Analysis
-
max time kernel
200s -
max time network
209s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
21-01-2024 10:05
Static task
static1
Behavioral task
behavioral1
Sample
2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2.exe
Resource
win10v2004-20231215-en
General
-
Target
2.exe
-
Size
414KB
-
MD5
916e4754201356e2a084f47dfdd094ef
-
SHA1
f7af62ac3e5735be89bd9ff5f65d4de1b228a26a
-
SHA256
5fba614d8ac082c6d48dfab9d56aa77b479c5f4217b4ebf599b1c21d6d705b3f
-
SHA512
b95bb9619edea8a9b58490ba49d9e3fb0ebb78652883772c379a2bd2efeeff5ec2e3b7e9068421a08d143b76ef915c59cfe98d91b183da4205964947746ae4c0
-
SSDEEP
12288:oskc3tMDExu5XsnqH/m3RB2oQh/kf8C3:oW7xu5WqfYRAo+sf1
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
.NET Reactor proctector 2 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
resource yara_rule behavioral2/memory/2072-0-0x0000000000FF0000-0x000000000105C000-memory.dmp net_reactor behavioral2/memory/2072-3-0x0000000005AC0000-0x0000000005AD0000-memory.dmp net_reactor -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_ja.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_empty_state.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-fr_fr.gif.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_anonymoususer_24.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\uk.pak.DATA.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.181.5\msedgeupdateres_uk.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft.NET\Primary Interop Assemblies\adodb.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\it-IT\MSFT_PackageManagementSource.schema.mfl.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\core_icons.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_opencarat_18.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hr-hr\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\CompleteCheckmark2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.181.5\psuser_64.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\nl_get.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Sigma\Staging.DATA.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Multimedia.api.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\d3dcompiler_47.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\da-dk\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\images\themeless\mobile_fillsign_logo.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\en-ae\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\ko-kr\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\email\themes\dark\adobe_logo.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\download.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_gridview_selected.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\de-de\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\plugin.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_ro.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\sk.pak.DATA.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ja-jp\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-ae\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\pwahelper.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\Info.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_el.dll.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\ko.pak.DATA.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Trust Protection Lists\Sigma\Staging.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\editvideoimage.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateOnDemand.exe.