Analysis
-
max time kernel
28s -
max time network
30s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
22-08-2024 00:15
Static task
static1
General
-
Target
-
Size
211KB
-
MD5
b805db8f6a84475ef76b795b0d1ed6ae
-
SHA1
7711cb4873e58b7adcf2a2b047b090e78d10c75b
-
SHA256
f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
-
SHA512
62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
-
SSDEEP
1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\cloud_icon.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\uk-ua\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\js\nls\fr-ma\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\it-IT\MSFT_PackageManagementSource.strings.psd1.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\root\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\IDTemplates\ENU\DefaultID.pdf.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\fi-fi\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\download-btn.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\SearchEmail2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\da-dk\AppStore_icon.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Adobe Cloud Services.pdf.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\goopdateres_ar.dll.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\EdgeWebView.dat.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.195.15\msedgeupdateres_vi.dll.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\psmachine.dll.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\js\plugins\exportpdf-tool-view.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\css\main.css.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\cs-cz\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\css\main-selector.css.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\redact_poster.jpg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\js\nls\it-it\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_link_18.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\pl-pl\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ja-jp\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\br.gif.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-ae\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\generic-rhp-app\js\nls\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\themes\dark\bg_pattern_RHP.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\ar-ae\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\illustrations.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\mi.pak.DATA.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\themes\dark\s_agreement_filetype.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\S_IlluDCFilesEmpty_180x180.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\ko-kr\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\es-es\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\images\caution.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\pt-BR.pak.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\identity_proxy\identity_helper.Sparse.Stable.msix.DATA.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Locales\uk.pak.DATA.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\Microsoft.PackageManagement.CoreProviders.dll.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\Checkers.api.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\aic_file_icons_retina_thumb.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\s_filter_18.