Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
CEPHtmlEngine.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
CEPHtmlEngine.exe
Resource
win10v2004-20220812-en
Target
CEPHtmlEngine.exe
Size
3.9MB
MD5
849f394d2b36173da18206ecbef7a929
SHA1
8f189005bfbcbb129816bd52164ecfb0028bb01a
SHA256
bc29bbe6125747f8246b9465fd78789a8d4508046747a86a5b35810890ab0520
SHA512
a92e23d24bfd22933908316d47f5de593804fcdb0943045c50afd000a43dcffc47a3a0b60c3bc89025d20bcb1eef13529dc28a59e44f029b09431fe0a8b6d8ec
SSDEEP
49152:/qKC6LEByUn1dXrFhGyhlRYYGA+o6Fm4W68vC18wfeAPAIP6WR7/eCG2:vuQ+/JlRYYGDo6GOmWWTWtN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=Audition\,Encore\,Dynamic Link Media Server,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
cef_v8value_create_double
cef_v8value_create_date
cef_v8value_create_string
cef_v8value_create_object
cef_v8value_create_function
cef_cookie_manager_get_global_manager
cef_browser_host_create_browser
cef_command_line_create
cef_string_map_alloc
cef_string_map_free
cef_string_list_size
cef_string_list_value
cef_string_list_append
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_list_clear
cef_string_multimap_alloc
cef_string_multimap_free
cef_v8value_create_undefined
cef_v8value_create_int
cef_v8context_get_current_context
cef_register_extension
cef_post_task
cef_currently_on
cef_uriencode
cef_base64encode
cef_string_list_free
cef_string_list_alloc
cef_shutdown
cef_initialize
cef_execute_process
cef_api_hash
cef_v8value_create_bool
cef_v8context_get_entered_context
cef_string_userfree_utf16_free
cef_process_message_create
cef_string_utf8_clear
cef_string_utf16_clear
cef_string_utf8_to_utf16
cef_string_utf16_to_utf8
cef_string_utf16_cmp
cef_time_from_timet
cef_string_utf16_set
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcStringFreeW
RpcBindingFree
NdrClientCall2
GetModuleFileNameA
PostQueuedCompletionStatus
SetCurrentDirectoryW
LocalFree
FormatMessageA
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
GetFileTime
GetFullPathNameW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointerEx
SetFileTime
DeviceIoControl
GetWindowsDirectoryW
CopyFileW
GetModuleHandleExW
SetWaitableTimer
VerifyVersionInfoA
SetLastError
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
GetACP
CreateEventW
SetEvent
TerminateThread
QueueUserAPC
SleepEx
CreateIoCompletionPort
AreFileApisANSI
GetStdHandle
GetFileType
FormatMessageW
DeleteFiber
FindFirstFileA
FindNextFileA
GetFileAttributesA
CreateFileA
FileTimeToLocalFileTime
GetFullPathNameA
SetFileAttributesA
GetVersion
GetVolumeInformationA
FileTimeToSystemTime
GetConsoleMode
SetConsoleMode
GetDriveTypeA
LocalFileTimeToFileTime
GetVersionExA
DosDateTimeToFileTime
SetVolumeLabelA
SystemTimeToFileTime
GetLocaleInfoA
GetConsoleScreenBufferInfo
DuplicateHandle
GetSystemTimeAsFileTime
ConvertFiberToThread
lstrcmpiA
lstrcpynA
lstrlenA
LoadLibraryA
QueryPerformanceCounter
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus
ReadConsoleA
ReadConsoleW
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetExitCodeProcess
RtlCaptureStackBackTrace
LCMapStringW
GetEnvironmentStringsW
SetEnvironmentVariableW
FlushFileBuffers
GetFileSizeEx
LockFileEx
UnlockFile
GetTempPathW
CreatePipe
ResetEvent
GetThreadPriority
CreateProcessW
VirtualAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateMutexA
GetConsoleWindow
MoveFileW
WriteFile
ReadFile
GetFileSize
GetFileAttributesW
FindNextFileW
VirtualFree
GetModuleFileNameW
LoadLibraryExW
SwitchToThread
MultiByteToWideChar
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
SetThreadPriority
CreateThread
TerminateProcess
GetCurrentProcess
Sleep
WideCharToMultiByte
LoadLibraryW
FreeLibrary
InitializeCriticalSectionEx
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SetErrorMode
RaiseException
OutputDebugStringW
GetCommandLineW
GetModuleHandleW
GetCurrentThreadId
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetLastError
VerifyVersionInfoW
GetProcAddress
GetModuleHandleA
