Adobe photoshop install[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Adobe photoshop install.zip
Size

394.1MB
MD5

5217e04d56e6bb5f4a6bf016ed54bdc2
SHA1

01583f151829b3466b701aca70dea0852ef058f5
SHA256

ec18dbb7acbca7cc0188538f29a8b57cb51c91a0bc4983ad5586f8bd8c3b088b
SHA512

a0be202eb0a04e61771ea832334fc5191c1ee28a1487ff9c1927d8f4dd4b82ec387d871a4af3af6bc49d2c29ed38dbc275a5826aa1bd3d0433c106b349c7b253
SSDEEP

12582912:MNbVZwryuuC4dLC74S8YCSzuNI1CMxsxYYx/+UR:8V6ryuJ140wfM2xYYx/+UR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Activation Patch.exe

Files

Adobe photoshop install.zip
.zip
Adobe photoshop install/Activation Patch.rar
.rar
Activation Patch.exe
.exe windows x86

1ee3b0da38e7b7c567f93f357ca3751c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
CloseHandle
WriteFile
DeleteFileW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
RemoveDirectoryW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
MoveFileW
GetLastError
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
RaiseException
SetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
CreateEventW
SetEvent
InitializeCriticalSection
lstrcpynW
WaitForSingleObject
CreateThread
GetProcAddress
LoadLibraryExW
DecodePointer
Sleep
GetDiskFreeSpaceExW
GetExitCodeThread
GetCurrentProcessId
FreeLibrary
GetSystemDirectoryW
lstrlenW
VerifyVersionInfoW
VerSetConditionMask
lstrcmpiW
GetModuleHandleW
LoadLibraryW
GetDriveTypeW
CompareStringW
FindFirstFileW
FindNextFileW
GetLogicalDriveStringsW
GetFileSize
GetFileAttributesW
GetShortPathNameW
SetFileAttributesW
GetFileTime
CopyFileW
ReadFile
SetFilePointer
SystemTimeToFileTime
FindClose
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetSystemInfo
WaitForMultipleObjects
ReadConsoleW
VirtualProtect
VirtualQuery
LoadLibraryExA
GetStringTypeW
SetUnhandledExceptionFilter
FileTimeToSystemTime
GetEnvironmentVariableW
GetEnvironmentStringsW
FormatMessageW
LocalFree
InitializeCriticalSectionEx
LoadLibraryA
GetModuleFileNameA
GetFullPathNameW
GetCurrentThread
GetConsoleOutputCP
FlushFileBuffers
SetConsoleTextAttribute
GetStdHandle
GetConsoleScreenBufferInfo
OutputDebugStringW
CreateProcessW
GetExitCodeProcess
GetTickCount
GetCommandLineW
SetCurrentDirectoryW
SetEndOfFile
EnumResourceLanguagesW
GetLocaleInfoW
GetSystemDefaultLangID
GetUserDefaultLangID
GetWindowsDirectoryW
GetSystemTime
GetDateFormatW
GetTimeFormatW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ResetEvent
GlobalFree
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
GetLocalTime
CreateNamedPipeW
ConnectNamedPipe
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
IsWow64Process
TerminateThread
LocalAlloc
CompareFileTime
CopyFileExW
OpenEventW
PeekNamedPipe
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
QueryPerformanceCounter
QueryPerformanceFrequency
LCMapStringEx
GetSystemTimeAsFileTime
CompareStringEx
GetCPInfo
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetFileType
GetTimeZoneInformation
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetFileSizeEx
SetFilePointerEx
FindFirstFileExW
GetCommandLineA
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
WriteConsoleW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 379KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe photoshop install/Set-up.exe
.exe windows x86

26d1142062053486e607ffede8dd675c

Code Sign

06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

31/01/2019, 00:00

Not After

03/02/2021, 12:00

Subject

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f7:6e:43:21:65:de:2c:31:59:69:12:b6:b7:08:7f:d3:6d:8f:a3:c7:d6:0c:47:55:1f:e6:a0:57:20:da:d4:43
Signer

