Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
25-03-2024 19:15
Static task
static1
General
-
Target
-
Size
211KB
-
MD5
b805db8f6a84475ef76b795b0d1ed6ae
-
SHA1
7711cb4873e58b7adcf2a2b047b090e78d10c75b
-
SHA256
f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
-
SHA512
62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
-
SSDEEP
1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MLModels\autofill_labeling_features.txt.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\createpdf.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\pt-br\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\Microsoft.PowerShell.PackageManagement.dll.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\close_x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_listview_selected-hover.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_remove_18.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_fa.dll.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_removeme-default_18.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Canary.msix.DATA.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\lv.pak.DATA.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\RDCNotificationClient.appx.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\zh-cn\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\nl-nl\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Sigma\Entities.DATA.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\SupplementalDictionaries\en_CA\excluded.txt.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\AddressBook2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\download-btn.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\fr-ma\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\ko-kr\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\goopdateres_ms.dll.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\et.pak.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\review_browser.gif.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\tr-tr\PlayStore_icon.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\flags@2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ja-jp\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nl-nl\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\en-US.pak.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HomeBanner-3x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\de-DE\MSFT_PackageManagement.strings.psd1.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\fr-ma\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Edge.dat.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\PDFPrevHndlr.dll.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\SearchEmail2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\root\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\sk-sk\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\he-il\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Search.api.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_uinline_warning.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-fr\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main.css.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\themes\dark\bun.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.185.17\EdgeUpdate.dat.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\en-il\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\fa.pak.DATA.