LCC.pima
- SHA256 434664ea764a0976dfb7651c2262da58ac4c7013cf56f3c000446c382772b4b3
Overview
overview
7Static
static
1IMSLib.dll
windows10-2004-x64
3IMSLib.dll
windows11-ltsc_2024-x64
3P7Native.dll
windows10-2004-x64
3P7Native.dll
windows11-ltsc_2024-x64
3VulcanBridge.dll
windows10-2004-x64
3VulcanBridge.dll
windows11-ltsc_2024-x64
3VulcanMessage4.dll
windows10-2004-x64
3VulcanMessage4.dll
windows11-ltsc_2024-x64
3VulcanMessage5.dll
windows10-2004-x64
3VulcanMessage5.dll
windows11-ltsc_2024-x64
7adobe_lice...er.exe
windows10-2004-x64
3adobe_lice...er.exe
windows11-ltsc_2024-x64
3adobe_oobelib.dll
windows10-2004-x64
3adobe_oobelib.dll
windows11-ltsc_2024-x64
3adobe_upgrade.dll
windows10-2004-x64
3adobe_upgrade.dll
windows11-ltsc_2024-x64
3imshelper.dll
windows10-2004-x64
3imshelper.dll
windows11-ltsc_2024-x64
3x64/IMSLib.dll
windows10-2004-x64
1x64/IMSLib.dll
windows11-ltsc_2024-x64
1x64/imshelper.dll
windows10-2004-x64
1x64/imshelper.dll
windows11-ltsc_2024-x64
1Static task
static1
Behavioral task
behavioral1
Sample
IMSLib.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
IMSLib.dll
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral3
Sample
P7Native.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral4
Sample
P7Native.dll
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral5
Sample
VulcanBridge.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral6
Sample
VulcanBridge.dll
Resource
win11ltsc2024-20260710-es
windows11-ltsc_2024-x64
3 signatures
900 seconds
Behavioral task
behavioral7
Sample
VulcanMessage4.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral8
Sample
VulcanMessage4.dll
Resource
win11ltsc2024-20260710-es
windows11-ltsc_2024-x64
3 signatures
900 seconds
Behavioral task
behavioral9
Sample
VulcanMessage5.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral10
Sample
VulcanMessage5.dll
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
28 signatures
900 seconds
Behavioral task
behavioral11
Sample
adobe_licensing_helper.exe
Resource
win10v2004-20260513-es
windows10-2004-x64
1 signatures
900 seconds
Behavioral task
behavioral12
Sample
adobe_licensing_helper.exe
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
1 signatures
900 seconds
Behavioral task
behavioral13
Sample
adobe_oobelib.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral14
Sample
adobe_oobelib.dll
Resource
win11ltsc2024-20260710-es
windows11-ltsc_2024-x64
3 signatures
900 seconds
Behavioral task
behavioral15
Sample
adobe_upgrade.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral16
Sample
adobe_upgrade.dll
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
2 signatures
900 seconds
Behavioral task
behavioral17
Sample
imshelper.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral18
Sample
imshelper.dll
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
3 signatures
900 seconds
Behavioral task
behavioral19
Sample
x64/IMSLib.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
x64/IMSLib.dll
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
x64/imshelper.dll
Resource
win10v2004-20260513-es
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral22
Sample
x64/imshelper.dll
Resource
win11ltsc2024-20260709-es
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target LCC.pima
- Size 9.8MB
- Sample260818-e8645aw1aw
- SHA256 434664ea764a0976dfb7651c2262da58ac4c7013cf56f3c000446c382772b4b3
- MD5 e65f9d3de5602d8f9cf5bfdb99d2bb29
- SHA1 5b28e5fda4aafcf0fb1848f5e0b4e6e98349c48c
- SHA512 42dd97c45d9bc59e89c29468f707d75fe30247bcb09549687aa1f441b397881151bfa195f1195da712f80041a3acf36f20dd237553b9104453f13c6ed2829ba9
- SSDEEP 196608:mfK2xKN1uU0rTzUDl8ShG/SDjTv0xs+e39jZbumDOGM:+K2xQutrTzilbIS3vOs+e39jZbulGM