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\@1x\themes\dark\A12_TypeTextFields_White@1x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Appstore\Download_on_the_App_Store_Badge_ru_135x40.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\selector.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\core_icons_retina.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\mr.pak.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Trust Protection Lists\Sigma\Advertising.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\server_lg.gif.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\s_listview_selected.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\text_2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\cstm_brand_preview.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\de-de\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\fi-fi\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\close.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\MLModels\autofill_labeling_email.ort.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\tesselate.x3d.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sample-files\assets\Sample Files\Adobe Sign White Paper.pdf.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\ml.pak.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Tracker\review_shared.gif.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A [email protected] -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language [email protected] -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 [email protected] Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString [email protected] -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1624 [email protected]
Processes
-
C:\Users\Admin\AppData\Local\Temp\[email protected]"C:\Users\Admin\AppData\Local\Temp\[email protected]"1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:1624
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize16B
MD5b664b8b29da0d257d1b9dee846421304
SHA162086108e9dfe04cfd99d9ca4a7a5bdaaf5691a2
SHA2563ad10ba7242868028545c6adb527be35670a5803205a4c78c79af870170a32b0
SHA512f031041eb087e453a4c4e6f72b487b468fcd440616785de23d4e5bd63bd7876ee2c888590e809f76a1bdbaed82d71fb589529b34e4b5f986a3e6eac0cd66b588
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize720B
MD515b894973f9d66d8107f506760577251
SHA13cebb854741b98daf69dcb6b4accdfa28cfdbbc8
SHA2564343b93e33491bf31f15e3ec639150a0f464aa304837f84c9c6b87b0e09c2ab4
SHA5129c0e40bfa993a06b1e96e32f4888d474dc0e871eae23376ee88981db8c1bc67a1c24ed65b15fcd9bfa1a2e081b05388c51e6fac5dd3f4723c5fe1b107aa4e28c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize688B
MD54db778f65c40eb03bd326f2d74eac8e7
SHA1332c12bacb92a52557ffc270a6bc49458981d67d
SHA25611da8940d7e0ab40cd15a62b9dc10aadc72609752e6f11c79b07ab595b0ba0aa
SHA512adb78f365c34ac89826a5efd5c4ecd57863b9629ff8037f7cb348d4117e8131cb7367473705b25ac3de353ea0cf71fbb7572256380a18c98a0573ccdf825faf8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize1KB
MD5138640bf3e59a6bcf90e747e471914af
SHA169d857a91763dbbe184f604b5e0862887730a6d5
SHA2560b1786a655b49c9896453b45966aa4ed71c3388778c2c378f45bacea559eaf7f
SHA5122feac2f6aac4ab1fa7dd56889818c0ada1f3a07a725a4e221046aa07f6e67c937bc262387f20cefbda149dd06add5f8f9a9e80526dc0f9915a3cf4f29a20fd77
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize448B
MD56a86b01d0d1e31541bb28bf462f73598
SHA14e7fe181e78728710b8b7fabe11df6cc6c1dd706
SHA2563c9cdf261c13ee70a3c0529e03ed377df5e01fd886d820bf2763d00e5bc43188
