Resubmissions

03-08-2024 09:15

240803-k8dqgatema 10

03-08-2024 09:06

240803-k2thcatcmc 10

Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03-08-2024 09:06

General

  • Target

    InfinityCrypt.exe

  • Size

    211KB

  • MD5

    b805db8f6a84475ef76b795b0d1ed6ae

  • SHA1

    7711cb4873e58b7adcf2a2b047b090e78d10c75b

  • SHA256

    f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf

  • SHA512

    62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416

  • SSDEEP

    1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON

Malware Config

Signatures

  • InfinityLock Ransomware

    Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\InfinityCrypt.exe
    "C:\Users\Admin\AppData\Local\Temp\InfinityCrypt.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    PID:1660
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3432
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    16B

    MD5

    66677d715dff7054f8d093fb6ec203ae

    SHA1

    8cf84966984d92a63a275177bee759670dcf9ca5

    SHA256

    d1f2eb889f6fc9cd89152408da39ca68fb737d0c2266a4039e9e5218f58628f5

    SHA512

    520496fee8549e1a1bee1a040dc11db14e46a9a08d2db49ecf1f2b9a9c9c9fcb74ab2aedbaae018fcc3737ac8d87957dbeb722b6b8345b1145182d28766d2d20

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    720B

    MD5

    44ba38d79f55f6921a6f70c37b4e3f99

    SHA1

    3a3980dd21f1782df0b8dc90f987cb012397974b

    SHA256

    e7b3bfb6ef96f3f1fea24975cdd0e32594f414b3c365ed5ad6d76abc95d0b83c

    SHA512

    ef201481f35279a31314e30663026f94b4779b40f29bf48a960a39c5712ed5b9ee3cbb5f48051ee8decdf311cf8294cc367fcad178fd8b0bef775f4ec46ec1d3

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    688B

    MD5

    8db93964b398d94876f377ca797d5340

    SHA1

    d1bef55d8b3c37a6e56c0e7d8dba9d630e4a5d7d

    SHA256

    be078324ba2d8b69018bbba63a820ea6e60ec7fc737d2a418af03e03290b3be8

    SHA512

    cfb417ef70afc525e8edabb6cc8a9e9588596a1f1a9a1be2380726a11e28e2bb7fd92429b6d36c1ff885b6a44934bd8eb2fa4da2a2a28df04e405547556ab3a4

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    1KB

    MD5

    0172b569df4e8c9f2fc6e6e364dc2d0b

    SHA1

    accfcc2ba8aa6d403385bc5e42566b658603f599

    SHA256

    ead2f4fafca06e3864096bfd71d3868f65a814960d29358019fff0979e125cdd

    SHA512

    e6453ed973596a6229f13ce2c541d83fa3c07cc15634f24ba1a8716643e8de9f537a0f959ddf8070d49cfad22d908acabc53edd9f3e8817fb1c211cd9c2609e1

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    448B

    MD5

    bcf5fa31e571084cc3496894706bcd4d

    SHA1

    f9fc920757e3ca2faf08156bf155221689d0a31a

    SHA256

    20d883c3af6d81610f197de0de08a5b6697c7ba4f7e349be17ce186b16a042b7

    SHA512

    38eec60178a4731107c172a9f16716f5fe222f8988da5009e3db51cae4b498a37e114bc4178a890f4846dd89b5e88341c678c7bec1a9adc13052df0956e59f10

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    624B

    MD5

    fa075bea2023b3694fef0f63875b0379

    SHA1

    aa3ed31be26ff3d63aee81b9a3f5fabd2697352e

    SHA256

    45185d684517f8c722862f88517d51ddd2e7b220623f5aae0382a6b7ea08fae3

    SHA512

    e1bc93d8a18c43852df1a659a660a03c6054f9222b7b36ef8635a7f46cca317eaf23cf798bd2f124858a3027e67bb17fe6849f5581037bad92878fc7fb54c468

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    400B

    MD5

    cc30517e5fdee8f2af5e7124d5074cc1

    SHA1

    9e7961c27ed52099e4a906c7ea5a929f4bd7ec82

    SHA256

    4204cae708545701adf021a1cd4a8b5c3173d802d9f0f82e84863cc3a4dacfd8

    SHA512

    7ba246bb314cad08aabf53c5b0a65c017c0c563a3aabd9c137ada7f3d897490df478b0fbf5a96b727fdb660ad16ca2d59d9664e522ed7e6c21e3a5f92debf435