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\da-dk\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ko-kr\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_invite_24.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\faf_icons_retina.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\selector.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\fr-fr\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\en-gb\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\sk-sk\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\improved-office-to-pdf-2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\end_review.gif.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\ru-ru\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main-selector.css.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\cs-cz\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\en-il\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\images\themes\dark\new_icons_retina.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\it-it\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ja-jp\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\nacl_irt_x86_64.nexe.DATA.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\VisualElements\SmallLogoDev.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\core_icons_hiContrast_wob.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\he-il\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\es-ES\MSFT_PackageManagementSource.schema.mfl.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\en-US\PSGet.Resource.psd1.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028 2.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString 2.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2072 2.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize16B
MD555646ef3f90f70945d01e0ec95e29b92
SHA1a7d590918618eb28941d01c15b7156204cc195ba
SHA256712ced26cd2aeec4436aa4d0138970846a4dd1e62c1a443452719433c2eb0de2
SHA5123960d30a0423fc24e0e334ac94d328b842b891de0974f707294b9e750e49d47b65107664957482acff0dc507229773d0622a814f8e94c157169b8154abcbc835
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize720B
MD5c0d60c083cd86e802c68b610131edd3c
SHA1e6127e6ede758c3337476702fc5f4abae47079fc
SHA256dce3197967d3f4e8b5aacf43e52c299b917b0bd269e644d6948e49dac0a1038a
SHA512be7b51979719627ccc499544a01c06307cd2b0040c227cbf8bf492e69257c315022d2da79353c83adcee424e538a98df8d0ec6176022fa12c9e6588c34dbd8ef
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize688B
MD5467d2bccdd90afa5209f7ce9e5fdbe5c
SHA17cc968228b0a7636635bd8e019afdaf914917d96
SHA2569dbe5e9ebd7f9ae6d8eea0de3f57c6eb1cce7cd64c0527a645e8e95c026e2469
SHA512dd57cd0edc9c5666b75d016c6fbc51dd5a6b1271fef1850d5492664ff00c855db3b4c4aa1720fdd544f4c6897bdbab45ac72b5d8afb803521cee280f3c9fe4b4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize1KB
MD5967040ebea0dfeb806b269140aa5c1eb
SHA1c5a557e62977f0ba24d25dbab227cffc355316c0
SHA2565c4ddb8fd4075f14ef8404b5987ab76832bff30a55c7eaaddf24b9bf8a301485
SHA512c4c9bcc699c954728fae3953b37b03bea17238fa2d81d73aadd7daee189282ec36ff7df43de36daeda8bdf859434a5eb8a3d9682ed5d8c35cbb05da3f2af9f4e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize448B
MD5151153f09800e2b16cd135168db9d84b
SHA146cc218fc3da2fa0d337166137288a74a961da1f
SHA25664588b8e15456656470adea713c40bce1ddaca8d428935d4b8ff5acbc5e22e78
SHA512f0aaa50a04f53d2490659540c5155b39d71d8ea9f4cfb943c96a5d6a67fe3e8c731d66dbc1eabe435548ccb5e5d77aaf0aa9b6ecba316c93150ef5bbedec6948