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\sv-se\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\sk-sk\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Adobe Acrobat Pro DC.pdf.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge.exe.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\sk.pak.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_listview-hover.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\sendforcomments.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\forms_super.gif.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\RHP_icons.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\de-de\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\sl-si\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_GB\hyph_en_GB.dic.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4 [email protected] -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString [email protected] Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 [email protected] -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2248 [email protected]
Processes
-
C:\Users\Admin\AppData\Local\Temp\[email protected]"C:\Users\Admin\AppData\Local\Temp\[email protected]"1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:2248
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize16B
MD5f9be5c7293bbf7496c0f389ae3dbd024
SHA13a2ab7779ccf36045d31dfa6e130714003475e13
SHA256f5aabaf00e4c675edfe64ec810ad5ae27838355d01d35a566d19cba52d83cf21
SHA512622be3bc185442d923b1465cac0a27e7917d157b53488e843eec4179d63c75da1c95e865c1b1849b75bef44582433f730340012e343eb445c296a189c21d8d4c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize720B
MD5b1852c0cf27338f88c33fbaa0190d8a6
SHA193f45709ae15655dd68570ed747202ca6c3a1c2b
SHA256b7a089dcb2b7fd0d175a04abf646ef327af3cd2fc751dc96a6576284fad1aa61
SHA5121fd9722c28995c5a9c8f55b45488706eb92c14d880d7da79699007e6b6b6af9998e6a270f0192de05b68b3723b9d3e24f58d57e08dcb2013b88f0d621b99b37f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize688B
MD5b200c8289950bba905cc1a4a4c0f62ef
SHA152e3f7406cbebbf72bca00ae457f0cf4abec7a39
SHA256929a1d42dd260d92e2cc15e840013bb222ded6e31eece9b7f4c8755ca38294ea
SHA5124d4a02b2b4063b966ea4ad6454a7b7b724e7e8276e169f63b17fe1b4a0a25d4435243d5b3d1f4cea43e5ab90039650ef9a683a8f9deb1c12e3f1ec299ef70b9e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize1KB
MD592b8b92cfd9707796d1c4e6c186ab543
SHA1924d30ee7b2ac580b7d87c5e4ce59ec5cce8da09
SHA256397221465b3faaa5c8c5da9242447590cf03c9bc16f753b5b12d76aa696c00bd
SHA51257eda4b7f12524d41b1fc4627c143173a881bd5f2f7a8538f01355afb828cc03a6b9ffeb93e17c2105892ec6ad04c0518a55222b2d7b7d55d2e859c8166386ce
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize448B
MD5a7e587fea8363e8c47575e71d1b848c7
SHA1b0cf4ba3028c9446d8c50ba6a8a9000300ce8f46
SHA256c58b45eeb7206c24eccaf034a248f97f601403bc95e8512c4754d742cfb28b72
SHA5123c633dee088d9abe69910c7fc2fee45626c60e4d69f4ae3a8c007acfe299a2db6be5fb167f2a91de9fbb613daeeaec6e771d1d586bbd274146a89024caa50bb9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize624B
MD50d59f6f5ce40ad286c1e73c810f70800
SHA1ff5b3db9a08074f5dc0c304174b0bd7ac899acb8
SHA256670321b77bce455c9d895647f8bdceb2982084172ec88c68f8656c244737b493
SHA5120ef27a99e980ee90edef247c3119524e88c63481e046ba30e7ec411c2a4afa97d8f111bcf9d6858c81a731d2463a75ed1e70100e5a19fbb26df5ac148b2426ad
