Analysis
-
max time kernel
61s -
max time network
62s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250113-uk -
resource tags
arch:x64arch:x86image:win10ltsc2021-20250113-uklocale:uk-uaos:windows10-ltsc 2021-x64systemwindows -
submitted
18-01-2025 20:14
Static task
static1
Behavioral task
behavioral1
Sample
lod.exe
Resource
win10ltsc2021-20250113-uk
General
-
Target
lod.exe
-
Size
211KB
-
MD5
b805db8f6a84475ef76b795b0d1ed6ae
-
SHA1
7711cb4873e58b7adcf2a2b047b090e78d10c75b
-
SHA256
f5d002bfe80b48386a6c99c41528931b7f5df736cd34094463c3f85dde0180bf
-
SHA512
62a2c329b43d186c4c602c5f63efc8d2657aa956f21184334263e4f6d0204d7c31f86bda6e85e65e3b99b891c1630d805b70997731c174f6081ecc367ccf9416
-
SSDEEP
1536:YoCFfC303p22fkZrRQpnqjoi7l832fbu9ZXILwVENbM:rCVC303p22sZrRQpnviB832Du9WMON
Malware Config
Signatures
-
InfinityLock Ransomware
Also known as InfinityCrypt. Based on the open-source HiddenTear ransomware.
-
Infinitylock family
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\css\main.css.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\images\dd_arrow_small2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ja-jp\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\Providers\Plugins2\AdobeHunspellPlugin\Dictionaries\en_CA\en_CA.dic.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\hi_contrast\core_icons_highcontrast.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\misc\load-typekit.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\example_icons.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\zh-tw\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\PFM\zy______.pfm.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\MicrosoftEdgeComRegisterShellARM64.exe.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\en-il\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\fullscreen-press.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\themes\dark\logo_retina.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\MLModels\autofill_labeling_email.ort.DATA.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\en-ae\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\pl-pl\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\en-il\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\improved-office-to-pdf.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\js\nls\nb-no\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ccme_base_non_fips.dll.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\ko-kr\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\uss-search\css\main-selector.css.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\sl-si\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\sk-sk\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\aicuc\images\warning.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\reviews\images\themes\dark\share_icons2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\be_get.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\ie_to_edge_bho_64.dll.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\msedgeupdateres_es-419.dll.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\duplicate.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_export_18.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\hu-hu\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\js\plugins\rhp\editpdf-tool-view.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\uk-ua\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\msedgeupdateres_sr.dll.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\da_get.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themes\dark\close-2.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\RHP_icons_2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\fr-fr\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\tools\circle_2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\ru_get.