Analysis

  • max time kernel
    40s
  • max time network
    42s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    04-02-2024 19:23

General

  • Target

  • Size

    211KB

  • MD5

    b805db8f6a84475ef76b795b0d1ed6ae

  • SHA1

    7711cb4873e58b7adcf2a2b047b090e78d10c75b

  • SHA256

    f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf

  • SHA512

    62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416

  • SSDEEP

    1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON

Malware Config

Signatures

  • InfinityLock Ransomware

    Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

  • Drops file in Program Files directory 64 IoCs
  • Checks processor information in registry 2 TTPs 5 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\[email protected]
    "C:\Users\Admin\AppData\Local\Temp\[email protected]"
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:308
  • C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE
    "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\Admin\Documents\These.docx" /o ""
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious use of SetWindowsHookEx
    PID:3004
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:908

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      16B

      MD5

      b57c744b5d792ceaea4db91d1b5628b7

      SHA1

      0d7a023b3cc8b001031fbe5db9382c6af9cb6cec

      SHA256

      ab297dde1c138fcfb2f1ef42eb519d87b09c8ed7e70c7cc576a0d0a62fc32dfe

      SHA512

      8720ef618422942cfdfd0c00b6c7bb97354f0ead150906e63dde2c07f82e1f7bbb6a7087ccac434154c4407bbb5a3d53a71e7caac5294b4f6ee456871ff6b9bf

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      720B

      MD5

      8ae3dfc86bc5d9c241dfd9748011bdf1

      SHA1

      0c2204f22814bd795fdb6c4337e6ea639d72988a

      SHA256

      2654e340f846298432c73ab352a3dbf5272e3ac34605ad9040960286a55c0b0a

      SHA512

      e539c5cba6f17bb3faf8f8866e319d33ad0fbb1e00b685950ae6a5c6b68894bbfa667594fa5c5eff0f5a2e88595e44bf75302f21c0a287a184a46b568df7f52b

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      688B

      MD5

      8985a685a7597baaf3799bbece8f44f7

      SHA1

      53957042edd6c942cf445acd2dc4a8819d496fe1

      SHA256

      9d489b5c44ae348f07c2bfe8403d44b7bb7584df4fef65eb3748ac9eaaebbd8d

      SHA512

      c318a4a211dad6270d869ca3ff789ed4c479f79432fedb1d839b0ebd625ace67674867f55b81f24af1974a3e18e2a053a3eac26bc6d043e46a859800b5062dc9

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      1KB

      MD5

      5858de68fcc9d1fa608558d13140a652

      SHA1

      0ff2f92461d2bb2392b836502dd53bb893b43866

      SHA256

      6c94021061316b146e08b99cbb3cba2c8ea5017908a6c94cd045dbfba7c83520

      SHA512

      a2ef2b56938938caed6cd20901d49dfb34aa57dd52bdf90cc5d705fe55a447ba663ad33517262c63e70aafb92d578e41c39b8f90bc24c571ac0e176e262903ad

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      448B

      MD5

      c6b84ce0e5433e627ebf77ce6b19c791

      SHA1

      dc388baa1f1ec216b22cd7eb9858f2105d675605

      SHA256

      ca5f2f1a9edb6e027221a81a87130ea83cf3ce0e1a7f08289f9efa87488c6eae

      SHA512

      230b934ec355160d4812e9952c13483c28fa6f8fad769e29968d8c09e004c100dd807f6802f15e3f947cf4d3f1f9391bf2b66320ae3de5094dd1e4fd02dca7d2

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      624B

      MD5

      7028c157566c7a5521846f4d1cfda0c6

      SHA1

      3b8aae3ac9a7b7f16f6797805d8573a027e0bb7f

      SHA256

      5275bb759c35fc37a3d9ded39b530a68ca9e387b3b8ff7d8c6fcaca5ebad445c

      SHA512

      e396c91c9a2df117228dfac9a9e1b513ecd10a429a519aedfae66df5dc007438c54ff771695f29764bf980ee8d91d032d4d762a35ea234d008c06849d3994972

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      400B

      MD5

      082c8dc36804d1947b780125e8fae324

      SHA1

      1f15655a2dd0c66bf1953a28b72494cffb35e3af

      SHA256

      e88b7f7e9344dfd95c850587152831856fd4543ff7d7b343694b7f68f83ace00

      SHA512

      18c728a4dcf6ae4fe57dc66c14753b5d2cf519865be372c65bc33a25fe7763dfb1250f8ab63242d228664cba5b1d68a8371ab3ea9e435055eee99c231c50a8fe