GetVersionExW
GetLocalTime
OpenProcess
CloseHandle
VerSetConditionMask
GetLongPathNameW
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
SizeofResource
LockResource
LoadResource
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
LocalReAlloc
LocalAlloc
SetFilePointer
OemToCharA
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
CharToOemA
RemovePropW
GetPropW
SetPropW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
CallNextHookEx
SetWindowsHookExW
GetWindowThreadProcessId
CallWindowProcW
SetPropA
GetPropA
RemovePropA
GetWindowLongW
SetWindowLongPtrW
GetClassNameA
ReleaseDC
AttachThreadInput
DefWindowProcW
PostQuitMessage
GetAncestor
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
SetWindowPos
IsWindowVisible
SetFocus
GetDC
GetFocus
GetKeyState
SetForegroundWindow
LockSetForegroundWindow
GetClientRect
ScreenToClient
GetParent
SetParent
FindWindowA
MonitorFromWindow
PostMessageW
GetDeviceCaps
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
GetUserNameW
RegOpenKeyExW
SetKernelObjectSecurity
IsValidSid
IsValidSecurityDescriptor
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorControl
LookupPrivilegeValueA
GetKernelObjectSecurity
AdjustTokenPrivileges
OpenProcessToken
CryptGenRandom
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
SHCreateItemFromParsingName
SHGetMalloc
SHGetPathFromIDListW
SHCreateDirectoryExW
SHBrowseForFolderW
SHGetKnownFolderPath
CommandLineToArgvW
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_BADOFF@std@@3_JB
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?id@?$ctype@D@std@@2V0locale@2@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??7ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
PathCombineW
CredUIPromptForWindowsCredentialsW
CredUnPackAuthenticationBufferW
send
recv
WSAStartup
WSACleanup
WSAGetLastError
setsockopt
ioctlsocket
freeaddrinfo
closesocket
getsockopt
WSASend
WSARecv
select
WSASetLastError
connect
getaddrinfo
WSASocketW
CertCreateCertificateContext
CertOpenSystemStoreA
CertGetCertificateChain
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore
CertFreeCertificateChain
CertOpenStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
__current_exception
__std_type_info_name
unexpected
__RTtypeid
wcschr
strrchr
wcsstr
__current_exception_context
__CxxFrameHandler3
strchr
__std_type_info_compare
memset
memchr
memcmp
__RTDynamicCast
memmove
memcpy
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
__C_specific_handler
strstr
__CxxFrameHandler4
perror
signal
_errno
_invalid_parameter_noinfo
exit
_invalid_parameter_noinfo_noreturn
strerror
_beginthreadex
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
raise
_crt_atexit
_register_onexit_function
_exit
strerror_s
_initialize_onexit_table
__sys_errlist
__sys_nerr
wcscat_s
strncmp
toupper
isprint
strncpy
tolower
strcmp
iswspace
_strnicmp
isspace
strncpy_s
strspn
strcspn
_strupr
isupper
mblen
isalnum
strncat
isalpha
isxdigit
_stricmp
isdigit
strtol
_strtoi64
mbstowcs
strtof
strtod
strtoul
atol
atoi
_wstat64i32
_stat64i32
_wchmod
_chmod
rename
_unlink
_mkdir
_unlock_file
_stat64
_wstat64
_lock_file
_setmode
_wfreopen
ftell
fseek
_fileno
__stdio_common_vswprintf
fgets
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__acrt_iob_func
feof
_set_fmode
_get_stream_buffer_pointers
_fseeki64
_getcwd
__p__commode
_close
_read
_write
_open
_isatty
_lseeki64
fsetpos
ungetc
_mktemp
_get_osfhandle
setvbuf
fgetpos
fgetc
__stdio_common_vsprintf
fputc
__stdio_common_vsscanf
fread
putc
fopen
fflush
fputs
ferror
fclose
_wfopen
__stdio_common_vfprintf
fwrite
_recalloc
_aligned_free
_aligned_malloc
_callnewh
realloc
_set_new_mode
malloc
free
calloc
_dsign
logf
_dclass
pow
fmod
log
log10
__setusermatherr
floor
ceilf
_isnan
getenv
_putenv
_localtime64
_tzset
_time64
_gmtime64
_gmtime64_s
_difftime64
_mktime64
rand
srand
qsort
div
___mb_cur_max_func
_configthreadlocale
setlocale
localeconv
_mbsrchr
_mbclen
_mbsinc
_mbschr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