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    560B

    MD5

    d397bdbeb7e795fc9b82a7b30bb9b7c0

    SHA1

    b4bb7e85b229712a8fedc5e693c2f5ab7ff89fee

    SHA256

    e1be5b559718f69c04c0812bdd33689ada8b9ed609d553438d3436943010392f

    SHA512

    554ad06e145eda0dee128c32eac901c9d7f0fa42f6ce6cac8970c0063bf8685410176a19b40b80614c7e83c8063d5f48e010ba7395343882e48e8da9a2538736

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    400B

    MD5

    bf7ecf3fef4306005ded5d5c64a6cde9

    SHA1

    3f3878d76e4e106f2740ff01a24bee914c054d3f

    SHA256

    69e62f278e91d164e91bd0228cc44a0ca912b315b97ccb22bce994b57311a415

    SHA512

    91aa4ee4db3095e324d0deb99603954114c5cec1acb893f21f27ee410539369d16ba9bb0704f1c8b43df96794f7924a79bb6949b91f8eaa369aef79137409c71

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    560B

    MD5

    14f40385d0d73b4e02368535eeffc2a7

    SHA1

    022fe84171ac48e5748fb4602b9db47c6456d075

    SHA256

    b7b11d43eb6d7b78153346671c184ef809d6dbc2b3e7f732d9f9fa022bd4b8af

    SHA512

    696caca55599714fa3d5e4cdc7ae7901dc49473d1d7e4c9d356a26d5713abd07f3cad413c2eb7dc50438b3e4808a7e3c77465ee5431e67944c8c850a2a4ae082

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    400B

    MD5

    72ed76e49b8db81cfd17e54bd67ac4b9

    SHA1

    6bc65e42a6dbbd32ebf6c6540e65597e819257c0

    SHA256

    ef74f474b1398f70621d30a9f34ff5902aa6b2a500b2ee75c399a07a8c71c2ca

    SHA512

    a5ce5b60d556ffae5f7a279d6143228358681b512830714d1047a43558046610524d70068525823eb2c9cdd09d358836a697d385593e327f2bf433544b687de1

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    560B

    MD5

    0e3118438e8ead6a41d5f60419087896

    SHA1

    80f07e3eac6244dac1f044a45e0f7aa8e8fc0c0d

    SHA256

    1e2529cbf5be02d34b3faa8e7a6bbc8fc88466c9c899b8a40d9906cd0d83dd59

    SHA512

    bf9333ac7c277760ed019b61b5eb52768c2e59542a7d3ecf6ea6cff03507e2a3e76644f49a64bd0c8d56401df1b3adacfacebfe9f922ad38c9269a525b565879

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    7KB

    MD5

    592776bd6cc4ed728624307f6948c098

    SHA1

    50ec5836d1f55f3f3eda0658e537e537e358ce1d

    SHA256

    131368a59e2747e941a8b78e08c26cee716183fd8d4709d5625f99a689114e44

    SHA512

    650caa530eb1aa4704ea22050128be0e0d1e6284d324fd9bd3c690a1e39a689a214802c0b4c7f7d80137d1f6a31a61f5f35b7852a9846529032e2552cf541655

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    7KB

    MD5

    b2a4993ca6ea11a641eb8451ddcae162

    SHA1

    40e0850d5037ff33774b579bf60189168938cc7c

    SHA256

    ff8e941be60d03d608ab70bfddc91f71fbae6a012c46de582805fc8e0a6f8573

    SHA512

    c1286dcdb76b7efda5e401109cc299b5d5a638e2618dbaeb37ce6994afddb6989a400b98b34a119ae70fe830a4cb217d26e8d8a6fe0754b0f72c6fed5472fc75

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    15KB

    MD5

    cbba4f134ac729b81cf05cd406ee6b04

    SHA1

    1bf9b2e2375a74acd78e976e6d0c25e3ee969600

    SHA256

    5e92b49e339c9083e16f07e0fa03dc95106f223fe1b938778853a847c0cd527c

    SHA512

    8437220b83c1d2238132914e692772262707ca992ca4a5399eac85573064f2aa9be4602031453e8497240936a13fc23ddf37ad6f95b156975c8a8286e93c6a8c

