Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
16-08-2024 10:15
Static task
static1
General
-
Target
-
Size
211KB
-
MD5
b805db8f6a84475ef76b795b0d1ed6ae
-
SHA1
7711cb4873e58b7adcf2a2b047b090e78d10c75b
-
SHA256
f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
-
SHA512
62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
-
SSDEEP
1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_editpdf_18.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\PackageManagementDscUtilities.psm1.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\s_radio_unselected_18.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\fr-FR\MSFT_PackageManagement.schema.mfl.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AGM.dll.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\natives_blob.bin.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\sv-se\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\js\nls\es-es\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\themes\dark\A12_Checkmark_White@1x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\logsession.dll.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\back-arrow-default.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\s_shared_single_filetype.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\pt-br\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\js\nls\root\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\selector.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\hu-hu\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\WidevineCdm\manifest.json.DATA.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\review_shared.gif.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\S_IlluError_136x136.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\HomeBanner_Dark.pdf.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\it-it\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\nb-no\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\kk.pak.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\css\main-selector.css.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-rdr-de_de_2x.gif.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\nb-no\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\images\example_icons.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\es\Microsoft.PackageManagement.MetaProvider.PowerShell.resources.dll.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\selection-actions2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\es-es\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\root\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\check-mark-1x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\icons_ie8.gif.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\nl-nl\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_proxy\identity_helper.Sparse.Beta.msix.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\fi-fi\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\ru-ru\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\images\themes\dark\example_icons2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\sat_logo_2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\selector.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\A12_Spinner_int_2x.gif.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\example_icons.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\fullscreen-exit-hover.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\goopdateres_iw.dll.