Analysis
-
max time kernel
1507s -
max time network
1459s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11-02-2024 09:40
Static task
static1
General
-
Target
-
Size
211KB
-
MD5
b805db8f6a84475ef76b795b0d1ed6ae
-
SHA1
7711cb4873e58b7adcf2a2b047b090e78d10c75b
-
SHA256
f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
-
SHA512
62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
-
SSDEEP
1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\spectrum_spinner.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\standards_poster.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sv-se\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-hk_get.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\ZY______.PFB.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EdgeWebView.dat.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\s_listview_18.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\themes\dark\s_thumbnailview_18.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\sv-se\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.181.5\msedgeupdateres_lb.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.181.5\msedgeupdateres_te.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\fi.pak.DATA.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\arrow-right.gif.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\css\main-selector.css.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\vk_swiftshader.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\az.pak.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fr-fr\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\da-dk\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\file_info.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\lo.pak.DATA.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_checkbox_unselected_18.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_reportabuse-default_18.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\config.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\psmachine_64.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\themes\dark\icons_ie8.gif.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\Advertising.DATA.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.181.5\msedgeupdateres_ka.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\nb-no\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\it-it\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files-select\js\plugin.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\dark\close.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\cs.pak.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\vk_swiftshader_icd.json.DATA.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\cef.pak.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\end_review.gif.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_empty_state.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\illustrations.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\fr.pak.DATA.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\lb.pak.DATA.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\it-it\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\sv-se\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_da_135x40.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_et.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\psmachine.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\CPDF_RHP.aapp.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\nl-nl\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Edge.dat.