Adobe Dreamweaver CS6[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

Adobe Dreamweaver CS6.rar
Size

314.6MB
MD5

9435eba17fc06b892d9efb1816e5633f
SHA1

765bfbdccddffe78f2cd944f61ac608880a0e720
SHA256

8189f34e0339f13f89119b8e14a32819b2f7c694e0b6645b06efcda9bffbd1e4
SHA512

b69c45276cb07d7c69da6607d65139a6d258f97c7aa7712b004c508f83a689fc4e13b8491e32b04995541e5a088be94b2d4187abfcd5b635b97c92ae108c6d27
SSDEEP

6291456:aTc8qMieAl04qjUmpHO7KDghw/kQFUr3WXXqgjtSBa7TVqPZF:aTc8JiX2FpHO7Wgu/kscE5kQHVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/customaction.data
unpack001/Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/customaction.data

Files

Adobe Dreamweaver CS6.rar
.rar
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/Set-up.exe
.exe windows x86

cef7fe1891403cea86feb76a7a9d9664

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

15-12-2010 00:00

Not After

14-12-2012 23:59

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:38:42:64:fa:80:9a:f1:c5:ef:12:a9:63:70:9b:3a:27:63:a8:96
Signer

Actual PE Digest

65:38:42:64:fa:80:9a:f1:c5:ef:12:a9:63:70:9b:3a:27:63:a8:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx
ord17

kernel32

HeapCreate
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStringTypeW
LCMapStringW
VirtualQuery
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
CreateMutexW
WaitForSingleObject
IsDBCSLeadByteEx
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
SetUnhandledExceptionFilter
FreeConsole
Sleep
ReleaseSemaphore
GetLastError
GetSystemInfo
VirtualAlloc
CreateSemaphoreW
LocalAlloc
OpenSemaphoreW
HeapSize
HeapQueryInformation
ExitThread
ExitProcess
RaiseException
RtlUnwind
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleFileNameW
HeapFree
GetFileType
SetStdHandle
HeapAlloc
EncodePointer
DecodePointer
GetStartupInfoW
HeapSetInformation
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetFileAttributesExW
SetErrorMode
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
lstrcmpiW
GetCurrentDirectoryW
lstrcpyW
GetSystemDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
GlobalFlags
InitializeCriticalSection
ReleaseActCtx
CreateActCtxW
GetTickCount
ResumeThread
SetThreadPriority
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
lstrcmpW
GlobalSize
GlobalAlloc
FormatMessageW
lstrlenW
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
ActivateActCtx
DeactivateActCtx
FindNextFileW
FindClose
SetLastError
FlushFileBuffers
ReadFile
FindFirstFileW
GetFileSize
GetLocalTime
CreateFileW
GetTimeFormatW
WriteFile
CreateDirectoryW
SetFilePointer
GetDateFormatW
GetUserDefaultUILanguage
GetTempPathW
GetExitCodeProcess
GetVersionExW
GetUserDefaultLangID
CreateProcessW
GetDriveTypeW
LockResource
SizeofResource
LoadResource
FindResourceW
CreateThread
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
SetCurrentDirectoryW
CreateEventW
ResetEvent
GetProcAddress
GetStdHandle
GetLocaleInfoA
ReleaseMutex
CloseHandle
GetCurrentProcessId
LocalFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
FreeLibrary
SetEvent
GetModuleHandleW
LoadLibraryW
CopyFileW