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Google\Update\Install\{95408F56-EF00-410C-B74C-E876227BF0D5}\chrome_installer.exe.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\Pipeline.v10.0\Contracts\Microsoft.VisualStudio.Tools.Applications.Contract.v10.0.dll.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\fi.pak.DATA.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\measure_poster.jpg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\cstm_brand_preview2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_organize_18.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win8-scrollbar\themes\dark\arrow-down-pressed.gif.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\pdf-ownership-variant2.gif.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\fr-ma\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\hi.pak.DATA.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Common Files\Microsoft Shared\Filters\tifffilt.dll.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\RTC.der.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\EScript.api.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\dd_arrow_small.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\hu-hu\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\new_icons_retina.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\s_filetype_psd.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\ko.pak.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0 [email protected] -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language [email protected] -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 [email protected] Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString [email protected] -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4304 [email protected]
Processes
-
C:\Users\Admin\AppData\Local\Temp\[email protected]"C:\Users\Admin\AppData\Local\Temp\[email protected]"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:4304
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize16B
MD5d2999b8e9bbc553dec3135a36ed0c178
SHA178e783097106f9bf345343413f818bb040e0baf3
SHA256e89c224657f5ecd4352ad202f8e052e5951e0b25c01f951d965cfd577461be67
SHA51213db46f56ffa091e9aa36151ae2b03a357e3a90e9b41272431e9641d4267ac1e2bbc1ac6bfec5d336c73ad361b3c42f50a20ac60b3559e5bbfac72200b61fc9d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize720B
MD50366ffa9ddf842d3bf2cd414f0609040
SHA1be6fef736d0eb339c17f869e3c935fde8951696b
SHA25656af33b3861960c6155e630c887a9d311f0f056d8aa0fae10633d8c963e21580
SHA5127f2b905ce7d0344713cebbec08bfd561e137bc5b2d3dfcde8b2dc59adf2bf0f81e9ebd32f08392e9e5d05f91e4e17eac7d875b8e46ea909955f67faa651153b7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize688B
MD5f9dc6989b5e2b2d2a8666597fca0b8f5
SHA1bbc012e83e20febb91ad30b4efc52c2afe2f3406
SHA25699b64724ce879730c5eaf13e22c74b1e687849b1b85415db6f8b378f9d9bd337
SHA512ae91c803b4eb4856882b38849f1481a587d9a92356d28baa275ff1375f15ec5e55c72466aea753e4d45534fc2d6c82fbae856acab0a2541da872535a00f3f24e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize1KB
MD57a88711b054b7c6be7dc33400aba8a44
SHA1ee2b84ff7339ae3d98be58b85604d66ebc3f11ac
SHA256c95f671a9ad6663ce8a85a6ff6119fa54bfcd38d683a53a79a285d523544b88a
SHA5126f676169e7ddecebd86aa05c947e831e2bc5e408efcd8bc432c9613597272151a7f7feb9e6c0e44acb09ec0dba24f7d18a82cba1d15ac83bdd564f80e98f5fdf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize448B
MD5c14cf7ca69f1c7b34831fbcc834c264a
SHA106ce3ac46ae54d6d0f4cf01ff6aeeb2de47657ff
SHA2560de937f479fe311a9452989f0a089fc9def39c6ef905911c4ed0e5c3f3bacf2a