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\images\rhp_world_icon_hover.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\ja-jp\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\inline-error-1x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\nls\sk-sk\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\es.pak.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\pt-br\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\LICENSE.DATA.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\msedgeupdateres_am.dll.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\FillSign.aapp.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\snapshot_blob.bin.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\win-scrollbar\themes\dark\arrow-right.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\en-ae\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\hu-hu\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.147.37\msedgeupdateres_ru.dll.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\root\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\zh-cn\AppStore_icon.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\flags@2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Windows Defender\EppManifest.dll.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\css\main.css.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\send-for-sign\js\nls\fi-fi\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\file_info2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F lod.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language lod.exe -
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 lod.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString lod.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 500 lod.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\icudtl.dat.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize16B
MD52635b386fc9448ce08271aca56ce4f54
SHA1f923a1bb476388777bf36c4ce69e4df08e456c5c
SHA2569065deb5610f6a721562524a6bd99779eee1c3dbad7ee05bbba7296819158d6e
SHA51220c4de172dacacf0762eea7604e81e95ef6657e1a157915bea56338d62234c31359a01ad03843cfe2ac90e91f93e4e68c43dc901f310940d4b71fd4ce1449f92
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\s_remove_18.svg.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize720B
MD5de4c22855cee3a74bcdee32cbf0e45ce
SHA10788d793ee04e8ec49267f5a0cf990d1fbc39d2f
SHA256027d0f23df8c5408768a9f58cfa29bf0987d8ae4c9657021cdc652f450d58feb
SHA51252cb7b404af92e090f52e82ec9351087acd45953ae6ae2c94de6f0df99dedd402d82d134124874ac8cfbb6c7417bf9fce6bde16f0bb0650d79699458674ecc68
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize688B
MD5e3fe8f76e3bfba74b7ad3a27da6af205
SHA1fb481d3621f8d8d68ed0eff9a517dbb2e51c18f1
SHA2568503d27c9190ccc309a80d12c10ddbd091c79ae4f9d0150ea9ae87ad38670c64
SHA512ea6a8369ffe1fefe6423df69b0d6859dc44969e5f2b1d013065e1cafbf416a481cd25f482d8c308bdd734a0c6d55368da84ef463008b46ead5e66ff3fb83571c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\editpdf\images\example_icons2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize1KB
MD57db7f7f8affd0612e75c6534622beb58
SHA1f744aca84e98bfcbdb1035d11af5fe0ea3693ecf
SHA256e400cbeed5fb7ff51ffe83e0d3512d842fe9dc7f664761936f762ced9b69ff53
SHA512a8adf77180e62b346415239c330319a503822b8a73f1febeaa13998fe9fa7480875348546633871d7992d1dddd6c1a047a54b17dd00a2df2fc804b140455c200
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize448B
MD594f2d015c194ba593a9755f3de6e88c4
SHA1e6ce6b7208c72a826d3eadd5d0dcfa90662dc2f0
SHA25615756b0c0373de5e42bc00020f878de53589087c57a01425d94b60cbf15bd96a
SHA512bc5aea7c831066726fb506ded8ed4d048182b4024bac4fc8939d6dc47532bd6c9f1b3954beb12c4e9ab033fa87650aa52b33ce7764638520e0d824c652de765d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize624B
MD50cbea8108ffc0d6a94f3f9db687d38b1
