Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
04-08-2024 17:33
Static task
static1
General
-
Target
-
Size
211KB
-
MD5
b805db8f6a84475ef76b795b0d1ed6ae
-
SHA1
7711cb4873e58b7adcf2a2b047b090e78d10c75b
-
SHA256
f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
-
SHA512
62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
-
SSDEEP
1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\rename.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_fillandsign_18.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\new_icons.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\et_get.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ca-es\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\EPDF_RHP.aapp.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\ru-ru\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ar-ae\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\aic_file_icons.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_filter-dark-focus_32.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Download_on_the_App_Store_Badge_it_135x40.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\fi_get.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\dd_arrow_small.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\cs-cz\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Microsoft.NET\RedistList\AssemblyList_4_client.xml.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\reviews_super.gif.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\flags@2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\hr-hr\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\nls\sv-se\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\themes\dark\dot.cur.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\nl_get.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\nb-no\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\uk-ua\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_folder-hover_32.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\acrobat_parcel_generic_32.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\plugins\editpdf-tool-view.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pt-br_get.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\en-ae\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\ko-kr\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_checkbox_partialselected-default_18.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\uk-ua\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\bg_patterns_header.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\js\nls\da-dk\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\fr-ma\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\reduced_mode.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\ca-es\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\en-gb\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice-install.log.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\custom_poster.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\de-DE\PSGet.Resource.psd1.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\uk-ua\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\EPDF_Full.aapp.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Protect_R_RHP.aapp.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\drvSOFT.x3d.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\rename.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\adobe_spinner.gif.