Trump is right: the rotten World Health Organisation should be reformed or abolished

26:I[7638,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js","/_next/static/chunks/2wvg5zqmbil4p.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/3l_wb6il5gi_h.js","/_next/static/chunks/136wug8odqdqr.js"],"SampleDetailWrapper"] 2f:I[27201,["/_next/static/chunks/1nkjstpmp978x.js","/_next/static/chunks/0g8d-v19n010u.js","/_next/static/chunks/2xonh_kqmr__3.js","/_next/static/chunks/3spet-0yezls2.js"],"IconMark"] 25:T421,{"@context":"https://schema.org","@type":"TechArticle","headline":"Suspicious Sample cc9e001a24a6… — Score 42/100 — Hybrid Analysis","description":"Suspicious verdict for sample cc9e001a24a6…. Threat score 42/100. 0/27 AV engines flagged this file. 0 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.","url":"/sample/cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819","keywords":["Suspicious","malware analysis","sandbox report","threat intelligence","cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819"],"about":{"@type":"SoftwareApplication","name":"Report_3_WHO are they.pdf","applicationCategory":["pdf"],"identifier":"cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819","additionalType":"Suspicious sample"},"threatScore":42,"antivirusDetections":{"malicious":0,"total":27},"behavioralIndicators":{"malicious":0,"suspicious":6},"publisher":{"@type":"Organization","name":"Hybrid Analysis","url":"https://www.hybrid-analysis.com"}}27:T6a0,Object ID 62 contains compressed stream data: No filters Object ID 66 contains compressed stream data: No filters Object ID 70 contains compressed stream data: No filters Object ID 74 contains compressed stream data: No filters Object ID 78 contains compressed stream data: No filters Object ID 82 contains compressed stream data: No filters Object ID 86 contains compressed stream data: No filters Object ID 90 contains compressed stream data: No filters Object ID 128 contains compressed stream data: /CIDInit /ProcSet findresource begin 12 dict begin begincmap /CIDSystemInfo << /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName /Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <0000> <FFFF> endcodespace ... Object ID 131 contains compressed stream data: /CIDInit /ProcSet findresource begin 12 dict begin begincmap /CIDSystemInfo << /Registry (Adobe) /Ordering (UCS) /Supplement 0 >> def /CMapName /Adobe-Identity-UCS def /CMapType 2 def 1 begincodespacerange <0000> <FFFF> endcodespace ... Object ID 143 contains compressed stream data: \x00\x01\x00\x00\x00\x08\x00\x80\x00\x03\x00\x00OS/2G\x8bY\x00\x00\x00\x8c\x00\x00\x00Vglyf\xde{{\xce\x00\x00\x00\xe4\x00\x00=\x90headfhIJ\x00\x00>t\x00\x00\x006hhea\x0e\xe3\x08 \x00\x00>\xac\x00\x00\x00$hmtx\x8fC\x19(\x00\x00>\xd0\x00\x00\x01hlo ... Object ID 145 contains compressed stream data: \x00\x01\x00\x00\x00\x08\x00\x80\x00\x03\x00\x00OS/2GM\x8e\xe4\x00\x00\x00\x8c\x00\x00\x00Vglyf\xbb\xc3\xf9\xc9\x00\x00\x00\xe4\x00\x00\x1fTheadg\xfcIJ\x00\x00 8\x00\x00\x006hhea\x10\x81D\x00\x00 p\x00\x00\x00$hmtx\xd7\xdd\x06\xb7\x00\x00 \x94\x00\x00\x00 ...28:Te17,"https://www.thenewamerican.com/usnews/item/35890-alex-newman-deep-state-using-un-who-for-nwo" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "http://doi.org/10.13188/2378-1343.1000004" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.telegraph.co.uk/news/2020/04/08/trump-right-rotten-world-health-organisation-should-reformed/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://texasscorecard.com/commentary/commentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.change.org/p/united-nations-call-for-the-resignation-of-tedros-adhanom-ghebreyesus-who-director-general" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.lifesitenews.com/news/asymptomatic-spread-of-covid-19-very-rare-world-health-org-admits" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://childrenshealthdefense.org/news/the-bill-gates-effect-whos-dtp-vaccine-kills-more-children-in-africa-than-the-diseases-it-targets/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://kprcradio.iheart.com/featured/the-pursuit-of-happiness/content/2020-04-06-who-director-was-top-member-of-violent-ethiopian-communist-party/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://yellowhammernews.com/sessions-u-s-should-stop-funding-corrupt-world-health-organization/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.youtube.com/watch?v=AwFTZawOc9k" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://duckduckgo.com/?q=Tedros+Adhanom+Ghebreyesus+Tigray+People%25E2%2580%2599s+Liberation+Front&ia=web" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://stanfordreview.org/stanford-world-health-organization-corruption-trump/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.nationalreview.com/2020/04/coronavirus-pandemic-world-health-organization-failed/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.foxnews.com/media/sen-tom-cotton-world-health-organization-coronavirus-china" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.youtube.com/watch?v=1lwq9zi_iEc" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://frankreport.com/2020/04/14/the-ethiopian-terrorist-in-charge-of-the-world-health-organization-dr-tedros-adhanom/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://foreignpolicy.com/2020/04/02/china-coronavirus-who-health-soft-power/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.newsweek.com/world-health-organization-not-salvageable-opinion-1504084" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://www.lifesitenews.com/news/global-covid-19-crisis-worsening-world-health-organization-says" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin") "https://greatgameindia.com/who-offered-20m-bribe-to-poison-covid-19-cure-madagascar-president/" (Based on: "cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819.bin")29:T460,"A9R6m3tsn_r6l3gq_1e0.tmp" has type "data" "A9R9hkva7_r6l3gr_1e0.tmp" has type "data" "data_1" has type "data" "Visited Links" has type "data" "0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl" has type "data" "A9Rxnox39_r6l3gu_1e0.tmp" has type "Zip data (MIME type "application/vnd.adobe.air-ucf-package+zip"?)" "CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl" has type "data" "urlref_httpswww.telegraph.co.uknews20200408trump-right-rotten-world-health-organisation-should-reformed" has type "HTML document UTF-8 Unicode text with very long lines" "urlref_httpstexasscorecard.comcommentarycommentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization" has type "HTML document UTF-8 Unicode text with very long lines with CRLF LF line terminators" "urlref_httpswww.change.orgpunited-nations-call-for-the-resignation-of-tedros-adhanom-ghebreyesus-who-director-general" has type "HTML document UTF-8 Unicode text with very long lines" "urlref_httpswww.lifesitenews.comnewsasymptomatic-spread-of-covid-19-very-rare-world-health-org-admits" has type "HTML document UTF-8 Unicode text with very long lines"2a:T74e4,Pattern match: "https://www.thenewamerican.com/usnews/item/35890-alex-newman-deep-state-using-un-who-for-nwo" Pattern match: "http://doi.org/10.13188/2378-1343.1000004" Pattern match: "https://www.telegraph.co.uk/news/2020/04/08/trump-right-rotten-world-health-organisation-should-reformed/" Pattern