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    8KB

    MD5

    ead923ef9f3116da11244c6bfbde73f0

    SHA1

    43ce49eb472133d0bd138a1cc90c3cc046106b06

    SHA256

    0d528358a5b47be49c8d5e4cb3554b350320e76d1584fdd60babe7867d9ca0d4

    SHA512

    d50b9f8414cae58e94a708b78a1ea0d7aa9669e3a1a48f8ea74523feedd171194f6b7d86bba6c8c233ab936def7779f22dfa8fdd4fa91c24870aa6cce59fc7f3

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    17KB

    MD5

    47115b6bad275768f296f4a0a9216e32

    SHA1

    c0f4f3f55272291deb2cab763fabaecb09fdc995

    SHA256

    bd8742f0a1a88bee57c7051bfedfa75fdeb3bf76a5fea40aef2a485cddee26c2

    SHA512

    0e776060e0dc245f104dac23f41048bb86be7b2d65ffb69361f030beee48a1d15e13e10769c8cb0a795d270affaee98799c82a6b04a3777909a8ced2f05567f4

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    192B

    MD5

    6c8785d6100c72f853ca8f7bfa6ef3b5

    SHA1

    c9865922ed87a21feab5340e48f69c72b7d45fa2

    SHA256

    e751155789e047aa7cfb16ee88e4d9f08923919991c7c4189916131fa4f62545

    SHA512

    9e9c707477cbc17358456fe3349215abbc5128b6dfd568cb03f3496784bccfbdb26d08e1301b5dda12112b1176893ecbe1a6c2a0bd0da0925c9e0847eb89dcfd

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    704B

    MD5

    c0dccd85973caa063ae9704790bd0ac6

    SHA1

    11260d0da7054bc77f354628d90c2763a604de1f

    SHA256

    96d405cde8c8c24fbbff530c45bede3325831011d477547afc2bf30cfdf4a5e1

    SHA512

    c42a76c2b5987e316b7e1402336ac7294beb630b157414d54a887159cd47e2ef130825dd9d491943c1f03d56f973e700577a70068c21e39fd415a6c470f9b6e8

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    8KB

    MD5

    d1715a5746c261e68524221a1f357788

    SHA1

    2067f59d8f607b96398e3ddee158b058377a48b9

    SHA256

    d2e6c2abf7a7f0c87b88bd337c1849de45ab53ba0aec9903c447b3878bd98a69

    SHA512

    62090627a8f2445eb61b4c78385f6d96a31054d1ee2a4077a3f61e82241702582383a6d72507374acaa6b34ad7e905594d4f367d80e2a83042b8a425d0ebc14a

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    19KB

    MD5

    66e1daf06b8e3e63154d6dcdcc72c178

    SHA1

    6ecff5d5052100e7ae399b297fcaa1f5cbde18bb

    SHA256

    addef4813cd8830c15b6d4c21167e6dbe40b98c34136358ef58693727d4bd753

    SHA512

    cd730998dfc5846c9ee42a2894f0bb90aa9d9e96356c2cf6ac15d3904f93bc0b1550e7618b211e21a20d675b233c8a3ed6327fe67c69464a45b545b83636e43e

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    832B

    MD5

    190c3fc08edbb1e66cd1ad087246f603

    SHA1

    99b056cf89e67d21a9745f65e78ea52cfb2e4a3b

    SHA256

    bf843a7c59e9ec48db8fc327aa0838c295610fd2d041fd7600651046fb122598

    SHA512

    c166b1d4d3e3ced96261fcbbf6157588a776ef9206c3b9a701c72282fed8f25d3fb34db7d0a07e210a4e17de7e80c6b38fd26928e226f5bb12ce0c241c24d063

