Invalid digital signature on AcrobatDCx64Upd2300620380.msp
- November 20, 2023
- 3 replies
- 2224 views
We are seeing the URL https://ardownload2.adobe.com/pub/adobe/acrobat/win/AcrobatDC/2300620380/AcrobatDCx64Upd2300620380.msp download a file producing different SHA256 values in some regions across the world.
In the UK, we see a SHA 256 of 1A0CCAF7C71C7A542D32328C8F51BAFED3E9D66798D1BE68A0FD8B66D3F1E465. In the US, we're seeing a SHA 256 of 6C601B8BFA0A43059FD50521191C08CE1AFAD5E0D8817B13E6D49C021C2D9B01.
Upon inspecting the .msp files downloaded in both regions, they seem to be identical with the only exception being the UK one has a broken digital signature (although it's signed with the same certificate compared to the US one.)
Running Get-AuthenticodeSignature on the .msp downloaded in the UK shows an error of HashMismatch:
"The contents of file C:\Users\AdamCook\Downloads\AcrobatDCx64Upd2300620380.msp might have
been changed by an unauthorized user or process, because the hash of the file does not match
the hash stored in the digital signature. The script cannot run on the specified system. For
more information, run Get-Help about_Signing."
We believe there is a caching issue on Adobe's CDN which has not correctly replicated the correct AcrobatDCx64Upd2300620380.msp. Kindly fix the issue with the CDN, or whatever the issue is causing an .msp with invalid digital signature in some regions of the world.
AdChoices