SHA51230acbf2e41a17ea8f5c6456afc3dcba37544cec4d07013d0ff1951b5167505acc70649fb10743eb640bc620ae0a3bcca2c0c404dabce442b7fb30890f765c81d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize624B
MD5d7c6b6316e0c59e9f3910adb72d78519
SHA1f11b7cc3390f15a38bc401da348fba797270594f
SHA256413b81cea4c3687f747b038355e7efda7e7281df3cba0da62ad215f4e9973781
SHA512812a42e7987f58082c9d08f53b9ff1ad92eb92903ec21d15d5ebf2e9d681a1c9287b5444a88bdb1c065cad7ec81cdde710b906ea474f1b54b043f2115a4c3d58
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize400B
MD5d3092f8b03bed5d7a148e28b81d4d201
SHA13dc28882e8a4cd5f78e8ddba6e6680140984e4a7
SHA2563f1509563f3d40969a6f527e80d3744e8cd61883b1b77a1b6b603861536bfcd8
SHA51281a62bd5e2a4d3c2a472e4a4d0cfb301f4fe826bcefb78fc6ad257cd8c168b516f73351100cae34852e5ab793c6f4017f6b0e562b3953f95d37d44943a47cef7
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize560B
MD531166fe0be31b3768e48fcf55bf5a2af
SHA19cd0df399524fb665f6601159ed13e6e0bb1e7a0
SHA256270a1346c9ee3546b75177cd88bc4b8da3ccaaf295b9092826528ec8e69ff05a
SHA512326c790cc3c5caee8c5d7adf7197c7b2ca5942b968e28a47b19f662a9f20f97938e8a6a9e364c4087185383b8966deb11e49bc603629e1206c754e21d683af06
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize400B
MD5bba426f4c84082988d888345e1f9504e
SHA13336865ab9bef69a97fbcfd2e6f216175abe0077
SHA256a09c20b5eb86010f45ac674c344af4f06df9d56d36051c4574d66cc453289388
SHA512997749698eedbd76168094f9b675856774c3600d0fb285cefa7f6ca5b93d5e14a871f774c6196151673d5622185647c95e4b51b1fead3205d8538c05a0b6f9a8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize560B
MD5067d0fb4af86a63a87d2313078248542
SHA16cc8fab543ef5f0a6881e80eb33e1c53f44a84b5
SHA256c2d9fb157f5e990de898e7a438d6e704cf798340b9fdac5b21cdc282deaf8b69
SHA5126dd63097180aef2610906b38cbb9c1463c52082886c9e39975ed6b3d39d4d25df486ab9e49266664863f77ea1c4afeec5ef5b64237f8f71b04d9a3c472f30edb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize400B
MD5c4a632008216253b2c31007d9f43fa81
SHA13debfb866b033332a058acfd13460e33cf8b6336
SHA2560c2427bc1892b532f91a885cea3bb0f1ec9349c26f7a17849569db71b2a712c6
SHA51281ae793464e9dfc8f2ac91a910ff65e207f7bcc75c860bfa6252779bfffca2ef10ef98048a80fb7b09a37520a4c0702b28c37bcfeee6315d67c7172c9294860a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize560B
MD545730d4449db615f27c43c386cac7113
SHA172ecbf8297436314daf20225b228b4e60fcc6ddd
SHA256d97a103314447ace15f52e9867a92f536d2e4bc5594113a7eeb1f5945bcfe182
SHA51244856934ea707cabfad15e507f2c6d5f06aca50ee6816a72317661a38262ee657f41bd6f5c873170f73a8a112e9da7c937da4f87751e6a37f4e084b2bc32bf17
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize7KB
MD5f0da862c02a4d90ee2d808c23dcf60d6
SHA13e4e4eab0c76a3895afcd0426bc5285bf73f762c
SHA256477a4c7b55c93219cee2be3622458b1dbd0b215a9622c919776e3cc7f1db8819
SHA512ce5713b6f8ce89a5d729d80a748f5e8e12667e2fa111090b50fc37cc1e0e9773fb044060a177f42ee5dd1fff8edf21578e7ae39465b8979f59c5d72a01117319
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize7KB
MD59a6cdd0dc8f335ad049c25b6b527a845
SHA1a7bdf5224909a1bba6db48e9f7e6c9d33037193d
SHA2564f6ae97dd45e2f9a7f6ea21d648897bf9645f86e716d001bd8eb908cfef6c099
SHA512f9523cbc65cf56918fef1b061ac9f8b532d9d511ef95c6da33ac4e9b050358d34f97c9943dd561704fcc0444d5cd5b11ab960545d27a41816cd575e57daf95bd
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize15KB
MD5f15a9f78d179607be8f85af80db0e08f
SHA1f61eeab402bf979eb16e8917ef9be448391d1a71
SHA256176954cee283bd69b56f7bc64a661d3b46be55c07bf64efbc0af27ae3d4c3dd9
SHA51254a4dab82588476c675f4efca7a29565cfaf3d3c18091ecf3d7e679bba2e821dd90310d113aa19efc415011148fecbafced2c3b6af2063bb40b41a0cd8abd089