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-es_es_2x.gif.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\sk-sk\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\lv_get.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\en-il\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\selector.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\Confirmation.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\rhp_world_icon_2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\nb-no\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fr-fr\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\zh-tw\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\themes\dark\rhp_world_icon_hover.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\zh-cn\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\JP2KLib.dll.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\createpdf.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044 [email protected] -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language [email protected] -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 [email protected] Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString [email protected] -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4768 [email protected]
Processes
-
C:\Users\Admin\AppData\Local\Temp\[email protected]"C:\Users\Admin\AppData\Local\Temp\[email protected]"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:4768
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize16B
MD5a72a414b54c0669256cbf28d61e7ad61
SHA1201f92d7197301d285f5a768fbcfeab8f16cf968
SHA2561d7e60ded7347e33a5316120bb3ba29a08ce39d2f9b852497d60d0c7bb61fd5a
SHA5126a6698a9d8524597eef428b573188d6fd032dbd7e7e63e9241bac81de3dc53d3de118434e955b63aecff5929574e691a2821fb7729cfca9c9cf1a9e12fb187a7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize720B
MD59996e42e49505208a7f6cda21c67b14d
SHA187caffef15303e70a0897b118e0dbdc2c5396985
SHA2566bfa95d12fae9c6ff27d64d76e6b1a6f57501da524475f647bb66935a7f819ef
SHA512e9ea958c38ac791ad84c4dd434c367d8d44fb99f8dd2e4e309b6639330741ee303a637c0bb75b5a757dd5e8bf357cb2f65ffd5711c1611daece2e256ad94b1ba
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize688B
MD52b5b7f0be924b9dd3dcdf8fe146a775b
SHA18b9cee626f48462296a907d66eb5d75635d32e6a
SHA256817b8a4746796f5aefba509fe9366717ee41368a0c0e063aa74b5f5185d1151a
SHA512878d55927e00dbcc45f60852ac06bcdc23b14488370456eef2aa0bb4e4b4816c279b044a063f959509b86a3fde73223f5209b8cf1b9e5d4c5e8c55e0006a9cea
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize1KB
MD53fbd7909923734bcc965e2c48ffca579
SHA1bec672c8dada359fe73969c2ba67401a887bb5a3
SHA256689ce90867a05641dd01431d45cf73e0d5bdf5561a60619f58aee9e5ce9534fa
SHA512e38ddd80f0bdca47388b70f714c8b2fd29b9b833bc2d7c06b625dc290c0043330e99c78aa8bd22f09197a0085a46c466109ff381efe091da91c20178b4f24619
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize448B
MD5d22bc49184afd0ea05f253714dafdd5e
SHA1442857c71601e8092b9839d40ea98d7180c8c4cc
SHA2562250ba0919b6bab4c716af776f21ca0b835d6678094271338da8cd5f032cef58
SHA512d1a2d821fdcde1936824905ca3aacf354c2b5e3debd54634a275dbcc31d310141c5397af046ca77269b1e87bb7c80ed227a3d8fbac706fbef15d8a382a4b9f8d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize624B
MD5eb36a7fe05611f3c1d11bcaeb639fbf0
SHA181f17682b850e6ebd54e8e61820c4da8e06471c0
SHA2561e40cb2b1a2209fea8a84cb1adc76e875cd48ec6e51f57db9a232a885bf1a744
