Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual.zip
- SHA256 fa4f07349d7de61246ec6e30232634c2edfa1f2f6691889f742ff6ac0945ffb3
Password
123
Overview
overview
7Static
static
5Adobe_Medi...al.zip
windows10-2004-x64
1Adobe_Medi...al.zip
windows11-ltsc_2024-x64
1Adobe_Medi...up.exe
windows10-2004-x64
7Adobe_Medi...up.exe
windows11-ltsc_2024-x64
3Adobe_Medi...PC.zip
windows10-2004-x64
1Adobe_Medi...PC.zip
windows11-ltsc_2024-x64
1AdobeIPCBroker.exe
windows10-2004-x64
3AdobeIPCBroker.exe
windows11-ltsc_2024-x64
3Adobe_Medi...C.pimx
windows10-2004-x64
3Adobe_Medi...C.pimx
windows11-ltsc_2024-x64
3Adobe_Medi...PC.xml
windows10-2004-x64
3Adobe_Medi...PC.xml
windows11-ltsc_2024-x64
1Adobe_Medi...re.zip
windows10-2004-x64
1Adobe_Medi...re.zip
windows11-ltsc_2024-x64
1AdobePIM.dll
windows10-2004-x64
4AdobePIM.dll
windows11-ltsc_2024-x64
4Core.dll
windows10-2004-x64
3Core.dll
windows11-ltsc_2024-x64
3Adobe_Medi...e.pimx
windows10-2004-x64
3Adobe_Medi...e.pimx
windows11-ltsc_2024-x64
3Adobe_Medi...re.xml
windows10-2004-x64
3Adobe_Medi...re.xml
windows11-ltsc_2024-x64
1Adobe_Medi...ox.zip
windows10-2004-x64
1Adobe_Medi...ox.zip
windows11-ltsc_2024-x64
1Adobe Upda...er.exe
windows10-2004-x64
3Adobe Upda...er.exe
windows11-ltsc_2024-x64
3Adobe_Medi...x.pimx
windows10-2004-x64
3Adobe_Medi...x.pimx
windows11-ltsc_2024-x64
3Adobe_Medi...ox.xml
windows10-2004-x64
3Adobe_Medi...ox.xml
windows11-ltsc_2024-x64
1Adobe_Medi...ox.zip
windows10-2004-x64
1Adobe_Medi...ox.zip
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/Set-up.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral4
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/Set-up.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral5
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
AdobeIPCBroker.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
AdobeIPCBroker.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.pimx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.pimx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral11
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral12
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
AdobePIM.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral16
Sample
AdobePIM.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral17
Sample
Core.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral18
Sample
Core.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.pimx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral20
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.pimx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral21
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral22
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
Adobe Update Helper.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
Adobe Update Helper.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.pimx
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.pimx
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.xml
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral30
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.xml
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual.zip
- Size 963.5MB
- Sample260804-3fljqatala
- SHA256 fa4f07349d7de61246ec6e30232634c2edfa1f2f6691889f742ff6ac0945ffb3
- MD5 7eeee0068bc2eef4104f0f67c646e0b5
- SHA1 d7077345675997ba4306f31754e34a3aa28758af
- SHA512 af7b2c9b7774b91fd62241c8c35ac4eebfbc3be0ca2615be32fc27af2863dcbcb7e1189393d6c4eca4c48f970ae35bfd2a199794d8f427061ce0070a47452b78
- SSDEEP 25165824:yvgFsxY4Mm9frfQvpfHKB89uI9QKYON7qaS8JG1tbmAAd/h5nCRL5x/:AgGxYcfafHuFBroS8JG1tbmAAd/h5CRD
- TLSH T123A933897BC4C896F577163156359921892BB80B9B3984CFE6A85C3C0FB73C89335B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack001/Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/Set-up.exe
File Explorer
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual.zip.zip 963.5MB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/Set-up.exe.exe 5.0MB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.pima.zip 604KB
-
AdobeIPCBroker.exe.exe 1.0MB
-
customhook/AdobeIPCBrokerCustomHook.exe.exe 197KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.pimx57KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.sig.xml 1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.pima.zip 1.1MB
-
AdobePIM.dll.dll 1.9MB
-
Core.dll.dll 415KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.pimx1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.sig.xml 1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.pima.zip 6.4MB
-
Adobe Update Helper.exe.exe 1.2MB
-
HDHelper.exe.exe 524KB
-
HDIM.dll.dll 382KB
-
HDPIM.dll.dll 2.9MB
-
HDUWP.dll.dll 377KB
-
HDZIP.dll.dll 350KB
-
HUM.dll.dll 1.4MB
-
Set-up.exe.exe 5.0MB
-
Setup.exe.exe 541KB
-
TokenResolverx64.exe.exe 134KB
-
Uninstaller.exe.exe 1019KB
-
customhook/HDCoreCustomHook.exe.exe 1.0MB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.pimx4KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.sig.xml 1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.pima.zip 926KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.pimx3KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.sig.xml 1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/LCC/LCC.pima.zip 9.4MB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/LCC/LCC.pimx12KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/LCC/LCC.sig.xml 1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Runtime/Runtime.pima.zip 99.7MB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Runtime/Runtime.pimx5KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Runtime/Runtime.sig.xml 1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ApplicationInfo.xml.xml 3KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/products/AME/AdobeMediaEncoder14AllTrial.zip.zip 838.3MB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/products/AME/application.json.js 25KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/products/driver.xml315B
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/AdobePIM.dll.dll 1.9MB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/Config.xml.xml 414B
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/content/images/appIcon.png.png 1KB
-
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/content/images/appIcon2x.png.png 3KB
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/Set-up.exe
- IMPHASH 56e748664914f819669a85b47d471d9c
- SHA256 582536081e67975055ccf8de5353502d7bda56f2aafcbefbb400f3d9012019c9
- MD5 9cfa0d88f0b614d1ff6fc69b703a839a
- SHA1 5ab4ba79a11b9cb127c023284162ae6987999ead
- SHA512 4e85b7d123bcbc3b6e55f2cadaca45b26871766113d04c4e2d69296c879a19923eacacfe49717ee2526143cd6c3da00901622a505978c34303a427142fd474e1
- SSDEEP 49152:Ta/KPtarzp3MFzvgd3aH09UJqOlNN26WICSRCYT11kVTdt0BihL67Sy5BpNTVcHe:TxMrzp3MqdazqgO6CekVnHe
- TLSH T1F236B442A2E944A4F1F32B75AE3619714A77BD115F38C88FA58CAC1D0BF3681D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
Password
123
PE Signature issue
Digest
e7:a5:50:e6:e6:38:13:c6:d2:0f:db:d4:14:1f:09:45:46:3a:35:12:bc:70:38:3d:81:28:57:34:1d:6c:03:36
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1669497
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Set-up.pdb
setupapi
CM_Get_DevNode_Status
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
comctl32
InitCommonControlsEx
shell32
SHGetKnownFolderPath
ShellExecuteW
SHGetSpecialFolderPathW
ord51
CommandLineToArgvW
ShellExecuteExW
SHCreateDirectoryExW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetMalloc
ord680
shlwapi
PathIsFileSpecW
PathAddExtensionW
PathRenameExtensionW
PathRemoveBackslashW
PathRemoveExtensionW
UrlIsW
SHGetValueW
PathIsSystemFolderW
PathAppendW
PathFileExistsW
PathFileExistsA
PathIsDirectoryW
PathRemoveFileSpecW
PathStripToRootW
PathIsNetworkPathW
PathFindFileNameW
PathIsRootW
PathIsRelativeW
PathStripPathW
PathIsUNCW
kernel32
WideCharToMultiByte
GetCurrentProcess
GetTempPathW
CreateFileW
GetVersionExW
GetComputerNameExW
FileTimeToSystemTime
CloseHandle
RaiseException
LoadLibraryW
GetProcAddress
LocalFree
CreateProcessW
GetModuleHandleW
FreeLibrary
FindFirstFileW
FindNextFileW
TerminateProcess
RemoveDirectoryW
GetModuleFileNameW
FindClose
WaitForSingleObject
OpenProcess
SetFileAttributesW
CreateToolhelp32Snapshot
Sleep
GetLastError
Process32NextW
DeleteFileW
Process32FirstW
CopyFileW
GetExitCodeProcess
ReadFile
SetLastError
lstrlenW
LocalAlloc
GetFileAttributesW
FormatMessageW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
MoveFileExW
GetFileSize
lstrcpyW
lstrcmpiW
lstrcmpW
GetDriveTypeW
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
GetFullPathNameW
HeapSize
HeapReAlloc
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetSystemDirectoryW
SetDllDirectoryW
GetStdHandle
AttachConsole
FreeConsole
GetConsoleWindow
CreateMutexW
ReleaseMutex
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
GetTempPathA
HeapAlloc
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetCurrentProcessId
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
VerSetConditionMask
VerifyVersionInfoW
GetUserDefaultLCID
LCMapStringW
DuplicateHandle
ProcessIdToSessionId
SetEvent
TerminateThread
GlobalFree
CreateThread
FindResourceExW
ResetEvent
GetThreadTimes
QueryFullProcessImageNameW
WaitForMultipleObjects
GetFileSizeEx
GetUserDefaultLangID
GetUserDefaultUILanguage
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
CreateDirectoryW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
GetTimeZoneInformation
CreateSymbolicLinkW
QueryPerformanceFrequency
GetCurrentThread
SetFilePointerEx
ResumeThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
CompareStringW
GetCPInfo
HeapFree
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStringTypeW
EncodePointer
LoadLibraryExA
VirtualQuery
VirtualProtect
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
GetFileType
SetStdHandle
ExitThread
GetModuleHandleExW
ExitProcess
GetACP
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateEventW
SetEnvironmentVariableA
WriteConsoleW
GetProcessHeap
GetDiskFreeSpaceA
user32
IsWindow
InvalidateRgn
DispatchMessageW
RedrawWindow
ClientToScreen
DestroyAcceleratorTable
IsChild
AttachThreadInput
ShowWindow
RegisterClassExW
SetWindowTextW
ScreenToClient
CreateWindowExW
FillRect
DestroyWindow
GetFocus
GetWindow
GetSysColor
GetActiveWindow
PostMessageW
CallWindowProcW
GetForegroundWindow
MoveWindow
CreateAcceleratorTableW
SetFocus
CharNextW
DefWindowProcW
GetMessageW
GetClassInfoExW
GetWindowTextLengthW
GetWindowThreadProcessId
BringWindowToTop
TranslateAcceleratorW
TranslateMessage
LoadCursorW
GetClassNameW
SetCapture
SetWindowLongW
GetClientRect
GetDlgItem
PostQuitMessage
GetParent
RegisterWindowMessageW
ReleaseCapture
SetForegroundWindow
InvalidateRect
IsIconic
BeginPaint
EndPaint
GetWindowTextW
GetWindowRect
GetDC
SetWindowPos
MessageBoxW
SendMessageW
GetDesktopWindow
ReleaseDC
UnregisterClassW
GetWindowLongW
wsprintfW
PostThreadMessageW
EnumWindows
GetShellWindow
AllowSetForegroundWindow
LoadImageW
SystemParametersInfoW
EnableMenuItem
LoadIconW
GetSystemMetrics
GetSystemMenu
GetClassLongW
AppendMenuW
GetAsyncKeyState
SetClassLongW
gdi32
BitBlt
CreateSolidBrush
DeleteObject
DeleteDC
GetStockObject
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectW
advapi32
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetTokenInformation
CreateWellKnownSid
LookupPrivilegeValueW
RegCloseKey
AdjustTokenPrivileges
SystemFunction036
RegCreateKeyExW
RegFlushKey
LookupAccountSidW
RegSetValueExW
RegOpenKeyExW
EqualSid
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
DuplicateTokenEx
ConvertSidToStringSidW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegQueryValueExW
GetUserNameW
OpenProcessToken
ole32
CoAddRefServerProcess
OleRun
CoReleaseServerProcess
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
CoInitialize
OleLockRunning
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoTaskMemAlloc
OleUninitialize
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoCreateGuid
