Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
AdobeNotificationClient.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
AdobeNotificationClient.exe
Resource
win10v2004-20231215-en
Target
AdobeNotificationClient.exe
Size
560KB
MD5
ca9b8fa1eb0daf070cf1a8ae3f119ae5
SHA1
78482bb2e964d29aceada2de43e4222d0c3f9f22
SHA256
5530ba872eaf8e2b21d8f3e123ad0b6f11e7c64cb53250d6b2ca17b4ae36477e
SHA512
d423141f56ae972a934bc3df021412b53a2dcd5bd99c26c930099f3f4ca7031562d89118cd8d2f7d991d163c3a8cb014731728859d7dd0e76f0aa1ae8d463340
SSDEEP
6144:Rotb3dHCgKTZik2mkc+L75GFGzFIYdHAfYyVsMTBaBtriVYbPxpUuNmhLw8G+Hkp:Ro5qJrFC1dgv6MTABtriKbxOu41H3
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sleep
CoGetContextToken
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
??0Delegate@Platform@@Q$AAA@XZ
?__abi_WinRTraiseNotImplementedException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?GetProxyImpl@Details@Platform@@YGJPAUIUnknown@@ABU_GUID@@0PAPAU3@@Z
?__abi_WinRTraiseChangedStateException@@YGXXZ
??0OutOfBoundsException@Platform@@Q$AAA@XZ
?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z
?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z
??0NotImplementedException@Platform@@Q$AAA@XZ
??0OutOfMemoryException@Platform@@Q$AAA@XZ
??0ChangedStateException@Platform@@Q$AAA@XZ
??0Object@Platform@@Q$AAA@XZ
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
?Free@Heap@Details@Platform@@SAXPAX@Z
?Allocate@Heap@Details@Platform@@SAPAXII@Z
?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z
?GetObjectContext@Details@Platform@@YGPAUIUnknown@@XZ
?ReleaseInContextImpl@Details@Platform@@YGJPAUIUnknown@@0@Z
??0DisconnectedException@Platform@@Q$AAA@XZ
?__abi_translateCurrentException@@YGJ_N@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ
?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z
?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z
?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z
?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXIPBXPA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z
?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
??0FailureException@Platform@@Q$AAA@XZ
?InitializeData@Details@Platform@@YAJH@Z
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?AllocateException@Heap@Details@Platform@@SAPAXII@Z
?UninitializeData@Details@Platform@@YAXH@Z
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?GetCmdArguments@Details@Platform@@YAPAPA_WPAH@Z
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
?GetActivationFactory@Details@Platform@@YGJPAVModuleBase@1WRL@Microsoft@@PAUHSTRING__@@PAPAUIActivationFactory@@@Z
?TerminateModule@Details@Platform@@YG_NPAVModuleBase@1WRL@Microsoft@@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Xbad_function_call@std@@YAXXZ
??Bid@locale@std@@QAEIXZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xout_of_range@std@@YAXPBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Throw_C_error@std@@YAXH@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
_Cnd_destroy_in_situ
_Cnd_broadcast
_Mtx_unlock
_Cnd_wait
_Mtx_init_in_situ
?__ExceptionPtrCurrentException@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_destroy_in_situ
?_Xlength_error@std@@YAXPBD@Z
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
PathRemoveExtensionW
PathAddExtensionW
PathIsFileSpecW
PathAppendW
PathIsDirectoryW
PathRenameExtensionW
AcquireSRWLockShared
LoadLibraryExW
InitOnceExecuteOnce
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitOnceComplete
TerminateProcess
DecodePointer
ReleaseSRWLockShared
InitOnceBeginInitialize
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
OutputDebugStringW
InitializeCriticalSectionEx
GetUserDefaultUILanguage
GetUserDefaultLangID
VerifyVersionInfoW
GetModuleHandleW
VerSetConditionMask
GetProcAddress
GetVersionExW
GetCurrentProcess
ResetEvent
SetEvent
CreateEventW
GetFileInformationByHandle
LocalFree
SetFileAttributesW
GetFileAttributesW
OpenMutexW
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetDateFormatW
WideCharToMultiByte
SystemTimeToFileTime
GetTimeFormatW
GetLocalTime
FileTimeToSystemTime
MultiByteToWideChar
GetFileSizeEx
ReadFile
lstrcmpW
CloseHandle
DeleteFileW
GetLastError
GetCurrentThreadId
CreateFileW
GetTempPathW
SetFilePointer
WriteFile
FindNextFileW
FindFirstFileW
GetCurrentProcessId
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
SHCreateDirectoryExW
SHGetSpecialFolderPathW
VariantClear
SetRestrictedErrorInfo
RoFailFastWithErrorContext
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsCreateString
WindowsCreateStringReference
WindowsDeleteString
WindowsCompareStringOrdinal
WindowsDuplicateString
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
memmove
__current_exception_context
__current_exception
memset
memcpy
wcsstr
wcsrchr
_purecall
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__std_terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_get_narrow_winmain_command_line
_controlfp_s
terminate
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_seh_filter_exe
_set_app_type
abort
exit
_exit
_register_thread_local_exe_atexit_callback
_c_exit
free
_callnewh
_set_new_mode
malloc
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__p__commode
fread
fclose
_wfopen_s
__stdio_common_vswprintf_s
_set_fmode
_localtime64_s
_ftime64_s
wcsftime
wcslen
tolower
wcscpy_s
_wrename
__setusermatherr
_configthreadlocale
DllCanUnloadNow
DllGetActivationFactory
VSDesignerDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