match: "https://texasscorecard.com/commentary/commentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization/" Pattern match: "https://www.change.org/p/united-nations-call-for-the-resignation-of-tedros-adhanom-ghebreyesus-who-director-general" Pattern match: "https://www.lifesitenews.com/news/asymptomatic-spread-of-covid-19-very-rare-world-health-org-admits" Pattern match: "https://childrenshealthdefense.org/news/the-bill-gates-effect-whos-dtp-vaccine-kills-more-children-in-africa-than-the-diseases-it-targets/" Pattern match: "https://kprcradio.iheart.com/featured/the-pursuit-of-happiness/content/2020-04-06-who-director-was-top-member-of-violent-ethiopian-communist-party/" Pattern match: "https://yellowhammernews.com/sessions-u-s-should-stop-funding-corrupt-world-health-organization/" Pattern match: "https://www.youtube.com/watch?v=AwFTZawOc9k" Pattern match: "https://duckduckgo.com/?q=Tedros+Adhanom+Ghebreyesus+Tigray+People%25E2%2580%2599s+Liberation+Front&ia=web" Pattern match: "https://stanfordreview.org/stanford-world-health-organization-corruption-trump/" Pattern match: "https://www.nationalreview.com/2020/04/coronavirus-pandemic-world-health-organization-failed/" Pattern match: "https://www.foxnews.com/media/sen-tom-cotton-world-health-organization-coronavirus-china" Pattern match: "https://www.youtube.com/watch?v=1lwq9zi_iEc" Pattern match: "https://frankreport.com/2020/04/14/the-ethiopian-terrorist-in-charge-of-the-world-health-organization-dr-tedros-adhanom/" Pattern match: "https://foreignpolicy.com/2020/04/02/china-coronavirus-who-health-soft-power/" Pattern match: "https://www.newsweek.com/world-health-organization-not-salvageable-opinion-1504084" Pattern match: "https://www.lifesitenews.com/news/global-covid-19-crisis-worsening-world-health-organization-says" Pattern match: "https://greatgameindia.com/who-offered-20m-bribe-to-poison-covid-19-cure-madagascar-president/" Pattern match: "https://anticorruptiondigest.com/2020/04/07/why-dr-tedros-adhanom-should-not-lead-the-world-health-organization/" Pattern match: "https://greatgameindia.com/tanzania-kicks-out-who-after-goat-papaya-samples-came-covid-19-positive/" Pattern match: "https://www.modernghana.com/news/915838/why-the-world-health-organization-treats-bill-gate.html" Pattern match: "https://www.facebook.com/2008/fbml" Pattern match: "www.google-analytics.com/" Pattern match: "www.googletagservices.com/" Pattern match: "https://www.telegraph.co.uk/news/2020/04/08/trump-right-rotten-world-health-organisation-should-reformed/amp//" Pattern match: "https://cdn.polyfill.io/v3/polyfill.min.js?flags=gated&features=default,fetch,IntersectionObserver,NodeList.prototype.forEach,Array.prototype.@@iterator&Array.prototype.includes&callback=tmg.polyfill.complete" Pattern match: "https://static.telegraph.co.uk/telegraph-advertising/tmg-cmp.min.js" Pattern match: "platform.twitter.com/widgets.js" Pattern match: "https://sb.scorecardresearch.com/c2/plugins/streamingtag_plugin_ooyalav4.js" Pattern match: "connect.facebook.net/en_GB/sdk.js" Pattern match: "maps.googleapis.com/maps/api/js?v=3&client=gme-telegraphmediagroup1" Pattern match: "https://www.telegraph.co.uk/news/2020/04/08/trump-right-rotten-world-health-organisation-should-reformed//" Pattern match: "https://www.telegraph.co.uk/content/dam/news/2017/10/23/TELEMMGLPICT000144351409_trans_NvBQzQNjv4BqpVlberWd9EgFPZtcLiMQfy2dmClwgbjjulYfPTELibA.jpeg?impolicy=logo-overlay/" Pattern match: "assets.adobedtm.com/71dcbb11123ce6b2e1ce4d47fd79a130aad3fc95/satelliteLib-177113f60f763788009998023cd15615fe2168a2.js" Pattern match: "https://static.telegraph.co.uk/telegraph-advertising/tmg-gpt.min.js" Pattern match: "www.youtube.com/iframe_api" Pattern match: "https://www.telegraph.co.uk/martech/js/core.min.js" Pattern match: "https://www.telegraph.co.uk/" Pattern match: "http://m.onelink.me/710a462e" Pattern match: "https://www.telegraph.co.uk/vouchercodes" Pattern match: "https://www.telegraph.co.uk/coupons" Pattern match: "http://jobs.telegraph.co.uk/" Pattern match: "https://dating.telegraph.co.uk/s/" Pattern match: "https://www.telegraph.co.uk/promotions/" Pattern match: "https://shop.telegraph.co.uk/" Pattern match: "https://gardenshop.telegraph.co.uk/" Pattern match: "https://books.telegraph.co.uk/" Pattern match: "https://tickets.telegraph.co.uk/" Pattern match: "https://puzzles.telegraph.co.uk/" Pattern match: "https://fantasyfootball.telegraph.co.uk/" Pattern match: "https://fantasyrugby.telegraph.co.uk" Pattern match: "https://corporate.telegraph.co.uk/" Pattern match: "http://www.w3.org/2000/svg" Pattern match: "https://www.telegraph.co.uk/search.html" Pattern match: "https://premium.telegraph.co.uk/" Pattern match: "https://www.telegraph.co.uk/bigdatacall/" Pattern match: "https://schema.org,@type:BreadcrumbList,itemListElement:[{@type:ListItem,position:1,item:{@id:https://www.telegraph.co.uk/,name:Telegraph}},{@type:ListItem,position:2,item:{@id:https://www.telegraph.co.uk/news/,name:Ne" Pattern match: "https://schema.org/Article" Pattern match: "https://schema.org/Person" Pattern match: "https://schema.org/Organization" Pattern match: "https://schema.org/ImageObject" Pattern match: "https://www.telegraph.co.uk/content/dam/TheTelegraph_portal_black-320-small.png/" Pattern match: "https://www.telegraph.co.uk/news/2020/04/08/trump-right-rotten-world-health-organisation-should-reformed/" Pattern match: "https://www.telegraph.co.uk/content/dam/news/2017/10/23/TELEMMGLPICT000144351409-xlarge_trans_NvBQzQNjv4BqpVlberWd9EgFPZtcLiMQfy2dmClwgbjjulYfPTELibA.jpeg/" Pattern match: "https://www.telegraph.co.uk/news/2017/10/21/robert-mugabe-made-goodwill-ambassador-world-health-organisation/" Pattern match: "https://twitter.com/WHO/status/1217043229427761152" Pattern match: "https://www.who.int/dg/speeches/detail/who-director-general-s-opening-remarks-at-the-technical-briefing-on-2019-novel-coronavirus" Pattern match: "https://www.who.int/dg/speeches/detail/who-director-general-s-opening-remarks-at-the-media-briefing-on-covid-19---27-february-2020" Pattern match: "https://dailycaller.com/2016/11/07/reporters-banned-from-global-anti-tobacco-conference/" Pattern match: "https://life.spectator.co.uk/articles/the-who-is-becoming-a-glorified-lobbying-group/" Pattern match: "https://www.telegraph.co.uk/news/2020/04/08/donald-trump-threatens-cut-funding-world-health-organisation/" Pattern match: "https://www.facebook.com/telegraph.co.uk" Pattern match: "https://twitter.com/@Telegraph" Pattern match: "https://www.instagram.com/telegraph" Pattern match: "https://www.linkedin.com/company/9053" Pattern match: "https://www.telegraph.co.uk/subscriptions/sub-bar/?WT.mc_id=menuSubscribe" Pattern match: "https://secure.telegraph.co.uk/secure/login/?redirectTo=" Pattern match: "https://schema.org/WPSideBar" Pattern match: "https://widgethost.barnebys.com/widgets/27/" Pattern match: "https://www.dunhilltraveldeals.com/iframes/telegraph/responsive.php?page=Travel_US" Pattern match: "https://i.ytimg.com/vi/pelpTADfElo/mqdefault.jpg/" Pattern match: "https://i.ytimg.com/vi/MCEM7bIWyFY/mqdefault.jpg/" Pattern match: "https://www.facebook.com/TELEGRAPH.CO.UK/" Pattern match: "https://www.instagram.com/telegraph/" Pattern match: "https://www.snapchat.com/discover/The_Telegraph/8148798159" Pattern match: "https://www.linkedin.com/company/9053/" Pattern match: "https://www.youtube.com/channel/UCPgLNge0xqQHWM5B5EFH9Cg" Pattern match: "https://www.telegraph.co.uk/archive/" Pattern match: "https://telegraph.newsprints.co.uk/" Pattern match: "d3c3cq33003psk.cloudfront.net/opentag-35657-1096944.js" Pattern match: "https://www.telegraph.co.uk/go/adblocking/" Pattern match: "https://assets.change.org/photos/3/du/dq/TwDudQICePmiXzC-1600x900-noPad.jpg?1580436159" Pattern match: "https://cdn.optimizely.com/js/11391265293.js" Pattern match: "assets-fe.change.org/fe/css/rendr-xlAQzDvJM_K3jpDV0qJITERnqSdSsqp59Kbg01qSQhg.css" Pattern match: "https://assets-fe.change.org/fe/12cdb2e55cd2c60e8d0ecbd35d1b6b74/changeAssets-eb17497ea17e83522b89.js" Pattern match: "https://static.change.org/favicons/favicon-48x48.png" Pattern match: "https://static.change.org/favicons/favicon-57x57.png" Pattern match: "https://static.change.org/favicons/favicon-72x72.png" Pattern match: "https://static.change.org/favicons/favicon-114x114.png" Pattern match: "https://github.com/change/fe/commit/8bb52b5c964b42b760e427f97a54f82c52e15d86" Pattern match: "https://www.google-analytics.com/analytics.js" Pattern match: "https://www.googletagmanager.com/ns.html?id=GTM-NMT3DV" Pattern match: "https://s3.amazonaws.com/change-assets/iconography/Icon_google.png"></div><span>Log" Pattern match: "https://www.worldometers.info/coronavirus/" Pattern match: "http://chng.it/Sdbq8sQ7" Pattern match: "assets.change.org/photos/3/du/dq/TwDudQICePmiXzC-400x225-noPad.jpg?1580436159" Pattern match: "https://www.change.org/l/us" Pattern match: "http://ogp.me/ns#" Pattern match: "https://www.googletagmanager.com/gtag/js?id=UA-698266-2" Pattern match: "https://assets.lifesitenews.com/assets/fonts/lato-v16-latin-regular.woff2" Pattern match: "https://assets.lifesitenews.com/assets/fonts/fontawesome-webfont.woff2" Pattern match: "https://assets.lifesitenews.com/assets/fonts/lato-v16-latin-700.woff2" Pattern match: "https://assets.lifesitenews.com/assets/fonts/lato-v16-latin-900.woff2" Pattern match: "https://assets.lifesitenews.com/assets/fonts/lato-v16-latin-italic.woff2" Pattern match: "https://assets.lifesitenews.com/assets/fonts/lato-v16-latin-700italic.woff2" Pattern match: "https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js" Pattern match: "https://assets.lifesitenews.com" Pattern match: "https://connect.facebook.net" Pattern match: "https://pagead2.googlesyndication.com" Pattern match: "https://assets.lifesitenews.com/images/made/images/remote/https_www.lifesitenews.com/images/shutterstock/girl_mask_home_1024_512_75_s_c1.jpg" Pattern match: "https://www.lifesitenews.com/mobile/news/asymptomatic-spread-of-covid-19-very-rare-world-health-org-admits" Pattern match: "https://assets.lifesitenews.com/assets/js/jquery.min.js" Pattern match: "https://assets.lifesitenews.com/assets/js/jquery-bundle-15d81e900c.js" Pattern match: "https://assets.lifesitenews.com/assets/css/lifesitenews-916094485e.css" Pattern match: "https://cdn.onesignal.com/sdks/OneSignalSDK.js" Pattern match: "http://schema.org" Pattern match: "https://assets.lifesitenews.com/assets/images/ui/lsn-logo-amp.png" Pattern match: "https://connect.facebook.net/en_US/sdk.js" Pattern match: "https://assets.lifesitenews.com/assets/images/ui/lsn-logo-cropped.png" Pattern match: "https://give.lifesitenews.com?utm_source=website_mainnav" Pattern match: "https://give.lifesitenews.com/sustainlife?utm_source=SL_website_mainnav" Pattern match: "https://assets.lifesitenews.com/assets/images/ui/sustain-life-26h.png" Pattern match: "https://assets.lifesitenews.com/assets/images/ui/frontline-logo-26h.png" Pattern match: "https://www.facebook.com/LifeSiteNews" Pattern match: "https://twitter.com/LifeSite" Pattern match: "https://www.instagram.com/lifesite" Pattern match: "https://www.youtube.com/user/sjalsevac" Pattern match: "https://assets.lifesitenews.com/assets/images/b.png" Pattern match: "https://assets.lifesitenews.com/images/made/images/remote/https_www.lifesitenews.com/images/shutterstock/girl_mask_home_480_296_75_c1.jpg" Pattern match: "https://assets.lifesitenews.com/images/made/images/remote/https_www.lifesitenews.com/images/shutterstock/girl_mask_home_810_500_75_s_c1.jpg" Pattern match: "https://twitter.com/CalFreiburger" Pattern match: "http://www.printfriendly.com/print/?url=https://www.lifesitenews.com/news/asymptomatic-spread-of-covid-19-very-rare-world-health-org-admits" Pattern match: "https://lifepetitions.com/petition/urge-president-trump-to-defund-the-world-health-organization-over-alleged-coronavirus-cover-up" Pattern match: "https://www.lifesitenews.com/" Pattern match: "https://www.cnbc.com/2020/06/08/asymptomatic-coronavirus-patients-arent-spreading-new-infections-who-says.html" Pattern match: "https://dailycaller.com/2020/06/09/world-health-organization-statement-asymptomatic-coronavirus-transmission/" Pattern match: "https://twitter.com/YossiGestetner/status/1270454844655046662?ref_src=twsrc%5Etfw" Pattern match: "https://twitter.com/WHO?ref_src=twsrc%5Etfw" Pattern match: "https://twitter.com/AlexBerenson/status/1270361062530048002?ref_src=twsrc%5Etfw" Pattern match: "https://www.nbcnews.com/business/economy/unemployment-claims-state-see-how-covid-19-has-destroyed-job-n1183686" Pattern match: "https://www.lifesitenews.com/tags/tag/live+coronavirus+updates" Pattern match: "https://give.lifesitenews.com/?utm_source=website_bottomnav" Pattern match: "https://lifepetitions.com" Pattern match: "https://www.facebook.com/tr?id=628890727511643&ev=PageView&noscript=1/" Pattern match: "https://assets.lifesitenews.com/assets/js/main-b33186a0ed.js" Pattern match: "https://texasscorecard.com/xmlrpc.php" Pattern match: "https://yoast.com/wordpress/plugins/seo/" Pattern match: "http://www.facebook.com/empowertexans" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2020/04/1920px-Flag_of_WHO.svg.png" Pattern match: "https://schema.org,@graph:[{@type:Organization,@id:https://texasscorecard.com/#organization,name:Texas" Pattern match: "https://texasscorecard.com/feed/" Pattern match: "https://texasscorecard.com/comments/feed/" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/etsubscribers/css/etsubscribers.css?ver=1.1.0" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/yet-another-related-posts-plugin/style/widget.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-includes/css/dist/block-library/style.min.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/seriously-simple-podcasting/assets/css/block_style.css?ver=fa8359129b99466ccba685a1ffe3da90" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/seriously-simple-podcasting/assets/css/icon_fonts.css?ver=fa8359129b99466ccba685a1ffe3da90" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/seriously-simple-podcasting/assets/fonts/Gizmo/gizmo.css?ver=fa8359129b99466ccba685a1ffe3da90" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.1.9" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/divi-stop-stacking/css/divi-stop-stacking.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/mhmm/css/mhmm-menus.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/mhmm/css/mhmm-menu-layout.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/mhmm/css/mhmm.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/print-o-matic/css/style.css?ver=1.