CoInitializeEx
oleaut32
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
OleCreateFontIndirect
LoadTypeLi
VariantInit
LoadRegTypeLi
VariantChangeType
SysAllocStringByteLen
VariantCopy
SysStringByteLen
DispCallFunc
GetErrorInfo
SysFreeString
crypt32
CertGetIssuerCertificateFromStore
CertGetNameStringW
wintrust
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
451KB
Virtual Size
451KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
33KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=241, version=40116,
count=200, id=243, version=40116,
count=32, id=242, version=40116,
count=4, id=261, version=23013,
count=1, id=199, version=41118,
count=25, id=259, version=23907,
count=39, id=260, version=23907,
count=136, id=261, version=23907,
count=9, id=206, version=65501,
count=24, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=8, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=2, id=208, version=65501,
count=35, id=203, version=65501,
count=530, id=1, productName=Unmarked objects,
count=200, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.pima
- SHA256 9ed0a6a7e2ff3c2e4c0dfc67ae984c37198d64bc82fdf8cc2ad826d28406c451
- MD5 937d50fca5aa23b19d59b6906c1054cd
- SHA1 deae3f398e393ed2966c30521f8ec67b63ce2263
- SHA512 9fef08b7b3d89d04ee701cf606f12999a2f065f33177a84d5b17c2066b259a57637f7ca7ea41c151bf2e2864ce006f43aeba87f0fc57fe53b1e28908d3c0e323
- SSDEEP 12288:glJx3xCCVTBlPU1W+mN9R95n9GnujebaP2C5e3x4karSjPtm:glNPVTLPU4NLPfSbaP2C5yxk8lm
- TLSH T13BD4239B20A54701D892D9A216F37144CB68E8290F53DF520B14FF0DC63AA57A37BDAE
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
AdobeIPCBroker.exe
- IMPHASH b78757e60c78fbd8d0549e7a1e0d29a1
- SHA256 99557b43cd337e46afab2d277fc0e8cfe668241780e68dd4c88c9099f65c809b
- MD5 2281dffdb1988937b6c9d30128e64b42
- SHA1 549c86e215b80f67a036fa93304fcb367e0f346d
- SHA512 8bbc920054c842d6bb8ba5e3e5896dff6c56a6662a35dcde952a4a4b68d726352d9ffbee8734590214e6c640332d913a63802a2aed666794d4554c03f592be31
- SSDEEP 24576:9PHeMy8QQGeQrRUm7KAd6JtFMGFWwa5iksXSGBwKMDHreO9w7chAd:ZbhSnKAwCWjMmXtgBwp
- TLSH T1AC35BE20B641C074EA968171497CE7BA483EE6314B3552CFE3D8193D9E312D16B3B69F
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Digest
ac:7d:c4:d6:78:b5:cd:0d:da:54:a6:bd:90:ba:4d:9e:d0:98:05:62:5d:95:08:08:69:0a:ff:f1:ac:cd:d5:43
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Adobe Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 4, 2018
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Adobe Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Adobe Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0a:28:51:e5:f0:ff:db:46:e2:c9:cb:66:10:e6:51:2f
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 26, 2018 - Nov 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 2, 2017 - Apr 1, 2028
Minor OS version
0
Major OS version
6
Entry point
560146
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
AdobeIPCBroker.pdb
ws2_32
htonl
getsockopt
ioctlsocket
connect
closesocket
listen
getsockname
bind
WSAGetLastError
WSASetLastError
WSAStartup
getservbyname
getservbyport
gethostbyname
gethostbyaddr
socket
send
select
recv
ntohs
inet_ntoa
inet_addr
htons
__WSAFDIsSet
kernel32
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
GetLastError
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreW
FindFirstFileW
FindNextFileW
InitializeCriticalSectionEx
FindClose
RaiseException
DecodePointer
ReleaseMutex
CreateMutexA
Sleep
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetVersionExA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
CreateMutexW
FreeLibrary
CreateProcessW
GetProcAddress
CloseHandle
LoadLibraryA
MultiByteToWideChar
GetStdHandle
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
InitializeCriticalSection
GetThreadPriority
HeapSize
HeapFree
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetOEMCP
IsValidCodePage
FindNextFileA
SwitchToThread
FreeEnvironmentStringsW
GetCommandLineW
GetEnvironmentVariableW
GetCurrentProcessId
ReadFile
WriteFile
ConnectNamedPipe
GetOverlappedResult
OpenProcess
QueryFullProcessImageNameW
GetNamedPipeServerProcessId
GetLocalTime
GetCurrentThread
GetTickCount
GetEnvironmentStringsW
SetStdHandle
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
FlushFileBuffers
GetFileAttributesExW
GetFileSizeEx
GetFullPathNameW
LockFileEx
SetEndOfFile
SetFilePointerEx
UnlockFile
GetTempPathW
DuplicateHandle
PeekNamedPipe
CreateNamedPipeW
SetEvent
ResetEvent
CreateEventW
GetCurrentProcess
SetThreadPriority
HeapReAlloc
VirtualAlloc
VirtualFree
GetModuleHandleExW
LoadLibraryExW
WaitForMultipleObjects
GetNamedPipeInfo
LocalAlloc
LocalReAlloc
LocalFree
FormatMessageW
LCMapStringW
SetFilePointer
RtlCaptureStackBackTrace
TerminateProcess
GlobalAlloc
GlobalFree
GetSystemTimeAsFileTime
WaitForSingleObjectEx
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
QueryPerformanceCounter
IsDebuggerPresent
GetStartupInfoW
WideCharToMultiByte
EncodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CompareStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
OutputDebugStringW
RtlUnwind
InterlockedPushEntrySList
GetDriveTypeW
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
GetTimeZoneInformation
ExitProcess
GetCommandLineA
GetACP
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetFullPathNameA
HeapAlloc
FindFirstFileExA
user32
SetWindowLongW
RegisterClassW
CreateWindowExW
SetTimer
KillTimer
TranslateMessage
DispatchMessageW
PostMessageW
PostQuitMessage
DestroyWindow
MsgWaitForMultipleObjectsEx
GetWindowLongW
GetShellWindow
EnumWindows
GetWindowThreadProcessId
DefWindowProcW
PeekMessageW
advapi32
GetUserNameW
RegCloseKey
CreateProcessWithTokenW
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
DuplicateTokenEx
AllocateAndInitializeSid
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
OleRun
CoUninitialize
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
shell32
ShellExecuteExW
SHCreateDirectoryExW
CommandLineToArgvW
Name
.text
Size
748KB
Virtual Size
747KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
197KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
1024B
Virtual Size
596B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=171, id=243, version=40116,
count=31, id=242, version=40116,
count=2, id=261, version=23013,
count=5, id=199, version=41118,
count=25, id=259, version=24123,
count=64, id=261, version=24123,
count=35, id=260, version=24123,
count=87, id=261, productName=VS2015 UPD3 build 24213, version=24213,
count=2, id=208, version=65501,
count=15, id=203, version=65501,
count=279, id=1, productName=Unmarked objects,
count=37, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=44, id=264, version=24213,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=2, id=151,
count=1, id=258, productName=VS2015 UPD3 build 24213, version=24213,
customhook/AdobeIPCBrokerCustomHook.exe
- IMPHASH 85aa1a3ec9a324deb93be1db280c6b57
- SHA256 e97c8ed6d6c95556c11f73149a54b759548fd144e23f320ffa573709db9ccba7
- MD5 64100ce9dd9e670e28a487aabe7c1241
- SHA1 4ac3eeb414d7d8d1c80b8644e445d2684991150f
- SHA512 8527b9df907e98f0e810583cb1e64b7f8486e540daea5a7c0052e96d94516290eeb4f22163ed16b17006974d407132565e2c48d653ba385ab86857c0290d7cef
- SSDEEP 3072:cjetgAXQLGOyYJI++TNHWtGm7B8xOVafniAg0Fujo+LXV5trbcCy:cjeAy+UN2t3AOb35bcCy
- TLSH T1F7145A1174D3C472D073563518F4EAB66A3DBD610F258AEF67D80B2D0F782D16A32AA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Digest
45:89:c1:a8:6a:c2:59:11:0f:f3:d0:dd:de:2c:9f:61:14:dd:37:fb:38:82:82:1c:83:5d:79:6e:28:bc:74:54
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Adobe Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Dec 4, 2018
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Adobe Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Adobe Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0a:28:51:e5:f0:ff:db:46:e2:c9:cb:66:10:e6:51:2f
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 26, 2018 - Nov 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 2, 2017 - Apr 1, 2028
Minor OS version
0
Major OS version
6
Entry point
29667
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
AdobeIPCBrokerCustomHook.pdb
shlwapi
PathAppendW
kernel32
RaiseException
HeapSize
TerminateProcess
GetTempPathW
OpenProcess
CreateToolhelp32Snapshot
Sleep
Process32NextW
Process32FirstW
CloseHandle
CreateFileW
ReadConsoleW
WriteConsoleW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
SetEndOfFile
GetLastError
FreeLibrary
LoadLibraryExW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
SetFilePointerEx
GetProcessHeap
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
user32
FindWindowExW
PostMessageW
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
56KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=149, id=243, version=40116,
count=29, id=242, version=40116,
count=22, id=259, version=24123,
count=58, id=261, version=24123,
count=34, id=260, version=24123,
count=7, id=203, version=65501,
count=102, id=1, productName=Unmarked objects,
count=1, id=265, version=24213,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3 build 24213, version=24213,
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.pimx
- SHA256 0184e6b63dea884037cfa862107bd3e2d99a244334dfa641a4a1c312a5e59ce1
- MD5 92b46252406ffa6646cf4be809986623
- SHA1 5543faedc35038cb6848f64c91e413b380505689
- SHA512 39c21416428e9ce485c0fc4da6935783017e546297a1ab3d8b91402f27e4f11ee8b2744c15ccfe2ac5d873247b1b4b3537863e65b87a3e477999f58fca0366ca
- SSDEEP 768:zYAy/9VPrxD983EoB/QXmIUopMJL0C2//hg72:IVT74Ec/6mDopYL0pH5
- TLSH T1ED43F4A851696BE17807CE603C605E472A4FB17DF6B031F4B2985E768AD594F0E8F233
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/AAM/IPC/IPC.sig
- SHA256 df4e2284528eef0b50fadfd5a825f9f292e86a58c180f42653e93f4a912cb2bd
- MD5 025018695cd2f1a0490651b76044c2b7
- SHA1 c75d64c216c34cac21391e308fc10488a66fe9b8
- SHA512 d85f672b5be9ee6445c7d95faea12250bb3c3017c0064125b81b4b5bd3bae6bc8a36c9072b69226854f9960d4af499ea952385b1a5a5a34ed54ce9597161aa45
- TLSH T18C31A66E82A56AA092300EC73F6049596A15EAC16B7A00483681C5DF7EBA864675F0D9
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.pima
- SHA256 df135707402bd01bc6a3c10d16f876f25bd16b8a85329687833490cebd9b0051
- MD5 364f0041bbdfbf89c1ba629fa739259c
- SHA1 75da3c7c1f73537ee8aa69e8d4ae07b30622a5ec
- SHA512 1b405658bf4d7bf264b325643edf45f770a3bba24fc6b5ce7b28fd7117c9674d00499d2c1a81d8bbfa854559d72b716038c284fafd71d9d2c65b6da623959592
- SSDEEP 24576:HcbkDhnYy39SziV9EO4DzNGXqu2UFGkE5+F5ENmq75AN+Hh1Bs7RkWJ73d3h/:8AYy39GQr43NGXEODF5oGN+HDC7vX
- TLSH T13635333639F48650736DDB1E79D163D29849B68722CBD350EF25D6384223EABAB30349
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
AdobePIM.dll
- IMPHASH fed0db3cad6ea3e1c965e23d03350297
- SHA256 b10756942a010d67ae7d01fe759d9e94261d2f93cdf7bdb971fc78c146d0674a
- MD5 45ff5483f7dbd3c2aa634f8aab99e48c
- SHA1 af1b51e06c2bbfa4a76f669878c34046ae43fef2
- SHA512 6d12d300a8c241901cd6c9ccf358f0befb9796262afe7ad0bbda6374d7b22c44cfbfba2065182fc0d55b61521c1d65bfcf76c4404ae17fa8f4aadd7f3e752c21
- SSDEEP 49152:nn/9QcAxBaL4BatLmCGbD6AJYt2yx1ZIB0FzwPij0r/gHfjrZCzqOUCEdKq145Xk:FAaL4BatLmCGbD6AJYt2yx1ZIB0FzwP6
- TLSH T1EB958D21B7D6C135F8FA02F1A6785AAA4C38F9241F7145DBE2D05D6F19309C27A36B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Digest
8b:cc:61:22:b2:8d:b9:8a:e4:b4:58:4f:bf:68:fa:41:4f:36:72:5d:73:af:90:1a:d8:39:42:85:e4:4c:21:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1327648
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
AdobePIM.pdb
msi
ord145
ord74
ord147
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
psapi
GetModuleFileNameExW
GetProcessImageFileNameW
EnumProcessModules
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
shlwapi
PathRemoveExtensionW
PathAddExtensionW
PathIsFileSpecW
PathRemoveFileSpecA
PathIsDirectoryA
PathRenameExtensionW
PathAppendW
PathRemoveBackslashW
PathStripPathW
PathAppendA
PathIsDirectoryW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
PathFileExistsA
PathIsRootW
PathIsDirectoryEmptyW
PathIsSystemFolderW
