel-handle=1268 --allow-no-sandbox-job /prefetch:12d:T5c2,--type=renderer --primordial-pipe-token=E2C9AA3BB10FE3A36808CA2685719923 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=E2C9AA3BB10FE3A36808CA2685719923 --renderer-client-id=3 --mojo-platform-channel-handle=1324 --allow-no-sandbox-job /prefetch:11d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1791340552559,"unified_at":"2026-10-07T02:35:52.559Z","metadata":{"hashes":{"sha256":"7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88","sha1":"511ff972ccd937f1b9ccd3a73a959022b5561469","md5":"2b129bfeecb8e72c2c0f99144b508c3e","sha512":"f4602b511a6fee9c802d31748e3b8c7c70e1fc79e314e146cd059388d167217803e47b7642e0ea0f7fdbf84af3c196c98f7607375dd0414f7a68f7272403e6c5","ssdeep":"6144:MmURAkoh7N9QOkybb5iPmPkBW2pqxNQYyooXOee:T73BbfkBPPtX0","ssdeep_chunks":["6144:MmURAko","6144:mURAkoh","6144:URAkoh7","6144:RAkoh7N","6144:Akoh7N9","6144:koh7N9Q","6144:oh7N9QO","6144:h7N9QOk","6144:7N9QOky","6144:N9QOkyb","6144:9QOkybb","6144:QOkybb5","6144:Okybb5i","6144:kybb5iP","6144:ybb5iPm","6144:bb5iPmP","6144:b5iPmPk","6144:5iPmPkB","6144:iPmPkBW","6144:PmPkBW2","6144:mPkBW2p","6144:PkBW2pq","6144:kBW2pqx","6144:BW2pqxN","6144:W2pqxNQ","6144:2pqxNQY","6144:pqxNQYy","6144:qxNQYyo","6144:xNQYyoo","6144:NQYyooX","6144:QYyooXO","6144:YyooXOe","6144:yooXOee","12288:MmURAko","12288:mURAkoh","12288:URAkoh7","12288:RAkoh7N","12288:Akoh7N9","12288:koh7N9Q","12288:oh7N9QO","12288:h7N9QOk","12288:7N9QOky","12288:N9QOkyb","12288:9QOkybb","12288:QOkybb5","12288:Okybb5i","12288:kybb5iP","12288:ybb5iPm","12288:bb5iPmP","12288:b5iPmPk","12288:5iPmPkB","12288:iPmPkBW","12288:PmPkBW2","12288:mPkBW2p","12288:PkBW2pq","12288:kBW2pqx","12288:BW2pqxN","12288:W2pqxNQ","12288:2pqxNQY","12288:pqxNQYy","12288:qxNQYyo","12288:xNQYyoo","12288:NQYyooX","12288:QYyooXO","12288:YyooXOe","12288:yooXOee","6144:T73Bbfk","6144:73BbfkB","6144:3BbfkBP","6144:BbfkBPP","6144:bfkBPPt","6144:fkBPPtX","6144:kBPPtX0"],"imphash":"Unknown"},"file_info":{"file_name":"full-hd-mulan-2020-full-online-for-free.pdf","file_type":["pdf"],"file_type_id":"pdf","file_size":337812,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1602305350000,"last_seen":1626167730000,"last_multi_scan":1626167730000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":2,"suspicious_count":0,"total_engines":28},"attributions":{"malware_families_count":1,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":3},"sandbox_signatures":{"informative_count":13,"suspicious_count":3,"malicious_count":0,"total":16},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"Ahnlab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"BitDefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"malicious","threat_name":"Unavailable (downloaded)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"malicious","threat_name":"Unavailable (downloaded)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"Ikarus","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"TrendMicro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"TrendMicro House Call","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xviruspersonalguard":{"name":"Xvirus Personal Guard","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{"malware_families":[{"value":"Unavailable","sources":[{"report_type":"quickscan","report_id":""}]}]},"mitre_attacks":[{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Found a string that may be used as part of an injection method"}],"sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"tactic":"Defense Evasion","technique":"DCShadow","attack_id":"T1207","attack_id_wiki":"https://attack.mitre.org/techniques/T1207","identifiers":[{"type":"informative","value":"Contains object with compressed stream data"}],"sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Scanning for window names"}],"sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]}],"sandbox_signatures":[{"level":"informative","category":"External Systems","name":"Detected Suricata Alert","description":"Detected alert \"ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent\" (SID: 2027390, Rev: 3, Severity: 3) categorized as \"Unknown Traffic\"\n Detected alert \"ET INFO Windows OS Submitting USB Metadata to Microsoft\" (SID: 2025275, Rev: 3, Severity: 3) categorized as \"Misc activity\"","origin":"Suricata Alerts","relevance":10,"id":"suricata-0","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"General","name":"Contains object with compressed stream data","description":"$27","origin":"Static