SHA1f5c54bf5fbbb8867c75815429a17b0a2c6097d8a
SHA256ca2caf204fc6965da6a426f8b29e535502c30c91d6f25942c4d2df926c1c95d9
SHA5129d9c294c159df1b9758fe94cfcd6793a8e2d30db3f01148f86132aef66e2f11e646892000e185d40e69ea93c326779fd44b148c29bbd9c7d3af302b7df683f9d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize400B
MD5c0c4d357d12cc3a015c2aa5eba3bdac6
SHA11eeba424f39aff02d8906bddea39477b842cc30b
SHA256762f2dc03cd9dae41a843fd37a07a1ef9ebacd9f5836ade0c25a88568e349151
SHA512efc9d91531b48b37b7ccd6708aafcb7c4d1a814765a8ba11c4ff1baf8c015cbcd6dfbff77f1fce7c6adea2cd2de95c85f863e2892fe20a8d98fc578c2adae3ff
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\rhp_world_icon_hover_2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize560B
MD5e20ba58fcbc57a7648fcb07839e6587b
SHA164237001ac7e9059d7c11975cd2b57a2b411df66
SHA256bd2f725a2c0fff153eeb303e064f2fe1159d2645a6f7154b27a9624f44d01ed1
SHA5121ee86d9340ae9bc49f5e0dc133763386503d9c6deedd06b8594293e0bd5b9365b0df15d94df5583da9867e98df089770dc5d88afd97da152f997121740a7a49c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize400B
MD5f058bdf32ad1eb5ca8015ff29d2baa97
SHA11fb8b8fa3a6ff497bb7e8568376cf173d6f8dc27
SHA2565b183732bfc9f3d2242df40a6789f494e2642a68bebcd87b646b1556d798f649
SHA512db04bd54160a8c6e82e26330e5ce77dc73664041dded4563797f9ce01874e15048aec61ad8ea339b620f7f4d7ae1dfa1218b6625446cd80b27ea75b334738035
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize560B
MD51ed455df65d85a0783df169454c4a71e
SHA1d235ec53bfe543ccf5b244a734622584fb133f0c
SHA2565d2e55adb9a512983f7c79d510c971d0b69c8a5f141a53e6feebda700107d909
SHA5129c43d477727febf8e70a9462b0a8bf304094ddbb81606b10c1ed9853184bf9be9d838f814e93fab6f9a79a34b8b460f0d1b6bc0d06b04e10f88e3343877685d9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize400B
MD50c041237160f66abf593b17c8d2bbf99
SHA1d7cb98e8964b622f993a91a7795212ce450c83ee
SHA256e5665aa17eb3ce6e16a4c5eea289e85ce122fcb7a698b53a2f77b4860a98185e
SHA5121c0f7b85b0a54fc9430ae36d7f3cdd985c27e7693658079d0b21589932aee5b7e39d77855e2e3d1308bde8f0c065c6164744aab55bf5a589bab44116028c8d13
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\exportpdfupsell-app\images\themes\dark\rhp_world_icon_hover_2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize560B
MD55abc761012cd033a67f535eff1cb81fc
SHA18edcc50b96fd1426f49ae3364e537bd05d16a23e
SHA2561d3cf3c1c181c248b8c3597536b2e68f05ac9020b8f098597b9106bfb2bcde3c
SHA51205db2ed66329e3da10de089e18312964286bca47f0f26d32a00c9709e49196feb2d37a5d3fdb2ff76f1eb4547222c7c8f26f15ae5910ed897b3a02eff0c0a3f5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize7KB
MD5b2a9057ea11b39bc1b867d51bca5d19c
SHA1dca93fc4311455617d24d35f9aace974acb64e45
SHA256af7896b36520dcdcfdc4fbf7c95c764dc99bdb241cee770e85c30d932a6e932e
SHA51284caf9add3bfc420f0c583bd4f926af5bcecc205118942828d5b1d47b2f63f83018fab8411332eafdd02fdefec7fc20e1a939a4d97d4c2b8e894a226e56e3e02
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_ie8.gif.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize7KB
MD5373bc624032b27a579e91274979f7275
SHA1e8ae9950889ce6251e083dcdc6fc05f50b0bd97f
SHA256a2d4bae0c1b33a7f5593a01680df14fffcb487562a3ea078f9013676e0cbb641
SHA51244b74f23aafaf7914d1b49a4d4a7e3fc839de5198527a915f2042dcef83524f55ebc01634b46ba32c188e2b67261d081eccd2097e94d245f3d6cb3c9c9cb977a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\icons_retina.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize15KB
MD5722f8a5464163bdb0f8fae483e750ed8
SHA13bca2ecd2f025eba0f58514688f09ec12edb1565
SHA25624a52717ee747a1cf347fa624894e86e90b7899e96c28fcf1108405d0bdebb34
SHA512a0d43ecf69534d521c7cc2942c90498af85fbcfda813bf1f458e41e35e0a42c4f16f359daf6d4c2f7836651ab3ff94e9eee5b735936742d6a35c4148db67efca
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize8KB
MD5ad788701d996ae303f52811fcab15acc
SHA1aaeb1dcfd6593135646471f51b78a0fbaae80ba1