shell32
SHCreateItemFromParsingName
ShellExecuteExW
CommandLineToArgvW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
ord680
ord51
winhttp
WinHttpOpen
WinHttpSendRequest
WinHttpSetCredentials
WinHttpOpenRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpQueryAuthSchemes
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetOption
kernel32
GetCPInfo
GetLocaleInfoW
CompareStringW
TlsFree
IsDebuggerPresent
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
TlsSetValue
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTimeZoneInformation
ExitProcess
GetModuleFileNameA
GetStdHandle
GetFileType
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
ReleaseSemaphore
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
Sleep
OpenSemaphoreW
CloseHandle
LocalFree
GetCurrentProcessId
CreateSemaphoreW
CreateDirectoryW
GetTempPathW
MultiByteToWideChar
SetEvent
ResetEvent
GetCommandLineW
CreateProcessW
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
FindFirstFileW
FindNextFileW
InterlockedDecrement
TerminateProcess
RemoveDirectoryW
FindClose
GetVersionExW
SetFileAttributesW
CreateEventW
GetDiskFreeSpaceExW
GetCommandLineA
CopyFileW
lstrcmpiW
lstrcmpW
GetExitCodeProcess
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
DeleteFileW
HeapReAlloc
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LockFileEx
GetFileSize
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
GetTickCount
FlushFileBuffers
GetCurrentProcess
GetFileSizeEx
lstrlenW
GetACP
SizeofResource
GetModuleFileNameW
LockResource
LoadResource
FindResourceW
MoveFileExW
VerSetConditionMask
GetModuleHandleW
VerifyVersionInfoW
SetLastError
DuplicateHandle
ProcessIdToSessionId
TerminateThread
GlobalAlloc
GlobalFree
FindResourceExW
lstrcpyW
QueryFullProcessImageNameW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
FileTimeToSystemTime
OpenMutexW
GetUserDefaultLCID
LCMapStringW
GetUserDefaultLangID
GetUserDefaultUILanguage
SetFilePointerEx
ResumeThread
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
QueryPerformanceFrequency
CreateThread
QueryPerformanceCounter
user32
wsprintfW
AllowSetForegroundWindow
EnumWindows
GetShellWindow
GetWindowThreadProcessId
advapi32
InitializeSecurityDescriptor
SystemFunction036
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
FreeSid
RegDeleteKeyExW
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
LookupAccountSidW
CreateWellKnownSid
EqualSid
GetTokenInformation
DuplicateTokenEx
GetUserNameW
ConvertSidToStringSidW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
ole32
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
OleRun
CLSIDFromString
CLSIDFromProgID
oleaut32
VariantClear
VariantCopy
SysStringLen
VariantChangeType
VariantInit
SysFreeString
SysAllocString
GetErrorInfo
crypt32
CertGetNameStringW
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust
AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_createLibraryRef
pim_freeLibraryRef
pim_freeLiraryRef
pim_freeString
pim_getAppletAndPackageInfo
pim_getAppletRegistrationInfo
pim_getAppletRelationshipInfo
pim_getCurrentCCVersion
pim_getCurrentPackagesVersion
pim_getInstallStatus
pim_getInstalledPackagesInfo
pim_launchACCCUninstallerExecutableAsAdmin
pim_selfUpdateCheck
pim_selfUpdateCheckWithData
pim_startWorkflow
pim_startWorkflowWithData
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool
pim_uninstallACCC64FromACCCCleanerTool
pim_uninstallACCCFromACCCCleanerTool
pim_uninstallADC64UsingADCCleanerTool
pim_uninstallADCUsingADCCleanerTool
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
362KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=241, version=40116,
count=179, id=243, version=40116,
count=30, id=242, version=40116,
count=26, id=259, version=23907,
count=2, id=261, version=23013,
count=65, id=261, version=23907,
count=34, id=260, version=23907,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=208, version=65501,
count=16, id=203, version=65501,
count=32, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=352, id=1, productName=Unmarked objects,
count=128, id=265, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Core.dll
- IMPHASH 450c7d250eee5014fa68e70268edb6a7
- SHA256 705a0023dabb3a9dc515c9bdd0816b51d3799b24cef69ba6bcaa9b4c37f00642
- MD5 c84299096ba8c3fede15d47f93bc78b6
- SHA1 c8f6b470e58b17b6a7ec86e09612f6907858ef2b
- SHA512 213f2a81b6b1ae51e4a9af252947fe6331797649ee1f988e5b3d263141fdebd2cd305dc2f728a0e264c6111773ff880000bf9424653de263f8a0458870853c32
- SSDEEP 12288:hbAli60dXoQJ3a5l4L/eh7mbnTtQYCblf2:QiRwyW7yTtglf2
- TLSH T1CA946C1136DAC336F9FE4A707E7A5A050969BA301F3080DFE3C9A91E59709D19A31F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Digest
0c:ce:be:26:3c:1b:d4:88:73:f1:86:5d:a9:ed:25:94:b8:6a:0e:0d:22:d3:e8:26:db:df:f8:d0:56:c2:f2:d9
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
181408
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Core.pdb
wtsapi32
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
kernel32
ReadFile
WriteFile
CreateNamedPipeW
CreateFileW
DisconnectNamedPipe
WaitNamedPipeW
ConnectNamedPipe
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleFileNameW
FindClose
DeleteFileW
LocalFree
FlushFileBuffers
CreateMutexW
ReleaseMutex
Sleep
WideCharToMultiByte
GetCurrentProcess
CreateEventW
GetModuleHandleW
GetThreadId
LCMapStringW
SetEvent
ResetEvent
HeapFree
SetLastError
TerminateProcess
HeapSize
HeapReAlloc
HeapAlloc
GetCurrentProcessId
GetProcessHeap
FindFirstFileExA
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetFileType
GetStdHandle
GetACP
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
RtlUnwind
LoadLibraryExW
InterlockedFlushSList
IsProcessorFeaturePresent
CreateThread
CloseHandle
GetCurrentThreadId
WaitForSingleObject
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetConsoleCP
SetEndOfFile
WriteConsoleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringW
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
GetStringTypeW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
user32
ShowWindow
DispatchMessageW
TranslateMessage
PostThreadMessageW
SendMessageW
PostMessageW
LoadCursorW
SetCursor
GetMessageW
CreateDialogParamW
advapi32
GetUserNameW
SystemFunction036
shell32
SHGetSpecialFolderPathW
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromProgID
OleRun
CLSIDFromString
CoCreateGuid
StringFromGUID2
oleaut32
GetErrorInfo
VariantInit
VariantClear
VariantChangeType
SysStringLen
VariantCopy
SysAllocString
SysFreeString
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
finalize
initialize
processMessage
Name
.text
Size
274KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=152, id=243, version=40116,
count=29, id=242, version=40116,
count=2, id=261, version=23013,
count=22, id=259, version=23907,
count=56, id=261, version=23907,
count=32, id=260, version=23907,
count=3, id=206, version=65501,
count=2, id=208, version=65501,
count=25, id=203, version=65501,
count=269, id=1, productName=Unmarked objects,
count=45, id=265, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.pimx
- SHA256 2d448755496594816e5acf5d8bbcb59238007405671f0190e4ae6963ec3144a7
- MD5 6b36a8f0d3646af57860e0ab26d79edb
- SHA1 2c9290c16043d7ff9cc759b5b335cf3527cd7d06
- SHA512 9bc70a56f0829c777ba94aa5ec63e253f9a82148dc7969a3e3a8544ae4eebef8ce053a5f0023618e4f47c2d1e485fb41e01ff7df6588d70a4743f2e6fb6fa4f0
- TLSH T12331744104E4E1133DFA107E4FA602165F3EB92A2D72108C76ACD0B7CB60B691A87895
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Core/Core.sig
- SHA256 5eb445a3f1a9a4dac8a3baf56e330aacdfd030bb7a9581deb83a6406a27f4cfa
- MD5 729c4003abacb8e5468a2f77d2127ff1
- SHA1 783d65458cc58e31addeaa3c5fb00a0bafa3b8f4
- SHA512 1b0634c1b374cb7ec1259672e913b8719475da8318ae1cb741c2f0681b138d562207c3de38db2bd58d37429b2c5f04a80779ddc8d20b9aeb8d0f97cb68aa83fe
- TLSH T1B431FB5474E0A6C07535C663561B8518DA9087CE273D4C003946521EECBF57463A7A7C
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.pima
- SHA256 653bd43896817dcf777e722c81a47041aa4eea5168b8123046ddfe365998e4d8
- MD5 a3d396e596c428192da38d597b147a7a
- SHA1 bedb6d0dd4b5d5ae86fe799e4133f6b6622065e3
- SHA512 8cafbd6c2d35a4a9b61654764dd463e1151496df3e21915e5e7d38077bf8a4428fbc054e0df9fcb1c85e919095267b59093cd6371999ce0e02d34bc7d312923d
- SSDEEP 98304:YvG34y734IzBprPOfrHB2GLzqPeqjEEK2szbHHmUrsnY7/HJvvw8fXaQ4k8RWlPC:FBzBpzKJ0eqjbibnmtYdgWw4l6jkeDUe
- TLSH T19F6633BD15BC942C5D0BE322622BF07ED02CAD9644CB5DBE4667420EDE1791193A3AF3
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
123
Adobe Update Helper.exe
- IMPHASH 61fcbe2fd4315a32af778d336dfe214d
- SHA256 50b9c0816e8d0b7c9daa3e3aa7ea268dd73d17a0d2a34702b1db12689e4eb2b6
- MD5 663d609fcb692bd93aefb255cc5bbe61
- SHA1 3b7c9def30f48bdf76087b247db7ee8a69759f91
- SHA512 a5622fc71952205df06f912c77380b7e2d1999e13c8d98709b6303f6babfca941e90316e055520fd378ead9e0aa9ea891d437bf51caad3e2f2376a17f30ae9dd
- SSDEEP 24576:Dxt0ML+1jiFM1nyh8+G1iXVFSgoKiFWmSR8TfN6XGB:Dx2iJFM1nEXtoKYWX8TfN6XGB
- TLSH T192455B61F5D2C0F1E8E320B1CDB9BAF648686E148B254CDF9EC07D5979305C2363AA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ab:24:62:2b:82:8b:fe:cc:f4:91:4a:f1:38:35:1f:c6:cd:26:fd:60:b0:76:3f:89:47:a4:bb:43:7b:57:6b:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
756128
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Adobe Update Helper.pdb
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
wininet
InternetCanonicalizeUrlW
kernel32
ReadFile
FindFirstFileW
SetLastError
FindNextFileW
RemoveDirectoryW
GetModuleFileNameW
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
FormatMessageW
DeleteFileW
CloseHandle
LocalFree
MoveFileExW
GetFileSize
lstrcmpW
GetCurrentProcess
WaitForSingleObject
GetProcAddress
CreateProcessW
GetModuleHandleW
GetVersionExW
SizeofResource
GetFullPathNameW
WriteFile
LockResource
LoadResource
FindResourceW
FlushFileBuffers
LoadLibraryW
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
LoadLibraryA
LCMapStringW
GetUserDefaultLangID
GetUserDefaultUILanguage
GetCurrentProcessId
SetFilePointer
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
HeapFree
TerminateProcess
OpenProcess
HeapSize
CreateEventW
Sleep
SetEvent
GlobalAlloc
DeleteCriticalSection
GlobalFree
HeapReAlloc
CreateThread
ResetEvent
HeapAlloc
HeapDestroy
GetProcessHeap
VerSetConditionMask
VerifyVersionInfoW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
InitializeSListHead
GetACP
GetStringTypeW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
GetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetTimeZoneInformation
GetFileType
LoadLibraryExW
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
ExitProcess
GetCommandLineA
GetCommandLineW
IsValidLocale
EnumSystemLocalesW
SetStdHandle
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetConsoleCP
WriteConsoleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetTickCount
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
user32
EnumWindows
GetShellWindow
AllowSetForegroundWindow
MessageBoxW
GetWindowThreadProcessId
advapi32
SystemFunction036
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
FreeSid
DuplicateTokenEx
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
EqualSid
OpenProcessToken
GetTokenInformation
ole32
CoUninitialize
CLSIDFromProgID
OleRun
CoInitialize
CLSIDFromString
CoCreateGuid
CoCreateInstance
StringFromGUID2
CoTaskMemFree
shell32
SHGetFolderLocation
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW
oleaut32
GetErrorInfo
SysAllocString
SysStringLen
VariantClear
SysFreeString
shlwapi
PathFindFileNameW
PathFileExistsW
PathIsRootW
PathRenameExtensionW
PathRemoveFileSpecW
PathFileExistsA
PathAppendW
PathIsSystemFolderW
PathIsDirectoryW
PathRemoveExtensionW
PathAddExtensionW
PathIsFileSpecW
Name
.text
Size
897KB
Virtual Size
896KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
179KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
96KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=241, version=40116,
count=183, id=243, version=40116,
count=30, id=242, version=40116,
count=26, id=259, version=23907,