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/seriously-simple-podcasting/assets/css/player.css?ver=2.2.0" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/stock-ticker/assets/css/stock-ticker.css?ver=3.1" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/stock-ticker-custom.css?ver=3.1" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/wp-smartcrop/css/image-renderer.css?ver=2.0.5" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/wp-pagenavi/pagenavi-css.css?ver=2.70" Pattern match: "https://s29017.pcdn.co/wp-content/themes/divi-child/style.css?ver=1547735913" Pattern match: "https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/tablepress/css/default.min.css?ver=1.11" Pattern match: "cdn.jsdelivr.net/fontawesome/4.7.0/css/font-awesome.min.css?ver=4.7.0" Pattern match: "https://s29017.pcdn.co/wp-includes/css/dashicons.min.css?ver=5.4.2" Pattern match: "https://maps.googleapis.com/maps/api/js?key=AIzaSyCriFvKsfWf8l_9gBqqeOpIToLtE8HuOi0&ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp" Pattern match: "https://s29017.pcdn.co/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/etsubscribers/js/etsubscribers.js?ver=1.0.7" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/etsubscribers/js/jquery.maskedinput.js?ver=1.0.7" Pattern match: "www.TexasScorecard.tv\/\" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/mhmm/js/mhmm.min.js?ver=2.1.19" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/mhmm/js/mhmm-menu-layout.min.js?ver=2.1.19" Pattern match: "https://platform.twitter.com/widgets.js?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/themes/Divi/core/admin/js/recaptcha.js?ver=5.4.2" Pattern match: "https://api.w.org/" Pattern match: "https://texasscorecard.com/xmlrpc.php?rsd" Pattern match: "https://s29017.pcdn.co/wp-includes/wlwmanifest.xml" Pattern match: "https://texasscorecard.com/?p=61292" Pattern match: "https://texasscorecard.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ftexasscorecard.com%2Fcommentary%2Fcommentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization%2F" Pattern match: "https://texasscorecard.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ftexasscorecard.com%2Fcommentary%2Fcommentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization%2F&format=xml" Pattern match: "https://texasscorecard.com/feed/podcast" Pattern match: "https://connect.facebook.net/en_US/fbevents.js" Pattern match: "https://www.facebook.com/tr?id=153396198711343&ev=PageView&noscript=1" Pattern match: "https://www.googletagmanager.com/gtag/js?id=UA-130230895-1" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2018/10/TS_Favicon@300x-60x60.png" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2018/10/TS_Favicon@300x.png" Pattern match: "https://use.typekit.net/gin4kuv.css" Pattern match: "https://texasscorecard.com/" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2018/10/TSWebsiteMasthead.svg" Pattern match: "https://texasscorecard.com/category/local/" Pattern match: "https://texasscorecard.com/category/state/" Pattern match: "https://texasscorecard.com/category/federal/" Pattern match: "https://texasscorecard.com/category/life/" Pattern match: "https://texasscorecard.com/category/commentary/" Pattern match: "https://texasscorecard.com/category/blog/" Pattern match: "https://texasscorecard.com/category/radio/" Pattern match: "http://www.TexasScorecard.tv/" Pattern match: "https://www.facebook.com/sharer.php?u=https%3A%2F%2Ftexasscorecard.com%2Fcommentary%2Fcommentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization%2F" Pattern match: "https://texasscorecard.com/author/rachel-bovard/" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826378-www.washingtonpost.com/world/2020/02/01/early-missteps-state-secrecy-china-likely-allowed-coronavirus-spread-farther-faster/?c=557b52e2-b610-476a-bf" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826390-www.ft.com/content/2a70a02a-644a-11ea-a6cd-df28cc3c6a68?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826394-www.thetimes.co.uk/article/chinese-scientists-destroyed-proof-of-virus-in-december-rz055qjnj?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826398-apnews.com/68a9e1b91de4ffc166acd6012d82c2f9?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826402-www.thelancet.com/journals/lancet/article/piis0140-6736-20-30154-9/fulltext?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826406-www.who.int/csr/don/12-january-2020-novel-coronavirus-china/en/?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826382-www.wsj.com/articles/how-it-all-started-chinas-early-coronavirus-missteps-11583508932?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826422-www.theguardian.com/world/2020/jan/20/coronavirus-spreads-to-beijing-as-china-confirms-new-cases?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826426-www.who.int/china/news/detail/22-01-2020-field-visit-wuhan-china-jan-2020?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826430-www.nytimes.com/2020/01/23/health/china-virus-who-emergency.html?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826446-www.nytimes.com/2020/01/21/health/cdc-coronavirus.html?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826462-www.who.int/news-room/detail/28-01-2020-who-china-leaders-discuss-next-steps-in-battle-against-coronavirus-outbreak?c=557b52e2-b610-476a-bf2b-1b335e" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826466-www.medscape.com/viewarticle/924596?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826470-www.technologyreview.com/2020/01/30/275959/the-china-coronavirus-is-officially-an-international-emergency/?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826474-www.southampton.ac.uk/news/2020/03/covid-19-china.page?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826478-www.theverge.com/2020/3/11/21156325/coronavirus-pandemic-who-declares-covid-19-outbreak-global-h1n1?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826482-www.reuters.com/article/us-health-ebola-response/global-health-experts-accuse-who-of-egregious-failure-on-ebola-iduskbn0tb10k20151122?c=557b52e2-b61" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826486-oig.hhs.gov/oas/reports/region4/41603567.pdf?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826490-www.nytimes.com/2017/05/13/health/candidate-who-director-general-ethiopia-cholera-outbreaks.html?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826494-www.scribd.com/document/358818042/physicians-open-letter-to-who?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826502-www.nytimes.com/2017/10/21/world/africa/robert-mugabe-goodwill-ambassador-who.html?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826518-apnews.com/1cf4791dc5c14b9299e0f532c75f63b2/ap-exclusive--health-agency-spends-more-on-travel-than-aids?