- TLSH T185A633C4E872E0656878A362E3D4963AC6138177EDD70D67A0B787EA96003C43DE6D93
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
LCC.pima.zip 9.8MB
-
IMSLib.dll.dll 2.0MB
-
P7Native.dll.dll 2.2MB
-
VulcanBridge.dll.dll 277KB
-
VulcanMessage4.dll.dll 301KB
-
VulcanMessage5.dll.dll 945KB
-
adobe_licensing_helper.exe.exe 2.5MB
-
adobe_oobelib.dll.dll 3.5MB
-
adobe_upgrade.dll.dll 3.8MB
-
dispatchtable.xml.xml 5KB
-
imshelper.dll.dll 1.9MB
-
x64/IMSLib.dll.dll 2.7MB
-
x64/imshelper.dll.dll 2.5MB
IMSLib.dll
- IMPHASH 40814f5b7859965691b9179df06ced28
- SHA256 e8d4cab160e3fb2c3234e19af0cdd4d75135e34de00899c16e5ba574b515f028
- MD5 add5272bfa6d648f099d33757624fca9
- SHA1 8f6f30b6808ab97ea951e654591d70cc38e38d36
- SHA512 ce28ca3eb31cb2708f611ec036041ed74fe4c63a499ff6646bfbffcd5704ba95c8444032bc9ad6a8f34c6f792841ec8b75c987d985ae566ed6969547851463ab
- SSDEEP 49152:XAWrIt1K1KwPGhPff37TryMt0x5mUDuidd0Iz6T:XQK1K7hPffrTWiEmUx01
- TLSH T124A59D22B6C6C036F5EF02B4657A5BBE4C3AB918073485CBA7D0286D5D305D26B3B763
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0e:b1:c2:37:35:65:92:d1:6e:f8:dc:92:e6:ad:c3:19:de:84:45:fe:8e:e5:9f:2d:1d:d1:7b:1c:72:43:cb:37
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 18, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1243088
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\10.0\source\dev\aamcore\target\win\Release\OOBECommon\IMSLib.pdb
winhttp
WinHttpOpen
WinHttpCrackUrl
WinHttpConnect
WinHttpSetStatusCallback
WinHttpSetCredentials
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpGetIEProxyConfigForCurrentUser
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
setupapi
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
kernel32
CloseHandle
CreateThread
ResetEvent
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ReadFile
SetLastError
GetCurrentProcess
WriteFile
TerminateProcess
GetModuleFileNameW
GetTempPathW
CreateMutexW
FindClose
LocalAlloc
CreateFileW
GetFileAttributesW
GetVersionExW
ReleaseMutex
SetFileAttributesW
Sleep
DeleteFileW
RaiseException
DecodePointer
GetProcAddress
LocalFree
MoveFileExW
GetFileSize
SystemTimeToFileTime
CreateProcessW
GetModuleHandleW
CopyFileW
WideCharToMultiByte
GetSystemTime
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
GetCurrentProcessId
CreateDirectoryW
LoadLibraryW
FreeLibrary
GetLastError
GetTimeFormatW
GetDateFormatW
GlobalFree
QueryPerformanceCounter
GetStdHandle
GetFileType
GetCurrentThreadId
GetModuleHandleA
GetTickCount
LoadLibraryA
GlobalMemoryStatus
FlushConsoleInputBuffer
SetFilePointer
GetFileSizeEx
OpenMutexW
GetFileAttributesExW
CreateSymbolicLinkW
AreFileApisANSI
HeapCreate
HeapFree
GetFullPathNameW
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
OutputDebugStringW
CreateFileA
GetVersionExA
DeleteFileA
HeapReAlloc
GetSystemInfo
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
GetTimeZoneInformation
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
MultiByteToWideChar
CreateEventW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
GetModuleFileNameA
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetEvent
GetCurrentDirectoryW
SetStdHandle
SetFilePointerEx
ReadConsoleW
GetConsoleCP
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetLocalTime
SetConsoleCtrlHandler
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
VirtualProtect
VirtualFree
VirtualAlloc
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
EncodePointer
GetStringTypeW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
user32
MessageBoxA
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetUserNameW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
SetEntriesInAclW
CreateWellKnownSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetKnownFolderPath
SHCreateDirectoryExW
ole32
CoSetProxyBlanket
CoUninitialize
CoInitialize
CLSIDFromString
OleRun
CLSIDFromProgID
CoCreateInstance
StringFromGUID2
CoInitializeSecurity
CoInitializeEx
CoCreateGuid
oleaut32
SysStringLen
GetErrorInfo
VariantClear
VariantChangeType
VariantCopy
SysAllocString
SysAllocStringByteLen
SysFreeString
VariantInit
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathIsFileSpecW
PathIsDirectoryW
PathRemoveExtensionW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathFindFileNameW
IMS_EEPLogin
IMS_createRef
IMS_createRefEx
IMS_createRefExWithXMLParams
IMS_createRefForProductVersion
IMS_deregisterClientFromGroup
IMS_fetchAccessToken
IMS_fetchAccessToken2
IMS_fetchAccounts
IMS_fetchContinueToken
IMS_fetchDefaultUserInfoForClientId
IMS_fetchFeatureFlags
IMS_fetchIDPResponseForKey
IMS_fetchReleaseFlag
IMS_fetchUserProfileData
IMS_getDeviceID
IMS_getProxyCredentialsFromIMSLibSession
IMS_logOutUserForClient
IMS_registerClientToGroup
IMS_releaseData
IMS_releaseRef
IMS_revokeDeviceToken
IMS_setProxyCredentials
IMS_setProxyCredentialsInIMSLibSession
IMS_setRetryAfterResponseHandlingData
IMS_setUserAsDefaultForClientId
IMS_storeDeviceTokenAndUserProfile
IMS_storeDeviceTokenAndUserProfileEx
Name
.text
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
442KB
Virtual Size
441KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=192, id=243, version=40116,
count=30, id=242, version=40116,
count=2, id=261, version=23013,
count=1, id=199, version=41118,
count=26, id=259, version=24123,
count=118, id=261, version=24123,
count=37, id=260, version=24123,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=316, id=1, productName=Unmarked objects,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=324, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=68, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
P7Native.dll
- IMPHASH cf80743055a2d0100b8134c1b6e3d72a
- SHA256 6defa490e48828aba9ae05c9262924dcf9b0cf42c1eba532e3ac26ec01ed89b5
- MD5 2ee7d6208279ec0001e56266ea49433d
- SHA1 3cc4df18d0b281f83576adb13db595e66be5d6be
- SHA512 b50ad56009e780b201d0c6f85aae98ff46fa0317c1557e73430b970877546326079a17bca3295443fa5c1ec7d068c0f9297e28ea18ce30ba3a81ca2c1f6c4266
- SSDEEP 49152:gXfPVE535XT7UoK15t3C9EunDH3FCsraATJ9rePdSHug:YfPVMg15VADnDVC5ATGPdQ
- TLSH T1F8A57B12B6D1C036F5EF02B0527A5BB94D39BD34173881DB93D42C695D30AD2BA3A72B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a6:bb:8d:ce:35:1f:03:a5:47:d7:91:0a:d5:dc:1f:94:1c:fa:15:2a:77:5f:ba:b5:e7:8e:8f:bd:17:86:ab:de
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 28, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
1433297
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\10.0\source\dev\aamcore\target\win\Release\P7Native.pdb
setupapi
CM_Get_DevNode_Status
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
kernel32
GetLastError
FindClose
GetSystemInfo
FindFirstFileW
FindNextFileW
GetVersionExW
DecodePointer
GetProcAddress
LocalAlloc
LocalFree
GetCurrentProcess
TerminateProcess
RaiseException
SetLastError
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseMutex
WaitForSingleObject
Sleep
GetFileSize
WriteFile
ReadFile
FlushFileBuffers
CloseHandle
GetSystemTime
SystemTimeToFileTime
CreateMutexW
CreateEventW
GetModuleFileNameW
GetModuleHandleW
CreateProcessW
GetTempPathW
RemoveDirectoryW
CreateFileW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
CopyFileW
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetCurrentProcessId
CreateDirectoryW
FreeLibrary
LoadLibraryW
CreateThread
ConnectNamedPipe
SetDllDirectoryW
CreateNamedPipeW
InterlockedDecrement
LeaveCriticalSection
InitializeCriticalSection
GetTickCount
InitializeCriticalSectionAndSpinCount