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize8KB
MD51c35a6bca6b1780529e6046232b6ed80
SHA10bddfa887e581bec150fe28e630b0d6f25494067
SHA2561b26dbbbdf3998ca5267444660ad18b5e9562b8b22789c13a7daecd3da0658dd
SHA512919c38ec4c5b4123f7ae3f7930065ef9f9d00593c103844f483571a0b65a851e60866439e75d0dadbc7abfc30e7e6040c599ff55108c0ccc7a6c59e6d1dbc72c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize17KB
MD52a3a05179c909f55e90733fc9f0e071e
SHA1fc476ae5a3f2049e9305648659978423427c9a7f
SHA256fc44744d7c9bc136509456a1daaaa2586ca94dd289b612433d717d17de90d7b6
SHA512d75bcb2326405fa882b6116afe29ed29cbc10f487d72527bb8886ef126d46a69a11aa40c404ff3bff928998be2d90e7f141912a427b505808d2278304876f381
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize192B
MD59666f5003795635c45de331f1dfe68ec
SHA1f4a1218d455f29d322e3cdec703069135edb7dff
SHA256d8184de7d592cd6cf4f062254778e02e4f866ade18000e19cd5840a93e4bb7fc
SHA512218782f01a84cb9248a15ce3148ee3f7c7a05229e1c15674aab2e8d014b80083e50894e7cd2f6eb40c533ee6a5d34979da2536828dfa4962e96db9b51f71620d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize704B
MD580aff21694c168fde1ad5e8c5eea11f6
SHA1d71110f1dddbf15a7dff6e9172eef126446751de
SHA256f38846fdd036b5a419e9129756174675299c6bbcc1501bfafcc40fbcaa79b31b
SHA512a4eaf859ef1966a34507d3c22be74d8cde07293fd7296959b558d8531db0ff2416f68f62b8d23914c648b1c7c850a3eb87b90e8f6e0a1c18a66eb7a76f3010d1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize8KB
MD5feef9f2449b283010de9cc2f1a9060e0
SHA156addae56d9ec496cfa5b2623e179f769e153501
SHA25630281c935858d40aaed372ffc7b30e760e2faa02b8bad74ff8776e8fbcd6986b
SHA512beae0ff169649cbbc5718bd71f08bd897fc6399830c49f448aa9ad7b91d751451d193aa92b5daa9cc9e948815e0070e5ee3aa1d14c8aa47958be8e8fa3771536
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize19KB
MD5a84e7e005cfd4a0702c187dddcf8a4cc
SHA1b1a30ff46f4523a81e894b9bb963bb8bed3e466b
SHA25612a221b725f334d4a5205628c57025ba9037e695832c2d6345134cc4d30bc66a
SHA512be43efac3bffc23af135221daffa4821ed9437e93e196a6eccf026d37ab11326c18a37ce16e4f1a8bf88e884c540ee6c5dc37205803ba5efdf638f4ee87a33f0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize832B
MD5277647260160c4d10b56a56b94e7ff71
SHA1a2e16edb7404e81ae1ef6f5b386b6b9c05921a57
SHA2563345591e9cfcb397367b64886fa081195f9a59dac370d0363d0a3645becb0a9e
SHA512b78acd2ea830ec84b620c0fa3a1c3e142fcea7f8d65b24209e2d4d9210738f9b5dee29e009110698598f7bcb2e180b5ded5e447d7a6087f9207ef11d94ad39b1
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize1KB
MD5addb61611327b9f60eea44e7fa5cc759
SHA184e262457ec841f9efae2ca88cb0aa262c93e0e9
SHA256168f20ebbda34da47c843e4ee3b8da4944ca7cf254e6bf310e7a993020739b47
SHA51241ee151b96e5d5f3470af8fb113f17e3fe85781b02fb84b7887ac7f784be5afcc982c4428e397885df4671928b4f1d37cd4ecd033e3456fd5426987dd4a6b4a9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize1KB
MD56d6816f86476d00b95ec1dece642cc02
SHA1fb6b667a7356375baeaea8c6126b8feb33ac6462
SHA2569776d6633d6eb2710887d20c46904e7a46304addba32c1949a80615d9c3bf4ed
SHA512c0ce95b43ebadb6e8f0a385770c40a10e00cbccb325252fba919bc583ba18136036cca8c8413783d4a12bd2fa1ab9e88a8e57482ce9945899a88f1aad9095c27
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize816B
MD54cdf2931abc02ad542af942b8f966172
SHA14484efa52086a92b20d8c65c5da6e3bf1f56d3e9
SHA25628388fd68adf29736c513634e1b413e16f86745eedb641504c8614fe23216291
SHA5120d00d775dce12fd433ff8004e1fd1347992cbd4c52a924d7b17959064c8c2ab30557436d1c71932016501ac2dcd20e1da47c519babcb2feed13ec2050ed075cb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize2KB