SHA512ff8a7397bd76056e6676e9371494c86e0faf110e7922893b0f3c0ea5ee9db16c224c43b41f817c14b963dcd4a26cce3ccf397e138ae5a6db63f0f7107d705a2c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize400B
MD5555cda81770c0bd5f9e51cd779825662
SHA1b60bf1cdae3a11c6a8280c5ca06d7513e977988c
SHA256b1673576e6e4f214a42616d790a9d20b591726ec678b74c67f9b438d93d71221
SHA512eed56118150eb2de7a9f11b257a6e05060be21a648e966843aa2193c855555cefba6ff929ba259203bd6731df927ac7c18f5a3eb1cc7f86bde1483c3e96e78ec
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize560B
MD5a2b7d5ea516b3b301ce93a609cae9d71
SHA1c0fd4ccfebf26c78b3410d0ee7dc417c55b41121
SHA256b5a00df4a887656b4d6f846ced8f0332033774e1021f567b5d5a12800ac40fd6
SHA51290c171c694b13a02b28a3eb1924753b929f8f5d9a43875794e5d55861649a34fc36263b34074d21b55f1e689aef3f86b54477e960c4d526b569ff7a9ce1bc179
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize400B
MD593cd4e8f6f81035574157c8c30825373
SHA1209cb86e541ad0485b35424b3a7f419c9e359a7a
SHA2561098d4e86cadfe122fb90d3dc42fdb734a44499eab1c979e07165e190fd61f97
SHA512aa102d7df565ce1fe0515eeceeb018ee27566099605bf69441595d4b84ceb969bf6952a2e4cd641a3441cc4b946616118ef3c1a5c10015e8915df639c39fa2f8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize560B
MD54b16ab510ae2afbff11d5688c4b74251
SHA128eb1a1a284d7e025794a2378d084df4db69244a
SHA256119cfe5734af1d09f9bd6834a3401750ba76bc1eabf65cc0d859a1242b43cd30
SHA51207640f8c7ccbca81266123c8cc1c7c397b82f3130028e9229b1dec18eef5dc1a2b611bc6544496013f5decbc4727552e6b74b2a2fd9d254c787f226188b02d6a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize400B
MD52784e51ccbcaa916888f391fbc9c53aa
SHA1e8f000dba37cc062c6eb06e936ac969db1dace45
SHA256f3b38583834dbfb274e5e7c9efff954c6af525a981cb785dc4b1bb75be48e484
SHA5124538038ac2bddc6894f9005d13a1c4ea8e628fc507c4238e858a2caed62d4b65c54567a97fb66c071c7d8c232e7c056c1ce6f5868b5f55c8949477cd810a5f9d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize560B
MD55f81d2348e5a0f11a665c917d3893023
SHA13c36f0d046fb2faa2088f89b317b1cecf125307d
SHA256c9ec28970202d8aca6e981800edd987d5a38bf97a1e7f529f630bfc42571c478
SHA51206fbe72a32f5bee8d96a6c5ece7ffcaa61e56f978adc4c8491d5679749ed1d8c9ceb2036bf29698d51c53f46da3329fe3dcb06c326abc97b0ace148c6522833d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize7KB
MD5b5b9fd7ccef9d9bf79ba5a69de1f7ab7
SHA1867030a9100433ca6ba389ceea9b08cd58421521
SHA25613fe8e295a02c9a1ca587f563dbebf5bf4db31d4f31f5d461ae1d5d951c1c8ee
SHA5123732c8cad4a6b520acd4a34ee4ba36f2bb9555391563796982a4fdd9b504aa1e0e1923d50a3ce896496f3430a10c68e281c22eb6340761e7e0582ec2d45e5b51
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize7KB
MD59bafef15dbc68c3a243200926d1aa565
SHA1f9577612f40f3ff61e2e073a263ca71e1694b193
SHA256b2a6008053addf83b49616f63d425ab4a170e7b6399ac2c2656bfce33d04a312
SHA51249a873ce4f2146051e9532aaba909e07cd058e81dc59d38071b8d8e75a7e0d719df7c56b2d82a8f38e89755207e486d304892a5aedebafa84a7d7be216972a85
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize15KB
MD594540567a4e3102d8cc96990b6027a71
SHA16210cd075f0c288fdc88788ad33417d9b3ac63e1
SHA256e601f64de831cd65ad52fc9affd6a35129a138d4e2b82de14ad6ef62c643bf85
SHA5122a70acaaab5010a2a7135e74881479e6d5b7ec6bc2bfad985fec61221f4a1e0bd0d66fe98ea388c97fa32ba8f35ef86659c97aed3fc74e787a39c4a9c1be29c9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize8KB
MD50e14bd5396c4b0500fe1429edea4355f
SHA1793c4435e008b391e18ff8232810fc2e42c494a3