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "http://mail01.tinyletterapp.com/Rachel_Bovard/a-pattern-of-deceit-at-the-world-health-organization/16826526-twitter.com/jakesherman/status/1250448715082534913?c=557b52e2-b610-476a-bf2b-1b335ecea9d6" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2018/12/2B2DECF2-3B94-44E8-84EF-E26E1D93895E-150x150.jpeg" Pattern match: "https://texasscorecard.com/state/abbott-caves-says-local-governments-can-require-businesses-to-require-masks/" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2019/06/819C3433-7BDF-4B19-8C2D-47C0C8C9A969.jpeg" Pattern match: "https://texasscorecard.com/federal/president-trump-halts-who-funding-launches-investigation/" Pattern match: "https://texasscorecard.com/author/ccheshire/" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2020/04/markus-spiske-FXFz-sW0uwo-unsplash-scaled.jpg" Pattern match: "https://texasscorecard.com/commentary/commentary-big-techs-toadying-to-chinese-communists-demands-action/" Pattern match: "https://s29017.pcdn.co/wp-content/uploads/2020/02/US-Map-American-flag.png" Pattern match: "https://texasscorecard.com/commentary/commentary-coronavirus-unmasks-america/" Pattern match: "https://subscribe.empowertexans.com" Pattern match: "empowertexans.com/contact/" Pattern match: "https://www.facebook.com/empowertexans" Pattern match: "https://twitter.com/EmpowerTexans" Pattern match: "https://www.instagram.com/empower_texans/" Pattern match: "https://www.linkedin.com/company/empower-texans-texans-for-fiscal-responsibility/" Pattern match: "https://subscribe.empowertexans.com/" Pattern match: "https://index.empowertexans.com/mylegislators" Pattern match: "https://index.empowertexans.com/" Pattern match: "https://empowertexans.com/request-a-speaker/" Pattern match: "https://empowertexans.com/join-the-fight/" Pattern match: "https://empowertexans.com/events/" Pattern match: "https://polymath.io" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/full-screen-search/assets/css/full-screen-search.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/css/fa-ssbs.css" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/css/base.css" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/css/tooltipster.css" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/css/buttons/brand-icons.css" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/css/tooltipster-shadow.css" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/yet-another-related-posts-plugin/style/related.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/themes/divi-child/css/override-socialshare.css?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/themes/divi-child/css/override-printomatic.css?ver=5.4.2" Pattern match: "https://code.jquery.com/ui/1.12.0/jquery-ui.min.js?ver=1.12.0" Pattern match: "cdnjs.cloudflare.com/ajax/libs/wavesurfer.js/1.4.0/wavesurfer.js?ver=fa8359129b99466ccba685a1ffe3da90" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.1.9" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/divi-stop-stacking/js/divi-stop-stacking.min.js?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/stock-ticker/assets/js/jquery.webticker.min.js?ver=2.2.0.1" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/stock-ticker/assets/js/jquery.stockticker.min.js?ver=3.1" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/top-10/includes/js/top-10-tracker.min.js?ver=1.0" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/wp-smartcrop/js/jquery.wp-smartcrop.min.js?ver=2.0.5" Pattern match: "https://s29017.pcdn.co/wp-content/themes/divi-child/js/custom_scripts.js?ver=1547735712" Pattern match: "https://s29017.pcdn.co/wp-content/themes/Divi/js/custom.min.js?ver=4.0.11" Pattern match: "https://s29017.pcdn.co/wp-content/themes/Divi/core/admin/js/common.js?ver=4.0.11" Pattern match: "https://s29017.pcdn.co/wp-includes/js/wp-embed.min.js?ver=5.4.2" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/full-screen-search/assets/js/full-screen-search.js?ver=1.0.0" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/js/frontend.js" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/js/jquery.tooltipster.min.js" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Projects/assets/js/jquery.bpopup.min.js" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/social-share-buttons-by-supsystic/src/SocialSharing/Shares/assets/js/share.js?ver=2.1.14" Pattern match: "https://s29017.pcdn.co/wp-content/plugins/print-o-matic/printomat.js?ver=1.8.9"2b:T1495,"https://www.youtube.com/watch?v=AwFTZawOc9k" (Indicator: "youtube") "https://www.youtube.com/watch?v=1lwq9zi_iEc" (Indicator: "youtube") "7) /CreationDate (D:20200623224909+02'00') >> endobj 3 0 obj << /Type /ExtGState /SA true /SM 0.02 /ca 1.0 /CA 1.0 /AIS false /SMask /None>> endobj 4 0 obj [/Pattern /DeviceRGB] endobj 8 0 obj [0 /XYZ 101.250000 791 0] endobj 9 0 obj [0 /XYZ 101.250000 569 0] endobj 10 0 obj [0 /XYZ 101.250000 510.500000 0] endobj 11 0 obj [0 /XYZ 101.250000 181.250000 0] endobj 12 0 obj << /Type /Annot /Subtype /Link /Rect [169.500000 647.750000 474.750000 668 ] /Border [0 0 0] /A << /Type /Action /S /URI /URI (https://texasscorecard.com/commentary/commentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization/) >> >> endobj 13 0 obj << /Type /Annot /Subtype /Link /Rect [181.500000 266 376.500000 275.750000 ] /Border [0 0 0] /A << /Type /Action /S /URI /URI (https://www.youtube.com/watch?v=AwFTZawOc9k) >> >> endobj 14 0 obj << /Type /Annot /Subtype /Link /Rect [169.500000 71.7500000 477 92 ] /Border [0 0 0] /A << /Type /Action /S /URI /URI (https://www.thenewamerican.com/usnews/item/35890-al" (Indicator: "youtube") "endstream endobj 97 0 obj 5370 endobj 101 0 obj [7 /XYZ 101.250000 398 0] endobj 102 0 obj [7 /XYZ 101.250000 665.750000 0] endobj 103 0 obj [7 /XYZ 101.250000 339.500000 0] endobj 104 0 obj [7 /XYZ 101.250000 607.250000 0] endobj 105 0 obj << /Type /Annot /Subtype /Link /Rect [171 744.500000 483 764.750000 ] /Border [0 0 0] /A << /Type /Action /S /URI /URI (https://www.modernghana.com/news/915838/why-the-world-health-organization-treats-bill-gate.html) >> >> endobj 106 0 obj << /Type /Annot /Subtype /Link /Rect [171 476.750000 474.750000 497 ] /Border [0 0 0] /A << /Type /Action /S /URI /URI (https://www.lifesitenews.com/news/asymptomatic-spread-of-covid-19-very-rare-world-health-org-admits) >> >> endobj 107 0 obj << /Type /Annot /Subtype /Link /Rect [181.500000 118.250000 364.500000 128 ] /Border [0 0 0] /A << /Type /Action /S /URI /URI (https://www.youtube.com/watch?v=1lwq9zi_iEc) >> >> endobj 108 0 obj << /__WKANCHOR_1a 63 0 R /__WKANCHOR_1c 64 0 R /__WKANCHOR_1e 65 0 R /__WKANCHOR_1" (Indicator: "youtube") "" (Indicator: "facebook.com") "window.clientlibs.js.twitter_js = {" (Indicator: "twitter") "test: "document.querySelectorAll && document.querySelectorAll('.twitter-follow-button, .twitter-tweet, .twitter-timeline').length === 0"," (Indicator: "twitter") "load: ["//platform.twitter.com/widgets.js"]" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "twitter") "" (Indicator: "youtube") "RUM.mark( 'js_load_youtubeiframe' );" (Indicator: "youtube") "

" (Indicator: "twitter") "

The WHO has been criticised for mishandling epidemics before, but its response to Covid-19 has been dangerously inept and often bizarre. In mid-January, approximately six weeks after the virus had been discovered in Wuhan, the WHO repeated the dishonest claim from the Chinese government that there was no evidence of human-to-human transmission. On 21 January, as countries outside China were reporting their first cases, the WHO retreated to its comfort zone and put out a long Twitter thread about the dangers of vaping, including pseudo-scientific claims about e-cigarette fluid burning peoples skin and secondhand vapour posing a mortal threat to bystanders.