SHA256ed8b70bb2d4f372ce406c214aebc276e89f4c08859f4f237fa3dac0db92a3782
SHA5124660c0f2ee98c9cffa07ffbc7c1f6988f9ca9dc3cc04c054141634723f873bd1c3765360d94af14db74666ae668d67f6952d78e71a65a98f029e34213d646bb8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\images\new_icons_retina.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize17KB
MD5275c810442bca9146520c40b93f51f0b
SHA1513d5d9964f77fed3a7aef3b69fe34dd2b15d137
SHA256854b698057e52c21dc8d764c2da4ac631d14e95dc453667b65fa8595748359fd
SHA512a9c09856e0e226de55a63f49d97112ca129baaa4cffa989a4198421aee10439eb8a01167ff44196696f953ba79ecd34bb25047a01dac6ed7bc1c7f8b47817cd5
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_pattern_RHP.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize192B
MD5a23ce1a8f29a04574e1bf19ad8443936
SHA12024ab66ef4321dfb683595c3f1696898c422464
SHA256facc175c8d9fab6f920973dd9d8e4855a431d60b6018b69a47bd235147d58f95
SHA5128b107a4e2b9a5e0d124fc8f72495ac20afee81ed18a04bd11095cfafbb2651366bb140dd5a3a68fc88a05de6a8ea38d2e3f44d2127dc805dd02c11b36ce94048
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\bg_patterns_header.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize704B
MD5adf83f035ca3d807557f6773ef03e561
SHA19e0252c13b095f14d8c34d677ebe9c61fa69dafd
SHA2569996c401fbb6a64d6a127703e3ef159e53d2f57c57493f052f2e72b47d7a60ba
SHA512faef799e8c571f3a571f0c84f209f8443cb54a4c5cc41fcfbd49bef140c828fd09c9a7210294c65174c59e4dcd8b12639fa2cb5a22a5b105c9cd585c5fae1e12
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize8KB
MD5ec17720bd1bb60983fdceb3e1ffc9994
SHA165c010d0380d26696f54c62265f23fb0ed61ffba
SHA256afe7cce8c5bd4faaba98d33a30e849487a7185226e2d465644e5c64e41df6dd4
SHA5125ea7023a1067fdf4d8bde0500e49bd3725c6b076f72f08e67dee3b850ef10e09d5ce1c40a54fb435cae0240c3c882d17ccb34702a4e06c873a806e41d5bb2fba
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\images\illustrations_retina.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize19KB
MD57f9a0ff5ea9ea7a550afb607783bf1b6
SHA14be8b9c16bb0aad8e5656e4a2c8c66d4c3d837c8
SHA25604f74b9e35bff3a23d05806677e11ae891684632c7936056fe943fcf79ba5840
SHA51213ce01673a28b0d0595d626c9ec660c82ec83ad207109937f891714958ff20cbfee6fd4b96d873e347b74138c280fa0ffeaef5d12b5132602d15e16cbd74ba28
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize832B
MD5cdd0444cd45875e81bd1f38c0fb484cb
SHA17348f0d7c1d67913d69a75bc51ab7f9cd72140b1
SHA2561b3566973f2078289b2d313c427bd257f4510cb7f8c298b3d908e3e9ed399128
SHA512006e35918e805c90e2b24230b4ca0a570bf3a044a994013a496df6416381fcda37f81331b18d5f6729bab972e4ffe11834fd81745f5a964e6085e3924cdfcdc9
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize1KB
MD5b2b72deb2ea97a61a3a02656d61cf96d
SHA1ef0a5dce008f6d0f494ddf9fb166eea1ead6e204
SHA25621705805b6bfc5a6909d311935a62c6b50836177e5f494d973e68c8c9820bd6c
SHA512bf861e70c989ae3d8ecdcbe9f7d0ff32bab1928bda737a1acc64bc9be531585b83c011eb6e0372ebec0777e38a2df80c5b43b1d8cc2cc035d9f59db18a1dcdfb
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize1KB
MD52d93ba68e67aed629ece00f002121c45
SHA115ba6898ff663495d8d8b63e4f2f4250cacda2c7
SHA256a2f74b04f5872a155775f61b40fd7e1cda57bef6ea7daf8b3f24b7a43653fd5c
SHA512c91d58003437849fee276d5c55048b7b0b28edd32da9d468ce3426cac1f75316bb5656ead3fb984a2e0dc3a1ba752469bf8be1e0e27b6e98afc7ebf1baacd3e3
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\css\main.css.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize816B
MD5c66c481c7e03b6860af2d96534d95701
SHA16b38f9f02fb7c7dfc57cfa32478ca4272e49878b
SHA2566c8706c9ea816780095823dce809fbf8b909bec431413aeea98c69e741d07720
SHA5127e3fd7d898bff24dd2c4bb7db411b44b33921db8dbe5667caccf9d4a5f2054ca165f6135796279b0f1831de319556c1800630bf01b50a2f03102f9f8db00deab
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\bun.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize2KB
MD5d7a65562806fd6363ee846c516d01f90