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
LockFileEx
CreateFileMappingA
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
HeapReAlloc
DeleteFileA
GetVersionExA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapSize
HeapValidate
UnmapViewOfFile
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
InterlockedCompareExchange
GetFullPathNameW
HeapFree
HeapCreate
AreFileApisANSI
GetCurrentThreadId
TryEnterCriticalSection
GetFileSizeEx
lstrlenW
GetACP
CreateSymbolicLinkW
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
CompareStringW
GetStdHandle
GetFileType
GetModuleHandleA
GlobalMemoryStatus
FlushConsoleInputBuffer
ReadConsoleW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetCurrentDirectoryW
GetModuleFileNameA
SetFilePointerEx
GetConsoleCP
FindFirstFileExA
QueryPerformanceCounter
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
TlsFree
TlsSetValue
TlsGetValue
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
TlsAlloc
EncodePointer
EnterCriticalSection
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
ExitProcess
GetTimeZoneInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStartupInfoW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStringTypeW
user32
wsprintfW
GetProcessWindowStation
MessageBoxA
GetUserObjectInformationW
advapi32
RegisterEventSourceA
DeregisterEventSource
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
CreateWellKnownSid
GetUserNameW
ReportEventA
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetKnownFolderPath
SHGetFolderLocation
SHGetPathFromIDListW
SHGetFolderPathW
ole32
CoInitializeEx
CoTaskMemFree
OleRun
CLSIDFromProgID
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoUninitialize
CLSIDFromString
CoInitialize
oleaut32
SysAllocStringByteLen
SysStringLen
VariantInit
SysFreeString
SysAllocString
VariantCopy
VariantClear
GetErrorInfo
shlwapi
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathIsFileSpecW
PathRemoveFileSpecW
PathStripPathW
PathAppendW
PathRemoveBackslashW
PathRemoveExtensionW
PathAddExtensionW
PathRenameExtensionW
StrToIntExA
finalizeApplet
freeMemory
initializeApplet
processMessage
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
475KB
Virtual Size
475KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
21KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
1024B
Virtual Size
644B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=241, version=40116,
count=193, id=243, version=40116,
count=29, id=242, version=40116,
count=2, id=261, version=23013,
count=1, id=199, version=41118,
count=26, id=259, version=24123,
count=60, id=261, version=24123,
count=34, id=260, version=24123,
count=324, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=260, productName=VS2015 UPD1 build 23506, version=23506,
count=8, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=46, id=265, version=24215,
count=290, id=1, productName=Unmarked objects,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=24, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VulcanBridge.dll
- IMPHASH 7ff1aabf9c9f731022064df0d33b8ed1
- SHA256 45b30454a1e9886237095433027eb1b19c0e8a135667d74808d2e738707533ba
- MD5 251ca5cad17b96aa07389560b97fde70
- SHA1 f278041e61b11a9f1b13ca6e9a13697c7d22fa96
- SHA512 b4072261d8cb0a185620cbe2fa203525e9703122db29095e9a05c79a1fc562bba352f73acdca997f96e011b75dbe1203debafb752c1993479f46f66abfabfe6f
- SSDEEP 6144:KZWm6F2ZlKkDOFYRjfcL5iNWcAOUOLZrz:KZj6mZDYYRbA8IcDV3
- TLSH T189547C11B5C28033D4BE1A344579E766097CB9218BA4C9DFE7D80A2D4F722C27A36B77
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e7:5d:ee:5c:aa:34:a4:b4:37:cc:6e:e5:89:4e:47:ff:69:e6:b3:44:d0:00:32:85:61:3b:43:1c:cb:46:10:26