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize400B
MD5be4bcc85a90ae40aa9ed8a6f114cfc2a
SHA11b3569081dde079e878a38546056789e2bd7c0ec
SHA2562195f4699771962352e02bf7cb0b3c8ee349de65a75174d9ae3adccd1c94c31a
SHA512624806044ec1d3df876c78a9a1a370c282ed55a6c829e21ae84acaa922957ba6d2d7f3a9147ecd825ca973f179b55b4b551f640b09ae13a11e4c6580370b9593
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize560B
MD54d2d78a486303981318454dda1ed6db1
SHA154b84bc45d6004844c1be354eafb2f8e031b514a
SHA256f0826166326d0f4afc98c34c6a77a91acf2c4c6ff6a7adf8e6ae46cd07d9f1fc
SHA512ddd82e2c6d04434e2a3263ec3539c07f10582dff75dbf55e88e8158ab6c8fda4d755d08a976eb524356ccdb93865781eb255de6a82c29dd4a142e68921810dfa
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize400B
MD5d9f0bd38d01705045be4512f18f29fc3
SHA17c501250136fcbf3857c576ab01f942663f87529
SHA2564516f779a7fb2cb29211d8ddf6ad221f2587bb8cafe17a11116bfaa14b09f102
SHA5123f67694a298cd60dedd4397e599350daf19df9ed7af75732ad7758ddc13bc38d49d00b36811b76169996b2b2c24da73650c5c382dbfb2a08ef7715e6e204b4e3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize560B
MD5653ea6bb80c29a8776df65cf9300adc9
SHA1eabb0d2436884e00d0849fadff715d60d0f58231
SHA25668d6063f2e5af3e19ebed340a5ca8e3522604333830c5003bcd30fae6d4d1b9e
SHA51256c6959b2544ffe31ef2a8a8861f0285453710fea9ef14db32a2480e7c0933e528e15c61cf6d780602dbd5a078d2e041c6e6c41209302fc6fb4afbd6158fbd27
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize400B
MD5b72d0a5e83d7da8010eae35b97d40322
SHA1f629bf202c6792cc2ca389991b742d38db624d4c
SHA256faa5a52d13e9257812318ea75cb565f9f3597d6a4ec8497e0ce1da6a96438f1f
SHA512493cf144609291b985af95cd5429041dfef3e61f93ccd99f08d2f74e7e1573c154eea2133bbae5bf372ce4499d59369cbf34c220ad2fb58ab490360deb92fe02
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize560B
MD5366ed1dd76b49be89bb44cd15edac70c
SHA16735f4bee88768f124a6cc499fb72316e83ade51
SHA25631653cfc57305194c76cbfd0df34fdd8c6ad3458ed5a883e2de59a19a7fdb9d6
SHA512848f2fcf504bd63aa3ab9ce19c5827bb584a29c7ac1670f45ffc42f047a392b6cd0a0467ba872a692627540b2a3aa14cb4dd268d4497d6057f98e2fe5e79a167
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize7KB
MD5ec00f38daed706eb6e71229385482a7b
SHA1b21ec2243d992232e8e54c1a6b86b76f954554a9
SHA256cc089b8d4ff0885a4001e2c31570e27b2df0dcaee21c70248375dc1a18e566aa
SHA512b06ccb6de2e7b41b73accbb8a39396b667c8dec3da00994ffe13cc2c41ddc77df2863f51e67532d914fb4f5b1cf2c76ecf7be3b78e0ecb7b38a8337c7d041852
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize7KB
MD534a4a7c6b999d29537292c1a023bf1b8
SHA17ada4f50633a2c5a9db43ba6b9ee08ddf1ff4b6d
SHA2569d288f9be65fd1a1085dc68620d3cf29ccd633fbb7270752c270b95517bc9305
SHA512bc2d642cf10ed0fff340bc443047d36f0caaa0be811778501b259933d23762d1d128fd9e7c478ab22ad4e256c4ba3b953f55113f200c06616f7577856c3946eb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize15KB
MD59d18d5df928978b7b87eac779c26b19f
SHA1fe6895f9a3443673b4d4d34fef3377873957f565
SHA256e43e8fefdde48416a7429f81e0c254047df699f579ea0b4147d0137646be81f9
SHA512b487d304ce974fa842b71290031f2805dea87b69c30b67d243fecf36d3a1bde69b35fb14090e59f00ffebaf67eb216f4281ec0ee1e9f32d00ba11945cd50fa40
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize8KB
MD528f62e7a928d85de886be4f5b3f5798a
SHA1df3b8002d1eeaec4d645fa84e70e4daf8f14862f
SHA256c5db3451ea5c6f685e28de135dcfbeda9bf3c0a092e220d47a65c97e556da848