user32

GetKeyNameTextW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
wsprintfW
EnableWindow
SendMessageW
GetWindow
GetSystemMetrics
SetWindowLongW
EnableMenuItem
GetWindowLongW
LoadIconW
GetClientRect
DrawIcon
KillTimer
PostMessageW
LoadImageW
IsIconic
GetWindowRect
SetTimer
GetSystemMenu
GetDesktopWindow
IsRectEmpty
DestroyIcon
IsWindowVisible
IsWindow
ReleaseDC
InvalidateRect
InflateRect
GetDC
GetIconInfo
SetRectEmpty
LoadCursorW
GetParent
GetFocus
DrawIconEx
FillRect
SetCursor
CheckMenuItem
GetMenuState
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowThreadProcessId
EndDialog
GetNextDlgTabItem
GetDlgItem
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
OpenClipboard
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
GetSysColor
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
PtInRect
CopyRect
SetWindowPos
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawFrameControl
DrawEdge
DrawStateW
SetClassLongW
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
MapVirtualKeyW
CreatePopupMenu
GetMenuDefaultItem
UnregisterClassW
PostThreadMessageW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
CopyAcceleratorTableW
OffsetRect
CharNextW
CharUpperW
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
DeleteMenu
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
IntersectRect
GetWindowRgn
DestroyCursor
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
GetUpdateRect
FrameRect
ScreenToClient
IsClipboardFormatAvailable
GetSysColorBrush
RealChildWindowFromPoint
LoadMenuW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
RegisterClipboardFormatW
GetMessageW
TranslateMessage
GetCursorPos
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
ValidateRect
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
BringWindowToTop

advapi32

InitializeSecurityDescriptor
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

ole32

OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
IsAccelerator
OleInitialize
OleUninitialize
CLSIDFromString
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleLockRunning
DoDragDrop
CoCreateInstance
OleRun
CoTaskMemFree
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoCreateGuid
StringFromGUID2
CoInitializeEx
CLSIDFromProgID
CoFreeUnusedLibraries
CoUninitialize

shell32

SHAppBarMessage
ord680
CommandLineToArgvW
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
ShellExecuteW
SHBrowseForFolderW

oleaut32

VariantChangeType
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
SysStringLen
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
GetErrorInfo

shlwapi

PathRemoveFileSpecW
StrRChrW
PathFileExistsW
PathRemoveBackslashW
PathGetDriveNumberW
PathIsRootW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

gdi32

CreateSolidBrush
CreateRoundRectRgn
Rectangle
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
CreateBitmap
CreateFontIndirectW
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectW
GetDeviceCaps
CreatePen
CreateHatchBrush
CopyMetaFileW
CreateDCW
GetTextExtentPoint32W
GetTextMetricsW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
GetObjectType
GetStockObject

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipCloneImage
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 325KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 310KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/D6/D6.pima
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/D6/D6.pimx
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/D6/D6.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/DECore/DECore.pima
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/DECore/DECore.pimx
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/DECore/DECore.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/DWA/DWA.pima
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/DWA/DWA.pimx
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/DWA/DWA.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/LWA/LWA.pima
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/LWA/LWA.pimx
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/LWA/LWA.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/P6/P6.pima
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/P6/P6.pimx
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/P6/P6.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/UWA/UWA.pima
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/UWA/UWA.pimx
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/UWA/UWA.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/core/PDApp.pima
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/core/PDApp.pimx
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/core/PDApp.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/packages/install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/AdobeAPE3.3-mul.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/AdobeAPE3.3-mul.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeAPE3.3-mul/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/AdobeCSXSExtensions3-mul.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/AdobeCSXSExtensions3-mul.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/customaction.data
.dll windows x86

b7677a1aff5298d63c251783f62732a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

psapi

EnumProcesses
GetModuleBaseNameW

kernel32

SetHandleCount
CreateFileW
WriteConsoleW
OpenProcess
Sleep
TerminateProcess
CloseHandle
WideCharToMultiByte
GetACP
MultiByteToWideChar
SetStdHandle
GetConsoleMode
GetConsoleCP
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetLastError
GetProcAddress
HeapAlloc
HeapFree
IsProcessorFeaturePresent
ExitProcess
FlushFileBuffers
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetModuleFileNameW
RtlUnwind
HeapSize
HeapReAlloc
LoadLibraryW
SetFilePointer

user32

FindWindowExW
PostMessageW

Exports

Exports

CSInstallerCustomHookCloseSession
CSInstallerCustomHookInitSession
CSInstallerCustomHookProc