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 28, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
63934
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\10.0\source\dev\aamcore\target\win\Release\VulcanBridge.pdb
vulcanmessage5
?TYPE_PREFIX@SuiteMessage@api5@vulcan@adobe@@2QBDB
?SetConfig@IVulcanMessageDispatcher@api5@vulcan@adobe@@SA?AW4VulcanMessageErrorCode@@PBD0@Z
?GetInstance@IVulcanMessageDispatcher@api5@vulcan@adobe@@SA?AW4VulcanMessageErrorCode@@PAPAV1234@@Z
?ReleaseInstance@IVulcanMessageDispatcher@api5@vulcan@adobe@@SAXXZ
?SetPayload@SuiteMessage@api5@vulcan@adobe@@QAEXPBD@Z
?SetSource@SuiteMessage@api5@vulcan@adobe@@QAEXABVEndPoint@234@@Z
??1SuiteMessage@api5@vulcan@adobe@@UAE@XZ
??0SuiteMessage@api5@vulcan@adobe@@QAE@PBD@Z
??1EndPoint@api5@vulcan@adobe@@UAE@XZ
kernel32
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
CreateMutexW
WaitForSingleObject
ReleaseMutex
Sleep
GetLastError
CloseHandle
GetCurrentProcessId
CreateDirectoryW
FlushFileBuffers
GetTempPathW
MultiByteToWideChar
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ReadFile
GetFileSizeEx
GetLocalTime
GetTimeFormatW
WideCharToMultiByte
GetDateFormatW
OpenMutexW
IsValidCodePage
GetConsoleCP
SetFilePointerEx
HeapSize
SetEndOfFile
InitializeCriticalSectionAndSpinCount
TlsSetValue
FindNextFileA
FindFirstFileExA
FindClose
GetProcessHeap
ReadConsoleW
GetConsoleMode
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
GetStringTypeW
EncodePointer
DecodePointer
SetLastError
CreateEventW
TlsAlloc
TlsGetValue
WriteConsoleW
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RaiseException
RtlUnwind
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
MoveFileExW
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
GetStdHandle
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
user32
wsprintfW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
SHCreateDirectoryExW
shlwapi
PathIsDirectoryW
PathAppendW
PathIsFileSpecW
PathRenameExtensionW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
PathAddExtensionW
broadcastVulcanEvent
broadcastVulcanEventForLicenseRefresh
broadcastVulcanEventForSignout
Name
.text
Size
185KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
66KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
1024B
Virtual Size
552B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=154, id=243, version=40116,
count=29, id=242, version=40116,
count=24, id=259, version=24123,
count=50, id=261, version=24123,
count=34, id=260, version=24123,
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, productName=VS2015 UPD2 build 23918, version=23918,
count=3, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=151, id=1, productName=Unmarked objects,
count=15, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VulcanMessage4.dll
- IMPHASH fc5b54b3753cd053154301e29bc8b0a6
- SHA256 43ebaa2c820f5503164d105a0fd24d230ec7103388c3f262d039f5fb1b950376
- MD5 dee66ab932835c55c345cd1c85e3fa0a
- SHA1 06038230bcb335712bb533b1ec74e20363496e4e
- SHA512 5c448e34ea4094ff5ef75ab3a9b92f14db27d5f5ebaa0568313b5c18861ee40087b4468998ca3a94f51b13b222abc219c679dfb848a3ece4a31230240d57e96f
- SSDEEP 6144:NgcCzSIaW0tRTgOEztP39ydmu+QqoIVYOtpm4EqEnz8ScBkE:NzId0tRTgNz17u+wIV7to4EZtbE
- TLSH T11A647C627541C036C59B1375A4BCE76A4EADB8116B6098CBE7C809BECF306D36B3534E
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7c:4b:a8:38:2b:fe:ee:56:63:97:ff:03:93:bd:9f:ee:b3:98:80:33:75:43:aa:50:07:62:ed:fa:68:b9:88:d1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 28, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
116236
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\jenkins_slave_all\workspace\Vulcan_4.0.0\s\w-1\vulcan\4.0.0\projects\native\VulcanMessageLib\Binaries\Win32\Release\VulcanMessage4.pdb