SHA512c91f754f45492b6d2ec5851411251b0b5687ae8bbcb7784bacaa4c966840de74ce2cb64b0869fb36d8ea838b5c3ec7cf4e077eb16735e9464a8d9fd222ecf23e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize624B
MD59520351830d24837b5c595be17f91bd4
SHA1b31cf543ae96fbe3d7106273b9ff23f7bc184ab3
SHA25671a314dfe5859cc718536f1eed7b0a63c559938415b08654f463dc5e97a96ff3
SHA5121f94cf378fe0363c1837e43436e450dbcf3b3ef67042b994f8a52222f34187c124ba2804d6bcba0562bac51e6624110cd322ea14300855dc690cac879e9a6023
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize400B
MD5e37b03ebc3aeb6beef8037e33d3811f3
SHA11789f0213a95edd4ccaa2e5eea04baa31280b48d
SHA2568c6166ba65ba4e01226423967ed0a48ce0c51383a4f9f9710a099a138677b758
SHA5128c9ab0f6621b4b63233ae243e8d2ae6a703c3b315db24c012cc65f3f7b76881dedad47fdcbb6f893a648ac03705b162b09e5c75cb5c01c0c50f422a7c5ef7fcf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize560B
MD5dc8f7e26df4cc3babac86cbdf0b399e2
SHA1a2558be42ace26b99b390783940416a905e22410
SHA2568126124ac421f54239387498bad7e7dfa45dbf8baf95caa3d3d7e1b8876313f3
SHA5123e8853c687a832807124b83b372fbef5cf5c815887b5e9210310421b9e0268833fe029f28d40f119f4f946b21a567cfd26498472af6555ce61f5459337eafd73
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize400B
MD51090fd46a081782438513cdd2c34b13d
SHA1f7a8dcbdfb80db25570d73bc34a5ae08bfdb3180
SHA25684874d8f5b84d09d5f20aad38626bd407ede1233e32b195b2e28bf0ec7acd15a
SHA5129056b42cc8f553edbdbb5acae4cb0bbbb433e7ba24eb6d67ed29b8fd93873bce925d13b59cd4664710c5efea47d3d11ffe6f94a9f5f2f73486329f492e6254ed
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize560B
MD5e2c0026b236c733a2716e1549457335c
SHA155a478a45256f558299cc2eac7fc0e756d4875e5
SHA2569f91b40451b52ace9511536be27066404c5e4a4dcb7738c6b0a5c393d23486d6
SHA51212485919f1c955f089c936f7864a754a5cffb04822849c9b6acf144fa75fc57a8d5989b058c9ced6ae0450e11cee81e410eb21eaa40a1fcacda0cd258b25689d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize400B
MD5d665257562b53fd49d4b4b6d469fa03b
SHA1dc1042f727a87e1e9e2d49a420589bd16964db8d
SHA2566ccb8aa6797629f786759758056a6264d578bd103ca82284f03693e106a1ea39
SHA512a17109012f4d8174bde8a5579f46f887c0fe6fb9df1d4584dbb02087c0f896bd30b2a171853cf0499a9ae2a7c033d3f250b1db7e7c67fd95a86285c4c67a61b6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize560B
MD57675fb63b625140f71afe40dfbd139ce
SHA156f88d60d14fc5d40b7139b1ff58738f38b21dd3
SHA256951299baa6eca8a1ca1379b3f4957d939edafdc1599e4677942764c45eb0e407
SHA5126610c15134b303492765040539e10966b1a26b77dedcae228e1341db44517c58db8df5e96044188bb73ca04cbe9369e6b4a7bb911d95661aa23edf6519183dd6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize7KB
MD54011016136de8928754b820e4555745d
SHA176f7358dc8df6decc4e5af23710f89288d4a94fd
SHA25653bee7f697aac9ae8fb76492f034694d6ab338a929bfc894f9aad7f33b50bfe8
SHA51243a3d63e22c3f2b93ba94e4efd278cfd53c23384312056f97c1317d17e7861948f881480c0f7b3ea13f530da3155355633d667c2f6a3b127632a5f704d4b9119
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize7KB
MD5f88d5f1a7dcd64cc11b9588fdd33febd
SHA13c240287822f851d08e32078dc86b507eb688c7a
SHA256f9249156a5cf224102dd65379e0acd659b122884233820c8072a756a153bfe56
SHA512aafc724ff217ebc0b27a52fd064f860106dc735a06589896a8c26c95effcf8cb6de8ffe72df3b86c78b864d5d83c195ca3335e07ba55773a8cd711739fb45289
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize15KB
MD511fd3b6acbdc1637aed336bd2052d1f6
SHA19bb9c13850567243dbd049bd92a517edefe6f34a
SHA25661cdf91a1a195a59d67868f1659d33a080f08d95070a729fb2088541a845e361
SHA512ebce336fb773742aae49d485d7cf617386a452f2258b3c2caf46282ffc367ed7fbedc500d2f2bb2a15f4cf71155cb25aa23c43d0d59c4dc2d84d9995a6a2c9ff