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\fr\Microsoft.PowerShell.PackageManagement.resources.dll.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\new_icons.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_hover_2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\nls\fr-fr\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\themes\dark\s_agreement_filetype.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\pt-br\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\sv-se\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\en-ae\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\plugin.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\plugin.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\CourierStd.otf.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\es-ES\MSFT_PackageManagementSource.schema.mfl.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\dd_arrow_small.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2 [email protected] -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 [email protected] Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString [email protected] -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4696 [email protected] Token: SeManageVolumePrivilege 2924 svchost.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\[email protected]"C:\Users\Admin\AppData\Local\Temp\[email protected]"1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:4696
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵PID:5024
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2924
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize16B
MD5cca3475b753bf0fe934f785fb0bc94d5
SHA1239a2ece296dbef995ba8009d9b0b6f71ac73cc2
SHA256301e0b38754c9f32044bc1a02f2f63f0c6940e1287a1892bef5a3583d16cec06
SHA5120bef14f2f90d1b04d50904219ef5af7143d9d808f2a7a440775404825c928759d5459bf04fa7af4e7962c6256590bb815fb670a85c1a9a9b2fd5dfe618e0cbb5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize720B
MD5287de8420a58696c9ee9b21ae23e775d
SHA13ebf485879bb40dc624fdc047fd8086097b4ac1d
SHA25604ef042a8024f104d61c2da1a7d590e6b04163a2b1d76123162f1522c340afcc
SHA5124932f00712029ca9b9e79cfd4cfe39b1b99f0482c86b282c0bc34a5c3684a9fabf0b336bc78c1aefc6c5a1cf90d68afe7be0ca9f0a31b93084ae3616d67675ac
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize688B
MD5deaaaa4d59b689ce95093ac9aa3f823f
SHA1a86a4b9c499b7b8faeb5e6714d52490eaf39228d
SHA256ae13e91bb676a9ef885021eaacb5ddcb61780ba16d4b67b549730cab5bab9a5e
SHA5127d75c401dc649e9e8c05d711a7e43850df9252de5c9f8a941d361e2f660c12fb952dab035b7a286455d0c44a680a070052cf0069722c61d83d7de734bf7750a7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize1KB
MD5a82ebbd5f616d89c9c0f772ff05a2b87
SHA1e9c0410316ff2f243eeb76061db14be80fe6b3dc
SHA2566c99759663517423484165788eba38952e3cced0d10780b2519cb4cac9b69a17
SHA512746cc72827bdc3d4ea1ed24f7bfa1b4ad6c304b2d205fb0b5d1f0158bedb09cd66a3d47d097d280981cf74cd6a475d701c9debba9625c2c2b8ea3bee286de775
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize448B
MD5bafadc0ebf191dfdecd480041f0b9d3c
SHA12de8ee8d0eab5637e35dfbc8da2b5b903b6ac420
SHA2569c42eabc773ef368683ac12b9142c003dcde79a6e99f3b9db07c27950464175a
SHA512c564c0591f9063e31b54dbbed5e5e9e33d18aa8bb7f6428e6f01ac60db1431958e3aed5e1f527545677609b4fef2f2f6a70dc77e765ceb60c8b707689a9507dd
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize624B
MD5f5e8be06a2b1210499581db6e19610f8
SHA10ad1bc2239a6090e56e77babd82e9eb5a7774300
SHA256c7fcad5521918407a8b5143f517074647fd2c1ba00b37b398660b776097e8135