" (Indicator: "twitter")2c:T4d0,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:T59c,--type=renderer --primordial-pipe-token=CB615C134625932034FCFA29DD0312A4 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=CB615C134625932034FCFA29DD0312A4 --renderer-client-id=2 --mojo-platform-channel-handle=1284 --allow-no-sandbox-job /prefetch:12e:T59c,--type=renderer --primordial-pipe-token=3650566B095EB864C89A2AB5138E4FE2 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=3650566B095EB864C89A2AB5138E4FE2 --renderer-client-id=3 --mojo-platform-channel-handle=1420 --allow-no-sandbox-job /prefetch:11d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"$25"}}],["$","$L26",null,{"initialData":{"schema_version":"1.0.15","sha256":"cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"suspicious","threat_score":42,"unified_at_epoch_ms":1790292347154,"unified_at":"2026-09-24T23:25:47.154Z","metadata":{"hashes":{"sha256":"cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819","sha1":"bbbf803ab9aace90e53ef57d14d38c4d371aa39f","md5":"0fe42b4347136e11b6bd37bf224b8850","sha512":"6ec40d84d7a896cae90d10d623645477f5430c8dec879f248d4d5fb62aea001e5c43c323db5bc339747993d3e5990db7a1c82249e1ad272e02197414e25cc1c4","ssdeep":"3072:O1ipP1tnx/osFo0kX6yHjoH5BCbXX0ANYEB3K1dz/ZBbb/EZW7jelrDp07nMDHsv:zSi","ssdeep_chunks":["3072:O1ipP1t","3072:1ipP1tn","3072:ipP1tnx","3072:pP1tnx/","3072:P1tnx/o","3072:1tnx/os","3072:tnx/osF","3072:nx/osFo","3072:x/osFo0","3072:/osFo0k","3072:osFo0kX","3072:sFo0kX6","3072:Fo0kX6y","3072:o0kX6yH","3072:0kX6yHj","3072:kX6yHjo","3072:X6yHjoH","3072:6yHjoH5","3072:yHjoH5B","3072:HjoH5BC","3072:joH5BCb","3072:oH5BCbX","3072:H5BCbXX","3072:5BCbXX0","3072:BCbXX0A","3072:CbXX0AN","3072:bXX0ANY","3072:XX0ANYE","3072:X0ANYEB","3072:0ANYEB3","3072:ANYEB3K","3072:NYEB3K1","3072:YEB3K1d","3072:EB3K1dz","3072:B3K1dz/","3072:3K1dz/Z","3072:K1dz/ZB","3072:1dz/ZBb","3072:dz/ZBbb","3072:z/ZBbb/","3072:/ZBbb/E","3072:ZBbb/EZ","3072:Bbb/EZW","3072:bb/EZW7","3072:b/EZW7j","3072:/EZW7je","3072:EZW7jel","3072:ZW7jelr","3072:W7jelrD","3072:7jelrDp","3072:jelrDp0","3072:elrDp07","3072:lrDp07n","3072:rDp07nM","3072:Dp07nMD","3072:p07nMDH","3072:07nMDHs","3072:7nMDHsv","6144:O1ipP1t","6144:1ipP1tn","6144:ipP1tnx","6144:pP1tnx/","6144:P1tnx/o","6144:1tnx/os","6144:tnx/osF","6144:nx/osFo","6144:x/osFo0","6144:/osFo0k","6144:osFo0kX","6144:sFo0kX6","6144:Fo0kX6y","6144:o0kX6yH","6144:0kX6yHj","6144:kX6yHjo","6144:X6yHjoH","6144:6yHjoH5","6144:yHjoH5B","6144:HjoH5BC","6144:joH5BCb","6144:oH5BCbX","6144:H5BCbXX","6144:5BCbXX0","6144:BCbXX0A","6144:CbXX0AN","6144:bXX0ANY","6144:XX0ANYE","6144:X0ANYEB","6144:0ANYEB3","6144:ANYEB3K","6144:NYEB3K1","6144:YEB3K1d","6144:EB3K1dz","6144:B3K1dz/","6144:3K1dz/Z","6144:K1dz/ZB","6144:1dz/ZBb","6144:dz/ZBbb","6144:z/ZBbb/","6144:/ZBbb/E","6144:ZBbb/EZ","6144:Bbb/EZW","6144:bb/EZW7","6144:b/EZW7j","6144:/EZW7je","6144:EZW7jel","6144:ZW7jelr","6144:W7jelrD","6144:7jelrDp","6144:jelrDp0","6144:elrDp07","6144:lrDp07n","6144:rDp07nM","6144:Dp07nMD","6144:p07nMDH","6144:07nMDHs","6144:7nMDHsv"],"imphash":"Unknown"},"file_info":{"file_name":"Report_3_WHO are they.pdf","file_type":["pdf"],"file_type_id":"pdf","file_size":546955,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1592946097000,"last_seen":1690655784000,"last_multi_scan":1690655784000}},"detections":{"summary":{"verdict":"suspicious","score":42,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":27},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":4},"sandbox_signatures":{"informative_count":13,"suspicious_count":6,"malicious_count":0,"total":19},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Found a string that may be used as part of an injection method"}],"sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"tactic":"Defense Evasion","technique":"DCShadow","attack_id":"T1207","attack_id_wiki":"https://attack.mitre.org/techniques/T1207","identifiers":[{"type":"informative","value":"Contains object with compressed stream data"}],"sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Scanning for window names"}],"sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"suspicious","value":"Found a potential E-Mail address in binary/memory"}],"sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]}],"sandbox_signatures":[{"level":"informative","category":"General","name":"Contains object with compressed stream data","description":"$27","origin":"Static Parser","mitre_attack_id":"T1207","relevance":10,"id":"static-66","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"Local\\Acrobat Instance Mutex\"\n \"DBWinMutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex\"\n \"com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"\n \"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"General","name":"PDF contains no significant text data on the first page(s)","description":"The input has no visible characters on the first 5 page(s)","origin":"Static Parser","relevance":5,"id":"static-70","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"General","name":"PDF file has an embedded URL","description":"$28","origin":"File/Memory","relevance":3,"id":"string-25","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"RdrCEF.exe\" (UID: 00120112-00000304) was launched with modified environment variables: \"Path\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"AcroRd32.exe\" searching for class \"Acrobat Instance Window Class\"\n \"AcroRd32.exe\" searching for class \"JFWUI2\"\n \"AcroRd32.exe\" searching for class \"Shell_TrayWnd\"\n \"AcroRd32.exe\" searching for window \"_AcroAppTimer\"\n \"AcroRd32.exe\" searching for class \"AdobeAcrobatSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for class \"AdobeReaderSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for class \"ACROSEMAPHORE_R18\"","origin":"API Call","mitre_attack_id":"T1010","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"RdrCEF.exe\" with commandline \"--backgroundcolor=16448250\" (UID: 00120112-00000304)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=CB615C134625932034FCFA29 ...\" (UID: 00120315-00003784)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=3650566B095EB864C89A2AB5 ...\" (UID: 00120344-00001328)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"Installation/Persistance","name":"Dropped files","description":"$29","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"Installation/Persistance","name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)","origin":"File/Memory","mitre_attack_id":"T1055","relevance":4,"id":"string-4","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"Installation/Persistance","name":"Touches files in the Windows directory","description":"\"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\KBDUS.DLL\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arial.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALN.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariali.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbd.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNB.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbi.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNBI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariblk.ttf\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$2a","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"$2b","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Possible heap spraying attempt detected","description":"\"RdrCEF.exe\" issued more than 3000 memory allocations","origin":"API Call","relevance":10,"id":"api-88","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"suspicious","category":"General","name":"Found a potential E-Mail address in binary/memory","description":"Pattern match: \"ts_favicon@300x-60x60.png\"\n Pattern match: \"ts_favicon@300x.png\"","origin":"File/Memory","mitre_attack_id":"T1114","relevance":3,"id":"string-63","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"suspicious","category":"Installation/Persistance","name":"Creates new processes","description":"\"AcroRd32.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 788)\n \"RdrCEF.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 1336)\n \"RdrCEF.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 1428)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"suspicious","category":"Installation/Persistance","name":"PDF file has an embedded URL to file","description":"\"http://doi.org/10.13188/2378-1343.1000004\" references a file","origin":"File/Memory","relevance":10,"id":"string-41","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"suspicious","category":"Network Related","name":"Found potential IP address in binary/memory","description":"Heuristic match: \"\"","origin":"File/Memory","relevance":3,"id":"string-14","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"informative","category":"General","name":"Spawns new processes that are not known child processes","description":"Spawned process \"RdrCEF.exe\" with commandline \"--backgroundcolor=16448250\" (UID: 00078172-00002596)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=B6B48B36B417D623A6B662C6 ...\" (UID: 00078379-00002948)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=459FBFC6803D487EF6DE875E ...\" (UID: 00078406-00003264)","origin":"Monitored Target","relevance":3,"id":"target-103","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"level":"suspicious","category":"Ransomware/Banking","name":"Detected text artifact in screenshot that indicate file could be ransomware","description":"\"coronavirus:\" (Source: screen_10.png, Indicator: \"virus\")\n \"china_coronavirus\" (Source: screen_10.png, Indicator: \"virus\")","origin":"File/Memory","relevance":10,"id":"string-12","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]}]},"activity":{"stats":{"process_count":4,"spawned_processes_count":4,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":6,"imported_dlls_count":141,"dropped_files_count":0,"extracted_files_count":13,"files_written_count":233,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":8,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":8,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Multi-Process","Extracted Files"],"sandbox_reports":[{"id":"5ef275f9deb485195f6b3df4","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"suspicious","threat_score":42,"submit_name":"Report_3_WHO are they.pdf","analysis_start_time":"2020-06-23T21:37:01+00:00","indicators_count":{"informative":12,"suspicious":5,"malicious":0},"tags":["Multi-Process","Extracted Files"],"is_in_unified_schema":true},{"id":"5ef26db10e418c24e164256e","environment_id":120,"environment_description":"Windows 7 64 bit","state":"SUCCESS","verdict":"suspicious","threat_score":38,"submit_name":"Report_3_WHO are they.pdf","analysis_start_time":"2020-06-23T21:01:41+00:00","indicators_count":{"informative":15,"suspicious":4,"malicious":0},"tags":["Multi-Process","Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}],"processes":[{"pid":1800,"ppid":0,"name":"AcroRd32.exe","command_line":"\"C:\\Report_3_WHOarethey.pdf\"","sha256":"2e9b9635469ff056f09023f7d671120d0c0f86f30767b06daa545c01242bcbef","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe","uid":"00119626-00001800","icon":"$2c"},{"pid":304,"ppid":1800,"name":"RdrCEF.exe","command_line":"--backgroundcolor=16448250","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00119626-00001800","uid":"00120112-00000304"},{"pid":3784,"ppid":304,"name":"RdrCEF.exe","command_line":"$2d","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00120112-00000304","uid":"00120315-00003784"},{"pid":1328,"ppid":304,"name":"RdrCEF.exe","command_line":"$2e","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00120112-00000304","uid":"00120344-00001328"}],"all_imported_dlls":["AcroRd32.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","imm32.dll","cfgmgr32.dll","profapi.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","wsock32.dll","wship6.dll","nlaapi.dll","netprofm.dll","cryptocme.dll","dui70.dll","wininet.dll","ccme_ecc.dll","oleacc.dll","dxva2.dll","wintrust.dll","credssp.dll","iertutil.dll","dhcpcsvc.dll","wtsapi32.dll","d3d9.dll","lpk.dll","mswsock.dll","AXE8SharedExpat.dll","ExplorerFrame.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","WSDApi.dll","wevtapi.dll","WSHTCPIP.DLL","advapi32.dll","AcroRd32Res.dll","rsaenh.dll","credui.dll","dhcpcsvc6.dll","gdi32.dll","ACE.dll","dwmapi.dll","winhttp.dll","ccme_asym.dll","shlwapi.dll","winnsi.dll","GdiPlus.dll","ieframe.dll","cryptui.dll","KBDUS.DLL","msvcp120.dll","AXSLE.dll","netapi32.dll","apphelp.dll","AudioSes.dll","MMDevAPI.dll","kernel32.dll","sspicli.dll","webio.dll","ccme_base.dll","usp10.dll","wshqos.dll","userenv.dll","ccme_base_non_fips.dll","hid.dll","dnsapi.dll","ntdll.dll","uxtheme.dll","msftedit.dll","oleaut32.dll","rasadhlp.dll","gpapi.dll","wlanutil.dll","msctf.dll","CoolType.dll","ws2_32.dll","chrome_elf.dll","FWPUCLNT.DLL","samcli.dll","ncrypt.dll","BIBUtils.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","wkscli.dll","msvcrt.dll","ole32.dll","msimg32.dll","libcef.dll","wlanapi.dll","srvcli.dll","version.dll","winmm.dll","clbcatq.dll","propsys.dll","icudt.dll","msls31.dll","api-ms-win-downlevel-version-l1-1-0.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","BIB.dll","rpcss.dll","tzres.dll","sqlite.dll","mscms.dll","dxgi.dll","KernelBase.dll","AGM.dll","secur32.dll","msasn1.dll","netutils.dll","api-ms-win-core-synch-l1-2-0.dll","shell32.dll","comctl32.dll","Wldap32.dll","SensApi.dll","user32.dll","sechost.dll","AdobeXMP.dll","api-ms-win-downlevel-user32-l1-1-0.dll","dbghelp.dll","d3d8thk.dll","d3d11.dll","msvcr120.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","duser.dll","comdlg32.dll","oleaccrc.dll","cryptbase.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","IPHLPAPI.DLL","psapi.dll","setupapi.dll","npmproxy.dll","crypt32.dll","DWrite.dll","urlmon.dll","RpcRtRemote.dll","bcrypt.dll","rpcrt4.dll","devobj.dll","normaliz.dll","nsi.dll","ntmarta.dll","cryptsp.dll","wow64.dll","wow64win.dll","wow64cpu.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"data_1","sha256":"cb829f075088e10cc64a4d6e6482eb2ce0643a4da2e10f1f9fbf249b961a8013","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"Visited Links","sha256":"9d1c9dc432b2e97f7a54b4da2724e4ff96dc719e60cb89c9f82dbec9226856c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"A9R6m3tsn_r6l3gq_1e0.