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      560B

      MD5

      45e9e522873a9d201a9af4c44e596860

      SHA1

      5ee71a2e8efc89702917dba5b0d8fb8b2d17618f

      SHA256

      912a899688b33fbeefe644ed8f9afce0b59d3a0fefd87337a408df589fc63b13

      SHA512

      e37bfec068ae56200cc39c3b2d26390219c9b6cd522b8acc3df0f89be2fc8c2a494bf30b68a407cf504ee315225b6c4f319ce967f4cd8123d88354b0c18a6048

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      400B

      MD5

      274b647a386cc01ce481fcb36231f08b

      SHA1

      1103fe391496de844db12e7befcaaab97d3f2bed

      SHA256

      c591fffd4bc3031aa7f2d0d91e6047db70e93a18d245f48617eacdcb0cb979ee

      SHA512

      25c1c80c32935bbac257437a5afea90514aa02a726092baaca132116f66a0b478b7105fc72a03f89a5f85c193fb26d7229276585190d185f3f5ed187b534f321

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      560B

      MD5

      8a3afdfb7e274ee101fa9325ec25481d

      SHA1

      abbc6045d2714ae826a7e7eacdb7df58cca4b192

      SHA256

      0265066b900ae8a83f6b0f302f08e81b8a3e3120dc7949ad768b4e52aa05f4dd

      SHA512

      a08d9624ee4b4dec07ad53441a417101c2eda82bf6ce4f89593a8e29535c21931720f0ae2da3a1c121d229fe15ec205f63872c901885e5427b0fa1563d263ea7

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      400B

      MD5

      70eaf64dbba3c4ce806689e7a8f0332a

      SHA1

      a1a5c9a613cdf89ecc7546848694b8ac29a2b329

      SHA256

      b91f40c2442537302123fc534edad37019080132390aa04d2e35631577480563

      SHA512

      7336c86d2a3bb5de2580364d8b087f70088107313d03d289d5dd084d496d626ddb612451bbe235231b7ff89019a96b64fd21376d5c5a5492a53805c0fa71f865

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      560B

      MD5

      4717adfc493057a384ada615c5790d69

      SHA1

      7475df35206a7ae08431901e3bb12c72c05a96bf

      SHA256

      a5033acedb7cabcf99b969c28648416eb8b0d38cc6a283d01ce3d02caf575853

      SHA512

      d8973a8df93c84a6d80b1cda88d6ae90c1ae2f659baabf50fb692f7ec3904109de26defc16663a1624cb6334e5afee67b73cd2a514e62ad9fd9ded14622376c7

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      7KB

      MD5

      a27d0573b65ff4489c365ecb1a56806c

      SHA1

      b02cec08457ea832834048836f706b239921ac38

      SHA256

      fd86d9667d77e87bea61adcc6be7b5d118878d507eae24848198bf5d17e77f65

      SHA512

      dea89648a7357ccf5e481ab7076504dd04c8d7b162a1a9c1cbd79551ceca14f17e7e1b910fb3bda8a7ab3648e3b306178a97bc4710aacbafff3aaaae051506d3

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      7KB

      MD5

      cd8c78b9d92aa92050d85dd246b775d7

      SHA1

      9700e8df312c5d714ff9500bc3c55f5a1ac89691

      SHA256

      d22597978490d02c66c43cd2d2a59886a23eddb30ad9fbd8f8080e9da3e33cbe

      SHA512

      be88cdf049c9d6a3e03e8b2f8f2dd5ce9209c32a22839c637a0f649408c327223e6cd9f77101bc491d549e1012881c29448933a5faa115aa9cc21af97ede1e98

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      15KB

      MD5

      6ac16e717f4f3db4b62dcd1403ada15f

      SHA1

      5544ce28c936976c07e45441f42fa49eb813dc69

      SHA256

      56dd0daf4e2566fa096882bbe806499a05ec49d1d721f232d6ee54444e9d6a71

      SHA512

      20a0dc61b88c2497d07d92614ae4facee8f7f70236b0c7c501f44a356f200d10cea1e3acf189df78d5c1659d4a15cfe5ff1d624a277805b4e6ecb4f4fca4966b