Actual PE Digest

f7:6e:43:21:65:de:2c:31:59:69:12:b6:b7:08:7f:d3:6d:8f:a3:c7:d6:0c:47:55:1f:e6:a0:57:20:da:d4:43

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

02/10/2020, 04:25
Valid: true

Chain 1

SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW
PathIsRelativeW
PathRemoveBackslashW
PathIsNetworkPathW
PathStripPathW
UrlIsW
SHGetValueW
UrlEscapeW
PathFindFileNameW
PathRemoveFileSpecW
PathRemoveExtensionW
PathFileExistsW
PathAddExtensionW
PathIsFileSpecW
PathAppendW
PathIsDirectoryW
PathRenameExtensionW
PathIsSystemFolderW
PathFileExistsA
PathAddBackslashW
PathIsRootW
PathStripToRootW

shell32

SHCreateDirectoryExW
ord51
SHGetKnownFolderPath
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderLocation
SHBrowseForFolderW
ord680
SHGetMalloc
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
SHGetSpecialFolderPathW
CommandLineToArgvW

kernel32

FindNextFileW
WaitForMultipleObjects
CreateFileW
CreateEventW
SetEvent
ResetEvent
GetOverlappedResult
ReadDirectoryChangesW
MultiByteToWideChar
WideCharToMultiByte
GetFileSizeEx
FindClose
GetFileAttributesW
SetFileAttributesW
DeleteFileW
GetLocalTime
GetTimeFormatW
GetDateFormatW
GetCurrentProcess
DeviceIoControl
GetTempPathW
GetVersionExW
GetComputerNameExW
FileTimeToSystemTime
GetNativeSystemInfo
RaiseException
LoadLibraryW
GetProcAddress
CreateProcessW
GetModuleHandleW
FreeLibrary
InitializeCriticalSectionEx
DecodePointer
MulDiv
GetModuleFileNameW
TerminateProcess
RemoveDirectoryW
OpenProcess
CreateToolhelp32Snapshot
Sleep
Process32NextW
Process32FirstW
CopyFileW
GetExitCodeProcess
ReadFile
SetLastError
lstrlenW
LocalAlloc
GetDiskFreeSpaceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
MoveFileExW
GetFileSize
lstrcpyW
lstrcmpiW
lstrcmpW
GetDriveTypeW
GetFullPathNameW
HeapSize
HeapReAlloc
HeapDestroy
GlobalAlloc
GlobalLock
GlobalUnlock
GetSystemDirectoryW
SetDllDirectoryW
GetStdHandle
AttachConsole
FreeConsole
GetConsoleWindow
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
LeaveCriticalSection
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SizeofResource
LockResource
LoadResource
FindResourceW
GlobalFree
VerSetConditionMask
FindFirstFileW
GetUserDefaultLCID
LCMapStringW
DuplicateHandle
ProcessIdToSessionId
TerminateThread
CreateThread
FindResourceExW
GetThreadTimes
QueryFullProcessImageNameW
GetUserDefaultLangID
GetUserDefaultUILanguage
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
CreateDirectoryW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
GetTimeZoneInformation
VirtualFree
VirtualAlloc
QueryPerformanceFrequency
GetCurrentThread
SetFilePointerEx
ResumeThread
SetThreadPriority
EnterCriticalSection
CompareStringW
GetCPInfo
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetExitCodeThread
SwitchToThread
GetModuleHandleExW
QueueUserWorkItem
IsProcessorFeaturePresent
LoadLibraryExA
VirtualQuery
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
OpenMutexW
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetProcessHeap
HeapAlloc
HeapFree
LocalFree
GetLastError
FormatMessageW
GetLocaleInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
DeleteCriticalSection
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
SetStdHandle
WriteConsoleW
ExitProcess
GetConsoleCP
GetConsoleMode
IsValidLocale
EnumSystemLocalesW
ReadConsoleW
FindFirstFileExW
IsValidCodePage
GetACP
VerifyVersionInfoW
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSection
SetEnvironmentVariableW
GetFullPathNameA