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    1KB

    MD5

    6d9fed3ac9ab5337f5d3587622dfc0bd

    SHA1

    b6e6ec6081525f55617803c191ca70c652550f98

    SHA256

    8bb0a278821f716e3210c62bd235c2e8cc0668e5fd224ecaba1ddbb7917c1f8a

    SHA512

    eaef678a03c982256c9ebfb92a546611bedb208e0a511341a4422cee2eb5de632cf4aebfb5942a18ef60659d0e7dca6936e093ee4385f25ac00de74a9c47ba22

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    1KB

    MD5

    8f60ee9af85dfc50a4d23393632d4bf8

    SHA1

    e6e1ea0f41891e50103835221e247515769690b7

    SHA256

    1a551e0c8120810d0257b9c1356fbe0c71f8ac0d56e92f70141ffb6a4abce5f0

    SHA512

    99f63037b1f4585195f14f341dca5848c518f4bc28eb35814fd6529b93e5b656690d6623d1e3e7eeb9ec62afad996d1f6064bd13ed173c2f984e089198adf692

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    816B

    MD5

    5b7cade110fb4232a359e80509dabbb4

    SHA1

    3d4b0a937837e96e6782013d00b002fab5cacd88

    SHA256

    8337b92eebe1d7da2261f23d48b54bcaa98349292b59828d3ec25a1425950a81

    SHA512

    74e411904d5ebfa120a421de9a60477dd79d345f30074f901be121ecc08a3803675e58036d65301483ebe5fb307d91e1c7736cb7f736367a19f3822f9094cd7d

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    2KB

    MD5

    01b2c820bc9b4649a64e9e011210c4d6

    SHA1

    7842ec934adaee7114728a07b8f92f1a1af368ce

    SHA256

    22241762ce97bdf2ce741e08c5f2bcef42fb7106b6a62d7d2e064cc8e7c8b497

    SHA512

    ba465039376c77bb3d8502f85b61313f93d38bbbc053c48316ecddf3e2987ba990c25c05a70fc7178f567c1395d0f99fbae26826bcbf1b02464ca7069873fb91

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    2KB

    MD5

    6756db96a1993225f66839fb3725b379

    SHA1

    8a4433b586f58ba93caba9fe240b435fa13a285a

    SHA256

    4f0e40d312ada4cb516316cea35bca9b10c8a55e2f46f56f685925c1bf8f0d84

    SHA512

    1d345ba71929eb0a1ec749d71680ee607b52c40c8dd2d4f0f4ab22dc6ba67f4bbc0954b2c189b5c8ddebc7182743b2e08dee40b17788b4479485db4e98f4b150

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    4KB

    MD5

    082f4a5fcbb1e8f3926966b6f379cc31

    SHA1

    1806d7786c86902bc6a6b836f8f29172b91f0aa6

    SHA256

    dfd21a6f26e41d71c8716bb3765b27ff326a982ecca51c579c42220bbf64ba9d

    SHA512

    12350fc5f55b5139c7735498d8e52e7bdf6ddcdb3422747435bf05400443ed50b31b2eb662c98871b266dd73087d6e20f1c6627fdf7aac55d566390a1d748cca

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    304B

    MD5

    aaf8aa49806dae969e7caccfa0fac3ab

    SHA1

    ee3b86ae3a7233ae052368cb1701165e5e16c931

    SHA256

    9bcc2bf6a57c1deeae85b6446ff7e7d67e4fe75b95ac6f8fb096c29461d83b4f

    SHA512

    82a90ae085c8dc3278ade06d5f568181bb340023122cb802a23c1c174b0d5bb4c62ab0c0728157d43eae5be3928ae7b974d278047178cc5e0572a48b1a4bd9a7

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    400B

    MD5

    10f7a5d751b3bdc1e520c78c7d4bc896

    SHA1

    102c0dfb7ce89e3e8b249c7cf2ed31dabbc7d22b

    SHA256

    3857f3af38e1e185fdb4b19dee9471d5f56e9170bf65f49d7f9a05b337dbd9a8

    SHA512

    0070b70c6ba04d35df38fd14aa5262c1e351162f5cebc78976fb5ba0d1b24b2deb3e468ab5588c5f2e488e0931e3c16e3b351667b2ee00306bdf04197f4b1281