SHA51227ba426b43cdfca6123e8648bdedf7889ebdbc22f9457ed3a1d81b01888edc7f4470f92acf3154a215e2f5526fc7b8d9d111f1f76d9a233f77b22519b799c2b8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize400B
MD5666cb3b2d91f63743ec2c6cd3404e335
SHA1a686368e91eee489d0ab2c6c3cd32aae231ce3a2
SHA256d5a854b5054c90681e71519392b3ecf6ab65a4d9f15819747f18e541d0471bef
SHA512606454228bdf855081c30898e55c3e52eaf5628257fe22ce46285bdc28343e6e270787e3b18832d7ec0ba264fb2e584cd17a2be7ce23003360347ceff244dfa7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize560B
MD5d7a271390956dc85405e1454145b8c96
SHA1aa1dfc495f7fc0f402d24913b30328e2ca3f9103
SHA2561f8a4577ed1503b64742f04a8a2c8ae3456b0838bf27ea7106b82d3235f9ffcc
SHA512aa1411d29fba34c468f218a39e5f388e1282663d0f64a213d1aeb713808bd9cae72eaccca1a76934f695b65c4b98614026f371ac5ad51f6913d04ca38ab4569b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize400B
MD50449881ee56c7a718268857207ad631c
SHA10601f07f87844cf126f76155156f43bfe0582db4
SHA2561ca309265bc8eac27f400be29722b15e99b2d4ff41b6d9baf35ab4412e31e443
SHA5124e1f96229673ad084e5eb335128b88d420db0b40460a7dca9e5a4d4ee05c593ce3e3b4698e3d7606f899e3a4182c3b2bd4d98687080a9d187656b2ab9073fc1f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize560B
MD57fe46d4ddd23a2e1e0376434f309ec9c
SHA14fb9bedf258d4da43d1d8448efd020c4b5130421
SHA2566cef55891ab449c89a1b22d3a9f24f50fb0f5d7dcdf2d1f302957b0eadc7f7f1
SHA512466d45655c534d4768bd682b789e51c7879f30a539b310169f8396ea18bb7767bd71a89aa870e2f63e858335c6aa3073172df387ba3303b59d92cb804ed732ca
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize400B
MD5b00c9fea72426cba6b91faa86aa25309
SHA14a5bac94a6c51d4a0c6039beb890f8335d39bdf1
SHA256e45a59d5edbf583f03ced2d671fc3c961e4052ca2dda0d0333d715dcff4735f1
SHA5123f9756e28e7057c297df1d83e878e4077e181e182154025e18d71ec86b5ed97a7340ee0dbbda086c21b6e0462f73e584ad0d0731ef5fff868c5c8b6e8643e2a6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize560B
MD52bf45601b577d4658bd939f822f1f3d5
SHA10105212450f453c82a812bb45ba9f9c376fa370d
SHA25666f43890e0b326d2e68da08d63050adf529b555b28de123ed8d72b96d75de16f
SHA51245fbfd1cbacb0321d6bdc96d4f1cb579a1dac1d57d94f1df8321a19275dbd1a403e08beaeff5792112c5ee3e81fb54000cafb64665f8fac02213acd154fe1aa8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize7KB
MD559d7e92797840d00bdebeab82962d2f3
SHA1226da72a269dd3a80f60c295da22fc76b30204b7
SHA256f39fb4f579aaddb38a32587f01f9ec4d71d31d357ce211145b43e6dc8eaa3105
SHA51272f2a6fd6e8d622714eaf1192eb8ecba54e4ff5fb09ca47709d3572154547e2e71464270f7f73124ba7596e11471f9f4118e954d390749ffbe03abd70bda6341
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize7KB
MD50b56173d55b13e02c71d6ede1ebaaa44
SHA1c75c60791489bef85876c13fa8511c165ccf773f
SHA2564745e7b7b920f35f38013d2f4e18bf4a51e11b61a1103f219892eb0e2374b52e
SHA512d70bb7ceaa9f15c26e46cdb2352a2aadf31d131e8f0360baadbba369f38e778736e614f89522c7b470b4300a76d2e7432d488c23ccd9ddce9d5a140ef488ab39
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize15KB
MD597afa312bd068c6100070e49415b15ed
SHA108c28fc62e03484eaa0775922267023cf8098aa6
SHA256e3d99e81db5229b2ab89f9f4ad70f2422bb3e350d6637e9107a8ab14b27ed669
SHA512af1b38a52464fcdf42d259424a695858d3891fbf844fe1de68dd3f73a7d9750da91c3a1185a47f9f499091e50c380d99f0d2a2be3b406832a8c74981e143deae
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize8KB
MD553e20fb3e6a796a183209ef5880dca73
SHA1e450402ba283be3cdbe9a54dfc0e09869d7a93d8
SHA25660246afc954049a254a889b5986d1d8a43d26443f644ac4fcde3901fe6b619fd