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize8KB
MD59490696f54b3671402ce116abed90b66
SHA1651f9393fa2f725dfddba2bcd2fc9af74a89257c
SHA25668cfed8b7a8b30738c614f00d501e0691f98ee053db481f606c6164ad0efda32
SHA512c5c80f46ea889df62bde317938523569eb9c0a15ceb82ef3c6350bfad9a6d450888142b5ecdecf7f8bb29d2a9b323712a9bbbdb36dd2a4103a697a6405d85839
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize17KB
MD5b71a8a780fdf967368572690aff0abd0
SHA15816f4f1ff0246a58992a37bd801189a271e9687
SHA2560d38b54991d90f4dd73b12657e3b6b4dcf00a7398e71a9a726fd9595cbbe863d
SHA5124c869e6a2b5b43a5dd6f238b8e7b03eb6245f61b10d3a82de360de23380c09f67128f9321dd4ae76531b76e42f485d40eb14be946483fe6e35ef123a94ada16a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize192B
MD5cb213a3fde3893b5733ff9cb96c0f5a3
SHA18f52a3a872d187261865c53278d815d1a9e9139d
SHA256c678841a4fb4f1942c90db8e9bab644d8b1c4e5f3161720f0f3ba00fb9fb38e4
SHA512bce9025a4273d9e623f6e840d22f85897608fd6f7f445676778b976914c529f9a7f66ccc4ed1a82f35ec8fcd1444e52732dcf97aed860ff6d147636cd50aaf4e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize704B
MD521188edcad86026012119d9aea4da93a
SHA124d4b8e3ca06115a57a1a744be5d18ba56c9d11e
SHA256b28101c2b9524cd92d97d053e09f8e456cfe1bb72fd5cf762bb1f6c55914e2e5
SHA51228282739b3004c36d50fa96ade4f2817860a5a88c99a674a72000aa271cfd294f3aafeea1ea2c9f1c5c623357777ed6c4d866521390023e9b90ecc6a6c4a4414
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize8KB
MD583cde4bc1a10b9daa04f63016252d4b2
SHA1bd8499807fc9ad6cc66be3e4cbae44b0a1596dba
SHA256d7e8f2adcf87b765dc955ba2bf75988ab9a6ad3cf5d661929072a6babe5c4f16
SHA51223518501aa23e07d8a73388df2389fa4de4e3c6c043f6919cceecc49b7464c24b18a93378f881794a8e9f0ae993cc980c43445364007edaa8863307c4e62524b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize19KB
MD5277cad940b908af6b240444bbdaf21d3
SHA1def4a2c375202e1c4931c2cc5c86b5162ff067d5
SHA256f698e12553a8698611488412a696caae503d92b0114e9479fa47101832260d92
SHA512983673d96c2daaebf77ef16b6768ae26a15f8e9cfc3d963888dab537b26b95286812a3b396f878fc90650fae2bbe58221ca19fd2d3c4c81c62fb47b0793a49ec
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize832B
MD5c5de843ec34dea893ee01af8d03b1b6f
SHA125ca059f3a4458df14254fde3222b567bc2c06fa
SHA256a5131a24e62e6128b448e3d36805adfca255729d87bc7c6bd5e0b45768e0bb54
SHA512db774fb516da45930509e75ddd3f84258dbdee0ea2595c68d7dc992b701f134153299f3247c5fdab0ae0fd13aa6f3e11c8429cd13f7b2d7e96f609343aac9e4b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize1KB
MD590837d0ef0423c221f9f059a84b1483f
SHA1bc08914f978365b3fef555839be7aa115b9a2ab4
SHA25611f626834e742851d18c6157e4063bbfd6a6d6033d927d7546a8e6731abb1a2b
SHA512575e9828c540baa3f0a74582e08a149a6ff7ad104136d287d8e94c808a234aa902d65df27307f925b340cc10496d2ee46f95937fd5d12a13765f55cfa212f5a4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize1KB
MD5279c33cba7761abc068291020a17e4ed
SHA14b8ddca5433031a4d40f48ce5f7db7c68d52f75c
SHA256788e028cb0062f5cc47ab6fd7b00206732771499f136664286a6baf083f06d7c
SHA512db75acc8638c20bc2090b7b089dcc2c5a646ee815fe97d9501954f3c8dcf043d658c487d4105093b94e0d336dd17a0efa863cb7a22c94b9cfdefa3a2525ed24e
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize816B
MD56523411c209d212563db134cf3e1abcc
SHA15cdcba597b4f7d20d7159e472dac26c2e9d0e738
SHA256ec114845775b526e616e68025f17b1872d4e2a80b7fbe38faa4d5d60663790ac
SHA5128b09d97cca89124155e4b8e364e110ef9a406a49757e87e3a1d2c79cef2e64633a2c7a381f711096b09acc6647e62b532fce096e179876dc972f151bf1dc1a9a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize2KB