count=2, id=261, version=23013,
count=2, id=206, version=65501,
count=67, id=261, version=23907,
count=36, id=260, version=23907,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=208, version=65501,
count=326, id=1, productName=Unmarked objects,
count=27, id=203, version=65501,
count=62, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
HDHelper.exe
- IMPHASH 4a2585ae5822477bd85c2d28d8c6c293
- SHA256 b706a9cb2e6dfe4e46c094aa758f3de5f2a42067a31ce44b8fbb5a93c3ea0d49
- MD5 9a06e99a8580487be05a2b5f0feca89d
- SHA1 fc15a61f6efbb78cf2dfc0c7efe7b11556e4a516
- SHA512 24606b438eb01391a20ff5707113c106791e8421501e528a9df918d8e91fa73747afe7e30c519536f18ecfd385ec4bf31f0ac751d3ebfb70d92cfb9e89b1850e
- SSDEEP 12288:TX4fDcO6vqRU7Goo9PWy6E0qk/nTV7f/iHnj4w:TCIFiPWrEcvTVb/Mnj
- TLSH T184B4F520B6E5C0E5E0B365B0DE68B6F504A96E10CF204DCF9EC47E693A705D16A31F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c8:7a:1b:5b:eb:1d:2c:57:72:60:f2:46:61:ef:96:16:99:62:61:67:8a:6a:2b:5f:55:6c:57:41:77:cb:05:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
156128
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
HDHelper.pdb
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
LocalFree
MoveFileExW
lstrcpyW
lstrcmpiW
lstrcmpW
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
GetCurrentProcess
WaitForSingleObject
GetProcAddress
GetModuleHandleW
GetExitCodeProcess
GetVersionExW
Sleep
HeapFree
LoadLibraryW
HeapAlloc
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
CreateEventW
VerSetConditionMask
VerifyVersionInfoW
WriteFile
FlushFileBuffers
FreeLibrary
TerminateProcess
OpenProcess
HeapSize
Process32NextW
SetEvent
Process32FirstW
HeapReAlloc
ResetEvent
GetCurrentProcessId
GetUserDefaultLCID
LCMapStringW
SetFilePointer
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetUserDefaultLangID
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
GetUserDefaultUILanguage
ReadConsoleW
GetConsoleMode
SetStdHandle
EnumSystemLocalesW
IsValidLocale
GetACP
CloseHandle
DeleteFileW
GetLastError
FormatMessageW
SetFileAttributesW
GetFileAttributesW
CreateFileW
LocalAlloc
FindClose
GetTempPathW
GetModuleFileNameW
TlsAlloc
FindNextFileW
SetLastError
FindFirstFileW
ReadFile
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetConsoleCP
WriteConsoleW
SetEndOfFile
InitializeCriticalSectionAndSpinCount
EncodePointer
CreateToolhelp32Snapshot
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetStdHandle
GetTimeZoneInformation
GetFileType
LoadLibraryExW
RtlUnwind
OutputDebugStringW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
GetLocaleInfoW
GetCPInfo
GetStringTypeW
user32
AllowSetForegroundWindow
advapi32
RegCreateKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
SystemFunction036
ConvertStringSidToSidW
CreateProcessAsUserW
ConvertSidToStringSidW
GetUserNameW
DuplicateTokenEx
LookupAccountSidW
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
RegGetKeySecurity
RegCloseKey
RegSetKeySecurity
RegSetValueExW
InitializeSecurityDescriptor
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
SetEntriesInAclW
OpenProcessToken
GetTokenInformation
CreateWellKnownSid
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
CLSIDFromProgID
CoUninitialize
OleRun
CLSIDFromString
CoInitialize
CoCreateInstance
oleaut32
VariantInit
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
VariantCopy
shlwapi
PathIsFileSpecW
PathAddExtensionW
PathStripPathW
PathRemoveExtensionW
PathFileExistsW
PathFindFileNameW
PathIsDirectoryW
PathAppendW
PathRemoveFileSpecW
PathRenameExtensionW
Name
.text
Size
296KB
Virtual Size
295KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=177, id=243, version=40116,
count=29, id=242, version=40116,
count=2, id=261, version=23013,
count=25, id=259, version=23907,
count=65, id=261, version=23907,
count=36, id=260, version=23907,
count=2, id=206, version=65501,
count=3, id=208, version=65501,
count=297, id=1, productName=Unmarked objects,
count=27, id=203, version=65501,
count=49, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
HDIM.dll
- IMPHASH da99df132037f29cc109a6029c87ba62
- SHA256 b3010279e07ba90a1384c40e32dfd4ac929f19e37d9175e9d9098e18fecb702d
- MD5 aa386cfc160ebda542496be6c6cb5481
- SHA1 4067cc3889bd4df3b9d9d72d6e279a4f0b996d32
- SHA512 0f72d09e265107d4bd12ffde3ca71791ab1d83a6db03b027162c8e703e752bb44022425b9bf8a9d4a99cda68fe1f5856ed72f4ebc274ae42d6d206de3ff90303
- SSDEEP 6144:ZoawsSNsWoHOaSkLeBQgUGMkEqMOL31svpNAOzTTBLzVnsegA0tWf:Zoaw5KHekLIYjkNtLlUpNBTTVVRgFtc
- TLSH T175849E10B6C5C532E8BD4634357AAB5E152CB9A04FA845DBE3DC9D2F5E301C12B36BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
77:3f:3a:88:f7:b6:36:ba:29:25:45:a9:88:f8:fc:72:fc:49:af:f5:f3:01:8d:a4:de:53:05:8d:03:a9:25:50
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
132976
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
HDIM.pdb
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
kernel32
GetModuleFileNameW
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CloseHandle
LocalFree
MoveFileExW
lstrcmpW
FlushFileBuffers
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
SetFilePointer
GetCurrentThreadId
GetCurrentProcess
GetVersionExW
CreateEventW
VerSetConditionMask
GetModuleHandleW
VerifyVersionInfoW
GetUserDefaultLCID
LCMapStringW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
WriteFile
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
WaitForSingleObject
ReleaseMutex
OpenMutexW
GetUserDefaultLangID
GetUserDefaultUILanguage
HeapFree
SetLastError
TerminateProcess
HeapSize
SetEvent
HeapReAlloc
ResetEvent
HeapAlloc
GetProcessHeap
FindFirstFileExA
SetFilePointerEx
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
GetFileType
GetStdHandle
GetACP
FindNextFileW
FindFirstFileW
ReadFile
TlsAlloc
OutputDebugStringW
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetConsoleCP
SetEndOfFile
WriteConsoleW
InitializeCriticalSectionAndSpinCount
EncodePointer
GetTimeFormatW
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetTimeZoneInformation
LoadLibraryExW
RtlUnwind
InterlockedFlushSList
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetCPInfo
GetLocaleInfoW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsGetValue
TlsSetValue
GetStringTypeW
advapi32
SystemFunction036
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetFolderLocation
SHCreateDirectoryExW
ole32
CLSIDFromProgID
OleRun
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantCopy
VariantClear
GetErrorInfo
shlwapi
PathFileExistsW
PathFindFileNameW
PathRenameExtensionW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathIsDirectoryW
PathAppendW
PathRemoveFileSpecW
ccim_GetInformation
ccim_UserAction
ccim_endWorkflow
ccim_startWorkflow
ccim_startWorkflowWithMode
hdimSetLoggerFnPtr
Name
.text
Size
259KB
Virtual Size
259KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=159, id=243, version=40116,
count=29, id=242, version=40116,
count=2, id=261, version=23013,
count=25, id=259, version=23907,
count=57, id=261, version=23907,
count=33, id=260, version=23907,
count=2, id=206, version=65501,
count=2, id=208, version=65501,
count=261, id=1, productName=Unmarked objects,
count=25, id=203, version=65501,
count=41, id=265, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
HDPIM.dll
- IMPHASH 36a5f31f8cdffa0722f4dfd176c4dbc5
- SHA256 07c48fb487e7aff52ddc4afb777e0beb53a6d543fa8c0fe14ffeb087e1ac6c69
- MD5 42d3f9581963f02621c3fc312497238c
- SHA1 006c4ee37838378e1b47d1462d5be9a924da4116
- SHA512 b0694ef928a34345206242b9cf0214b6901636ae7cdb78abb209d1c5bb230763c57bee856786c3bac066b3ba508fcffd1988c5b77b6ee4b6924c99286c9abf82
- SSDEEP 49152:LuWKfT2+226oP8msf6WnCpWKHtx4rvvlAeKtaTIBO/nWRJ5d43a:LmH22dEl9qWIM36ei
- TLSH T15FD56C21B3E9C13AF4FE56F0697E5B6A4C68BD640B3145CBE2C45E1E69309C26B32713
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5e:3c:11:df:41:e8:2b:82:ff:c6:42:43:69:e2:bc:d4:35:67:a2:7c:cb:72:87:86:b7:c3:20:3d:71:9b:0d:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1975344
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
HDPIM.pdb
shlwapi
PathIsRelativeW
PathIsRootW
PathIsUNCW
PathStripPathW
PathFindExtensionW
PathIsDirectoryW
PathRenameExtensionW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathStripToRootW
PathIsDirectoryEmptyW
PathIsSystemFolderW
PathFileExistsA
PathRemoveFileSpecW
PathGetCharTypeW
PathFileExistsW
PathAddBackslashW
PathFindFileNameW
PathRemoveBackslashW
PathAppendW
PathMakePrettyW
PathIsSameRootW
shell32
SHGetKnownFolderPath
SHCreateDirectoryExW
ord75
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHSetLocalizedName
ord709
ord51
ord680
SHGetSpecialFolderPathW
SHCreateItemFromParsingName
winhttp
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpConnect
WinHttpSendRequest
WinHttpSetCredentials
WinHttpQueryAuthSchemes
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
psapi
GetProcessImageFileNameW
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcessModules
wtsapi32
WTSEnumerateSessionsW
WTSFreeMemory
setupapi
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
kernel32
TlsSetValue
TlsFree
GetCPInfo
TlsGetValue
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
LoadLibraryExW
TlsAlloc
ReadFile
FindFirstFileW
SetLastError
FindNextFileW
lstrlenW
RemoveDirectoryW
GetModuleFileNameW
GetTempPathW
FindClose
LocalAlloc
CreateFileW
GetFileAttributesW
SetFileAttributesW
FormatMessageW
GetLastError
GetDiskFreeSpaceExW
DeleteFileW
CloseHandle
GetCurrentDirectoryW
SetCurrentDirectoryW
LocalFree
MoveFileExW
GetFileSize
CopyFileW
lstrcpyW
lstrcmpiW
lstrcmpW
GetDriveTypeW
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
GetTempFileNameW
GetCurrentProcess
GetUserDefaultLangID
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
QueryFullProcessImageNameW
GetFullPathNameW
GetVersionExW
Sleep
VerSetConditionMask
VerifyVersionInfoW
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
GetFileType
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateMutexW
WaitForSingleObject
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
HeapReAlloc
GetLocaleInfoW
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LockFileEx
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
CreateProcessW
GetModuleHandleW
GetExitCodeProcess
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
LCMapStringW
SetFileTime
CreateThread
SetFilePointerEx
GetFileSizeEx
TerminateThread
ResumeThread
GlobalFree
CopyFileExW
GetACP
CreateEventW
SizeofResource
GetFinalPathNameByHandleW
LockResource
LoadResource
FindResourceW
TerminateProcess
Thread32Next
Thread32First
DuplicateHandle
ProcessIdToSessionId
SetEvent
GlobalAlloc
FindResourceExW
ResetEvent
GetThreadTimes
OpenThread
PeekNamedPipe
GetUserDefaultUILanguage
ReleaseSemaphore
ReleaseMutex
CreateSemaphoreW
CreateDirectoryW
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
GetPhysicallyInstalledSystemMemory
GetLogicalDriveStringsW
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
CreateSymbolicLinkW
QueryPerformanceFrequency
SystemTimeToTzSpecificLocalTime
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTimeZoneInformation
ExitProcess
GetModuleFileNameA
IsValidLocale
EnumSystemLocalesW
GetStdHandle
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringW
GetStringTypeW
GetSystemInfo
EncodePointer
SetEnvironmentVariableA
WriteConsoleW
InitializeCriticalSection
user32
PostMessageW
GetDC
GetDesktopWindow
ReleaseDC
GetWindowThreadProcessId
AllowSetForegroundWindow
GetShellWindow
EnumWindows
PostThreadMessageW
wsprintfW
LoadStringA
gdi32
RemoveFontResourceW
AddFontResourceW
GetDeviceCaps
advapi32
RegGetKeySecurity
RegQueryInfoKeyW
RegEnumKeyExW
SystemFunction036
AdjustTokenPrivileges
OpenProcessToken
CreateWellKnownSid
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
FreeSid
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
AllocateAndInitializeSid
LookupAccountSidW
EqualSid
DuplicateTokenEx
GetUserNameW
ConvertSidToStringSidW
CreateProcessAsUserW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
RegOpenKeyExW
LookupPrivilegeValueW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