SHA512ed4b32c357a742df6971b423b9ac08f62f52f02143b5d53a77d98a8b3f54f012efb06e3e5e99f7666d8128de93c3410e066446eddc281152131de217dd5f4b60
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize17KB
MD5215ee843da0cc8d34c62a15c98db38d9
SHA1669153e340becf72a0f05b6734b22d229bdd1425
SHA256c693005926b53cb22f0a005d84e2999aac0d19c2e7e9b765a18179ee424e8641
SHA5121a60891ad0521038fc55ceb5bfc9f1ccc906587bb84f61dc6e9b145184edee177d69ef1ddddcd64dd09f2f42e45956c521c81f4f4d291a5838fc258020a68449
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize192B
MD5a68b900e7547e8f3c3681d69fe068127
SHA1ecdf1534de9a9d575cbda578af1854666362b8e6
SHA256c3b56831c9d23e2f5b78b02e2b20fb8235965e228042543eb52b7500d0149ac2
SHA5122100bfb2dfa2885ea0e6a7eaeecc49957ff4b7ee02592de72986d658e22663d4b1e09a47d3e7b15075a298de3a5226aa2c3bb0dacda135241715389c85d1804f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize704B
MD5a07e7c6bee180ea20d96abe19218143a
SHA15dc334ea9ba4d323d3165f04af985e8e6cb0e145
SHA256dd62101eed09e84d67483339b8fbe6b80c229cb4fe5f12c433727ba75d88a912
SHA5126e6328b12651a0a41edcf03017bae7a8de6326872827310f0f17c84ceb99e553f20f8519beb71db88930a2d6790685c13bd35e6fbc70cfdb02923087858ad5df
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize8KB
MD596f794ad7c814a38a831588f7bc2d3f7
SHA131b63e6d4f413281aa2f029d6ef96815903fdf9b
SHA256ef973ef44e503a9da3bd1b7ad5ce94165fcec88266df9b942c00da92b6b9cdcb
SHA5126a8e3cfcb8011e217f3fcafe7c918102e4fb516ae689ade0149c31b7c0462da1b28689b90d489e11c0b4d578cb1c200e4092411ab90d944dd45593f4cedec73b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize19KB
MD599f796d408b7460b728dc87727e35606
SHA1b2c95d698603d334c372ea49dcf0f4a8e1451f6c
SHA256b6c4526f5d9c2c583fd98d460b37dde069e006e939336a289c443e67bca989af
SHA5124f318d27ada4c14a622b24586652f27f1e17b3fb75d2a8b17877ea0c132a6d59eb5f24316c06ef98439eb9e69c7838daa9620babf33ebb57cc0762d6efd1c0bd
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize832B
MD589d8134b2defd3274007a33db2dd6a63
SHA1368e9d9e43bc23219aa0322c9f6222a44825400b
SHA2566f7fa24490d1874833c0a16496245ca5609daab630ae370854cbbf4f4d87b97a
SHA5124b5516512c349dcc3ab10d3f4a78584c55c7f3488c7629c7ba591c094ab7582faae24160cb13809ffe338bb026627906d02801e398d734337ac5ab3ad6eb83c0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize1KB
MD5944a915d8fc464d580ed153ed119a322
SHA14ac03c6c6776cbf37acb99d0b9d906e9c2ee3ba5
SHA256e52c9c7af2d3de7f3642fd40f778a56185a7316f72ea59f9da703149e00a2809
SHA5123aeb711ed85b3cae54ffc973ef37cbad5e7bc42e49646132b7af6f8082f631b58e69379ed308b01794be89293efc16338b2ec2f27d9e97a7ec5d481d0e18622b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize1KB
MD5cda587faa1b8d68967daa4a189e72ffb
SHA1f13d4b213ac4ae93d146927329037ee6b0406ec3
SHA2561dc0ba8fbacdbe0441555542f770a30e1ba092cb704527efeb99d4874393ecc6
SHA512722775799f1cf4b62e125220a7631ccd2b264d2e6cb1a2d459ed25c6159802361021c41415462fbd14b3865113f6321109fa9d9a943d291d13503b1337ac9fbc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize816B
MD544b9812497c99779c339d2ea212b3e1c
SHA1ff96e2d0df4f103edb249d1e3a5adfa4d565bd44
SHA256c1757951a50404de953a7baffdaa6818985c21bd1077bb025a10372a568457d9
SHA512cc5d36bd2a8d21b13d7db4faba2892cc4b1773c2d9392b4ff6d4db1729bdbcb1106a719549b5ab0d0e3a1256e7eab62757d82576434e433a3e8ce57571b83432
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize2KB
MD573e8dfab2ea17f66ff477d2a1c3bc220
SHA15578d752dc43f6080d7936cfd78b395491a7e487
SHA25601e2e99c1ac3e6417fb505a92593fcecfdf2c31c7ed0332dcca6098a9ca77892
SHA5125fe940d3c0e377ac98c43b972e307626703b520e6c1d71cb214fce94a32faf40c109578e3a61b286a3517995ac2b83ac8535d0bdf14a86bf5080a4466168c437