kernel32
FreeLibrary
WideCharToMultiByte
LoadLibraryW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
MultiByteToWideChar
GetCPInfo
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetModuleHandleW
ExitProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
FatalAppExitA
GetFullPathNameW
CloseHandle
GetFileInformationByHandle
PeekNamedPipe
GetFileType
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
SetHandleCount
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
HeapReAlloc
SetConsoleCtrlHandler
CompareStringW
SetEnvironmentVariableW
SetStdHandle
GetConsoleCP
GetConsoleMode
SetFilePointer
SetEndOfFile
GetProcessHeap
ReadFile
GetTimeZoneInformation
GetFullPathNameA
WriteConsoleW
SetEnvironmentVariableA
??0EndPoint@api@vulcan@adobe@@QAE@ABV0123@@Z
??0EndPoint@api@vulcan@adobe@@QAE@XZ
??0ErrorMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0ErrorMessage@api@vulcan@adobe@@QAE@XZ
??0GetAppPathMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0GetAppPathMessage@api@vulcan@adobe@@QAE@XZ
??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0GetTargetSpecifiersMessage@api@vulcan@adobe@@QAE@XZ
??0HostMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0HostMessage@api@vulcan@adobe@@QAE@PBD@Z
??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageDispatcher@api@vulcan@adobe@@QAE@XZ
??0IVulcanMessageListener@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageListener@api@vulcan@adobe@@QAE@XZ
??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IsAppInstalledMessage@api@vulcan@adobe@@QAE@XZ
??0IsAppRunningMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0IsAppRunningMessage@api@vulcan@adobe@@QAE@XZ
??0LaunchAppMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0LaunchAppMessage@api@vulcan@adobe@@QAE@XZ
??0SuiteMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0SuiteMessage@api@vulcan@adobe@@QAE@PBD@Z
??0VulcanMessage@api@vulcan@adobe@@QAE@ABV0123@@Z
??0VulcanMessage@api@vulcan@adobe@@QAE@XZ
??1EndPoint@api@vulcan@adobe@@UAE@XZ
??1ErrorMessage@api@vulcan@adobe@@UAE@XZ
??1GetAppPathMessage@api@vulcan@adobe@@UAE@XZ
??1GetTargetSpecifiersMessage@api@vulcan@adobe@@UAE@XZ
??1HostMessage@api@vulcan@adobe@@UAE@XZ
??1IVulcanMessageDispatcher@api@vulcan@adobe@@UAE@XZ
??1IsAppInstalledMessage@api@vulcan@adobe@@UAE@XZ
??1IsAppRunningMessage@api@vulcan@adobe@@UAE@XZ
??1LaunchAppMessage@api@vulcan@adobe@@UAE@XZ
??1SuiteMessage@api@vulcan@adobe@@UAE@XZ
??1VulcanMessage@api@vulcan@adobe@@UAE@XZ
??4EndPoint@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4ErrorMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4GetAppPathMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4GetTargetSpecifiersMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4HostMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageDispatcher@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageListener@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IsAppInstalledMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IsAppRunningMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4LaunchAppMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4MessageUtil@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4SuiteMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4VulcanMessage@api@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??8EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z
??9EndPoint@api@vulcan@adobe@@QBE_NABV0123@@Z
??_7EndPoint@api@vulcan@adobe@@6B@
??_7ErrorMessage@api@vulcan@adobe@@6B@
??_7GetAppPathMessage@api@vulcan@adobe@@6B@
??_7GetTargetSpecifiersMessage@api@vulcan@adobe@@6B@
??_7HostMessage@api@vulcan@adobe@@6B@
??_7IVulcanMessageDispatcher@api@vulcan@adobe@@6B@