Parser","mitre_attack_id":"T1207","relevance":10,"id":"static-66","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"\\Sessions\\1\\BaseNamedObjects\\Local\\Acrobat Instance Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex\"\n \"DBWinMutex\"\n \"Local\\Acrobat Instance Mutex\"\n \"com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"\n \"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"General","name":"PDF file has an embedded URL","description":"\"https://mongfilm.com/en/movie/337401/mulan\" (Based on: \"7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88.bin\")","origin":"File/Memory","relevance":3,"id":"string-25","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"RdrCEF.exe\" (UID: 00065048-00003896) was launched with modified environment variables: \"Path\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"AcroRd32.exe\" searching for class \"Acrobat Instance Window Class\"\n \"AcroRd32.exe\" searching for class \"JFWUI2\"\n \"AcroRd32.exe\" searching for window \"_AcroAppTimer\"\n \"AcroRd32.exe\" searching for class \"Shell_TrayWnd\"\n \"AcroRd32.exe\" searching for class \"AdobeAcrobatSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for class \"AdobeReaderSpeedLaunchCmdWnd\"","origin":"API Call","mitre_attack_id":"T1010","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"RdrCEF.exe\" with commandline \"--backgroundcolor=16448250\" (UID: 00065048-00003896)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=F95802574C299B2BF20B85F6 ...\" (UID: 00065132-00003472)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=E2C9AA3BB10FE3A36808CA26 ...\" (UID: 00065163-00003172)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"\"GlobSettings\" has type \"ASCII text\"\n \"SharedDataEvents-journal\" has type \"SQLite Rollback Journal\"\n \"data_1\" has type \"data\"\n \"Visited Links\" has type \"data\"\n \"0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl\" has type \"data\"\n \"TMDocs.sav\" has type \"data\"\n \"TMGrpPrm.sav\" has type \"data\"\n \"SharedDataEvents\" has type \"SQLite 3.x database\"\n \"CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl\" has type \"data\"\n \"IconCacheRdr65536.dat\" has type \"data\"\n \"urlref_httpsmongfilm.comenmovie337401mulan\" has type \"HTML document UTF-8 Unicode text with very long lines\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"Installation/Persistence","name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)","origin":"File/Memory","mitre_attack_id":"T1055","relevance":4,"id":"string-4","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"Installation/Persistence","name":"Touches files in the Windows directory","description":"\"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbd.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbi.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariali.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALN.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\SEGOEUISL.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\KBDUS.DLL\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\drivers\\etc\\hosts\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arial.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNB.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNBI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariblk.ttf\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$28","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"$29","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"informative","category":"Unusual Characteristics","name":"Contains embedded objects that might be interesting to investigate","description":"$2a","origin":"Static Parser","relevance":5,"id":"static-10","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Possible heap spraying attempt detected","description":"\"RdrCEF.exe\" issued more than 3000 memory allocations","origin":"API Call","relevance":10,"id":"api-88","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"2/79 reputation engines marked \"http://ogp.me\" as malicious (2% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Creates new processes","description":"\"AcroRd32.exe\" is creating a new process (Name: \"%WINDIR%\\System32\\svchost.exe\", Handle: 872)\n \"RdrCEF.exe\" is creating a new process (Name: \"%WINDIR%\\System32\\conhost.exe\", Handle: 1336)\n \"RdrCEF.