MD511687084587bf5b672f80776f2cf69b8
SHA1f42037847f46c5abb2d3dce8f24cc75e921a5063
SHA2568d944d3258b365c310d9731d9d3821a9a7c2c6fd879b110be67a302c9e49bbb6
SHA51237ffcbacbe0cdc16f88bf479272df580198a9d32fa76b6d6c8e8317d04f522d60892ec5248fa9b3380f040570acbc2f6c960ae60985bc054d82421d18f8658b6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize2KB
MD595a0dbb658c4a10f6e724cbfc654fc4c
SHA17b0a640a011a037c4d1433b97cd9a04a8c581823
SHA25666e34c33b32f75e4dab0d2aae99d3830a97168b1b2bbc97fca22e6b4008d914d
SHA512ed28a0db234924d4943976535d3f0e8a5686c82470e66e01d65bebba59b25321db243cde190f1c8f8efcfec2b3a77b7ab807c99b7851576be838b4a24540f1a4
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize4KB
MD5b11c785c0e26ac0521b19de932a6d1ec
SHA1303799d12a016137b74108fea45a9c12423a87ce
SHA2569c1c085f71d3da939e4fd1d45eec267ba4dcf6c5048bb55d307f18efcb381a3f
SHA512b5c91f7f3c9a3a24d11ade58ec09eae6018ed2aa9e6ade0053a7e90674318e0aa500c0029179eea1dff9fa450aeaab4c00180da75120c7150f90b9f26dde94d6
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize304B
MD56e37c4db4fc78e44986c0d5428c8b615
SHA13cccd3c8dca621e1979d35d046cefb39aff82293
SHA256681fac435254859218e8a130c9d58acc6e27afbda334f3a5a5a9d7a28b0d6834
SHA512945e0be3e52f64b3e14ca6555f75bd7c0921e3af28683d831a2c4855086eb13cec1150188b8e6f8fdcbe5799222570f254ddc086aa9e790c07b8f106ade5c1ba
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize400B
MD52a3144399bc7cc28404b2e241b945921
SHA1f070a3906d380f28d5b118e513dbd2dd382962cb
SHA2564e84c780236ddcfa4cb61a3080425cdc358510380d951d7187d38f536818cabc
SHA512f8ad355d684d3da92f5518d29b5bf870039d0677204c567d0ee3adce7e7d63dfb765fa72e6c6e77b8daa05ce40b1f7db69bf96393114fad78b8ff0aac807e2aa
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize1008B
MD5d6b9b08fdaa2fb60cf572e2b15af56c4
SHA185303d0f3881c295270cf88487a203f83f015679
SHA256d607bebcff60cae1ca6cfad727a4945ba766914807f6b55ff9f82fc4102edc87
SHA51292957c16a0d93b41b08e13931f62bb7587613db0a130ff75a239d24f2d0570f3668ec43cff8dc0daf1427aa0c5a1cb4a22181952bc9ef10d4230203099cec6d5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize1KB
MD5f994f717a9fb8b8fe644aa534a4a3e8c
SHA1051bc2003307056921827d15d101365d9245612a
SHA2564c8fa56e11b2fd6a77f6d74963d0bfc7bdf08235344e7ddc26b2a74ef16cef04
SHA512f8a17f60dd0961367c8ac8e5b0a690fe3b6295da842b3ad2f84c3e64d1505f8386f503fac72135fdb4870ce505a35a92ff0e6a46000f7c4720eec8e2b97a57da
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize2KB
MD50689d07796fd842d2f01b87624af7b34
SHA120f1b4ef021a7b9be2bc4115c625f4e57704fabb
SHA256b245a5ad5644e2a3e8fbd049b4fa7ec2fb998f1bad99025f6f5e1312ad594238
SHA512285b1d74f6d0c8c124c57ceee7f0f5e925d31d77575bb7044176c626914ae222fc1640f10163e6cf641da342c246cd6c6ec71616cfdf86b87f1a15519dfdefb0
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize848B
MD5dcca2a7f247a80d109142f5f5c35924e
SHA13674c41f19e197c298f4fa9269140d6a5b1797eb
SHA2566844a12a8bf51b147424d457b84c6b660ce83368bc8e94d505450646c229e859
SHA512c68e0e888a8aa31a7b38bd431344a3d79a6fa8158308fb95ee96d9ca099158cd9948478d0f2b293503598635940dcfe1b2b21ed1d2c08896ef4b4d9248ecb12c
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.20D631FCFC8CF72CFD5B1ADF59C45FD42BA10E75AAACF3B7208841E52BFCF48A
Filesize32KB
MD510de50c408532085710cc885ed4b136d
SHA11fde5f28c5cb74f13430bc44841a7758594b6f58
SHA256a0582f219b39acf52efc8d49d98f121729427be0d8c414f52a67c1ec51e0cb37
SHA5122ff3f4e1903e52dbd06f5aefac04902d41c19200ee873ee01a4f0ddbf2a4be42203b738f7e55d43127b587eb975b90408024ac29f5ef4bb00ae0a3cc05d235b4