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSExtensions3-mul/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/AdobeCSXSInfrastructure3-mul.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/AdobeCSXSInfrastructure3-mul.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/customaction.data
.dll windows x86

b7677a1aff5298d63c251783f62732a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

psapi

EnumProcesses
GetModuleBaseNameW

kernel32

SetHandleCount
CreateFileW
WriteConsoleW
OpenProcess
Sleep
TerminateProcess
CloseHandle
WideCharToMultiByte
GetACP
MultiByteToWideChar
SetStdHandle
GetConsoleMode
GetConsoleCP
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetLastError
GetProcAddress
HeapAlloc
HeapFree
IsProcessorFeaturePresent
ExitProcess
FlushFileBuffers
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
WriteFile
GetModuleFileNameW
RtlUnwind
HeapSize
HeapReAlloc
LoadLibraryW
SetFilePointer

user32

FindWindowExW
PostMessageW

Exports

Exports

CSInstallerCustomHookCloseSession
CSInstallerCustomHookInitSession
CSInstallerCustomHookProc

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeCSXSInfrastructure3-mul/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/AdobeDreamweaver12-mul.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/AdobeDreamweaver12-mul.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12-mul/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/AdobeDreamweaver12de_DELanguagePack.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/AdobeDreamweaver12de_DELanguagePack.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12de_DELanguagePack/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/AdobeDreamweaver12es_ESLanguagePack.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/AdobeDreamweaver12es_ESLanguagePack.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12es_ESLanguagePack/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/AdobeDreamweaver12fr_FRLanguagePack.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/AdobeDreamweaver12fr_FRLanguagePack.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12fr_FRLanguagePack/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/AdobeDreamweaver12it_ITLanguagePack.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/AdobeDreamweaver12it_ITLanguagePack.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12it_ITLanguagePack/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/AdobeDreamweaver12nl_NLLanguagePack.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/AdobeDreamweaver12nl_NLLanguagePack.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12nl_NLLanguagePack/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/AdobeDreamweaver12pt_BRLanguagePack.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/AdobeDreamweaver12pt_BRLanguagePack.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12pt_BRLanguagePack/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/AdobeDreamweaver12sv_SELanguagePack.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/AdobeDreamweaver12sv_SELanguagePack.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaver12sv_SELanguagePack/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaverWidgetsBrowser1.0-mul/AdobeAIRInstaller.exe
.exe windows x86

f3e974452807d25c2b9375c00e84e2c2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:28:2b:07:49:66:9b:59:5f:79:49:ff:06:13:4e:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-09-2009 00:00

Not After

01-10-2012 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Universal Client,O=Adobe Systems Incorporated,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

63:c5:32:88:a5:8b:05:16:15:26:e2:7d:d7:35:36:ad:19:5d:c6:f3
Signer

Actual PE Digest

63:c5:32:88:a5:8b:05:16:15:26:e2:7d:d7:35:36:ad:19:5d:c6:f3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW

shell32

ShellExecuteExW
SHFileOperationW

kernel32

TlsGetValue
ExitProcess
GetCommandLineW
GetTempFileNameW
SetFilePointer
HeapAlloc
HeapFree
CreateDirectoryW
WaitForSingleObject
GetModuleHandleW
GetProcessHeap
WriteFile
GetExitCodeProcess
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLastError
GetProcAddress
CloseHandle
DeleteFileW
CreateThread
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetUnhandledExceptionFilter
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RaiseException
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

TranslateMessage
DispatchMessageW
GetMessageW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaverWidgetsBrowser1.0-mul/AdobeDreamweaverWidgetsBrowser1.0-mul.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaverWidgetsBrowser1.0-mul/AdobeDreamweaverWidgetsBrowser1.0-mul.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaverWidgetsBrowser1.0-mul/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaverWidgetsBrowser1.0-mul/WidgetBrowser.air
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeDreamweaverWidgetsBrowser1.0-mul/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/AdobeExtendScriptToolkit3.8.0-mul.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/AdobeExtendScriptToolkit3.8.0-mul.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtendScriptToolkit3.8.0-mul/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/AdobeExtensionManager6.0All.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/AdobeExtensionManager6.0All.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeExtensionManager6.0All/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeHelp/AdobeAIRInstaller.exe
.exe windows x86

f3e974452807d25c2b9375c00e84e2c2

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:28:2b:07:49:66:9b:59:5f:79:49:ff:06:13:4e:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-09-2009 00:00