GetTokenInformation
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
RegQueryValueExW
RegDeleteValueW
InitializeSecurityDescriptor
RegSetKeySecurity
ole32
CoCreateGuid
StringFromGUID2
CoSetProxyBlanket
CoInitializeEx
CLSIDFromProgID
OleRun
CLSIDFromString
CoTaskMemFree
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantChangeType
SysStringLen
VariantCopy
SafeArrayAccessData
SafeArrayCreateVector
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayDestroy
GetErrorInfo
crypt32
CertGetNameStringW
wintrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
WTHelperGetProvCertFromChain
hdpimAreUpdatesEnabled
hdpimCheckAndReportConflictingProcess
hdpimCheckForUpdate
hdpimControlProgress
hdpimCreateSession
hdpimDownloadProduct
hdpimGetAvailableUpdateInfo
hdpimGetInstalledProductsList
hdpimGetProductInstallDirIsMoved
hdpimGetProductInstallStatus
hdpimGetProductInstalledVersions
hdpimGetProductLaunchPath
hdpimGetProductReferenceInfo
hdpimInstallProduct
hdpimInstallUpdate
hdpimLaunchProduct
hdpimRepairProduct
hdpimSetLogger
hdpimSetLoggerFnPtr
hdpimTerminateSession
hdpimUnInstallProduct
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
538KB
Virtual Size
537KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=241, version=40116,
count=198, id=243, version=40116,
count=31, id=242, version=40116,
count=2, id=261, version=23013,
count=1, id=199, version=41118,
count=26, id=259, version=23907,
count=66, id=261, version=23907,
count=34, id=260, version=23907,
count=4, id=206, version=65501,
count=1, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=8, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=1, id=207, version=65501,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=208, version=65501,
count=419, id=1, productName=Unmarked objects,
count=41, id=203, version=65501,
count=32, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=209, id=265, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
HDUWP.dll
- IMPHASH 0bb3d5fa4c10f7676ac266b118d53ee4
- SHA256 5c12bbb0aa29920d0228a53c8cab5f9a20da74066b01bec1f749839eec2b2e6d
- MD5 4f3404435a7e483bf4fc5b2957ec4ccf
- SHA1 8c4b4b45710ede67bede6bc4aef1ce66342512ec
- SHA512 9e4fcbfdd274f762c1012ea6845d96266d9cb1827dc0041f66d15dc23197d9f110ef8da790a7b49de820d28849b0be7bfe1ad2a408c6f87da9427f75fb4b8600
- SSDEEP 3072:9UYWoycA4mv7mzuK6lxVDQ2Xs2mJZ/2hoSeAVx5S5c7AttmYpKj33UnKGPuxBgLZ:9DmWuK6FgezeAVa5fmHjkKcQBgL+YT
- TLSH T1A884D830EA568936EDEF04B6EDB99BAD2019F5C00B6850E7B1C41FCB6E247D219335C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
dd:93:bd:75:24:61:f7:e1:91:5f:70:28:47:32:e1:0c:ff:c9:9f:7f:92:7f:97:53:d1:23:7b:b2:7c:f1:c0:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
6960
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
HDUWP.pdb
kernel32
CloseHandle
CreateEventExW
PackageFullNameFromId
SetEvent
WaitForSingleObject
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
GetLastError
GetModuleHandleW
GetStartupInfoW
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
MultiByteToWideChar
RaiseException
IsDebuggerPresent
LoadLibraryExW
GetProcAddress
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
DecodePointer
ole32
CoInitialize
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree
vccorlib140
?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z
?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z
?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXIPBXPA_J@Z
?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
??0OutOfBoundsException@Platform@@Q$AAA@XZ
??0ChangedStateException@Platform@@Q$AAA@XZ
??0OutOfMemoryException@Platform@@Q$AAA@XZ
??0FailureException@Platform@@Q$AAA@XZ
?Allocate@Heap@Details@Platform@@SAPAXI@Z
??0Delegate@Platform@@Q$AAA@XZ
?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ
?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z
?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z
?AllocateException@Heap@Details@Platform@@SAPAXII@Z
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
?Free@Heap@Details@Platform@@SAXPAX@Z
?Allocate@Heap@Details@Platform@@SAPAXII@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?__abi_WinRTraiseChangedStateException@@YGXXZ
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseNotImplementedException@@YGXXZ
??0Object@Platform@@Q$AAA@XZ
?__abi_cast_Object_to_String@__abi_details@@YGP$AAVString@Platform@@_NP$AAVObject@3@@Z
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?__abi_translateCurrentException@@YGJ_N@Z
?InitializeData@Details@Platform@@YAJH@Z
?UninitializeData@Details@Platform@@YAXH@Z
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z
msvcp140
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
api-ms-win-core-winrt-l1-1-0
RoInitialize
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
RoFailFastWithErrorContext
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateString
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
vcruntime140
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
_except_handler4_common
_CxxThrowException
memset
memmove
memcpy
_purecall
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
api-ms-win-crt-string-l1-1-0
wcslen
_wcsdup
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
api-ms-win-crt-convert-l1-1-0
_wtoi
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
hduwpGetInstalledPackageUsers
hduwpGetPackageFullName
hduwpInstallPackage
hduwpIsPackageInstalledForAnyUser
hduwpIsPackageInstalledForCurrentUser
hduwpLaunchPackage
hduwpRegisterPackage
hduwpUninstallPackage
Name
.text
Size
274KB
Virtual Size
274KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.cfguard
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
minATL
Size
1024B
Virtual Size
780B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=259, version=23907,
count=9, id=260, version=23907,
count=6, id=257, version=23907,
count=23, id=261, version=23907,
count=10, id=199, version=41118,
count=1, id=206, version=65501,
count=5, id=203, version=65501,
count=125, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
HDZIP.dll
- IMPHASH cddf9468f8d2861a67bd1c8bf5c6a491
- SHA256 d6a246a13dd3f45abaf7766bc10c1dad95ce483d4a0e7c32f996ce82b1eac0eb
- MD5 e7e1ffe62be683d85597c6070bd198c2
- SHA1 a91fd851427c451a15eb19a35170e9134fa8d494
- SHA512 ba2a45ed1c54ca0b2d6d51d1cd73af5cdd16e89f3a77f9a28e54c9ad3bfb1220bc73340fd1afaa330106baa1c0b55bd87dac164b18180e73625f7751dbfdb42f
- SSDEEP 6144:wgZcQkd4DhL5cocO9PVW2xMAImBgEAOwWTBkekKko:pmRChVco9VLxMAreEyWTK1KR
- TLSH T12874B010B582C432D4BE043475B9DAAA593C391417A885EFA7E88E7F0F351C17B36BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:7c:1e:e1:1a:8a:b3:94:11:ce:b8:74:1c:ed:b8:33:84:a7:29:00:ed:4e:f8:da:29:c0:f7:20:49:5f:ae:9c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
127424
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
HDZIP.pdb
kernel32
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
CreateSemaphoreW
CreateDirectoryW
lstrlenW
SetFileTime
GetFileAttributesW
SetFileAttributesW
MultiByteToWideChar
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
FindFirstFileW
GetFullPathNameW
FindNextFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSectionEx
FormatMessageW
RaiseException
DecodePointer
LocalFree
WideCharToMultiByte
GetModuleFileNameW
GetTempPathW
DeleteFileW
FlushFileBuffers
GetUserDefaultLCID
LeaveCriticalSection
FreeLibrary
GetCurrentProcess
GetProcAddress
GetModuleHandleW
HeapFree
SetLastError
TerminateProcess
HeapSize
HeapReAlloc
CreateThread
HeapAlloc
GetCurrentProcessId
GetProcessHeap
SetEndOfFile
GetACP
GetStdHandle
EnumSystemLocalesW
IsValidLocale
ReadConsoleW
GetConsoleMode
EnterCriticalSection
VirtualAlloc
VirtualFree
GetFileSize
WaitForSingleObjectEx
CloseHandle
CreateFileA
GetLastError
CreateFileW
WriteFile
ReadFile
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
LCMapStringW
GetConsoleCP
GetModuleFileNameA
ExitProcess
SetFilePointerEx
GetFileType
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
RtlUnwind
LoadLibraryExW
InterlockedFlushSList
OutputDebugStringW
GetCPInfo
GetLocaleInfoW
TlsFree
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetStringTypeW
EncodePointer
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
advapi32
SystemFunction036
ole32
StringFromGUID2
CoCreateGuid
oleaut32
VariantClear
shlwapi
PathFileExistsW
PathAppendW
PathIsDirectoryW
hdzipCompressFolder
hdzipDecompressFile
hdzipSetLogger
Name
.text
Size
245KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
79KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=165, id=243, version=40116,
count=29, id=242, version=40116,
count=2, id=261, version=23013,
count=4, id=199, version=41118,
count=22, id=259, version=23907,
count=56, id=261, version=23907,
count=34, id=260, version=23907,
count=2, id=206, version=65501,
count=2, id=208, version=65501,
count=260, id=1, productName=Unmarked objects,
count=25, id=203, version=65501,
count=52, id=264, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
HUM.dll
- IMPHASH b6c0baaa8511c6ed730ee2579fa19611
- SHA256 2f916e6793691f450062ece47c55016bd9b7eb3c23e49232e6f1b9a9b77661ce
- MD5 04c483be78d8fbdb22881b6d6d043f13
- SHA1 08e33d544183e055b6466b0036f07c403b07e014
- SHA512 663b7313bc2087fcc3037cfd2ad6ce37655f4a4b6a2e4b1e72eb246943c3e800ad52aaaa26da3d80219a4af1585d3e2ad048e9c7d9ac2a761a9b598f2c42d6f8
- SSDEEP 24576:VtutUdNR6e2iT+U8uauYKL8ciWH/2nTHHNl+E4oeXd6po4LTRFyRV:WtUdNRsiT+UwuY5RT7R4tXAo4LTRSV
- TLSH T127659C11FBC2C135F8EA02B1A57D6AAA58387A140B3484DFA3D05E5E9D719C27B37723
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
62:02:d2:0f:1f:94:5b:36:2b:1c:be:19:44:c0:73:7d:12:db:cd:a1:08:d7:8d:99:23:4f:7c:0a:b8:bc:4d:cb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
983056
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
HUM.pdb
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
wtsapi32
WTSEnumerateSessionsW
WTSFreeMemory
shlwapi
PathStripPathW
PathIsRootW
PathFileExistsW
PathFindFileNameW
PathRemoveExtensionW
PathRenameExtensionW
PathIsDirectoryW
PathRemoveFileSpecW
PathIsSystemFolderW
PathAppendW
PathFileExistsA
PathIsFileSpecW
PathAddExtensionW
shell32
SHGetPathFromIDListW
SHGetFolderPathW
SHCreateDirectoryExW
SHGetFolderLocation
ord680
SHGetSpecialFolderPathW
winhttp
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpReadData
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpConnect
WinHttpQueryAuthSchemes
WinHttpCloseHandle
WinHttpSetCredentials
WinHttpSetTimeouts
kernel32
ExitThread
GetTimeZoneInformation
GetFileType
LoadLibraryExW
RtlUnwind
InterlockedFlushSList
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetLocaleInfoW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
ExitProcess
GetModuleFileNameA
GetACP
GetStdHandle
IsValidLocale
EnumSystemLocalesW
SetStdHandle
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
ReadFile
FindFirstFileW
SetLastError
FindNextFileW
lstrlenW
RemoveDirectoryW
GetModuleFileNameW
GetTempPathW
FindClose
LocalAlloc
CreateFileW
GetFileAttributesW
SetFileAttributesW
FormatMessageW
DeleteFileW
CloseHandle
LocalFree
MoveFileExW
GetFileSize
lstrcmpiW
lstrcmpW
GetCurrentProcess
WaitForSingleObject
GetProcAddress
GetModuleHandleW
GetVersionExW
Sleep
GetFullPathNameW
WriteFile
GetConsoleMode
FlushFileBuffers
LoadLibraryW
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
LoadLibraryA
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FreeLibraryAndExitThread
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcessId
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
HeapFree
TerminateProcess
OpenProcess
HeapSize
CreateToolhelp32Snapshot
ProcessIdToSessionId
Process32NextW
SetEvent
TerminateThread
Process32FirstW
GlobalFree
HeapReAlloc
CreateThread
ResetEvent
HeapAlloc
HeapDestroy
GetProcessHeap
GetUserDefaultLangID
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
InterlockedCompareExchange
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateMutexW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
SetFilePointerEx
ResumeThread
ReadConsoleW
GetConsoleCP