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize624B
MD5b520247648ef09fded632c645f1c7728
SHA1d8ecede69fe0bbcc7d175a23135c3d002d184a34
SHA25688861e5ab47533ab4b8e95b687092e18262e4937cfa2dece8260d0465e84015d
SHA51226fb1415d9adefd68762ca394694898a2358d3ce08af09fb29dbc206c264fe0e0a68d795477917d147ee53285b6a0b3241fffb7c141fcbcb1e3f6b71a47cbf7b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize400B
MD5ab09190cd6352456c3e2c0737ec1e958
SHA1263cf2f90e74270c60848e080e8b1cd7c7ddea9b
SHA256795f93cd374401d2f404502b2ca012dc00083fc4ffde658027fc9ba1b7e33857
SHA512c52efbaec2fa57a424dc8e8359bc497e4a0a409ef49aa70396421817a8fd2fda589945389e2476ad3c30b85beaa5b2ddeed4a90419956b6fc4fb278a383c2c2a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize560B
MD54e31a6953f8e432a8a9844e6f970cfcf
SHA1e88c2aa6754be6145676b020c2d4e3a9e9e47431
SHA2568c1e9feb2040dbf76589f60b550e4ba88081f2d21423140f3ccb5df68f0f42d0
SHA512b69084be9b66235ba63be0d17e7a5d4c72d49d217acef35ebafd7144363590245a9d0c62e6393e357c50d4517fcd8f8dcc7b1ec08cd7a123727fccaecb0f5d00
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize400B
MD5e584d55409cf2c3444fe0e302b3fbc46
SHA13b97c8bd9369ef850cc36ae1ab795b2ab7fdec48
SHA25693a7bcdbb3a287d23f6f4e9643537fd0537496d1c94fc72dd6a5ecd81b15debd
SHA512d43d24c253f48426153e0ab3bb1c367ebcc2ff38f588f695b00f7e9cb79d89f486a569047b623b27925e63a65069d12583e2e4a31416ae86a2ab6a96b5af509b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize560B
MD594d079c2d089497f8026241a6976a7e4
SHA1c186df764514412fb776831c9b8bea4c8c004925
SHA2567070fce81d78fdef099c6cfdc6b85425b9a41eaa4eaeaa2b0c4a526edf141d14
SHA51245c2693996a199bdae8f6fd544a26bf542319a65c2575b4d93fa1853c152733d088664ec84f68adf955d8dfcbc786b7518c01e2806f44683c8a14d97a18107bb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize400B
MD5168361cc4b84f1492d2ae19326c4195c
SHA1ff37b8f95dcbaff58b8072641ca78c8628504cd6
SHA25697190431db31569a38866a7ebd44aa71a81e9707623c3a0445e4bc4727e60e5a
SHA512bec33c0f031d9530943f1b8cbbb0d7639cd07247d0b83e58c67f6620f8e96298cf34842579a1a6b6057f3f1ebc0bf04e3c48a0619de36f5244f9733fa3c6d0f4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize560B
MD5ed7820828c89ac33eeec8599abf6dbdd
SHA167a2966c57d0275f0766a59a829fb2eb7285f4fc
SHA2564d04562dfccf3237fafea3065c85ced83044b815d734b6a940a2d28c1397c3f4
SHA512b338a8c45c18ba7c6656799a54ef6111130be5b55fbc79980e9eb45119c1f19534b9069b9ff86d1e862a8bf551d087508c430954ed92590de936dcef32787bea
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize7KB
MD5ec3e48730d7984ffe4be8a677c0ae40b
SHA16c2f600ee6cfc8c1b4ef1c7bec98c4010f3a32f2
SHA2569723064587c019822faea78ae93e956b477bfdaef92bff203fa98e25116d982f
SHA5123612f794db52f5222a025e5340667c499da9c9e73a68305e78fa59c9f0cdb1b29b5e07c99379a61ae92681d20880724017ee03184307371334ece262054c0dcb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize7KB
MD5aa0740416c204acfdcf78b4e67607e86
SHA15d234d3a717518804f3a939857af3763d52326a8
SHA256813b38130e5877322ca9658f35d714926b1a56561844eaf65d87e3413fcad5d5
SHA51228ff95faadb0552649fe3c723231e8255e9724d2fce3d9e0817afc3065450808a58606864b3a0b76815c10b98daf7c01fc7adca4044c289b80a969b634fa02cc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize15KB
MD5a438e88041b2424d4e13684f715f7dd6
SHA1e28a33d8a758d1dcb19e8a086405096fa4b02308
SHA256ae653aeddfd5776921e36424b21fc85565a1585edca1fc157a3796ec78bddbe3
SHA512531163906bfd39487347d9e6a1bf3ebb3856ad6a0dd49d4f0133cd8186992e4c503be0127d9bdeac41f7e82678fbb9ae4c78976d036d0555bed446a5c0fb03ca