SHA2563f7d7df45883c6e342eb09b9abc5e44f7cd2e8dc491fa2310a6567b054607732
SHA51240c898bf6498eacf718621d776865fe5b9d9f9bc8bfee8039ff91063126c6a20130c4a877818ff5249fc3a634eb01f3b3197ae4c97e938225ad0715ca776356a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize17KB
MD5b5b70eafd4644d217f9d2c98c36ce05f
SHA1e422851a92795e3c8ed216365c33a7e47608cdc9
SHA256292019843f647f19f9e674b8f4ef60ad1befd23bdf33cdd9cc5dd67d66663fcc
SHA512ab74974068b494877f46f022057ded3ee03c5d8ee026b22c17ddca0b84339e8c60b2e0f3ef6af6319ede21e906483551c575991eb6d5cf88a0cc74954b79811a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize192B
MD5f0e45273088da9933c7efd8772305385
SHA12fa786af49d0f134713873487a0e4267c2c4c5ed
SHA256460d6a42e8e2cfc34865befdc24d97c9229a3ead2eacb463340b84a26c1a25b8
SHA512ba92803c89001e2a8c99bab50ffc31237f6fdda714a871bd80622a2ff30e508b7c84a3566f3ee3baca93cbf21d699608a9165285464239722ee50875caa966db
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize704B
MD55719ddf31b7c4c92d2037d1b18a8da97
SHA1838983ace71a97634caae8e10b0ab716af35c793
SHA2569686afac90ae03c36958cbcc7c6405bbb5ef21879ce559593895f3843937a542
SHA51228b2552cf270339469338ad7cd5ca0601080fd218f2fc4a850d2a27b5a09add822b29d0b7271ac79585a64a0978861e832ea33b4dfe650930296f07bf4881dad
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize8KB
MD545829f46328caf52edb5bc3bf9a38206
SHA1ed85bf2ee42abcc3bcb0b3ca404dd8e87c7c41c9
SHA256d0683f50398a93b1e21fc870b93958530382733c14696008d6284576694bd663
SHA5122db900b21c85ae224ed7a983a000afc80becbcafb2328e2607bc779e695ae10a0cf3b0fe59b802a42194fcc40073db7c5015d8b55e9d8ce84df04e0c55a567aa
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize19KB
MD52d663e6ed97c0ff46c577e4e528696e5
SHA10c478021331a56be9be460c44c4886e26eafbff3
SHA2567db4b74bf4648ea251c3d0273186279708d947a50c64609eb5919fd7877f753a
SHA512544b37021f74498c96265db90d2d32fdd56ad60d9f77272cdede937b1d6e2909194a0b3e02e8f01fc666c8fae18cd4e2bcb92a61ea5528d6a4b6f2dcbd37e2f6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize832B
MD5a8f869205145bc6daa00108d09ef3d2b
SHA1e5a3509dd37963209d466776dbcce987b0c2fc6a
SHA256e81fa1c2c855e5003ac1214bb319e4a8661e79185ff056b9e66e0ed084c5d0e7
SHA5124544b2a2595c57a7b790ee1c64f5ddafb35fc92860db02bd37d2b0a5e9ab204b174a7fa2d028cb072d5eb823a0ec7fb98938b521c434a0e7ab0fd1b893e40ea9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize1KB
MD5a523e272434fbdef84f1fbbb32582e06
SHA1ec18e576d4915a19bf3250df58279d4f2a0ffa13
SHA256837c9aeae6af52e427e47007a627b027011703271716fda82a5764cf46ee36d6
SHA512c65da8415dbe16220143c3d081ec89038c118d6d1365a758241fad16eef014ff09e132e7b4ae59e85b1c5113127ac7806da3091925093823b318d40a2411130a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize1KB
MD50b9803c886fc8d76e55cfd4525352049
SHA137eafbd858b4bb36a2e3447fa377d198a5ec032c
SHA25621bdd8c94e9d2a909f38eb95fbac5b8cfdf51ab52b9e454c9484fbf2a11f13e2
SHA512fcde20fb8a771126b9d9d946d84dac5ff2d1f82941e2f774a9e7a61408609b9ba50a93dae27b194984afc505875a2460ff0c80db183718dbc7ccc3db7e69c6df
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize816B
MD5eeafc62fc0227ab7e7eb5bf267f0223e
SHA11e98377d3d0792a1f05f5548f7ddd9d691cdfa36
SHA25633ad5b847addb71b8c9aca41e5ef1b64d6bc8d168ce2b52d2c536e8c85c147c8
SHA512cd1d934948da70e6959fb123eecd376ac0734d92443beafea9f88b1f2bcccb58830833f827292034839fdeed1261960f81c2445148f92a7d5832b231c96c5d99
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize2KB
MD5fd56aabc43223e7dfc93a3a11ff01c15