Not After

01-10-2012 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Universal Client,O=Adobe Systems Incorporated,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f6:f9:79:c3:a4:42:c3:29:10:3a:0f:43:b0:e7:d7:f3:40:0c:3e:7c
Signer

Actual PE Digest

f6:f9:79:c3:a4:42:c3:29:10:3a:0f:43:b0:e7:d7:f3:40:0c:3e:7c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW

shell32

ShellExecuteExW
SHFileOperationW

kernel32

TlsGetValue
ExitProcess
GetCommandLineW
GetTempFileNameW
SetFilePointer
HeapAlloc
HeapFree
CreateDirectoryW
WaitForSingleObject
GetModuleHandleW
GetProcessHeap
WriteFile
GetExitCodeProcess
GetFileAttributesW
ReadFile
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
GetTempPathW
GetLastError
GetProcAddress
CloseHandle
DeleteFileW
CreateThread
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
SetUnhandledExceptionFilter
Sleep
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
RaiseException
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

TranslateMessage
DispatchMessageW
GetMessageW

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeHelp/AdobeHelp.air
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeHelp/AdobeHelp.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeHelp/InstallAdobeHelp.exe
.exe windows x86

04733bc2749b44c2fbddfc9bcdf60856

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

16-07-2036 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:b0:83:03:ae:6d:a2:89:3c:02:a0:b2:14:ad:ff:1e
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

16-11-2010 00:00

Not After

15-11-2012 23:59

Subject

CN=Adobe Systems Incorporated.,OU=Information Security+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated.,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:06:d6:10:40:38:dd:e1:44:86:96:b5:b6:b8:11:bc:96:77:77:ad
Signer

Actual PE Digest

41:06:d6:10:40:38:dd:e1:44:86:96:b5:b6:b8:11:bc:96:77:77:ad

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GlobalAlloc
GetStdHandle
CreatePipe
GlobalFree
ReadFile
GetLastError
GetFileAttributesExW
GetModuleFileNameW
GetModuleHandleW
SetCurrentDirectoryW
HeapFree
HeapAlloc
GetCommandLineW
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
RaiseException
HeapCreate
GetProcAddress
ExitProcess
WriteFile
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
Sleep
HeapSize
LoadLibraryW
GetStringTypeW
HeapReAlloc

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeHelp/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeHelp/arh.exe
.exe windows x86

085b8a5d9e723b8ba9982a936ce1c779

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21-05-2009 00:00

Not After

20-05-2019 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:28:2b:07:49:66:9b:59:5f:79:49:ff:06:13:4e:92
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05-09-2009 00:00

Not After

01-10-2012 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Universal Client,O=Adobe Systems Incorporated,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:22:1e:f0:78:1c:d8:3c:b1:f3:b3:eb:6a:b5:e9:36:1a:4e:ad:25
Signer

Actual PE Digest

52:22:1e:f0:78:1c:d8:3c:b1:f3:b3:eb:6a:b5:e9:36:1a:4e:ad:25

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
CreateFileA
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
LocalFree
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteFile
SetFilePointer
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStartupInfoA
Sleep
GetModuleHandleW
GetProcAddress
ExitProcess
LoadLibraryW
RaiseException
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

msi

ord141
ord90
ord205
ord173
ord16

shlwapi

PathAppendW
PathRemoveFileSpecW
StrDupW
StrChrA
PathAppendA

advapi32

CryptAcquireContextW
CryptDestroyHash
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CryptReleaseContext
CryptCreateHash
CryptHashData
CryptGetHashParam

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeHelp/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/AdobeLinguistics_4_0_All.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/AdobeLinguistics_4_0_All.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/Assets1_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/Assets1_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/Assets2_1.zip
.zip .ps1
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeLinguistics_4_0_All/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/AdobeSuiteSharedConfiguration3-mul.boot.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/AdobeSuiteSharedConfiguration3-mul.proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Assets2_1.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Assets2_1.zip
.zip
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Install.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Install.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/AdobeSuiteSharedConfiguration3-mul/version.txt
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Media_db.sig
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2005 Redist (x86)/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2005 Redist (x86)/Microsoft VC 2005 Redist (x86).proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2005 Redist (x86)/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2005 Redist (x86)/vcredist_x86.exe
.exe windows x86