SHA512c0529c3cb94f80832f94be0a990a9456d85a0c2877de6aec5d253ca4675c4a5d95b25ff08dce6942b69ac47771a6802e20ca1cdd1b6a5bcd9292a7dde8e58a77
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize17KB
MD5337a9b0d8c063773aa6a9a19519a1b57
SHA1acccec593a13b430b8ad91a86348746a6297a241
SHA2564e7eadb4532d0fd22c6e97de7c296fcebc95f3b170ba3643da02f997bad24e7b
SHA51281e79d365c3f7d0347e877e19d9ca2c492ab059381b54be2d7e3941268bf50378527d3980452ffd1f27d5310791a4852096093706847c742cb2a917227455f8b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize192B
MD5cd6c94347ba854129096e63e2674aa80
SHA12bd3bf159e343cd45a43c4da3b5cd5bf509b667a
SHA256b2038caef94c3df886631eb073ebbac940c2f6936640337dd7c3dc636bcdb606
SHA512ba7bfe5d2787ac53da52f62b1dc64c1f87c7c00149ff74a285f53ef37d42be02eddb49c5843cf23c6af98bbde0efb1e3502670e9a7c504f89ff9843397331068
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize704B
MD5723c9ca1371d04dc3c56a66d54e46fe1
SHA1cb341c39b77524008da37312340221091f70c2a6
SHA256702f0a46c74550f4e1c4bc00fb7fea4117357974971bcb58363bb43ab3eae3d0
SHA5127785c00640c22977af163ea68cb3326f490b913f18da0fffc00533561e3e54b63905a3bfed2762a92101fdec4ae907b3da98b9fe01829bb4e96734c2c54cd8a3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize8KB
MD5675f0de77bb92f51deaab062403ac73f
SHA14e2ed088b39d77c7c3f578dfab372d240bc0b2c3
SHA2563ea113bc187d6b27fbece410582619c5f875058c0e63beabddcdae9e1e477f1a
SHA512f269768ae54f0dff7fd7e7251591a70e0330174ff6f76ff001c0ab343202e35bace305f0daa0915bddad66a8fc7aae0b900939f632a6e2727a6e4726a61f09ad
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize19KB
MD5a75041157c90bd3ff2042952e38a2d1d
SHA1329a49fffdd68c8f91c531ac0b3b82ab36ac1bd1
SHA2564600fa128a11fb43179810c4192b6c414eb6f4987a19db887855d54f246cfd01
SHA512a1eee21a99323093164b0cd3551c8406103b81cc3070d730b42372990c36743dd3c698f857064a3b424b073c296a420d9c8f13b0a755d9550579297c85aa36ea
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize832B
MD5a10b3a07a6c64e027113eb14b79943e2
SHA1e20ee4d9c94ee8fc5b72502c7a8aece66915ae0b
SHA256e369eaf7379490e0eded15021d43de5a88c019fb173186de33d0956e4e943642
SHA5124c6081c30c183fc4bac74acbd0c0b4d0a53896f22bb3d6744a31e9682b37c3ec4d3460df4e624a9457961bfb18e5738f990880ad64726cfa9ad79980f7252687
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize1KB
MD55c56abc436bbd0b59a3e82cb511dc65e
SHA1fcf299bf78158f25c333cc296802cc3783e3f658
SHA25694f7baa78cf9c76b23292c067297c60e544467f0d254f3b6f681499e17e9a318
SHA5121b842199580cfd7f087901021fa6b972b62adbd6e501893b28ab1493e2fbd7c1ca0fc314c8c598a856f5219893901f32dfc4f0d8dedd884126c318016b81776b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize1KB
MD5a3bba77accc3e2c316f295c3315fb0d8
SHA1edf1d9d6ccfaf2460c0800ed5671b54fa53f73f9
SHA2569caf1945a675f872627ab0b9f1cda1c0b84318eb70552c38e188b9a3cfe9d398
SHA512ddc22df8548753aed0c05fb50c35fc7ca2fa2528f1d416f91c9f4b7e2c8255c3a235a72583b23a985f0ec124d9b9a2cc7aaf857f802c754a4554abfb8f35a5a6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize816B
MD5b534617293b2240300007f92d73c903f
SHA138419fa428ec958ed6dfa0ef1a75fe1631c4f5b1
SHA25671ce84f19285a0a19f8e55bc1d526e5b20de8119280567098f81ca94b37649a0
SHA51251752fb653029a5d23ddf9274e76886ca6998072c0cb43c8721bbf63fccea4ef721bc1803448447060274b9da44d23158d6de41fc0b4d9e9027a4048db694f1f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize2KB
MD57f363717d362ef4b6ceddfe743d8de43
SHA1c2974807124490ca971c9b443685fd02986ee5db