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 1416)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]}]},"activity":{"stats":{"process_count":4,"spawned_processes_count":4,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":6,"imported_dlls_count":136,"dropped_files_count":0,"extracted_files_count":11,"files_written_count":155,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":7,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":7,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Extracted Files","User Comment"],"sandbox_reports":[{"id":"5f813d466b356370fc1a3421","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","submit_name":"full-hd-mulan-2020-full-online-for-free.pdf","analysis_start_time":"2020-10-10T04:49:19+00:00","indicators_count":{"informative":13,"suspicious":3,"malicious":0},"tags":["Extracted Files","User Comment"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}],"processes":[{"pid":3844,"ppid":0,"name":"AcroRd32.exe","command_line":"\"C:\\full-hd-mulan-2020-full-online-for-free.pdf\"","sha256":"2e9b9635469ff056f09023f7d671120d0c0f86f30767b06daa545c01242bcbef","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe","uid":"00064501-00003844","icon":"$2b"},{"pid":3896,"ppid":3844,"name":"RdrCEF.exe","command_line":"--backgroundcolor=16448250","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064501-00003844","uid":"00065048-00003896"},{"pid":3472,"ppid":3896,"name":"RdrCEF.exe","command_line":"$2c","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00065048-00003896","uid":"00065132-00003472"},{"pid":3172,"ppid":3896,"name":"RdrCEF.exe","command_line":"$2d","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00065048-00003896","uid":"00065163-00003172"}],"all_imported_dlls":["cryptbase.dll","dxva2.dll","AudioSes.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","winmm.dll","normaliz.dll","npmproxy.dll","hid.dll","cryptui.dll","wkscli.dll","gpapi.dll","sqlite.dll","apphelp.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","nlaapi.dll","oleaccrc.dll","winnsi.dll","AXSLE.dll","GdiPlus.dll","mscms.dll","msvcrt.dll","wship6.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","tzres.dll","secur32.dll","IPHLPAPI.DLL","wsock32.dll","user32.dll","msctf.dll","sspicli.dll","devobj.dll","msimg32.dll","dwmapi.dll","dhcpcsvc6.dll","dhcpcsvc.dll","psapi.dll","webio.dll","urlmon.dll","KernelBase.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","kernel32.dll","dxgi.dll","BIB.dll","clbcatq.dll","userenv.dll","WSDApi.dll","gdi32.dll","ole32.dll","samcli.dll","wevtapi.dll","dnsapi.dll","SensApi.dll","api-ms-win-downlevel-user32-l1-1-0.dll","api-ms-win-downlevel-version-l1-1-0.dll","rpcrt4.dll","WSHTCPIP.DLL","dbghelp.dll","rsaenh.dll","advapi32.dll","shell32.dll","uxtheme.dll","libcef.dll","AXE8SharedExpat.dll","ExplorerFrame.dll","BIBUtils.dll","cryptocme.dll","version.dll","icudt.dll","credui.dll","bcrypt.dll","shlwapi.dll","msvcr120.dll","ieframe.dll","cryptsp.dll","ccme_base.dll","ccme_base_non_fips.dll","rasadhlp.dll","ncrypt.dll","oleacc.dll","netutils.dll","nsi.dll","cfgmgr32.dll","wintrust.dll","comdlg32.dll","DWrite.dll","KBDUS.DLL","ccme_ecc.dll","AcroRd32.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","rpcss.dll","wshqos.dll","srvcli.dll","d3d9.dll","crypt32.dll","ws2_32.dll","propsys.dll","duser.dll","lpk.dll","dui70.dll","wlanutil.dll","ccme_asym.dll","profapi.dll","RpcRtRemote.dll","msasn1.dll","AdobeXMP.dll","netprofm.dll","chrome_elf.dll","imm32.dll","msvcp120.dll","wlanapi.dll","netapi32.dll","d3d8thk.dll","AGM.dll","winhttp.dll","AcroRd32Res.dll","mswsock.dll","ntmarta.dll","usp10.dll","sechost.dll","comctl32.dll","ntdll.dll","wininet.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","api-ms-win-core-synch-l1-2-0.dll","MMDevAPI.dll","oleaut32.dll","setupapi.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","Wldap32.dll","iertutil.dll","CoolType.dll","ACE.dll","FWPUCLNT.DLL","wtsapi32.dll","d3d11.dll","credssp.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"data_1","sha256":"2e4b139474d6a843e83ba38eb16f8b4a00611947c9f21de0133c28084d2daaa7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"Visited