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      8KB

      MD5

      a65ae89fde35362e6058dd412188c603

      SHA1

      2959a294ac2a7e915c010ef9526ba7cd1d556fce

      SHA256

      d72080aafed9fcde96358d71584f1c91ed001d872eba8eea183877d43d12996a

      SHA512

      b3bd16e3d7b052a3b9eb5339a2b69c4c5f4a336c3f9c87c8b36065437593567b9806fdb0fb855a9056d0bae81877b8e70a93a4bafafc0c8f2c8c0d6742045c0f

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      17KB

      MD5

      2f976078c289a78b25eb8fe5bccfafd2

      SHA1

      eeab17296e668d89005404f911339fe385a38712

      SHA256

      8114bc446c028910e67e33864a3254fc1c8c2c561e13cfcd00d89441dd98e83f

      SHA512

      d438b3c1b43363ea7126e170b6ad716a331cd2b90ce6890c147d43b06541e9a3f68ad0a5ea2fd7f3bed599382dc7b304d7a38efb7e2bc920a420272cf0a487d1

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      192B

      MD5

      7497f661b5ad25a9539bb7c47462b6b9

      SHA1

      06f8caf2936a80a5d5c3113eb8a47a9824aed822

      SHA256

      3afdbb688ba1cc3721c304743fa6585a99f5b99dbf534208149083cd7c3fa48e

      SHA512

      b7e86d3f26eb3e6bef8b24ced23094f1ee2e23b9b345facf29b91aeb0e76d524bfb1683bf6427bba9ac982c154bc08f4d7f1f279d64604e77f97524fa465d4c3

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      704B

      MD5

      0b9924aff76e9656f6319b9e31812dab

      SHA1

      c233f14f82f6f7a1fbf175b5418c818f3bdb8563

      SHA256

      5531805e22eb36a2e1862d0bdcaba91693fabcc26c36627b29362f92d64638ca

      SHA512

      0fbc2c1e3195f8004a6ca8b48c838764c5eb7e029718449cc730391047657c2064108f5fe58d202d29d6b998060b1b611bc9ff9d81b4504b62d59353fb4ecd9b

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      8KB

      MD5

      8fe06d82cb981b519805f686de45edaf

      SHA1

      f0c02681923398c8c0bed9e32971e92bd617778f

      SHA256

      6ea0ca3634d15ace953bb2f1ad2fcbcabffa4070ca410b0da334841f72c16014

      SHA512

      2f56c7adde8ffea64050fc81d8bc74ba64578d5dad2bdac1761c573f55744e20b16c932228e1b8f985b029e9d46e4e5131d7eb7c12b3d7c2b014b8e91c18a747

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      19KB

      MD5

      adf6da94049d94e5ee9af6312f7bd050

      SHA1

      ac63ff41d9087e28908321e280c0133596e4eacf

      SHA256

      ff6ce5de9baed24c2d2575225597bd091a3d61d863b4ac1be2334c78cf5ec819

      SHA512

      b392af2cc8f06f3b18d75e1774f12127fab35c5af5746fe99580ff32a9317eae79f907aa14c04346d8b38289990115653e0111eff6d5678a7428c1cb85903038

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      832B

      MD5

      d1fbe3f8cd62bffb3fc3253ecc9aa278

      SHA1

      61ee0cbdbbd48345f8b357265aecca09a8cd7512

      SHA256

      581684ba56b2fd0ece2ca767f8e04e71b6e0fd47b8ab6f9c2fc9b32dfa79c099

      SHA512

      9cac95d2df4a760bf45a6b987c67858e617ecbe81bfe394eed6434eaa1eddfad1e7e44c62cee1849857200de087790a63f7eff049da4c169cd0bd0c55b2a6d57

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      1KB

      MD5

      63a5de890cb8c85a0cdf005bb52a9888

      SHA1

      36025a3451bde8b1b4a3e5714d8c49f69ad91849

      SHA256

      de01bf639063a53b0f96e79f5b25857b4ad1dad7a969d5734c0bee6dad5b2e71

      SHA512

      e385646eb3c378b56c35f0eb5e266f79957a9542adf7032b99b308f19d777c677fbff22fdd9ae84569d3cef6db6a2136c95762f04af15682f318dc0eb1ace1be

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      1KB

      MD5

      9b0274c823aa3c261b5fefebc56950da

      SHA1

      504dd42ddd3842ef35e634fb991647b52b2174ca

      SHA256

      e8722a9ea0b2fc6ac8dfa7a8281e00b08cd2df97e648ff082127f1cb51df659b

      SHA512

      6f1363ed96c740f6c109fff3a3f82f378001b433678548ea3d05a61649a79dbd5173207524986c136a2960a135cd42695184e2768a3d0714cd526f26cff809c0