SHA1d286dfdcb291212575e498b2d623368478b732c4
SHA256723b2bd78e4825e054ea15e6000cf661cbb4a0d42dff83ca18ab3673cf0decaa
SHA5121f408a37a5462bf19d7372389c2346a0fe129c04aa7c7cf7088369a55be6dee0bf80c3e361967a41ba918113c9ddf6c24115f1986780a086343e8b61b8d4e7e8
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize2KB
MD533138ea81473e038e5ba17fcefa6b6f9
SHA1c5ba9f3723ad720ae3dbe5c6101703e0af08d8b9
SHA25673098158842d8c79e7f91f771b5189a322f6aa2b3a4dcd5ad879a0f038496356
SHA51225cd60ee7d87906f75e75121d765d21c3b16ea1ad46214be67e10ada6ca212f725537e13f47491cd953587f6ef53d59a05e33bf075e0a72fef2609240241811d
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\cstm_brand_preview2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize4KB
MD5f2e1f5e24c70d9e25a8507449f47b4ea
SHA12265e4c6bf5650548e8c60a77c30165022a9fc43
SHA25621015c0f1fe55a5fd98d4bba0c2e2d96a43a8dc620944e84ef984c1f1c5ae776
SHA5121bf3c91a3c578220e2ec42731a6c52b8c1649fd50088ec955d7725da35fec78d8e0715de3d7d97ad61b4b86aa3923b171a1c823c5460789483ae74d27a6a8adf
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize304B
MD539bf6d5e6c72fd9305f05c8e57b541b5
SHA13a82bddd66527a2bd5b32c32c5fff2e964c7a0b5
SHA2563d2733d1d8034121c265398b1191847b41e8b2ab0d8467b8b16a07c603a4d78c
SHA512333e076d18b03479cce6d5ca8a6e64e2422e2695cb06c3bfb3a728db91cdb43d55468acd687094a2b5df3c4976293d83f9bf4d10686e19a60794b9eaef74044a
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\dd_arrow_small2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize400B
MD54af8965fc7283b4b04ecc8c8cd18cde7
SHA1cf4a716eab3998cbae75867bb8209c2a314f4c29
SHA256438dd2320b744d51820fd42de21ce00cbeb4f1a743d2caa5d9d75e1a61f27775
SHA512606d4769da1e11e1172eec138acc76ca1d2c5d94d425161493e08db71d1e58aba2fdcf2a070dce3ac00d85d15796fd5ae7263e825b1a532c8d9320efb34b6d5c
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\nub.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize1008B
MD5966e2d9f5e6a14b22d5bff625671be9e
SHA1bb4caf1503172aa8d949e23949450abd1349c541
SHA25633523cf8936535db0787803e3408f6ff433c16c2ef3cbbb2f9731d2b8de6e657
SHA51293e6ae0d1b5058005b8b6c44215c0250ef675a48fe4838989b37d869b234115c19e11726758c3b4137b04043dd1250bba8938da6a6e256bef200269a3ee6b88b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize1KB
MD53939c8a438ff0f80281a9e27e1859e76
SHA140e5cf597a01cbc128c60e8ed568ee48eb465756
SHA256582983d900966763a029a526a0e9bfddc2c22d2a8ee3480667c681fbc019fd1f
SHA5126a139bc7f1ca8f5875bb1593c13fcc8106cf26b11dc2e019547ee407cdb75855ce5ee6ec8c45e21b6e9d3cb741a1dca7fb88434f3b355f061a7b0d1046b5645b
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\images\share_icons2x.png.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize2KB
MD5beb2dd9dee83faff53ec2f340c2d26e3
SHA14c8277881630c9092e420487b8f8549bf8b11504
SHA256b36cefcefe85391d7df777ce35cfcdf83acb19a8898032a7a7ff7156afb2a105
SHA51207c6aa422da4720558140b975521068a08cf4b71065b7b0e559b3d1029a943d52bcc3ded5c5ff27ae32d06c0c09878bb40839e7ac14ba8c2cd0de67b871cca0f
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\nl-nl\ui-strings.js.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize848B
MD5567985b5c6f3bbf5d9f1796e65e28502
SHA19e23655adbbbf359488615d7314d842d77e02e11
SHA2568d60b0c08028fe1e7610a932b539a39fac0ef9d7e428d5646f997417824a5ff3
SHA5126b9eedae71f19f6ab1ffd63ae9f180eaad4a0f933ba8900a501baac17e3f497b244461e4ab5da24f4beffa28faa798b64dce0cfa7c0d0de4f5a9905ae05b7c60
-
C:\Program Files (x86)\Common Files\Adobe\Reader\DC\Linguistics\LanguageNames2\DisplayLanguageNames.en_US_POSIX.txt.3B4D6B20F68730DFCE26EFD7099D63126592C1B1519012CE9BCAEE9F2C3A723F
Filesize32KB
MD58835ffe9cc23c33da29bbbf2288cab95
SHA10bcbdc58d6492d1f9d0092aa54a05540bbd1f772
SHA25648b7b1d178b3d96bc45635ee3b0aee6517e07f57d3c4820446db977268480a91
SHA512b98c3c40edd0d687d1fa4e4bab6399ef01bf9fb3779ad1362d979423d9689f22b8316f2478f3bf4d747b308620d0e5bd2d5f6a951047efd4da4c6267bc10898a