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
CreateDirectoryW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
ReleaseMutex
OpenMutexW
GetUserDefaultUILanguage
QueryPerformanceFrequency
CreateEventW
GetModuleHandleExW
GetDiskFreeSpaceW
user32
wsprintfW
advapi32
SystemFunction036
RegOpenKeyExW
RegQueryValueExW
LookupAccountSidW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
OpenProcessToken
CreateWellKnownSid
RegCloseKey
GetUserNameW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
AdjustTokenPrivileges
LookupPrivilegeValueW
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
ole32
CoCreateGuid
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
OleRun
CoTaskMemFree
oleaut32
SysAllocString
VariantChangeType
SysStringLen
SysFreeString
VariantInit
VariantCopy
VariantClear
GetErrorInfo
crypt32
CertGetNameStringW
wintrust
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
humCreateSession
humDownloadProductFFC
humGetAllProducts
humGetLatestApplicableUpdates
humGetLatestProducts
humGetLatestUpdates
humParseProductFFC
humSetLoggerFnPtr
humTerminateSession
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
240KB
Virtual Size
239KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=241, version=40116,
count=191, id=243, version=40116,
count=30, id=242, version=40116,
count=25, id=259, version=23907,
count=2, id=261, version=23013,
count=65, id=261, version=23907,
count=34, id=260, version=23907,
count=2, id=206, version=65501,
count=24, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=2, id=208, version=65501,
count=353, id=1, productName=Unmarked objects,
count=33, id=203, version=65501,
count=131, id=265, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Set-up.exe
- IMPHASH 56e748664914f819669a85b47d471d9c
- SHA256 a9d1210e4110bead819f1debe3cacf72d8faf496a0dc232cc57373653a60cca9
- MD5 0a0904ee79a0b95a948cd48217e40667
- SHA1 41991448f7e400f613ff57e35f2a448399f1f265
- SHA512 bdf01a3bbe25ed995ff6d4ef2e87861cb9c6ea65d448c8e7bf8905c51413cae2ec8a0d8d01635fb9fcf0bbfa8f1560a4ee167aa8f78f98cd24fbeefa4e21db6a
- SSDEEP 49152:Ta/4Ptarzp3MFzvgd3aH09UJqOlNN26WICSRCYTYAkVTdt0BihL67Sy5BpNTVcHe:TfMrzp3MqdazqgO6C+kVnHe
- TLSH T18A36B442A2E944A4F1F32B75AE3619714A77BD115F38C88FA58CAC1D0BF3681D530B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
Digest
02:e5:32:12:41:af:0e:56:97:d0:d3:15:b5:77:15:b8:a8:db:5b:84:63:41:35:43:d6:15:64:76:25:68:3b:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1669497
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Set-up.pdb
setupapi
CM_Get_DevNode_Status
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
comctl32
InitCommonControlsEx
shell32
SHGetKnownFolderPath
ShellExecuteW
SHGetSpecialFolderPathW
ord51
CommandLineToArgvW
ShellExecuteExW
SHCreateDirectoryExW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetMalloc
ord680
shlwapi
PathIsFileSpecW
PathAddExtensionW
PathRenameExtensionW
PathRemoveBackslashW
PathRemoveExtensionW
UrlIsW
SHGetValueW
PathIsSystemFolderW
PathAppendW
PathFileExistsW
PathFileExistsA
PathIsDirectoryW
PathRemoveFileSpecW
PathStripToRootW
PathIsNetworkPathW
PathFindFileNameW
PathIsRootW
PathIsRelativeW
PathStripPathW
PathIsUNCW
kernel32
WideCharToMultiByte
GetCurrentProcess
GetTempPathW
CreateFileW
GetVersionExW
GetComputerNameExW
FileTimeToSystemTime
CloseHandle
RaiseException
LoadLibraryW
GetProcAddress
LocalFree
CreateProcessW
GetModuleHandleW
FreeLibrary
FindFirstFileW
FindNextFileW
TerminateProcess
RemoveDirectoryW
GetModuleFileNameW
FindClose
WaitForSingleObject
OpenProcess
SetFileAttributesW
CreateToolhelp32Snapshot
Sleep
GetLastError
Process32NextW
DeleteFileW
Process32FirstW
CopyFileW
GetExitCodeProcess
ReadFile
SetLastError
lstrlenW
LocalAlloc
GetFileAttributesW
FormatMessageW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
MoveFileExW
GetFileSize
lstrcpyW
lstrcmpiW
lstrcmpW
GetDriveTypeW
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
GetFullPathNameW
HeapSize
HeapReAlloc
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetSystemDirectoryW
SetDllDirectoryW
GetStdHandle
AttachConsole
FreeConsole
GetConsoleWindow
CreateMutexW
ReleaseMutex
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
GetTempPathA
HeapAlloc
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetCurrentProcessId
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
VerSetConditionMask
VerifyVersionInfoW
GetUserDefaultLCID
LCMapStringW
DuplicateHandle
ProcessIdToSessionId
SetEvent
TerminateThread
GlobalFree
CreateThread
FindResourceExW
ResetEvent
GetThreadTimes
QueryFullProcessImageNameW
WaitForMultipleObjects
GetFileSizeEx
GetUserDefaultLangID
GetUserDefaultUILanguage
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
CreateDirectoryW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
GetTimeZoneInformation
CreateSymbolicLinkW
QueryPerformanceFrequency
GetCurrentThread
SetFilePointerEx
ResumeThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
CompareStringW
GetCPInfo
HeapFree
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStringTypeW
EncodePointer
LoadLibraryExA
VirtualQuery
VirtualProtect
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
GetFileType
SetStdHandle
ExitThread
GetModuleHandleExW
ExitProcess
GetACP
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateEventW
SetEnvironmentVariableA
WriteConsoleW
GetProcessHeap
GetDiskFreeSpaceA
user32
IsWindow
InvalidateRgn
DispatchMessageW
RedrawWindow
ClientToScreen
DestroyAcceleratorTable
IsChild
AttachThreadInput
ShowWindow
RegisterClassExW
SetWindowTextW
ScreenToClient
CreateWindowExW
FillRect
DestroyWindow
GetFocus
GetWindow
GetSysColor
GetActiveWindow
PostMessageW
CallWindowProcW
GetForegroundWindow
MoveWindow
CreateAcceleratorTableW
SetFocus
CharNextW
DefWindowProcW
GetMessageW
GetClassInfoExW
GetWindowTextLengthW
GetWindowThreadProcessId
BringWindowToTop
TranslateAcceleratorW
TranslateMessage
LoadCursorW
GetClassNameW
SetCapture
SetWindowLongW
GetClientRect
GetDlgItem
PostQuitMessage
GetParent
RegisterWindowMessageW
ReleaseCapture
SetForegroundWindow
InvalidateRect
IsIconic
BeginPaint
EndPaint
GetWindowTextW
GetWindowRect
GetDC
SetWindowPos
MessageBoxW
SendMessageW
GetDesktopWindow
ReleaseDC
UnregisterClassW
GetWindowLongW
wsprintfW
PostThreadMessageW
EnumWindows
GetShellWindow
AllowSetForegroundWindow
LoadImageW
SystemParametersInfoW
EnableMenuItem
LoadIconW
GetSystemMetrics
GetSystemMenu
GetClassLongW
AppendMenuW
GetAsyncKeyState
SetClassLongW
gdi32
BitBlt
CreateSolidBrush
DeleteObject
DeleteDC
GetStockObject
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectW
advapi32
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetTokenInformation
CreateWellKnownSid
LookupPrivilegeValueW
RegCloseKey
AdjustTokenPrivileges
SystemFunction036
RegCreateKeyExW
RegFlushKey
LookupAccountSidW
RegSetValueExW
RegOpenKeyExW
EqualSid
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
DuplicateTokenEx
ConvertSidToStringSidW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegQueryValueExW
GetUserNameW
OpenProcessToken
ole32
CoAddRefServerProcess
OleRun
CoReleaseServerProcess
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
CoInitialize
OleLockRunning
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoTaskMemAlloc
OleUninitialize
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoCreateGuid
CoInitializeEx
oleaut32
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
OleCreateFontIndirect
LoadTypeLi
VariantInit
LoadRegTypeLi
VariantChangeType
SysAllocStringByteLen
VariantCopy
SysStringByteLen
DispCallFunc
GetErrorInfo
SysFreeString
crypt32
CertGetIssuerCertificateFromStore
CertGetNameStringW
wintrust
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
451KB
Virtual Size
451KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
33KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
105KB
Virtual Size
104KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=241, version=40116,
count=200, id=243, version=40116,
count=32, id=242, version=40116,
count=4, id=261, version=23013,
count=1, id=199, version=41118,
count=25, id=259, version=23907,
count=39, id=260, version=23907,
count=136, id=261, version=23907,
count=9, id=206, version=65501,
count=24, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=8, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=2, id=208, version=65501,
count=35, id=203, version=65501,
count=530, id=1, productName=Unmarked objects,
count=200, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Setup.exe
- IMPHASH 54bfcae5b5ec29834e1889bd3dce6da9
- SHA256 39687a088e70d831c78bfa3a397d0277a5284468378a432f39260e183e9953d3
- MD5 a74a3a2119a8b1857dc3b58bfa70ceac
- SHA1 67a64c395de9edccb94ba192f1ecb5ee2c1fccaf
- SHA512 fb05dd76928a4ca74b6a6a37586ed86daaccc929d5d260d7ad6634ce92ce865214e75a4e0a3e4b40e7a96e480140109ebc886f64cd40f1b962f965ed0ae4d84e
- SSDEEP 6144:pW92iK/R+h3FdHY9fdqxVVids6UAats/SsQu6AOyTTBDNlPSWxBdSFEr:pW94Red4jqx7iGf9+SRu6UTTXlP3BSY
- TLSH T143C4F520B5E2C0F1D46361B1DE68B6F544A86E50CF600ECF6F987E693A705D06A31F6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
68:3e:e4:f2:24:df:92:9b:c9:e5:1f:ea:dd:81:4c:9d:b2:d8:e8:4f:ea:e6:7a:a5:b9:8a:2a:59:61:46:80:3a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
161600
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Setup.pdb
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
FindFirstFileW
GetFullPathNameW
FindNextFileW
WriteFile
GetModuleFileNameW
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CloseHandle
LocalFree
MoveFileExW
lstrcmpW
FlushFileBuffers
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
SetFilePointer
GetCurrentThreadId
WaitForSingleObject
Sleep
CreateThread
LoadLibraryW
GetProcAddress
FreeLibrary
CreateEventW
SetEvent
ResetEvent
GetCurrentProcess
GetVersionExW
VerSetConditionMask
GetModuleHandleW
VerifyVersionInfoW
ReadFile
GetUserDefaultLCID
LCMapStringW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
GetUserDefaultLangID
GetUserDefaultUILanguage
HeapFree
SetLastError
TerminateProcess
HeapSize
HeapReAlloc
HeapAlloc
GetProcessHeap
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
GetACP
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
IsProcessorFeaturePresent
OutputDebugStringW
SetDllDirectoryW
GetConsoleWindow
DeleteCriticalSection
DecodePointer
FreeConsole
RaiseException
AttachConsole
GetLastError
InitializeCriticalSectionEx
GetStdHandle
SetFilePointerEx
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetConsoleCP
WriteConsoleW
SetEndOfFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTimeZoneInformation
GetFileType
SetStdHandle
RtlUnwind
LoadLibraryExW
GetCPInfo
GetLocaleInfoW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
GetStringTypeW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
user32
SendMessageW
wsprintfW
advapi32
SystemFunction036
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHGetFolderLocation
ole32
CLSIDFromProgID
OleRun
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantCopy
GetErrorInfo
VariantClear
shlwapi
PathFindFileNameW
PathRenameExtensionW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathIsDirectoryW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
Name
.text
Size
313KB
Virtual Size
313KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
106KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=164, id=243, version=40116,
count=29, id=242, version=40116,
count=2, id=261, version=23013,
count=25, id=259, version=23907,
count=65, id=261, version=23907,
count=35, id=260, version=23907,
count=2, id=206, version=65501,
count=2, id=208, version=65501,
count=269, id=1, productName=Unmarked objects,
count=25, id=203, version=65501,
count=50, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
TokenResolverx64.exe
- IMPHASH 46d07a288bc5adb840f539c2c887f749
- SHA256 858e8e448f944d64ef40ebd242036ef82b2f31b45e898e07f35e6c50c358b7a4
- MD5 6b6aa395b6b0f949841a6bb0db6596c7
- SHA1 47208c24c5c0f7260c91a017e13aa31d81e70060
- SHA512 a207e8622ceaa6064ad6a311691456270c0a4541348e0855d063de57f82780c86ac91b73c7411b59b3971525bd94a967c63de39df070eaa073ed87e6fe7ec0e1