user32

CharNextW
BringWindowToTop
TranslateAcceleratorW
GetClassNameW
SetCapture
GetDlgItem
GetParent
RegisterWindowMessageW
ReleaseCapture
SetForegroundWindow
InvalidateRect
GetForegroundWindow
GetSysColor
AttachThreadInput
IsChild
DestroyAcceleratorTable
ClientToScreen
RedrawWindow
InvalidateRgn
IsWindow
SetFocus
ScreenToClient
FillRect
GetFocus
GetWindow
IsIconic
BeginPaint
EndPaint
GetWindowTextW
GetSystemMetrics
GetMessageW
DefWindowProcW
GetWindowLongW
DestroyWindow
SetWindowPos
CreateWindowExW
SendMessageW
RegisterClassExW
GetActiveWindow
DispatchMessageW
CreateAcceleratorTableW
SetWindowTextW
CallWindowProcW
GetWindowTextLengthW
GetWindowThreadProcessId
wsprintfW
PostThreadMessageW
TranslateMessage
LoadCursorW
SetWindowLongW
PostQuitMessage
GetDesktopWindow
GetClassInfoExW
GetDC
MessageBoxW
ShowWindow
GetAsyncKeyState
ReleaseDC
PostMessageW
UnregisterClassW
GetClientRect
EnumWindows
MoveWindow
GetShellWindow
LoadImageW
SystemParametersInfoW
EnableMenuItem
LoadIconW
GetSystemMenu
GetClassLongW
AppendMenuW
SetClassLongW
GetWindowRect

gdi32

DeleteDC
GetObjectW
DeleteObject
CreateSolidBrush
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
GetStockObject
BitBlt
CreateCompatibleDC

advapi32

SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetTokenInformation
CreateWellKnownSid
LookupPrivilegeValueW
OpenProcessToken
RegFlushKey
RegCloseKey
RegDeleteKeyExW
RegCreateKeyExW
RegSetValueExW
LookupAccountSidW
RegOpenKeyExW
RegEnumValueW
EqualSid
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
DuplicateTokenEx
ConvertSidToStringSidW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegQueryValueExW
GetUserNameW
CredWriteW
CredReadW
CredDeleteW
CredFree
CredEnumerateW
AdjustTokenPrivileges

ole32

CoCreateGuid
CoAddRefServerProcess
OleRun
CoUninitialize
CoInitialize
CLSIDFromString
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
StringFromGUID2
OleInitialize
OleUninitialize
OleLockRunning
CoTaskMemAlloc
CoTaskMemFree
CoReleaseServerProcess

oleaut32

VariantChangeType
SysAllocStringLen
SysStringLen
SysFreeString
VariantInit
SysAllocString
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
SysAllocStringByteLen
VariantCopy
SysStringByteLen
DispCallFunc
GetErrorInfo
VariantClear

bcrypt

BCryptCloseAlgorithmProvider
BCryptVerifySignature
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptDecrypt
BCryptDestroyKey
BCryptEncrypt
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptGetProperty

crypt32

CertGetIssuerCertificateFromStore
CertGetNameStringW
CryptProtectData
CryptUnprotectData
CryptStringToBinaryW
CertOpenStore
CertFindCertificateInStore
CertFreeCertificateContext
CertCreateCertificateContext
CryptHashCertificate2
CryptImportPublicKeyInfoEx2
CertVerifySubjectCertificateContext
CertAddCertificateContextToStore
CertCloseStore