SHA256da287b05a0b11c776f84fc15fca71dbe0c65fadb0ca8b931a3abf41255bc3b2b
SHA5121cb7370b7f4241b43ffd5b410514cdde1816f226dada49a79a51134b80e38013237eda865b757e4e3eb56eac93fd6e2cdf994a1bb29e1d7c702aeb183a9e8c7b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize2KB
MD5b6bdf1cb394f09fedb6e00edc92cb66c
SHA1883451848977f52f24f5796a5d3393e57a5a64e8
SHA25699805cac2439f556d55baf4eab5f3c88376c85d174095fe717e3d09f915316e4
SHA51205448c7c1d461576c1188ef529fa932b9630862a3686e49ecfdfbd2fe0cd2ebdd4029b4896bcaf0b9c35fd442d7a1aa5dee788cafd1651673ee18bf3686bbccc
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize4KB
MD5aeff020004552645bf5ee01065b59391
SHA1177dfa9e10b69acf1da6efd472439517cda552cb
SHA256676cc57620a41d60a66bbb331e47a8213034e774515908afe5f9516653e282dc
SHA512ec998189c7de7ed29d72bf466ef7f70d25002dce950be56d1456e1ce20c36ada8532d6b204c0d1b8ae36eb43d0a754ad077c279357714ad65dfb9b8b1a2c0144
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize304B
MD56577e2f938f49981c7618a00bcfcefb0
SHA152a5b3cf3be8d878d1776693bd67db43533812de
SHA256f53f930b176efc48a6ffeb2dd5a0f3000203a8fefdef79285ef8af574cafc58a
SHA5125a5c2977d36a9a602e50b41c84fafdf6b5567914419cb495933252e7a27e217ef7360dcdb69c72794b2b1d980a439f12f2c178c22b4abe661e6d37f74bde53a1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize400B
MD5af5c8ed222b78270b5c772e2cf4377cc
SHA136d4282cae61ee653e567849e5cc50a9e0a986ed
SHA256e24fd27fa8bdf05fc0cd996246379a9a8b6e91b32e59b885f920ccf0afa0c368
SHA512af70907ae7f976a664ef51bfbd978e445bd7ba14fbaaea8171dea491878638c9461a7464766daf311fabac5146d32d70da9a93349ef4b8a05f25e43589f84e39
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize1008B
MD5459aa1847ebf014dcce9d8f3ee049ffe
SHA166adf265ff087f107c8d7c7f5c5a85fbda1f8f30
SHA2566fe14a20b50a5f07096bafb86f069bf81ea498b14bc6e07d3b54a55f62308dea
SHA5126a55a913867fa1bbf1c67c2099a43effd7b902fb746a64ce71b72ef81544880e898ce061d0705c434b895be944af013155341fb28931ce8617a0ad3b4857ec4a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize1KB
MD5ad6e05bb2e92c5ce66acdd694383779a
SHA1f3d39f9ddb2efcc8bdcbe72fdfc0c31bf9e8260b
SHA256da329f3028892f0dd1bb738fe3381b34e4a2da9ee7e12c34c12ff7df9ca53bdf
SHA512f8b0724ee8e9cc6dd1ef64aa417ae76546e459473832628b7a0423207d76f362058151ae5d2f5e005fa91a5f9a9dd1c0f09378f4423a839e5bbc441cb70edef9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize2KB
MD556c9e95953a75d63083349ce0cdfa7d9
SHA1daffe4807d044ec58d4236771499eee1a1797725
SHA2566b815ad3d482d1826fa1e7d2ad79cb8424e94e0e083abf39d1c7a98bff5f9e48
SHA512f71cfeb0e14c4d75d102b51b4685d1f439a75e53fcef6df2dced5841db9aba54513c4f07c28c34ea63cd16c0c6c23caa8c2bd9121b2feadff268e3eb3949f5a2
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize848B
MD511e66e3d1e39c2a10003a6a240a48c96
SHA1ed991493236be72c13a39273820049278f0cffb7
SHA256e768540016a4df6fcd31fa3c10b82e08f2ed351fa21c0dae6bdc007114ded209
SHA5127623ceec057f9d3eeb99bdc3b21f23fb6feb120c8cc3f226103c395b460d44cc55ef42517b7cf4cdde8ca4f930b58ff71e26264a5588be5f963d520dd85c9e5d
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.E99F1BA924953849D5AC7561E2F3068100A4011A5B3B0313C334F59CB1AEE5A4
Filesize32KB
MD593b62f5cad1516b2265fb596fb9c6569
SHA1487775d93648ce48a75c42d94629f5e3aa92f904
SHA25694352120bb756b0c67d0376d82886a21a75ee83df3fa7835e8dac795f7893fc8
SHA512fad2b272948119d4e24b6a6c6249bc832d9181185dee18ec5f89932aec906f291c2653a003f41341a0791524be9124c005ac4361147cd8d1563b6c46f64c0346