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      816B

      MD5

      1128092f8e859c8c3569ad7a452b7f12

      SHA1

      b0a283f45d790bc99009e34f95ffc34d9c835190

      SHA256

      b4f3e52ec44b08c12d1a26187f5a67b30c28ad8fbf3ba935393a3cba7ca96d33

      SHA512

      5dde4c2f5ac371177cc60ec533f364466070a5fb9fb584f161d81d8681842f2705db3d6b483a6c6474e3ffe35a306b335fe46b1ac5413be6c52ea2022dd393a5

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      2KB

      MD5

      ddde6e3cae230e0944a9e802b3386a11

      SHA1

      0b89baea4b51514d8d1f55bf6322b151c12c70f3

      SHA256

      2ffa4449805a007c2375b7fa3289cc924f3eda31bbaa243bba8207778f22c429

      SHA512

      89de83076669b92b8aa79dfa87aa988415a6fb5272619c09d53b8095db2bc972141b23aa06bedeb1f132aea9cabefef55febbc93440d124ea88d9480aa3a5d6b

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      2KB

      MD5

      2c3238609b70b80a7908fc33c8adf8f6

      SHA1

      c290d7c21730e7d79eb43c878355026f82c0d376

      SHA256

      6e28943a4c8914640b2f4acc4c525fadba8b4975ce8f7549851db98ce08de6ba

      SHA512

      8dc3ea745fc154da49b99bc717d199042c1b18977fad3799614b0f6d056e77790d6ca700723076cf04abe24f3f0251036cd1248229019bfa898ec637cd896208

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      4KB

      MD5

      c942a1c7562f4cf0ec7d9824a806275b

      SHA1

      33755f88d3e91b41e5fb3df262a2c8c7c77e031f

      SHA256

      78c39c0cb06a5490981979dc986c79cac467a2cc7351be107758cd02f303a928

      SHA512

      c4c7785d62b2e0f6f7241cafbf956a973224dfc67f486d4f6a512557ea5f944884a20aa07c6704a9a9df6082482a46993f5dcd6cf03ec6069332ab66aa54b7b7

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      304B

      MD5

      1a8fdc94de2347ea153c51a14e2def25

      SHA1

      f9f9b05e149c1b6a284f66f5706c7f4f4ccadfd5

      SHA256

      389bf8f1b6dc11b13a1f1168b2dedd7c12b793e53b4e4a5e001852c2c16401c5

      SHA512

      08b6add3740b4ff31632d5aa382d2634983d696703fe7070f99e065f630da9ad50c37c72d6fc866badc238786e2e9503d04a0e1c935eccfebcda235718374537

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      400B

      MD5

      5f39fdcf18010275aac419f9dfc17376

      SHA1

      5e342bfbed2b6c1d35bc686bec5d38e2077a73e4

      SHA256

      895b50abd2445136f17dade913044803fa845a12b70f96a2da5e61a133352ef2

      SHA512

      7de06646a5b1c6398131274efcc996b124b004d1f3876a09706da4a3dc33e091d7a7ec5a752e745b3a73a66f4cda6178d2329386f958ba036e831a68368316ed

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      1008B

      MD5

      1d565235b1ce1ffc99d519af9416d8df

      SHA1

      43a80bd9b8db3618e7de94c5405bf01dc397d236

      SHA256

      7641376474b9bbb714e2097b6fa0f147ccefe4338100b2cc3376c585ca69dc89

      SHA512

      962f80349df6dc347b2087e0b54abd167af1ef75188223dd15d629c59e0ae10d2e20bf47f73939aca6d99ab7616b277141c73092fe25b48718e3dbd02f08e7bf

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      1KB

      MD5

      fa10bd91354a79b03f55d3e5525c12b3

      SHA1

      208b27dd80ca97b469130243e3881b836f848b61

      SHA256

      589be727046db421a6dd3c7bb82487e98b77a92a2d5b5e9a06e05c026a013651

      SHA512

      740164e317c63a186fd15b316e29c32a949656f98e3caee629f081f8596397d76e76b449b1889a258991e351b0fa961fc0eb161e41140632b1617daf43a12ba5