- SSDEEP 3072:ZTDGNqKIMuMvJHsKOwpaFiTRX9DtusoeC3xHaR:ZXUpMK1pccXa3x6R
- TLSH T190D36C5BB3A474F9E1778638C861090AE772B83607318BDF17A442562F637D09E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d2:57:10:60:e6:10:b1:35:7e:a2:0b:06:c8:86:4a:1b:3c:10:8c:25:d7:36:09:e7:f4:da:c2:10:84:b7:9d:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
8224
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
TokenResolverx64.pdb
kernel32
CloseHandle
GetLastError
CreateFileW
WriteConsoleW
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapSize
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
EncodePointer
RaiseException
GetModuleFileNameW
RtlUnwindEx
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetACP
HeapFree
HeapAlloc
LCMapStringW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
WriteFile
shell32
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
ole32
CoTaskMemFree
advapi32
SystemFunction036
Name
.text
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=121, id=243, version=40116,
count=13, id=242, version=40116,
count=8, id=259, version=23907,
count=37, id=261, version=23907,
count=19, id=260, version=23907,
count=11, id=203, version=65501,
count=94, id=1, productName=Unmarked objects,
count=2, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Uninstaller.exe
- IMPHASH a49d9d2d78f4757116c69a4384bc8587
- SHA256 53ca5cbe4c66cde2acb91d24aa937080b3e6398b59bf6fbd50f40963ff5ecd39
- MD5 96bbf48da10e76f343309dd90c9d5da1
- SHA1 52fd322335b50e6c49db7181673ddddd9680ceb1
- SHA512 86eacdad193b8edc5ed439746748993a18cb232e01fe59e4f9a3d297e1cbc153af1f772b63fbca1cfb3f2a8ea1a46cdb16cf0e4fd8f987e0132b55a097d00ca8
- SSDEEP 24576:Ijjx6X/laMicEEhBbcIZgWOkDXhXTA0ImCv:Q6X/nEIK+XTAhmCv
- TLSH T116252961F6D2C0F1E9D720B2DDAA7AF608A86E05CB284CDF5DC03D5579301D2363AA5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
94:93:73:bd:8f:49:b8:2f:86:83:a9:66:b9:84:a1:ba:72:2a:59:0d:84:aa:0a:b6:d1:ab:29:1c:f5:c9:e2:eb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
648240
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
Uninstaller.pdb
kernel32
GetProcAddress
GetModuleHandleW
GetFileAttributesW
ReadFile
GetFullPathNameW
FindNextFileW
WriteFile
GetModuleFileNameW
GetTempPathW
FindClose
CreateFileW
DeleteFileW
GetFileSize
FlushFileBuffers
HeapFree
SetLastError
TerminateProcess
WaitForSingleObject
OpenProcess
HeapSize
Sleep
CreateEventW
GlobalAlloc
GlobalFree
HeapReAlloc
CreateThread
HeapAlloc
HeapDestroy
GetCurrentProcessId
GetProcessHeap
CreateProcessW
MultiByteToWideChar
FormatMessageW
WideCharToMultiByte
LoadLibraryW
FreeLibrary
LoadLibraryA
LCMapStringW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetVersionExW
GetCurrentProcess
DeleteCriticalSection
LocalFree
DecodePointer
RaiseException
CreateFileMappingW
CloseHandle
GetLastError
InitializeCriticalSectionEx
CreateNamedPipeW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
HeapCompact
FreeEnvironmentStringsW
SetEnvironmentVariableA
UnlockFile
SetStdHandle
GetConsoleCP
WriteConsoleW
CreateFileMappingA
LockFileEx
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
GetSystemInfo
DeleteFileA
GetVersionExA
WaitForSingleObjectEx
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
HeapValidate
UnmapViewOfFile
GetCurrentThreadId
CreateMutexW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryExW
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
GetACP
lstrlenW
GetTickCount
QueryPerformanceCounter
MapViewOfFile
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
EnterCriticalSection
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
user32
EnumWindows
GetWindowThreadProcessId
AllowSetForegroundWindow
GetShellWindow
advapi32
SetEntriesInAclW
LookupPrivilegeValueW
AdjustTokenPrivileges
SystemFunction036
OpenProcessToken
DuplicateTokenEx
GetTokenInformation
EqualSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
AllocateAndInitializeSid
FreeSid
GetUserNameW
shell32
SHCreateDirectoryExW
SHGetFolderLocation
SHGetFolderPathW
SHGetSpecialFolderPathW
CommandLineToArgvW
SHGetPathFromIDListW
ole32
CLSIDFromString
OleRun
CLSIDFromProgID
CoCreateGuid
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoInitialize
StringFromGUID2
oleaut32
SysStringLen
VariantChangeType
VariantInit
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
shlwapi
PathRemoveBackslashW
PathStripPathW
PathIsDirectoryW
PathAppendW
PathFileExistsA
PathFileExistsW
PathRemoveFileSpecW
Name
.text
Size
734KB
Virtual Size
734KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
153KB
Virtual Size
152KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=241, version=40116,
count=160, id=243, version=40116,
count=29, id=242, version=40116,
count=26, id=259, version=23907,
count=2, id=261, version=23013,
count=64, id=261, version=23907,
count=34, id=260, version=23907,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=2, id=206, version=65501,
count=3, id=208, version=65501,
count=296, id=1, productName=Unmarked objects,
count=25, id=203, version=65501,
count=41, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
customhook/HDCoreCustomHook.exe
- IMPHASH fe2e86ac53893c495c6d3a12b0163b6e
- SHA256 491acfa4dc5818a72018dddb1622218256e97221bec19b8d46d02ca4b678e093
- MD5 ba7f8e2863b04e51dcde27671ceb3ef6
- SHA1 e136787060ea5e0bd469a806837aa5bb2b75d255
- SHA512 e62b8cb180f0b8f5e89930df0c6363f8ed8b3342007aeb17e12f122eaf114023fc98dd74da05e40f20bc7de825474d5d70e2b5167db9cac392d7373185361ff2
- SSDEEP 24576:gUdMA+PPgg4p+S8FFONnCFVgztOejiXh1vnTkP5/vNL:klPPg38FkQeWXDnTkP5/vNL
- TLSH T155359D51FAC280B1FDE201B142BEABBB5C38B5150B2A88D7E2D41DA91D705D23B3F756
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
71:7d:7c:a9:46:50:0a:35:6f:60:88:4b:0a:75:af:96:7d:53:01:7c:64:3e:de:93:80:30:6a:98:60:99:27:ed
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
716336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
HDCoreCustomHook.pdb
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
LocalFree
MoveFileExW
GetFileSize
lstrcmpW
GetCurrentProcess
WaitForSingleObject
GetProcAddress
GetModuleHandleW
InitializeCriticalSectionEx
RaiseException
DecodePointer
DeleteCriticalSection
GetVersionExW
HeapFree
LoadLibraryW
HeapAlloc
GetProcessHeap
InitializeCriticalSectionAndSpinCount
Sleep
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
EnterCriticalSection
GetFullPathNameW
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateMutexW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
MultiByteToWideChar
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
HeapReAlloc
GetSystemInfo
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetCurrentProcessId
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
GetUserDefaultLCID
LCMapStringW
CreateEventW
VerSetConditionMask
VerifyVersionInfoW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
GetDateFormatW
ReleaseMutex
OpenMutexW
TerminateProcess
SetEvent
ResetEvent
GetUserDefaultLangID
GetUserDefaultUILanguage
GetFileType
LoadLibraryExW
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
CloseHandle
DeleteFileW
GetLastError
FormatMessageW
SetFileAttributesW
GetFileAttributesW
CreateFileW
LocalAlloc
FindClose
GetTempPathW
GetModuleFileNameW
FindNextFileW
SetLastError
FindFirstFileW
ReadFile
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
ExitThread
SetEnvironmentVariableW
FreeLibraryAndExitThread
GetModuleHandleExW
GetConsoleCP
WriteConsoleW
GetTimeZoneInformation
ExitProcess
CreateFileMappingA
CreateThread
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
SetStdHandle
EnumSystemLocalesW
IsValidLocale
GetACP
GetCommandLineW
GetStdHandle
GetCommandLineA
advapi32
SystemFunction036
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
RegGetKeySecurity
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetKeySecurity
RegSetValueExW
InitializeSecurityDescriptor
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
SetEntriesInAclW
CreateWellKnownSid
shell32
SHCreateDirectoryExW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetSpecialFolderPathW
ole32
CoCreateGuid
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromProgID
OleRun
CLSIDFromString
CoTaskMemFree
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantCopy
GetErrorInfo
VariantClear
shlwapi
PathRemoveExtensionW
PathAddExtensionW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathAppendW
PathFileExistsA
PathRemoveFileSpecW
PathRenameExtensionW
PathIsFileSpecW
Name
.text
Size
835KB
Virtual Size
834KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
156KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=178, id=243, version=40116,
count=29, id=242, version=40116,
count=2, id=261, version=23013,
count=25, id=259, version=23907,
count=65, id=261, version=23907,
count=36, id=260, version=23907,
count=2, id=206, version=65501,
count=2, id=208, version=65501,
count=324, id=1, productName=Unmarked objects,
count=27, id=203, version=65501,
count=56, id=265, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.pimx
- SHA256 9738fa0692f5134ccde3fd6a0ba17e35e76ddd22972ddaec3cc7fd031fe2ada1
- MD5 c7f05997bf85f9e0fb0f0c7dda141fbe
- SHA1 85290296c34282cbe24051e024f3d9ac43d14289
- SHA512 089e19f3124b674000b17e976591b5673081306263d8f7fb220fcb94d8440d39b39bb1c16e1bedddf93b851272109fa0a65bf1d6b8f67ba1bb2eef9cfe8bf0c3
- SSDEEP 48:g6MoRG08KZG0/GqT8KZF0ROBOaFOLOW8OLs1L+QOaFOWODOaFls1L+IOaFEOaFfG:tEcuDgc6QLs1ojC+s1sS+PKwWLd5Bbln
- TLSH T1B8A1A41350A7706B3E6D043E29BA5F05A6DD7E2F2DE03541FB3981B243A541F4ACF852
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/HDBox/HDBox.sig
- SHA256 bee04f910145521ab874b6036b9c368313de4decb1c159ac4ec5df36991fc631
- MD5 09fc00f9a328d809224b935f34f98bf4
- SHA1 7e494964dd0ee12fa7120f331977a1f362083887
- SHA512 57ac4adb7cd971f2199cbf196b6baad0be8af8c6fceb2164f8ab02f864dbbe0196370d8cf7de0ed4617a50f745ebbda642826eb42977e259d768daca138b13a5
- TLSH T17A31F97470B4186E52608740D68E38706E405E8A3AAD2C9C38FB945EAFACDF402574ED
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.pima
- SHA256 a3ca3aeb9a676e385b498cfc73f85edc7014aac11bb09bd103a5a69aabe145c9
- MD5 87642bb118f74f79981e74439d84369c
- SHA1 75fda5e22f0783ab45cfa50033e27dede6b51bea
- SHA512 54505cf21afd10e1fd09f94b7e3fad94d9a95d140329205ce1b17f7b3147f9bc9b025d1dac98323e19ebb9333419d40f53e0f5a487cad35fe6394458fddd5178
- SSDEEP 24576:2tY/y4o7sypLUjcUzyIqWNhPWVrY9tnbxltlO:2tY9DypJjBcjnlZO
- TLSH T1B71523BB5D4078CE8A0684BA12B250CE6FF42775BF67512A7F6B18E740A2E17CD1C05B
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.pimx
- SHA256 2179c9f710fb08266745a2c6142be971e496819e1b305bf353aa010f2922f685
- MD5 cbee11f9c54271c2de7d543d2315334d
- SHA1 0a673080f04742335f302698fbfd468380074fcd
- SHA512 450424de516f67ccf78516da52b8f70100c5170c65ba02e5a7009fbce73af511cc37c9dccfe603086ba7027df54aba085e7728869493fbb6d57f639dd493cc08
- TLSH T11051B85215F592E33D79442F597B9F02A7ADAF3B1D602485B7BC81B347A093E09CF842
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/IPCBox/IPCBox.sig
- SHA256 7f890577d6dd92f0933c9ed3cb34dd33fbe84b6c07ab1f7561b70acac1a4bdb1
- MD5 d9cb2f473c181540a8ff42bc7a130c97
- SHA1 75f311399df220859299c276a71543cdf294fdd5
- SHA512 c776526ec6fe88fdb03f4ea955613500d389eae30d96191b6c58b987e040579489dd5794158b17d14cedcb0c8ed8b0c6f2bd521c7ab280c0c763116b39631fe5
- TLSH T1FD31D7F064F017E097B21EF36D191EC16B4685DF855409BE7541821E7FAE43086639FC
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/LCC/LCC.pima
- SHA256 d5023faa922d5c3ab4ff90071c3f6c352434eb0119c74313010dae75ad78468a
- MD5 d3e5dbd2de098b831d18a43f81a1e7d0
- SHA1 5793a85bee847ca9a519d756afa809a24ae46ecb
- SHA512 bbd43bd27f8193948e8da47c271d2beb1abb3d615a5df3b65261ef979c4e4e22540cd950b7e0448f37dfa02ba757dd9c3c5010c3808714d2cf1c8d8dfced9060
- SSDEEP 196608:Pld6lwmufV9jEJFW2VCelhqaV/0c35DSTv0xCvdR1cMp12try0u7YmivOGW:tdTNfVqJFzEelht/LdgvOCFsMvIm0wiw
- TLSH T1D7A6335EE3C9A761987C26EFFBC0920F27134264DF3061E944832278979736D24B57BA
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/LCC/LCC.pimx