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    1008B

    MD5

    0e87fcf0df1487f2efe1c29403136980

    SHA1

    ef3e2a1c3bb8666a921ed1e7ef4ac42f5e67e7f6

    SHA256

    93c240ad5cd61700b25df73c9b04ddf5377a4afd04ed2ae3babe559ce8b03141

    SHA512

    5be09c23b588a414f417d682e39cf2145d904c662a9ff54bc1b8324c6a604c979f3b5a4d40883800e2bac034782bc6a2b0a774cd67acf1a34de61ba798dcca98

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    1KB

    MD5

    69875d1d9be6dd4a63b8bd3fa68c42a7

    SHA1

    30d288aa3efcf8fc356108297878cfe565417f6d

    SHA256

    ea31061c326157f731df28e0d2fd57c5b478c0a886294fa90f7e7a0fc9556da7

    SHA512

    39076782c9988c89fa802ab8c2d9f514b6c0e47a853bae75be8f007b426998454fff850ced2b17da5f2482187c27ec3f9099e84a4246cb579efb08ab33e6c70f

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    2KB

    MD5

    1bcbe1df9884000b2afc4b1931c88bd4

    SHA1

    a6267ccdbd44737505ad46cfc49821dbac506299

    SHA256

    545029d2b6f76b340ea44f34525c079ca3c5c3c29d7cf709559bb9216bd9c65f

    SHA512

    ec09e5b4e1a31468067dd70d220e4dfca6343c245b50d9eec0035577f42652f47c1db386abfa11867fa3b097deb039e5f61190cf73af81d49f3ae73420bce403

  • C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    848B

    MD5

    311b626ae775f8f506445531df179730

    SHA1

    abf27fa11515e278c014f7d63accb77c0711c389

    SHA256

    86650eef6adac10adc4b2c45cb09a00c9f2c134396957fb07801a0f7382e30c6

    SHA512

    949cc7ab15eae8d9fe0e58fef71e9cbe108cbf980da6bb062cb1cf97493349f31d023b5d471e1f0451bdb641c00feb99a2afb9e3f56826dc8bd815feb47a1f8e

  • C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.61D5CC31EC31253E9EF9F71173049BF81458C49904E5BF0625DF91E666EBA1B5

    Filesize

    32KB

    MD5

    eccff04fa93a9778fe8b993e822c1694

    SHA1

    99818992c8b5e5a1f11f3d4162feea2dd8e4b4a3

    SHA256

    d5045a3e2d7b5ec3f05b2d057a3c4a1dea141b73c7e6c5121dbb1f141d583a7a

    SHA512

    fbad55fa7e51e2ea601bf59d5e970a95109febe2c1f730b0bbbab4c21b8f3daaf776e3c6ef3929aa572257812f46d4672570fb35d15ab5e19a3bf5290a44d641

  • memory/1660-7-0x0000000005430000-0x0000000005486000-memory.dmp

    Filesize

    344KB

  • memory/1660-4-0x0000000005330000-0x00000000053C2000-memory.dmp

    Filesize

    584KB

  • memory/1660-1-0x0000000000970000-0x00000000009AC000-memory.dmp

    Filesize

    240KB

  • memory/1660-5-0x0000000005270000-0x000000000527A000-memory.dmp

    Filesize

    40KB

  • memory/1660-2-0x0000000005290000-0x000000000532C000-memory.dmp

    Filesize

    624KB

  • memory/1660-0-0x0000000074C8E000-0x0000000074C8F000-memory.dmp

    Filesize

    4KB

  • memory/1660-3-0x00000000058E0000-0x0000000005E84000-memory.dmp

    Filesize

    5.6MB

  • memory/1660-6-0x0000000074C80000-0x0000000075430000-memory.dmp

    Filesize

    7.7MB

  • memory/1660-2887-0x0000000074C8E000-0x0000000074C8F000-memory.dmp

    Filesize

    4KB

  • memory/1660-3303-0x0000000074C80000-0x0000000075430000-memory.dmp

    Filesize

    7.7MB

  • memory/1660-3426-0x0000000006600000-0x0000000006666000-memory.dmp

    Filesize

    408KB

  • memory/1660-3427-0x0000000074C80000-0x0000000075430000-memory.dmp

    Filesize

    7.7MB

  • memory/1660-3428-0x0000000074C80000-0x0000000075430000-memory.dmp

    Filesize

    7.7MB