Links","sha256":"9d1c9dc432b2e97f7a54b4da2724e4ff96dc719e60cb89c9f82dbec9226856c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"IconCacheRdr65536.dat","sha256":"1ee08ac646f59bd3c3396ff2ed9317a782ffe2fccf914d15a34c45a43988921a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"SharedDataEvents","sha256":"3c9cf529704a89a2517a7deaf9a494378a252bbae78b787cbbd813f893730235","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"GlobSettings","sha256":"7c22c759ca704106556bbc4fc10b7f53404ca1f8b40f01038d3f7c4b8183f486","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"SharedDataEvents-journal","sha256":"c19683762b3c95da68d168deb576e71237a61db175c937aa50c95b077cc0891b","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl","sha256":"d1bb4b163fe01acc368a92b385bb0bd3a9fc2340b6d485b77a20553a713166d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"TMDocs.sav","sha256":"dee5a5925227b125f4ac6d9b70a277e6ec8494ffc73d1cce9e08cc7a78d6208a","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"TMGrpPrm.sav","sha256":"e6f02498b467034dd8ed166fb75fcf43db89f1e10ba9e074b3fb833537a0b783","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl","sha256":"9009ab7605c35a2b5121b8b5c966b3c893edba9966925268c45ad05b348671c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"urlref_httpsmongfilm.comenmovie337401mulan","sha256":"c05f53038c325d305174344eb5de7dee687f8f775bd03dc30a6a37230dc41378","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]}],"files_written":[{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\File System\\primary.origin","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\UserCache.bin","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"C:\\full-hd-mulan-2020-full-online-for-free.pdf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000027.db","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"C:\\Program Files","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeComFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeCMapFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\css\\home-selector.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\home-view\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\SEGOEUISL.TTF","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"pipe\\com.adobe.reader.rna.Rc1hsia.DC.0","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\SharedDataEvents","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages-journal","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%TEMP%\\A9R1qvbem_1e2ryqr_2ys.tmp","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%TEMP%\\A9R1c43cft_1e2ryqs_2ys.tmp","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%TEMP%\\A9R1d846s4_1e2ryqt_2ys.tmp","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%TEMP%\\A9R13z6pmg_1e2ryqu_2ys.tmp","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%TEMP%\\A9R1r5k7uu_1e2ryqv_2ys.tmp","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\KBDUS.DLL","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\drivers\\etc\\hosts","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\cep-plugins\\PIPViewer\\index.html","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\crash_reporter.cfg","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Res.dll","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\arialn.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\arialnb.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\arialnbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\arialni.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeSysFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\ARIALN.TTF","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\ARIALNI.TTF","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\ARIALNB.TTF","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\ARIALNBI.TTF","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\Fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\segoeuisl.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"path":"%WINDIR%\\fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"key":"HKLM\\SYSTEM\\ACROBATVIEWERCPP473\\","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]}]},"mutex_activity":{"mutex_created":[{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5f813d466b356370fc1a3421"}]}]}},"report_ids":{"sandbox_job_ids":["5f813d466b356370fc1a3421"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 7a208347e2a0… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 7a208347e2a0…. Malware family: Unavailable. Threat score 0/100. 2/28 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88"}],["$","meta","4",{"property":"og:title","content":"Sample 7a208347e2a0… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 7a208347e2a0…. Malware family: Unavailable. Threat score 0/100. 2/28 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/7a208347e2a0b11c4cb99fc4d3c804d9875b67871bf5ae786492e1c992428e88"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 7a208347e2a0… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 7a208347e2a0…. Malware family: Unavailable. Threat score 0/100. 2/28 AV engines flagged this file. 0 malicious and 3 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2e","11",{}]]