secur32

GetUserNameExW

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperGetProvSignerFromChain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 907KB - Virtual size: 906KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe photoshop install/packages/AAM/IPC/IPC.pima
.zip
Adobe photoshop install/packages/AAM/IPC/IPC.pimx
Adobe photoshop install/packages/AAM/IPC/IPC.sig
.xml
Adobe photoshop install/packages/ADC/Core/Core.pima
.zip
Adobe photoshop install/packages/ADC/Core/Core.pimx
Adobe photoshop install/packages/ADC/Core/Core.sig
.xml
Adobe photoshop install/packages/ADC/HDBox/HDBox.pima
.zip
Adobe photoshop install/packages/ADC/HDBox/HDBox.pimx
Adobe photoshop install/packages/ADC/HDBox/HDBox.sig
.xml
Adobe photoshop install/packages/ADC/IPCBox/IPCBox.pima
.zip
Adobe photoshop install/packages/ADC/IPCBox/IPCBox.pimx
Adobe photoshop install/packages/ADC/IPCBox/IPCBox.sig
.xml
Adobe photoshop install/packages/ADC/LCC/LCC.pima
.zip .ps1
Adobe photoshop install/packages/ADC/LCC/LCC.pimx
Adobe photoshop install/packages/ADC/LCC/LCC.sig
.xml
Adobe photoshop install/packages/ADC/Runtime/Runtime.pima
.zip
Adobe photoshop install/packages/ADC/Runtime/Runtime.pimx
Adobe photoshop install/packages/ADC/Runtime/Runtime.sig
.xml
Adobe photoshop install/packages/ApplicationInfo.xml
.xml
Adobe photoshop install/products/ACAI/application.json
Adobe photoshop install/products/ACAI/cai-helper.zip
.zip
Adobe photoshop install/products/ACR/AdobeCameraRaw8.0All-x64-support.zip
.zip
Adobe photoshop install/products/ACR/AdobeCameraRaw8.0All.zip
.zip
Adobe photoshop install/products/ACR/CameraRawRIBSCoExistPackage.zip
.zip
Adobe photoshop install/products/ACR/application.json
.ps1
Adobe photoshop install/products/CCXP/CCX-Process-mul-win7.zip
.zip
Adobe photoshop install/products/CCXP/CCX-Process-mul-x64.zip
.zip
Adobe photoshop install/products/CCXP/CCX-Process-mul-x86.zip
.zip
Adobe photoshop install/products/CCXP/CCXProcess-Components.zip
.zip
Adobe photoshop install/products/CCXP/CCXProcess-LaunchAgent.zip
.zip
Adobe photoshop install/products/CCXP/application.json
.js
Adobe photoshop install/products/CCXP/com.adobe.ccx.fnft-3.5.0-manifest.zip
.zip
Adobe photoshop install/products/CCXP/com.adobe.ccx.fnft-3.5.0.zip
.zip
Adobe photoshop install/products/CCXP/com.adobe.ccx.start-2.16.0-manifest.zip
.zip
Adobe photoshop install/products/CCXP/com.adobe.ccx.start-2.16.0.zip
.zip
Adobe photoshop install/products/CCXP/com.adobe.ccx.start-2.7.2-manifest.zip
.zip
Adobe photoshop install/products/CCXP/com.adobe.ccx.start-2.7.2.zip
.zip
Adobe photoshop install/products/CCXP/com.adobe.ccx.start-5.0.0-manifest.zip
.zip
Adobe photoshop install/products/CCXP/com.adobe.ccx.start-5.0.0.zip
.zip
Adobe photoshop install/products/COCM/AdobeColorCommonSetCMYK_1_0-mul.zip
.zip
Adobe photoshop install/products/COCM/Application.json
Adobe photoshop install/products/COPS/AdobeColor_Photoshop_1_0-mul.zip
.zip
Adobe photoshop install/products/COPS/AdobeColor_VideoProfilesCS_1_0-mul.zip
.zip
Adobe photoshop install/products/COPS/Application.json
Adobe photoshop install/products/CORE/AdobeColorEU_ExtraSettings_1_0-mul.zip
.zip
Adobe photoshop install/products/CORE/AdobeColorEU_Recommended_1_0-mul.zip
.zip
Adobe photoshop install/products/CORE/AdobeColorJA_ExtraSettings_1_0-mul.zip
.zip
Adobe photoshop install/products/CORE/AdobeColorJA_Recommended_1_0-mul.zip
.zip
Adobe photoshop install/products/CORE/AdobeColorNA_ExtraSettings_1_0-mul.zip
.zip
Adobe photoshop install/products/CORE/AdobeColorNA_Recommended_1_0-mul.zip
.zip
Adobe photoshop install/products/CORE/Application.json
Adobe photoshop install/products/CORG/AdobeColorCommonSetRGB_1_0-mul.zip
.zip
Adobe photoshop install/products/CORG/Application.json
Adobe photoshop install/products/COSY/CoreSyncExtensionInstaller.zip
.zip
Adobe photoshop install/products/COSY/CoreSyncExtensionUninstaller.zip
.zip
Adobe photoshop install/products/COSY/CoreSyncInstaller.zip
.zip
Adobe photoshop install/products/COSY/CoreSyncUninstaller.zip
.zip
Adobe photoshop install/products/COSY/ExchangePlugin.zip
.zip
Adobe photoshop install/products/COSY/LiveType.zip
.zip
Adobe photoshop install/products/COSY/application.json
Adobe photoshop install/products/Driver.xml
.xml
Adobe photoshop install/products/PHSP/AdobePhotoshop23-Support.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-cs_CZ_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-da_DK_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-de_DE_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-en_AE_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-en_GB_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-en_IL_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-en_US_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-es_ES_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-es_MX_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-fi_FI_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-fr_CA_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-fr_FR_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-fr_MA_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-hu_HU_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-it_IT_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-ja_JP_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-ko_KR_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-nb_NO_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-nl_NL_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-pl_PL_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-pt_BR_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-ru_RU_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-sv_SE_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-tr_TR_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-uk_UA_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-zh_CN_x64.zip
.zip
Adobe photoshop install/products/PHSP/AdobePhotoshop23-zh_TW_x64.zip
.zip
Adobe photoshop install/products/PHSP/application.json
.js
Adobe photoshop install/products/UXPW/application.json
.js
Adobe photoshop install/readme.txt