0ebb3c09b06b1666d307952e824c8697

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:b2:9b:00:00:00:00:00:15
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

21-02-2011 20:53

Not After

21-05-2012 20:53

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f
Signer

Actual PE Digest

5d:9a:9e:30:e8:b4:79:bd:b9:25:8e:b1:69:72:67:0f:90:ec:0f:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
lstrlenA
GetModuleFileNameA
GetSystemDirectoryA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
FreeResource
GetProcAddress
LoadResource
SizeofResource
FindResourceA
lstrcatA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
LockResource

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2008 Redist (x86)/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2008 Redist (x86)/Microsoft VC 2008 Redist (x86).proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2008 Redist (x86)/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2008 Redist (x86)/vcredist_x86.exe
.exe windows x86

092eb6daba2f17cbda102fd1a32acd00

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:27:81:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-10-2008 21:24

Not After

22-01-2010 21:34

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:01

Not After

25-07-2013 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f1:2d:63:c7:cd:39:0d:61:df:59:dc:c5:fc:33:da:17:e2:2a:bf:18
Signer

Actual PE Digest

f1:2d:63:c7:cd:39:0d:61:df:59:dc:c5:fc:33:da:17:e2:2a:bf:18

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
GetVersionExA
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
CreateFileA
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
CloseHandle
DeviceIoControl
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
FindClose
ReadFile

msvcrt

strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_snprintf
sprintf

advapi32

AllocateAndInitializeSid
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
OpenProcessToken

user32

ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
LoadStringA
EndDialog
SetParent
MessageBoxA

ntdll

NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.2MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2010 Redist (x86)/Media_db.db
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2010 Redist (x86)/Microsoft VC 2010 Redist (x86).proxy.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2010 Redist (x86)/media.sql
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Microsoft VC 2010 Redist (x86)/vcredist_x86.exe
.exe windows x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22-08-2007 22:31

Not After

25-08-2012 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-12-2009 22:40

Not After

07-03-2011 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-07-2008 19:02

Not After

25-07-2013 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5f:c8:53:53:4b:f3:8d:17:29:22:b7:77:39:d5:7a:e2:70:d6:a5:b8
Signer

Actual PE Digest

5f:c8:53:53:4b:f3:8d:17:29:22:b7:77:39:d5:7a:e2:70:d6:a5:b8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_adjust_fdiv
_exit
_c_exit
strncpy
strstr
_strlwr
strrchr
_stricmp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_snprintf
sprintf
strchr
_strnicmp
_vsnprintf

advapi32

InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
InitializeSecurityDescriptor

kernel32

CreateThread
GetFileSize
ExpandEnvironmentStringsA
CreateProcessA
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
SetFileTime
SetEndOfFile
CreateEventA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentDirectoryA
GetProcessHeap
CopyFileA
SetFileAttributesA
DosDateTimeToFileTime
SetEvent
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
FindFirstFileA
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
FindClose
FindNextFileA
SystemTimeToFileTime

user32

SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
ShowWindow

ntdll

NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.7MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/payloads/Setup.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/AdobePIM.dll
.dll windows x86

a59c5df6d9c9538fa988eb452256661e

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

15-12-2010 00:00

Not After

14-12-2012 23:59

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6d:b0:33:b6:ad:fd:16:a5:9d:66:f9:35:53:3b:9a:a1:86:b3:ee:39
Signer