- SHA256 29ab453ced5d4c5cb784354151f3e628a33d36bdaa2996082cd2fa452d918e9c
- MD5 a7c05e854712c1d94e7eaac2c3f32cd0
- SHA1 38c09424d3d596d0047af111ff9f7be04229e01d
- SHA512 b569c93c19b57ffc6e4fa14cb371792eeac9795be17227ffb05a04afd70e1fe97703f0aaad4ac343e469793fb527051eff4872fdaee68426e09b092eb30f4830
- SSDEEP 192:bqI3ygq4+L8MfiD71VShsc5p5sbheJaC8Fbey514t1Ax5qPn9ttxDsh9DYHvj:eoqT5A+i95DrYAx5497+h9Dw
- TLSH T10A42946A415A5B92791BCE643CA95E07691FB93EBAB070F0B79C4DB242D051F0E8F433
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/LCC/LCC.sig
- SHA256 93ed2b53e2cb272e1728bb10fc67ba9f09b1f1887e78555315bb35304725eace
- MD5 e4f360fd6298ac56ddf042e550a20af1
- SHA1 4b9309b8883c91005b8e8a07b3fd8c94bf64a56e
- SHA512 33c5858ca6d1a68d4b44675794a613fe0b53140ec1e4e5624adc8dc290e1e0c9898b34a1e12845f1db943b8132b2dd3d9ac696e68bd7b162cf9f2eef3dc1bc46
- TLSH T17A31DBE410C45EB2A5B126F1173757417D088EC61F1C6A98F0CF7B4E57E9415141B0E5
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Runtime/Runtime.pima
- SHA256 c4df4b455b8910c0a01d72e5a7e72d96efbbb9c678f0373f711ab490c28212d6
- MD5 79821505b0b0f6382ad385ab44f40b83
- SHA1 b505b67c66bedfa155b67ae7d98eeaf0f433a98a
- SHA512 e2998c95ad056fc4fac40886070db484adf5b40ea957eb7def18b7ffae73b16bec2e80c418565c71da85c15f1a27ea82fd228bc0d6d03102c88bf23ee19ddb01
- SSDEEP 3145728:tF/zAWtNCBvbUwdJG17oE5hbmAPok0N/h5TK5d2CRL5LhFxVx:fLXtgBvbUMJG115hbmAAk0N/h5e5QCRP
- TLSH T169383357B58C8E6EEF0B1534A6C7F9885B62782A701509E7F58CEDC683733A602FD940
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Runtime/Runtime.pimx
- SHA256 b39ddc1ca182f963c244a35e1c62a1f83969a56cc92391fed41af7f147ac6cd0
- MD5 132250e341205d95b30e2f43ed54ce6f
- SHA1 3dcb3aeb4e4c998a13e4b4d052d2531e60a1d737
- SHA512 40b0270719c365d67da56592512aefef56cc1786da060c7059f16b387c7be5059b63e254efc12f6306a9a9af6d95c7787e7f241090f52ad42ad921eef212cdf6
- SSDEEP 96:PicEsfEEBEGSESpE5Ugtrspds11e5E9sphnWs11eCE+sp1s11ehExpZ:1dGgBnHee9unVHe3+THeWB
- TLSH T1B2B19751007630D31D9A442B68FEBFC8A56DBF1A3E922151B3688DB685A193F47CF873
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ADC/Runtime/Runtime.sig
- SHA256 9adf166e805e99ad250e1ca5db8fd7df11297e2f6e984724ca7dc18bfb9c3101
- MD5 28d048b94a2610b30922e0dc54b0d19d
- SHA1 225bd2f90cc595edd66f7928d1fa1ae7b57d944b
- SHA512 ce3533cfcabd81266e43897b7cdd9608327a726f8fac248a47ee3b6b70323d1764a695e8bce3eb52a78fec85a4c3ad3daeca92a7c4f2b689c79c04059e2d6e78
- TLSH T1D931F779C2F7A680B73521E36916DA0B2600CBDE87480C4BF5D00E06BFAF034128F1B5
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/packages/ApplicationInfo.xml
- SHA256 f266ee78cc501b2868fa525f1392d6cf5a02d118c9be39723c33375ffa36d1ed
- MD5 07f111914d27992665cd171ccc9be254
- SHA1 5ee2a6772d3c7138d3c21c5643247648a01a7d4b
- SHA512 d169622a6e0d34e50522440b39cf2bd5fa22d464aa2c621d3841a8df3ee23fc5fc8cd2da8cb528be69aec5d919c7a819c7a93c29aa205a734e06108fdd42887d
- TLSH T16171799BFACDE6694D86196F51B12643806FFE38E6BC1088B3B912B3B1431157E53D32
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/products/AME/AdobeMediaEncoder14AllTrial.zip
- SHA256 ffbe4c12859268d17feee2b7dc5846d63e5eeab77e5a70f9b241ecd3e5f0c5ac
- MD5 024e569f449f7d6255d83892cd3898dc
- SHA1 9ef32316f4e37944124c132b81744dc837454b00
- SHA512 b75b8fdb1ed974c6caa30b78bf5d27cdf6f0ac7853453c25c09fb7196e91d45c005d984517de6c132224fda4fa18ebe196aa39e78ab1bb4ba90fcf1f5d316009
- SSDEEP 25165824:/vgFsxY4Mm9frfQvpfHKB89uI9QKYON7qaV:HgGxYcfafHuFBroV
- TLSH T1CB9933CD7F84ECC7EA3B52350244DA05E95DA00FD78A9587EBB04DB81EAE7CC135A849
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/products/AME/application.json
- SHA256 4ae781128ed83c168c3445ce3957e0c51a03dfd62a3cc5978b6dc9fc5041c881
- MD5 595bf31c5da0afae41dbce43dcd6418b
- SHA1 07d44eb1d0766bb3f999d20334d8beec8dee7c2d
- SHA512 c2dddf6f6c3de326f847c8711e8d2082acfa7f96b677b01882158fc0efd6c59a9eace6116625a5cc05b137231eadfc8e889c41c19bfd5fde229616f9c2c1fbb4
- SSDEEP 384:m9e3TCt9c8HTiGF8Rf7uHc9K0GawxUxh66cJTk+o:mI3TCt9c8ziDRf7uHc9KxPxUxUfJ4+o
- TLSH T1ACB2321739864D3B4A4F56C03F57550A21ACB48814DBBCCE9BA7C9D6BC92B5E0263CEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/products/driver.xml
- SHA256 acdc2ee08b40af170d1a5032bd1ebf7f1558a554cfbb83a9cf3935ec270e7fb8
- MD5 877af6876d3caa02bf04304a7d1c81ff
- SHA1 dde51a988a365978a2a14d8d5b1826fe551d8851
- SHA512 303d2c31d4134713ac56c84bd340bdc9a1f8ddcce8b3a088b4f6982dc266509cc4db710e7ef0f0416ca0c9018baba48884bea0c4220a977c3c7c1f9c910db83a
- TLSH T1BEE0C248B0A49754910B027F9BB3B54436531F4D772DE93AD386063363F63B88360672
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/AdobePIM.dll
- IMPHASH fed0db3cad6ea3e1c965e23d03350297
- SHA256 b10756942a010d67ae7d01fe759d9e94261d2f93cdf7bdb971fc78c146d0674a
- MD5 45ff5483f7dbd3c2aa634f8aab99e48c
- SHA1 af1b51e06c2bbfa4a76f669878c34046ae43fef2
- SHA512 6d12d300a8c241901cd6c9ccf358f0befb9796262afe7ad0bbda6374d7b22c44cfbfba2065182fc0d55b61521c1d65bfcf76c4404ae17fa8f4aadd7f3e752c21
- SSDEEP 49152:nn/9QcAxBaL4BatLmCGbD6AJYt2yx1ZIB0FzwPij0r/gHfjrZCzqOUCEdKq145Xk:FAaL4BatLmCGbD6AJYt2yx1ZIB0FzwP6
- TLSH T1EB958D21B7D6C135F8FA02F1A6785AAA4C38F9241F7145DBE2D05D6F19309C27A36B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
8b:cc:61:22:b2:8d:b9:8a:e4:b4:58:4f:bf:68:fa:41:4f:36:72:5d:73:af:90:1a:d8:39:42:85:e4:4c:21:bd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 27, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1327648
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
AdobePIM.pdb
msi
ord145
ord74
ord147
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
psapi
GetModuleFileNameExW
GetProcessImageFileNameW
EnumProcessModules
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
shlwapi
PathRemoveExtensionW
PathAddExtensionW
PathIsFileSpecW
PathRemoveFileSpecA
PathIsDirectoryA
PathRenameExtensionW
PathAppendW
PathRemoveBackslashW
PathStripPathW
PathAppendA
PathIsDirectoryW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
PathFileExistsA
PathIsRootW
PathIsDirectoryEmptyW
PathIsSystemFolderW
shell32
SHCreateItemFromParsingName
ShellExecuteExW
CommandLineToArgvW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
ord680
ord51
winhttp
WinHttpOpen
WinHttpSendRequest
WinHttpSetCredentials
WinHttpOpenRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpQueryAuthSchemes
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetOption
kernel32
GetCPInfo
GetLocaleInfoW
CompareStringW
TlsFree
IsDebuggerPresent
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
TlsSetValue
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTimeZoneInformation
ExitProcess
GetModuleFileNameA
GetStdHandle
GetFileType
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
ReleaseSemaphore
CreateMutexW
WaitForSingleObject
LocalAlloc
ReleaseMutex
Sleep
OpenSemaphoreW
CloseHandle
LocalFree
GetCurrentProcessId
CreateSemaphoreW
CreateDirectoryW
GetTempPathW
MultiByteToWideChar
SetEvent
ResetEvent
GetCommandLineW
CreateProcessW
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
FindFirstFileW
FindNextFileW
InterlockedDecrement
TerminateProcess
RemoveDirectoryW
FindClose
GetVersionExW
SetFileAttributesW
CreateEventW
GetDiskFreeSpaceExW
GetCommandLineA
CopyFileW
lstrcmpiW
lstrcmpW
GetExitCodeProcess
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
HeapFree
EnterCriticalSection
GetFullPathNameW
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
CreateFileW
GetFileAttributesW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
DeleteFileW
HeapReAlloc
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetProcAddress
CreateFileMappingA
LockFileEx
GetFileSize
GetProcessHeap
SystemTimeToFileTime
FreeLibrary
WideCharToMultiByte
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
GetTickCount
FlushFileBuffers
GetCurrentProcess
GetFileSizeEx
lstrlenW
GetACP
SizeofResource
GetModuleFileNameW
LockResource
LoadResource
FindResourceW
MoveFileExW
VerSetConditionMask
GetModuleHandleW
VerifyVersionInfoW
SetLastError
DuplicateHandle
ProcessIdToSessionId
TerminateThread
GlobalAlloc
GlobalFree
FindResourceExW
lstrcpyW
QueryFullProcessImageNameW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
FileTimeToSystemTime
OpenMutexW
GetUserDefaultLCID
LCMapStringW
GetUserDefaultLangID
GetUserDefaultUILanguage
SetFilePointerEx
ResumeThread
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleW
QueryPerformanceFrequency
CreateThread
QueryPerformanceCounter
user32
wsprintfW
AllowSetForegroundWindow
EnumWindows
GetShellWindow
GetWindowThreadProcessId
advapi32
InitializeSecurityDescriptor
SystemFunction036
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorDacl
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
FreeSid
RegDeleteKeyExW
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
LookupAccountSidW
CreateWellKnownSid
EqualSid
GetTokenInformation
DuplicateTokenEx
GetUserNameW
ConvertSidToStringSidW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
ole32
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
OleRun
CLSIDFromString
CLSIDFromProgID
oleaut32
VariantClear
VariantCopy
SysStringLen
VariantChangeType
VariantInit
SysFreeString
SysAllocString
GetErrorInfo
crypt32
CertGetNameStringW
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust
AAMIU_Uninstall
AAMIU_getDeploymentValidationStatus
AAMIU_preInstallPropertySet
pim_createLibraryRef
pim_freeLibraryRef
pim_freeLiraryRef
pim_freeString
pim_getAppletAndPackageInfo
pim_getAppletRegistrationInfo
pim_getAppletRelationshipInfo
pim_getCurrentCCVersion
pim_getCurrentPackagesVersion
pim_getInstallStatus
pim_getInstalledPackagesInfo
pim_launchACCCUninstallerExecutableAsAdmin
pim_selfUpdateCheck
pim_selfUpdateCheckWithData
pim_startWorkflow
pim_startWorkflowWithData
pim_syncFromPathToACF
pim_syncFromPathToPath
pim_syncUSFToACF
pim_uninstallAAMFromAAMCleanerTool
pim_uninstallAAMUsingAAMCleanerTool
pim_uninstallACCC64FromACCCCleanerTool
pim_uninstallACCCFromACCCCleanerTool
pim_uninstallADC64UsingADCCleanerTool
pim_uninstallADCUsingADCCleanerTool
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
362KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
66KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=241, version=40116,
count=179, id=243, version=40116,
count=30, id=242, version=40116,
count=26, id=259, version=23907,
count=2, id=261, version=23013,
count=65, id=261, version=23907,
count=34, id=260, version=23907,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=208, version=65501,
count=16, id=203, version=65501,
count=32, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=17, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=352, id=1, productName=Unmarked objects,
count=128, id=265, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/Config.xml
- SHA256 6bb7f79b1e8d4069ebb0a8e28eb66b34188dcfd309fa9bc2d229928eabe567f7
- MD5 cfd0fb5625b5200568a39810e18a58c1
- SHA1 77bb8b5c19079cef151042faf86730edee23d8b0
- SHA512 f82c0de8a75b2863c541c0c7b382cbfd30c33a4abb6f123bd4540d426006bb7eaac6c734ba3938342a1ef54d5bfe6ab5066edef464aefb5947f46d5946ef0e4e
- TLSH T18EE092FAC450A7F920F883B1CF1FD7F02F369629544514496DF9BD18664A91C73015A4
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/content/images/appIcon.png
- SHA256 2ca439e291a78d15eea71aa2c870ae2e112a55a3cd8f8a895a56adb88b953731
- MD5 c911afcac4906bc4179eed9032504977
- SHA1 38b7b6c164a8b09c758d73a78fb152ef4ba26f1d
- SHA512 b409df2fda571f4ba551d3691b1ba2f2ea036c4e9098c62c3019cee9d6df75dce8678775a956047dd7d0bbd1f5f3354cf63eac3c18ea144416fd2a414402a284
- TLSH T1E7311D7294B89C349DF4CD3EC875141A75D14467CB0ECB9D8104884AADDD42F99625AC
- MD5 SHA1 SHA512 TLSH
Adobe_Media_Encoder_2020_v14.0.2.69_x64_Multilingual/resources/content/images/appIcon2x.png
- SHA256 b0b14c460b983c27081bd1a3911b51c551ee6cac5e7290b96a379c0e0c38bdab
- MD5 8140c11c60a181087c460f4830247d76
- SHA1 e29692ff0867f2b88437f38caa103a4ad7b7dd09
- SHA512 9713b8c834c46d7ac7618a5d9b87eb7348df00b5b8012c6e62d7c4b43ee1074883e4044973ce49dd4e5d60cd0cb1b816937c07d0de39445bfecded38ebd5d983
- TLSH T175518D8B79A50898743D0A2D6C9E9CC3801C72A193060774E1789A579AEF39BD4D7DA8
- MD5 SHA1 SHA512 TLSH