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize8KB
MD59a592f1a9b43fed7c1442a4e4437199b
SHA1240de30abd917c70ba0ed1b362a41ca545939641
SHA256be75824a628d872e19ebec445ed7fa3775ae840ca768f09aa2bd481517741a93
SHA512f9e89cef7a9fed7bef5a38a362d4bd036e885f460ad293fd72d795f6f56686ef6d86144ca6db115626e786876ba8e467a19445bdef00bcbc6abfdc6feb0db418
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize17KB
MD5dc97fa6478b6edfcfb1b8f494dc05a50
SHA1734fc63b3cfed301e8097782f26d1fc07b2d4fbc
SHA25645300743ea5a31822b94b8861c0b8c6ec45b136304dee8af9a2b9c785bd9791d
SHA5125b9caf4468d5a32bd7e75a4f4550575f46672d0ff05be60a601f8beab51998a900d7c472c36d7637cfca6ff7a8ea8482f3a34018b7dc87e510a5b96611cef742
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize192B
MD591dd525f53fa5ef99baa1f10d29687da
SHA1a98df9be2973bb6aba6d5bffdff8594401f2b054
SHA2567d0bbb95cc4786f0336308118823aa8cd4bf06111917064813ebb02f69aab9fa
SHA51274ee3ce374ce248a8a45e6ca7cb55d247d94d901161f7596b0961df947f3b9d70e1f10675625ec74ea0dd28e982a4dfbec756ab3ac8fb900ae5d8e5963a41a5d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize704B
MD5e0f7fc4b3dedcc6fae9ce1f0217052b3
SHA1b78aa761c7803a86c5615449cafba47c13bc10cf
SHA25644ecf2c8244f94066ac1f9d3fccd6bfca82da395d0201cdfa9854aa9d0fbb6df
SHA512eeff635001b9f823198e7c130ec7bf6a6f07ed34d2686a1edaeca62c26b8879b3f1b1fd22c459c9fd7896287bfe75db60eccc0a028c473e81632e6a829971289
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize8KB
MD502d76ed5612557365ac6c9ad8307e269
SHA10ef1ef1800df334a27aa6e26e5b6d28abd359cf7
SHA256ca54461dcb502070c878032cbf1ca56da1ac9ae69051e15ff931e67f26d8dd2a
SHA5122eb2c9b5ac357cc6901d02e8e150f63a6adec0be345fa08de06f07821e0db0f889250592f77b97adee2019ad265492d5cbafc9dde8bde84abf402c8f96c86d0c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize19KB
MD5805fe010a11ee136d85faf35f4632439
SHA1682508186024cd2eb025c5fc9c0f4b63f59e01cc
SHA25668494982f11935fb6b441d0f2f67bcaecd1a165dbbcab9790e8462cb6a0ffe53
SHA512c37186143ff809c286f48641a9a669ce360c64b2d46e24691f9d5ff0e118106fc254ebb1b6b9d323904844f4261f501628ede21ce11a6b3f09b1a92ece39eaaf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize832B
MD523d5804fa387d10b5537039bb4138f03
SHA18dc801969a30a4b7b7696b6e4ce9f91c302985cc
SHA256d99cf168c8b0b87480f09180837ec0862eccb7e2b367ad982dd08adc63cf83cc
SHA512a33c55fa512b0ce910a0ba43ed576403179ebce82a6836bc1d3e0d51ff788e9fd0765476479beeafe9cd112ad380338c2c0af433979a8bcfbbc68979016c63a2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize1KB
MD56fdafba1288af7f6dd393f9d43a1a168
SHA17cce3c58a829ea67e08a4d4fcc0a29b4c729b3b9
SHA256b7f13fa5614ec87f12597a22403aa7bb7efef0a45e976eef4043f888d70475ee
SHA512262400f59f427649cc147b44f4d1eaebd760100b34a33164774e157f86059021d44ce255c991d10e3f0a592348ed39d0f255a0e1f28f17c89a021c3a318e3f01
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize1KB
MD58acfff3750ba6d14b8697ba1a63431ae
SHA1e769f4e83b87fa2307fb09fa1f1c9ff05a4618bd
SHA256c81ec242eb654a6923578320545951e182f721c399d6ee85e0dd5d9d46aa8a79
SHA512b370645dc8a59c679c2ea1d5c9533c889d30500f57c4df6f22a6e64f92e9620fe1d3787cf79a1bb8e564abde9697fb27be9e98df053592074f4096a002fba78a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize816B
MD5ed454be5b0f8f6a9ee889e63c4edb115
SHA19d458f066fae233d3523287a86b7e5d29150818d
SHA256f87b8dd93ed0f92c8ca51aa50d57361c0d339865517f605b5ea57f237fc031ca
SHA512cfaf07bf7beb2ab89eb106f9f92d670358371011b829b650a6734da5b4132d2617c1e17e45c7df9b3142e1eac0c6daf25d12f13d64b044d128fd4a946d0c5494
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize2KB