Actual PE Digest

6d:b0:33:b6:ad:fd:16:a5:9d:66:f9:35:53:3b:9a:a1:86:b3:ee:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msi

ord74
ord147
ord145

kernel32

LocalFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetDateFormatW
SetFilePointer
CreateDirectoryW
WriteFile
GetTimeFormatW
CreateFileW
GetTempPathW
GetLocalTime
FreeLibrary
LoadLibraryW
GetProcAddress
OpenProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
FindFirstFileW
CreateProcessW
MoveFileExW
SetEvent
CopyFileW
GetVersionExW
GetModuleFileNameW
FindClose
ResetEvent
CreateEventW
RemoveDirectoryW
lstrcmpiW
FindNextFileW
GetDiskFreeSpaceExW
DeleteFileW
SetFileAttributesW
GetFileSize
ReadFile
FlushFileBuffers
SetLastError
lstrlenA
GetCurrentProcessId
SetFileTime
GetFileAttributesW
lstrlenW
lstrcatW
GetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetFullPathNameA
CreateFileA
SetEndOfFile
QueryPerformanceCounter
UnlockFile
LockFile
GetTickCount
GetSystemTimeAsFileTime
FormatMessageA
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesA
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
GetDiskFreeSpaceA
DeleteCriticalSection
GetCurrentThreadId
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
GetACP
GetCurrentProcess
lstrcpyW
GetFileSizeEx
CompareStringW
GetProcessHeap
CloseHandle
ReleaseMutex
OpenSemaphoreW
GetLocaleInfoW
LocalAlloc
CreateSemaphoreW
GetLastError
ReleaseSemaphore
Sleep
WaitForSingleObject
CreateMutexW
SetEnvironmentVariableA
GetModuleHandleW
ExitProcess
DosDateTimeToFileTime
WriteConsoleW
SetStdHandle
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetTimeZoneInformation
GetStartupInfoW
GetFileType
SetHandleCount
GetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCPInfo
LCMapStringW
RtlUnwind
RaiseException
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
HeapDestroy
EncodePointer
DecodePointer
HeapAlloc
HeapFree
MoveFileW
MoveFileA
HeapReAlloc
GetCommandLineA
HeapCreate

user32

wsprintfW

advapi32

SetEntriesInAclW
CreateWellKnownSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

SHGetFolderPathW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderLocation
SHGetPathFromIDListW

ole32

CoCreateInstance
OleRun
CoInitialize
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoUninitialize

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
SysStringLen
SysAllocString
GetErrorInfo

shlwapi

PathIsDirectoryW
PathFindFileNameW
PathRemoveFileSpecW
PathRenameExtensionW
PathStripPathW
PathAppendW
PathRemoveBackslashW
PathFileExistsW

Exports

Exports

AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_copyPkgsFromACFToCFPath
pim_createLibraryRef
pim_createLibraryRefWithType
pim_createOrUpdateAAMInventory
pim_freeLiraryRef
pim_getAppletRegistrationInfo
pim_getCurrentPIMCFPath
pim_getCurrentPackagesVersion
pim_getCurrentPathType
pim_getInstalledPackagesInfo
pim_getPathOfType
pim_getStandardACFPath
pim_getStandardUSFPath
pim_getStandardUSFTempPath
pim_getUpdateStatusAtPath
pim_getUpdateStatusAtPathCInterface
pim_haveEnoughDiskSpaceIfACFLatest
pim_haveEnoughDiskSpaceToInstallPackages
pim_haveEnoughDiskSpaceToInstallPackagesCInterface
pim_installPackage
pim_postInstallPackages
pim_registerProgressTicksCallback
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool

Sections

.text
Size: 848KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/cs_CZ/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/da_DK/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/de_DE/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/en_AE/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/en_GB/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/en_IL/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/en_US/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/en_XM/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/es_ES/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/es_LA/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/es_MX/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/es_NA/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/fi_FI/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/fr_CA/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/fr_FR/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/fr_MA/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/fr_XM/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/hu_HU/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/it_IT/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/ja_JP/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/ko_KR/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/nb_NO/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/nl_NL/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/pl_PL/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/pt_BR/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/ru_RU/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/sv_SE/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/tr_TR/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/uk_UA/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/zh_CN/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/Dictionary/zh_TW/stringTable.zdct
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/setup.xml
.xml
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/updaterinventory.dll
.dll windows x86

1c126edb5a5bedf745bfca7fbbcddecc

Code Sign

04:00:00:00:00:01:20:19:c1:90:66
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2009 11:00