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      2KB

      MD5

      df3675166e1ca4dd324417a753ffdbc5

      SHA1

      dd0b6bbc29089e4c3ac743a5cf025a527eadaa03

      SHA256

      165fefb91f18f63afd4485a96e05b8940fd7098caba063e2a0586fc6017e8651

      SHA512

      ad55607ecfde3b0300c2b42cc8537c78965debee828139877197d986e6a4998dd4516b534a8031aae1a87682be64d676480270eb81fcaac96da205ce3eb3d87e

    • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      848B

      MD5

      15d025f82bbe4174b150a172d297e86b

      SHA1

      a1cff00de288a8ed612a894bc4dac7abe6b2c68f

      SHA256

      358fb30fcd33943aa445b6af5ae9f5dc979656b2557ef1dfd9f709b34e027f83

      SHA512

      98fbc7bcf51f11229749323803025862e941008ba13e688f825f8d8a181d3e03a82abfa4b31fdee8b7d39d32f9ae95f7a860e954927cc62b8ceb9ca7f6051f50

    • C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.D09FFFF07031EEE7DEFF97B213138FF4B5EC31D0FDB24877CE613047BC3ACD04

      Filesize

      32KB

      MD5

      5edc6ba75a30ff7a517c01b002d75084

      SHA1

      e1576ac3a49aabf9966571e241fbeb75746de052

      SHA256

      69ac001953453155992606c699e0efa7eca8b0e8bf4210fe03fc88a139c88922

      SHA512

      7ca6431dc036abc320169470259a249d1a667831e7dccd51eb729917ded67e5bbdca47653b99c577ee7d917c72aff39ff713cd7e96d055b5510134edc89de09a

    • memory/308-3-0x0000000005B10000-0x000000000600E000-memory.dmp

      Filesize

      5.0MB

    • memory/308-2-0x0000000005570000-0x000000000560C000-memory.dmp

      Filesize

      624KB

    • memory/308-1-0x0000000073BF0000-0x00000000742DE000-memory.dmp

      Filesize

      6.9MB

    • memory/308-0-0x0000000000CE0000-0x0000000000D1C000-memory.dmp

      Filesize

      240KB

    • memory/308-4-0x00000000056B0000-0x0000000005742000-memory.dmp

      Filesize

      584KB

    • memory/308-5-0x0000000005520000-0x0000000005530000-memory.dmp

      Filesize

      64KB

    • memory/308-7-0x0000000005810000-0x0000000005866000-memory.dmp

      Filesize

      344KB

    • memory/308-6-0x0000000005560000-0x000000000556A000-memory.dmp

      Filesize

      40KB

    • memory/308-2963-0x0000000006860000-0x00000000068C6000-memory.dmp

      Filesize

      408KB

    • memory/308-2964-0x0000000073BF0000-0x00000000742DE000-memory.dmp

      Filesize

      6.9MB

    • memory/308-2965-0x0000000005520000-0x0000000005530000-memory.dmp

      Filesize

      64KB

    • memory/308-2966-0x0000000005520000-0x0000000005530000-memory.dmp

      Filesize

      64KB

    • memory/308-3189-0x0000000005520000-0x0000000005530000-memory.dmp

      Filesize

      64KB

    • memory/3004-2976-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2984-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2968-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-2971-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-2972-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-2973-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2974-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2975-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2969-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2977-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2979-0x00007FFF23060000-0x00007FFF2310E000-memory.dmp

      Filesize

      696KB

    • memory/3004-2981-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2982-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2970-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2985-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2986-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-2983-0x00007FFEE05B0000-0x00007FFEE05C0000-memory.dmp

      Filesize

      64KB

    • memory/3004-2987-0x00007FFF23060000-0x00007FFF2310E000-memory.dmp

      Filesize

      696KB

    • memory/3004-2989-0x00007FFEE05B0000-0x00007FFEE05C0000-memory.dmp

      Filesize

      64KB

    • memory/3004-2991-0x00007FFF23060000-0x00007FFF2310E000-memory.dmp

      Filesize

      696KB

    • memory/3004-2988-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-3185-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-3186-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-3187-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-2967-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-3188-0x00007FFEE31A0000-0x00007FFEE31B0000-memory.dmp

      Filesize

      64KB

    • memory/3004-3191-0x00007FFF23110000-0x00007FFF232EB000-memory.dmp

      Filesize

      1.9MB

    • memory/3004-3190-0x00007FFF23060000-0x00007FFF2310E000-memory.dmp

      Filesize

      696KB