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"name":"A9R9hkva7_r6l3gr_1e0.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"name":"A9Rxnox39_r6l3gu_1e0.tmp","sha256":"42a850147cf596396bede5dab89e19580c09b58b610ece5e525b37618b4826d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"name":"0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl","sha256":"d1bb4b163fe01acc368a92b385bb0bd3a9fc2340b6d485b77a20553a713166d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl","sha256":"9009ab7605c35a2b5121b8b5c966b3c893edba9966925268c45ad05b348671c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"urlref_httpswww.telegraph.co.uknews20200408trump-right-rotten-world-health-organisation-should-reformed","sha256":"51a5bca9d80e9221f2978a44311aaaacf02f852495357c6851f5ae9558beac97","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"urlref_httpstexasscorecard.comcommentarycommentary-who-are-you-a-pattern-of-deceit-at-the-world-health-organization","sha256":"f06a512e560676593f005551403a9732b4fb99038ffe24c905dc84e1b38fd067","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"urlref_httpswww.change.orgpunited-nations-call-for-the-resignation-of-tedros-adhanom-ghebreyesus-who-director-general","sha256":"f4714c4a7fe5c789ce2c5aa19497616be84da80e9d76ceabac9d244d24714b57","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"urlref_httpswww.lifesitenews.comnewsasymptomatic-spread-of-covid-19-very-rare-world-health-org-admits","sha256":"97049945b64453fb46413d1474279dea111603af363e362fbaed0c478547f6ff","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"A9Rgg8ljc_xepb7j_y8.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"A9Rmw8gqt_xepb7m_y8.tmp","sha256":"42a850147cf596396bede5dab89e19580c09b58b610ece5e525b37618b4826d0","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]}],"files_written":[{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Res.dll","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeSysFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"pipe\\com.adobe.reader.rna.W7Mjcqt.DC.0","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\System32\\KBDUS.DLL","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\File System\\primary.origin","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\cep-plugins\\PIPViewer\\index.html","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\crash_reporter.cfg","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\ARIALN.TTF","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\ARIALNI.TTF","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\ARIALNB.TTF","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\ARIALNBI.TTF","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\arialn.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\arialnb.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\arialnbi.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\arialni.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\Fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9R9hkva7_r6l3gr_1e0.tmp","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\Fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9R1w4seeq_r6l3gt_1e0.tmp","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%TEMP%\\A9Rxnox39_r6l3gu_1e0.tmp","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\UserCache.bin","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"C:\\Report_3_WHOarethey.pdf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"C:\\Program Files","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeComFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeCMapFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\SharedDataEvents","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages-journal","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\System32\\drivers\\etc\\hosts","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%WINDIR%\\Fonts\\SEGOEUISL.TTF","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\segoeuisl.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\Fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\css\\home-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\home-view\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9R6m3tsn_r6l3gq_1e0.tmp","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%TEMP%\\A9R15yi9dz_r6l3gs_1e0.tmp","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Res.dll","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001b.db","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"pipe\\com.adobe.reader.rna.Av5BduS.DC.0","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\KBDUS.DLL","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{846EE342-7039-11DE-9D20-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{C3450F58-7060-4AEA-B0A0-C245927D78D0}","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\crash_reporter.cfg","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\css\\home-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\home-view\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9R131mfwm_xepb7i_y8.tmp","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9Rgg8ljc_xepb7j_y8.tmp","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9R16zy7iy_xepb7k_y8.tmp","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9R1waeeuk_xepb7l_y8.tmp","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%WINDIR%\\SysWOW64\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%TEMP%\\A9Rmw8gqt_xepb7m_y8.tmp","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"path":"%PROGRAMFILES%\\(x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKLM\\SYSTEM\\ACROBATVIEWERCPP473\\","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{FD4316C2-FF33-42BF-BE78-39051EB67EC2}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\00-00-5E-00-01-01\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{EC814DF5-6D42-43EC-9EED-DA58E10CAEC7}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]}]},"mutex_activity":{"mutex_created":[{"name":"Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5ef275f9deb485195f6b3df4"},{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"5ef26db10e418c24e164256e"}]}]}},"report_ids":{"sandbox_job_ids":["5ef275f9deb485195f6b3df4","5ef26db10e418c24e164256e"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Suspicious Sample cc9e001a24a6… — Score 42/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Suspicious verdict for sample cc9e001a24a6…. Threat score 42/100. 0/27 AV engines flagged this file. 0 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819"}],["$","meta","4",{"property":"og:title","content":"Suspicious Sample cc9e001a24a6… — Score 42/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Suspicious verdict for sample cc9e001a24a6…. Threat score 42/100. 0/27 AV engines flagged this file. 0 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/cc9e001a24a696012f24652eb8febd25937b3b07159a7ff1db169306a8600819"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Suspicious Sample cc9e001a24a6… — Score 42/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Suspicious verdict for sample cc9e001a24a6…. Threat score 42/100. 0/27 AV engines flagged this file. 0 malicious and 6 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2f","11",{}]]