MD55c2f4c23f1180bfd2c99f15635df156f
SHA1e3a660f836f9df1a7735f53c46a8da0165540663
SHA2560099a8311ce3f01e93105ce9126b93596577a972fbde033e1ae97ffa02d43f98
SHA51221d9450b1d46fc3992d268702396c843a9572210cdfda5940b85295896b7665033cd08874ae74deed1c1752c2b839800931e9a724c6dfbe42576e049b299f943
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize2KB
MD559d3a28d77828c8d13792ade0d74c4e3
SHA151ef1b23c2a9a8682bda2b1ef6fc643690380eaa
SHA2564d461a680f5dd09ae2a22ca24c8662e3068c3a800ce1748bb38ee0a0fc583fc8
SHA512d0d569395ab984a1c8d0d442c2972a1359b3563a232c29d1cc05b38000010f14542ae98aa9c0f224054ac1ed46b7b5f77e94840e891f720fb0ed8abc6cfb8141
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize4KB
MD5083f6abff32a3c7bd41e52ccd8d3e98a
SHA1d008606ba0f443580dc4e9bfbce0a5574ba6a0ee
SHA25630a9ecd40f6353dd8d0ce0c6eb6f0465fc9fd41fdabf642b44db9af1b57f497c
SHA51222ceb4ade84fb406da35cc56ad09194846eedf5b4a9316fc04c0c5abf663022325b1608a3fc26e958458e644f3a92d0b6816cf13a1e153f11ed7f6f4544410f5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize304B
MD5d50a41c10eed542d81c42719e2466173
SHA1d4bd7aac8cb1c4006d7d3a3e798728724a48a08e
SHA25657132321ec99a6435633e2764e8a45d6f6789c854e212e315bd42e41780b3dbb
SHA5120d58064ed92aa4e4b49c57dd4aa09b40583b043a5b657ec1e27ebecd3600e2b21e8bbe9d1ae0493ff93192d8d734e1b35cfbf8fcdd08de7e5b7b1fcdd879ff13
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize400B
MD53849408e65250f036b71c2b0d0eea128
SHA19e9d1ac155ae009bfbf2c545e6aeff2bfd4b2789
SHA25670c39f1e2ae0ce8960d22e259ca285f55e4e8b731d27cb709a69871ae8d3bd95
SHA512d51bc932b6d721952d4b323ab617cd23006a47109839febab52a421c296331091047791acbd4ff0a7e564f49a1bc45f778d0221bc52fe98d5cbbc86c1887bdb3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize1008B
MD56045202dc51fc9796126af7b0bc0b961
SHA1b7c13e87d9185e03e725e25d5881687f43c9bea2
SHA2565b37403fe9fbf62996dee4b0eec4ae8e2beb475635137919a2678853a397a343
SHA512e5952c841da092fe3cbb88893a7cb3591e0da1621c10323d198de6dcc92e10947caec739a89e93773e1c31bfe19aaf9301146d73ae8608ec6b3f543b549bc8a9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize1KB
MD518b266fecfd58547e9ecf834ba9027a5
SHA1bab27b425aade8b65eb52ef66ba3264df142900c
SHA256808d3fd7312b7d923d652c86dff451468ad140ab3c98fd28c3389368e633cdae
SHA51266cf69c3b7e9823d3e5f04f44917203aef5ac7e7416ab0f1192bb6c16b1c405f373a8c3c091c5c582d6ba635fb61bc984b9328ec25d54beb2325afda540c7db8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize2KB
MD500b796841318590e283fd8a19d8b5029
SHA19571111d41222ebed8bc23e7aff096b1dc739025
SHA2563ae4c94d02874d47a664aea5ad53d99bf5c386ed49fb646e3ce961e3427dc103
SHA5122d5acc2a6d70485d2496962f50a99fe3bf636556f80b58ea4cb1f8e34e5abf5afc43ddd6b8117b49bf021260636c6d8bc024bdfb941c428e5bbc9b41034659a9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize848B
MD5ba74eba3d4959b6cee0d4d55dda9dabe
SHA1bd3494126a4f0250e8776a69ef6600de6a28112d
SHA256def1e6b565296a13853693591e28763ab98804088034408719f03e4e463304d2
SHA512be477b49b4045296202c6ab3c002b54f62aaeebeffcd5e9c4efa807e1be5d7b52129989801fd26f59a1ef9b3387634242b6ae3c9d1b843bcb423d0cc6584de2d
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.5EDEF14D870A95132E624C76F89B52964C5FC05E194CF92C058499221F26FAA0
Filesize32KB
MD5781b39419fa8e777fbed34f90a6b9bb4
SHA1a6d3a735a8734b74f0bcf576f607226581026ce3
SHA2562abed9eefd0690bb81b190b06860c3e819ff03cadc61f69de2c9180e226009de
SHA5123efbbc83858f859ee865f06c3be7275b2dc7b1a5a7bd0e43b7e9d67a9805ae435182f5a89af4296dd3299251ee547fb5e8b1b7c273201ebd3f9b22ab0f75c66f