MD571989142b6d7ca9c5b1feed126b35a80
SHA11ad3f21fb70f22143f1fc7d21510e8e72b808933
SHA2567182243b325e2d505cd9622c98dd4c4f56515cbb09f24defe156e5763b4bc445
SHA51257deea6d9340f8301928d7b2bca887a54cc765ffd89253dae1034f4a6b4afb4f9f0c7741a567a0fc2d2a5269f61e29f0cc0fc4d11b1725892baf2b6e456b30b0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize2KB
MD5570edf4bfe1c3a5182eb01d924de3886
SHA11a8d32c04fc6f94a75271e78dfbed92269778084
SHA256d2c0c3d6c97a55384ea547bc2d8995bef890ba2de3dc35cb1ead29c9b90b247d
SHA512c5e139946c88f2f8dc3696ebf712d29f5df5095f771b2d508f46f9cd7a356c0a83723ebe0a43cfc2302d99adae910de7c5dcd4b63859a59435ac24aa6c4f381e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize4KB
MD5691ef0664f58a47e0f033961571dd706
SHA1feba8b56d57824587bfd9dc2987fdbfcdf3dd977
SHA2562b5bb0d7e4f8d2d8f5557120067ddab4b49a59f693edb793c4a4fdafa639f82c
SHA512f5ef008a2d0d14148a4382eaf674bc86f9cfefb0a43c715f56fd62f3decf318bcfdf67aae8ebb89e420b91c3ded70ed347101e86e8d638484968a19a10911520
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize304B
MD514693a2fd3d287806721f079c8219168
SHA17e1760baf0ccde46a9039b862f98b7924e37673b
SHA2565be6c0c8d00a546c841629cf8ea51b5fbdd194b6543a44d0f2864d85d0146555
SHA51296e2d901765743541a321363c28f938503ea3c9830402801407cd0b8ef241e320d4e16d1c01eb9024a6144f42bda263a3f189d9fd53d6f32454245ea7e710b5c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize400B
MD5add369ee3590f4347a02d020f0d5ea27
SHA146cf2e9f1174d1cc944d51f0f7f6b909c68a9f02
SHA256b6f0186b5f06b4c1cd510691e6e411894b2b05a9cd6a757126dde6775290ba88
SHA512a1d8d97887b64e6d6a70b21e57f4c996204cfec3fb7ae2ba092bc347c0586d98ea95a97efc10182bc66d3b4133713f3979473a092bcc988fba7ad8dd9e0e8688
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize1008B
MD55ba2646281997fb2f198e5f805d85dbf
SHA109806f33430fb76379a8d5966eaa08bb93b7199a
SHA256366c3cd31db3c240190f989feaa3f03d1cd7412eb11de4cf40dcc606b6deb9a0
SHA512adfe29de7ab3d2ad644e6967ac71cdd4074c8278b01ee7cb119ffe3c391cc9d79054b0f5e5eaf107a6ecde50e65423b2473d78a7927680bd984cded001187c99
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize1KB
MD509bde48add1ac1a622cf29095dc186fa
SHA1f743afa9ad4220d6ca9fe47406237ccbeedc9a79
SHA2560f90ac1979b8fc3ec7fb9a1048ec272f77320384ab6533c388d3e487edf21fe1
SHA5124a36f5ebc6eda7fad4948233d158ed86038e885b649bb9d53b83c715676400b331ebe7d5c263974aa9890a2d816f57e370814130f4b393b228f11055568dda06
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize2KB
MD53ac2a8de1f5a1d0f482bc402d2cb004e
SHA1178c3c1c0efba86b878f91a256fba62d85a98d3f
SHA256e41ce65c91d2492d7fd5931078f1d867cee28beaf564a7b6d33469447f0355a4
SHA5124f9b2736bf8d6beebef09c26b99ab4fb9e4ddecac47a97bf14c71e93bad290bcb0d348fc3561522ac7e5c3e2a51e524696fe8bf15ed6c528dd76fd4af834672e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize848B
MD57bbdeb09a1dfefe112b4636d72c64386
SHA158aed0ddf21738165dec58df552c7dcce2f6c5f0
SHA2569b12a13ffbbfbe08e8cb8fad34058bef550163ef89540286b9ac1b862bcea91b
SHA512b557432a60f03cc577ccc1f2942a9041a3856a7a1e5fb538f1eca81ba5abf918bcb7b90804882cedfb4cc8f394bbf7a7b686158e8b13a5a8c04ee704f1011c7b
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.98B680B3D6399B0B71161AFCF614B21DE7B5651522E0BDDEF7B4DEA44E433028
Filesize32KB
MD5bffcb62a4d9b73439bfc11540479b923
SHA181d7d824119f50b7065a797f5353ecfe3cab10e8
SHA256341706b1d75ff957fcddc0d8608e545ff45f03f66f81cb2195a0bfa1a19452c2
SHA512573667298eb8a963735c830bbf1bf3bd894be8382a207412f6ce074514fd247731e48ba4284ca41ab7e08bfcacf646d85438459fd09f30dc23c32fa68d7fafa7