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize2KB
MD540e32cb6d12bc5b577544476d74918e4
SHA1b407785637b25d4a35a3d3854240fbd6976cc79c
SHA256d6f540bfc9f40bcf4bf49afbd073f7c7faf1f05ac780bd4cebaee1580edfea36
SHA512f06c6c8a925753a8e819c865258a5b76aee5f2e3e7466c9bcc9491f36137dbc95969fb04ebf0c69b3218bae9dca465e9fed4dede5e795ba0bd79911645034c63
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize4KB
MD53681d225b12ed875ba6086b3874fe858
SHA189bb00e70f267f9a74008c0ae9621892933defcd
SHA2564282a5b22a4811b62fbcaeeb205c44e48461cd4551df7a6a9d13bf044b824a8b
SHA51273bf12b50ee36cfd12d05e752bdee0e7bfb90799c2978b56bd99b4db45e327fd011f8a006ec965783330e2fa9655310ca374eee7c3d3cd5568008e22cf0addfb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize304B
MD5cd6543b7a53bff70b8edc02b897ddfc7
SHA116b1711a29e4bf4d6f7eae02f12f3f619f2e56c4
SHA2564ff9bfeb1a887b5e387af9a715a6e0fedfa15a6b7967732f59000069717aa3df
SHA512774052a04f1d49ca5b0de6820acea37a740b17b67b6075ed23d9e40be42656cc8c6649c6a4f13534a68fb8efa1edbf43e54c4e2992c619dee24e6c9260aab810
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize400B
MD5b492c10e415c98fc9691d4f465dc7f11
SHA17b9d78151d470a49662d12009e08837f5c1fade7
SHA25668cf41d03ea2df00237dd4f2e566c89d3b62157bf7750e99da260b80de67b46f
SHA5122403957fb6e3ea90aed924a455614ba8c553ee56d499684d9ae5c594222b406b0bc5b8822b52fbb6f9eab5dc646bb5f218720798b6f08e7dc4d09892db50c097
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize1008B
MD59a63de8a255c41570a6636bd46f6b49d
SHA17697f7747468d68ec0da619cd9394e0245e71d36
SHA256396edcb030248a7b25d5ff52e55a0abd4211059e17e6320b05e3eb8c7f8e3371
SHA5123a752e520514c15913c9f6bed1f0b7ffb05b314837878ea6dbc8f964c34d53fdcc9737e1ca46491b337d619430d5f7206ac720a3b38e2a959b0655e6c652960c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize1KB
MD56a002822888e09f53d036c685fb93a2a
SHA1318fc82cf5046fc170df27ae8e03527200bf107f
SHA25658edbf16606428f417e439e08e5c93820ec4854370b4273afb47171e868b3175
SHA512345ddc08422978927547629697025c7c8baff846615605d355096c49bc2a28986067e3442229a0b9956fc292fd84bb27b810e0152d9560fc68c9ebd9b622bae0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize2KB
MD510c27ed250ca4f877669a92ff15b94b9
SHA18f9c0e1616d03f90892360f31f24418485969f50
SHA256327ae2ba9a642f214d14a4489ad066291c69e51a8d34b4e6652dcb1aaa4d98f3
SHA51274e66967b1ddc9d357524addb94526bd1e026a7f01899c6c47e84bf0eb41d596002c7ee4e7cdb21b626169faf66e28458113b94610c454e061c4c0cc7a064c96
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize848B
MD545f4beb0a69f2d7903110ef42c334ec7
SHA185a1c2e82a0a718b48071e3b63c437db7596b03c
SHA2563acba88936029c792958a64e22ec5b2619ec815068e06cf0fec3669e55d52a3f
SHA512a6bd56400c4a25b9132091f1b021eb9fde8a8c57e5dbb907d95ebe5815de6170ae419e5c0c9f8a43ff736146bf6c86591de2056a7c52ddd7933a144aa848c764
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.4087ACF6DA1BBF6ACEA593EAECCF862F9E7E78D995EEF34F071CF20421D922E2
Filesize32KB
MD519f71e12403fa473feee47106c0b2b06
SHA1e30e7de6114d48f9a4fbb6cc3d7d4d870bfc8aac
SHA2562dadd0e591a6d6b20d45f6ed28a627e4a962410000685b3a45b3b76c2fc2148b
SHA5129c24aca9debc6ef0c1a239b450db4c8247d328aa0a9aa3878f4d1c8bbea5f5e2ee81ac10a1e4924eaad88eb68f85f8717f34eb574882c10a291760deaa4a9609
-
Filesize
16KB
MD5a22152de04c4100351ae2534c9d894d4
SHA12ae50fca2c06da0143428462b586325d2d9660d9
SHA256ab9c31b20bb43d6135b7f76813daa2d8e337ea37a21d7df623b0d74c4b48a5a9
SHA5122c06b9b6714cd739c7328812e1c981cdab3dc186f8d2589baec1d2ef3791611d1fc1ae6e6d8856cf8fcc227dfb14f87a3b816e12023896aa734496317e969b7d