Sharing

General

Malware Config

Signatures

Files

1ee3b0da38e7b7c567f93f357ca3751c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 379KB - Virtual size: 379KB

.data Size: 21KB - Virtual size: 27KB

.rsrc Size: 138KB - Virtual size: 137KB

.reloc Size: 102KB - Virtual size: 101KB

26d1142062053486e607ffede8dd675c

Code Sign

06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

f7:6e:43:21:65:de:2c:31:59:69:12:b6:b7:08:7f:d3:6d:8f:a3:c7:d6:0c:47:55:1f:e6:a0:57:20:da:d4:43Signer

Signature Validations

Verification

02/10/2020, 04:25 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

shell32

kernel32

user32

gdi32

advapi32

ole32

oleaut32

bcrypt

crypt32

secur32

wintrust

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 907KB - Virtual size: 906KB

.data Size: 135KB - Virtual size: 160KB

.rsrc Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 198KB - Virtual size: 197KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 379KB - Virtual size: 379KB

.data
Size: 21KB - Virtual size: 27KB

.rsrc
Size: 138KB - Virtual size: 137KB

.reloc
Size: 102KB - Virtual size: 101KB

06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

f7:6e:43:21:65:de:2c:31:59:69:12:b6:b7:08:7f:d3:6d:8f:a3:c7:d6:0c:47:55:1f:e6:a0:57:20:da:d4:43
Signer

02/10/2020, 04:25
Valid: true

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 907KB - Virtual size: 906KB

.data
Size: 135KB - Virtual size: 160KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 198KB - Virtual size: 197KB