SHA1487616e2d10c7a19290ca581408056b1d57b5905
SHA256340ed0edd460690d0fe0d9c9564bb4252e265e3777f2b23ec025e6b488686c4a
SHA512a0e0d6e2ce2e4cee5152bdfc4fe960bac2466a275b73c4cc36c4416e187b4fe015e88af4076092e8aef18acd86c29a3a038533bda1953c9a20f2be028f0b4d3f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize2KB
MD58c48abfcd47b129586e1e6e048b42eed
SHA1536219bf68277758940db96e01779e1d704b3c48
SHA2569f9f1353cb10b86c771987d31f4e8fc2ef18fb40c1843c6ee0fcf7a63d0aabea
SHA512c0d45cd371532237a1d6e21b6e5c36bb190f37ba1d544efdcaca2a25d6f5ce34b9469c383fb4e10b46621f708bf924a776f995f4567be3935188b1468d09166f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize4KB
MD5cdd3284431dd6de4ede525047e184b7e
SHA18da3284f0da6ed73c5dc4ee1813de569e93a7fcb
SHA2562270b1567439093b344ac4489c17e40f0876205781955f76b369090cc483fb25
SHA512a94735ef21803a6e4a44dc8e6fef264411a14faf686252fe8e1a4d1a45aff2f632cfb2b8fa8b27d762b97fb1b50c98c76865fb6804f2d3896a2ddb7b91c47224
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize304B
MD57efbda6608a355f9d38646faf2014a3f
SHA196c187ae5944a9c0b3ffe2e1616199b37cb32829
SHA256be51c9a8135776dbdcc6f6b91571b34146a109a7461eb18388a8856cb5bce9fc
SHA512924e8ce68d19739a7c1c9e2d802ecf0235ed60739851962414df3fb1f533b710f64bcdff1672d0e1fccc398ac6ab924193d9953d5119e1be53cd320ee7402c62
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize400B
MD520d2e7dd523e9336130f6cc1d74ef0a9
SHA1de6813e923a631c9c3053fac86fb6c91b2e16fb1
SHA25699836337a9b8e365f1c67d9e381c53f0e84c7cc3597da13df0cbc3f2338294e3
SHA512391665b1c14f276219b4c2fb2050e9f7c1df5e912aa239d4ad1cef51210ad71a81c0e38d50090124d2ed30da784f9968c5e6ad8d8ae4fcf4804db8717ad8b0a6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize1008B
MD52b0b284e3e204b48168188ee8f31c27d
SHA108b7852405352c67112293b31e26862ec10c5d81
SHA2560aeeb5376b1a876ab9f3af1652f0b2806db1458adc827baa996b633ad88ded3e
SHA5122231f77d41c539d4b22f7e405f316f3926b98c0f62a728f4613901ad1cb673b1b21de9631aa7165d6ec9e88fb533d4b17e2cb23ce6a5a6fd4eb85ebbbf2c3e6a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize1KB
MD5d5418abc8f521dac094f58eb65407ef6
SHA1f1672069742cd48b5eb7afc27b6a6f4b7abb4561
SHA256b003c181f9f1088f577a459671b797e0c804f11205ecdaa80bc3ca90509361e7
SHA51210daad7ef9c574f1abd59de97896b333c08b6b99d4e39633bed9e13bcb533bfdf7c7471c42311cbb7687feb37d2460aafdf1e96142206a4dbd9f11af6dc24a63
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize2KB
MD5c2aafa9d22b776c6c7c45b4412eaadbb
SHA1369a558325159ffc6600579fbf27505180d3a642
SHA256110351bbdb396319dbd48537260331a773cbed89fce005f07defda07f71344d1
SHA512a78fc00d6ad5324a34a08b1610c9a5285e1d8d2eb82c97aac2c34fb8769d2a5b3f76b82b5abe179f15f535b3cd38fc288876a768569541f4d0483ef0a133f5b5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize848B
MD5f23da72879b59074b38f91e348a985d4
SHA1332efcd2df90e3d4424fdbb2decfba1bb4d92e1e
SHA256ebbbb2a7927a5d70760d37ffa31c27e229c772a39f913ca6fb88348db5d14625
SHA5123cdf1b1fe07a22e4f442ad7a0512ff01d2e593524a8a8d3ba3e547ee07586a4ee84bf3ba1a4046c5917cf8d16435df35690df500baf52f1ca0892fa015f4f0d9
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.421D5330D13E302BFEA42E4B8F0C1235B75599C7262C31AC42AAB1CFC7F31044
Filesize32KB
MD5c8f4f95242c16f83cd86fb294e2e2441
SHA1587e2f127f2ed738110416305d45ee9c06629f60
SHA256cd0fad1a1e228ab161ed0182c51eef5d53cc805ed03063b5b87d45147cc1de66
SHA51267950fdb260b4871407a0d0c6cf0ac2884dcc75028cf395d31b1d94fde09bbeb5ea06edd6bd43fcaafbac367e25f8d2f6bdec6a9c3c30dd21cb9d0218211b8c4