Not After

28-01-2028 12:00

Subject

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:00:00:00:00:01:25:b0:b4:cc:01
Certificate

Issuer

CN=GlobalSign Timestamping CA,OU=Timestamping CA,O=GlobalSign

Not Before

21-12-2009 09:32

Not After

22-12-2020 09:32

Subject

CN=GlobalSign Time Stamping Authority,O=GlobalSign NV,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:0c:e8:e0:30:61:2e:9f:2b:89:f7:05:4d:7c:f8:fd
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

15-12-2010 00:00

Not After

14-12-2012 23:59

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:57:38:d4:ba:0f:cf:d9:9a:d8:88:a3:15:1d:77:78:77:1e:e7:17
Signer

Actual PE Digest

52:57:38:d4:ba:0f:cf:d9:9a:d8:88:a3:15:1d:77:78:77:1e:e7:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RaiseException
HeapCreate
HeapDestroy
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
WideCharToMultiByte
GetTimeZoneInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapReAlloc
EncodePointer
EnterCriticalSection
FreeLibrary
InterlockedExchange
LoadLibraryW
RtlUnwind
LCMapStringW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
CompareStringW
SetEnvironmentVariableA
GetLongPathNameW
GetTempPathW
DeleteFileW
CopyFileW
SetFileAttributesW
RemoveDirectoryW
GetVersionExW
CreateDirectoryW
CreateEventA
SetEvent
ReadFile
MultiByteToWideChar
LocalFree
LocalAlloc
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
CreateThread
GetExitCodeThread
WaitForSingleObject
TerminateThread
InterlockedDecrement
CloseHandle
FindNextFileW
FindClose
GetCurrentProcess
FindFirstFileW
SetEndOfFile
LeaveCriticalSection
MoveFileW
ResetEvent
OpenEventA
InitializeCriticalSection

advapi32

SetNamedSecurityInfoW
CreateWellKnownSid
GetSecurityDescriptorDacl
RegOpenKeyExW
RegSetKeySecurity
SetEntriesInAclW
RegDeleteValueW
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHGetMalloc

ole32

CoUninitialize
CoInitializeSecurity
CoInitialize
CoInitializeEx
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysFreeString
VariantInit

shlwapi

PathIsFileSpecW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW

Exports

Exports

UpdaterInventoryAddToMCL
UpdaterInventoryAddToMCLWithIcon
UpdaterInventoryGetLibVersion
UpdaterInventoryIsHigherUpdatePresent
UpdaterInventoryRelease
UpdaterInventoryRemoveFromMCL
UpdaterInventorySuppressUpdates

Sections

.text
Size: 282KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Adobe Dreamweaver CS6/resources/version.txt
Adobe Dreamweaver CS6/Crack/amtlib.dll
.dll windows x86

905fc0b9f3738d1c0a333fb8f21955fa

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

15-12-2010 00:00

Not After

14-12-2012 23:59

Subject

CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

81:7b:5d:72:45:3c:0c:72:01:cf:18:83:f6:c4:db:36:86:77:3d:25
Signer

Actual PE Digest

81:7b:5d:72:45:3c:0c:72:01:cf:18:83:f6:c4:db:36:86:77:3d:25

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winhttp

WinHttpGetProxyForUrl
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSetCredentials
WinHttpSendRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpCloseHandle

setupapi

CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

iphlpapi

GetIfTable

kernel32

GetCurrentProcess
GetLastError
GetCurrentThread
SetLastError
FormatMessageW
FreeLibrary
LoadLibraryW
LocalFree
GetProcAddress
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableA
GetModuleFileNameW
CreateSemaphoreW
ReleaseSemaphore
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateThread
SetEvent
OpenEventW
GetTickCount
GetLocalTime
GetTimeZoneInformation
GetVersionExW
GetComputerNameExW
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsW
GetTempPathW
TryEnterCriticalSection
CloseHandle
ResumeThread
CreateProcessW
FindClose
FindNextFileW
FindFirstFileW
GlobalFree
WaitForMultipleObjects
CreateEventW
CreateDirectoryW
GetFileAttributesW
CreateFileW
SetFileAttributesW
IsDBCSLeadByteEx
GetFileSize
SetFilePointer
SetEndOfFile
UnlockFileEx
WriteFile
ReadFile
FlushFileBuffers
LockFileEx
LocalAlloc
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrlenW
GetModuleFileNameA
GetStartupInfoW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
FatalAppExitA
GetFileInformationByHandle
SwitchToThread
PeekNamedPipe
GetCurrentDirectoryW
SetCurrentDirectoryW
SetStdHandle
CreateFileA
GetFileAttributesA
GetFullPathNameA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
DeleteFileA
IsValidLocale
SetConsoleCtrlHandler
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
OutputDebugStringA
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetLocaleInfoW
HeapSize
GetStdHandle
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
HeapDestroy
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
GetStringTypeW
InterlockedCompareExchange
InterlockedExchange
Sleep
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapReAlloc
HeapAlloc
GetFullPathNameW
GetCurrentThreadId
GetCommandLineA
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
DeleteFileW
GetDriveTypeA
FindFirstFileExA
MoveFileA
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
TlsAlloc

user32

MessageBoxW

advapi32

RegDeleteKeyA
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
SetSecurityInfo
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
SetTokenInformation
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid

shell32

ShellExecuteA
SHGetFolderPathW

ole32

CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
CoInitializeEx

oleaut32

CreateErrorInfo
SetErrorInfo
VariantInit
VariantChangeType
GetErrorInfo
SysAllocStringByteLen
VariantClear
SysStringLen
SysAllocString
SysFreeString

Exports

Exports

AMTGetLibVersion
AMTGetParentLEIDLicenseStatus
AMTGetProductClearSerialNumber
AMTObtainProductLicense
AMTPlugPlugRequest
AMTPreObtainProductLicense
AMTPreValidateProductLicense
AMTReleaseProductLicense
AMTRetrieveAdobeID
AMTValidateProductLicense
GetAsnVersion
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Adobe Dreamweaver CS6/Guia de Instalacion.mp4

Sharing

General

Malware Config

Signatures

Files

cef7fe1891403cea86feb76a7a9d9664

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

65:38:42:64:fa:80:9a:f1:c5:ef:12:a9:63:70:9b:3a:27:63:a8:96Signer

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

gdi32

msimg32

comdlg32

winspool.drv

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 325KB - Virtual size: 324KB

.data Size: 27KB - Virtual size: 57KB

.rsrc Size: 310KB - Virtual size: 309KB

.reloc Size: 177KB - Virtual size: 176KB

b7677a1aff5298d63c251783f62732a9

Headers

DLL Characteristics

File Characteristics

Imports

psapi

kernel32

user32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

b7677a1aff5298d63c251783f62732a9

Headers

DLL Characteristics

File Characteristics

Imports

psapi

kernel32

user32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 3KB - Virtual size: 10KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

f3e974452807d25c2b9375c00e84e2c2

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

65:38:42:64:fa:80:9a:f1:c5:ef:12:a9:63:70:9b:3a:27:63:a8:96
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 325KB - Virtual size: 324KB

.data
Size: 27KB - Virtual size: 57KB

.rsrc
Size: 310KB - Virtual size: 309KB

.reloc
Size: 177KB - Virtual size: 176KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 3KB - Virtual size: 10KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

7e:28:2b:07:49:66:9b:59:5f:79:49:ff:06:13:4e:92
Certificate

63:c5:32:88:a5:8b:05:16:15:26:e2:7d:d7:35:36:ad:19:5d:c6:f3
Signer

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 5KB - Virtual size: 5KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

7e:28:2b:07:49:66:9b:59:5f:79:49:ff:06:13:4e:92
Certificate

f6:f9:79:c3:a4:42:c3:29:10:3a:0f:43:b0:e7:d7:f3:40:0c:3e:7c
Signer

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 5KB - Virtual size: 5KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

76:b0:83:03:ae:6d:a2:89:3c:02:a0:b2:14:ad:ff:1e
Certificate