??_7IVulcanMessageListener@api@vulcan@adobe@@6B@
??_7IsAppInstalledMessage@api@vulcan@adobe@@6B@
??_7IsAppRunningMessage@api@vulcan@adobe@@6B@
??_7LaunchAppMessage@api@vulcan@adobe@@6B@
??_7SuiteMessage@api@vulcan@adobe@@6B@
??_7VulcanMessage@api@vulcan@adobe@@6B@
?APP_NOT_INSTALLED_ERROR@ErrorMessage@api@vulcan@adobe@@2QBDB
?Clone@ErrorMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@GetAppPathMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@HostMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@IsAppInstalledMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@IsAppRunningMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@LaunchAppMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Clone@SuiteMessage@api@vulcan@adobe@@UBEPAV1234@XZ
?Create@EndPoint@api@vulcan@adobe@@SA?AV1234@PBD@Z
?Create@IVulcanMessageDispatcher@api@vulcan@adobe@@SAPAV1234@PBDPAVIVulcanMessageListener@234@1@Z
?CreateMessage@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?CreateMessageByType@MessageUtil@api@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?DESTINATION_UNREACHABLE_ERROR@ErrorMessage@api@vulcan@adobe@@2QBDB
?GetAppId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?GetAppId@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetAppIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetAppIdSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ
?GetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetCmdLineSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ
?GetData@ErrorMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@GetAppPathMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@HostMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@IsAppInstalledMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@IsAppRunningMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@LaunchAppMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetData@SuiteMessage@api@vulcan@adobe@@UBEXPAD@Z
?GetDataSize@ErrorMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@GetAppPathMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@HostMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@IsAppInstalledMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@IsAppRunningMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@LaunchAppMessage@api@vulcan@adobe@@UBEIXZ
?GetDataSize@SuiteMessage@api@vulcan@adobe@@UBEIXZ
?GetDestinationCount@SuiteMessage@api@vulcan@adobe@@QBEIXZ
?GetDestinations@SuiteMessage@api@vulcan@adobe@@QBEXPAVEndPoint@234@@Z
?GetError@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetErrorSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ
?GetFault@ErrorMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetFaultSize@ErrorMessage@api@vulcan@adobe@@QBEIXZ
?GetFocus@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ
?GetId@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?GetIdSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetPayload@HostMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetPayload@SuiteMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetPayloadSize@HostMessage@api@vulcan@adobe@@QBEIXZ
?GetPayloadSize@SuiteMessage@api@vulcan@adobe@@QBEIXZ
?GetResult@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetResult@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEXIPAD@Z
?GetResult@IsAppInstalledMessage@api@vulcan@adobe@@QBE_NXZ
?GetResult@IsAppRunningMessage@api@vulcan@adobe@@QBE_NXZ
?GetResult@LaunchAppMessage@api@vulcan@adobe@@QBE_NXZ
?GetResultCount@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEIXZ
?GetResultSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ
?GetResultSize@GetTargetSpecifiersMessage@api@vulcan@adobe@@QBEII@Z
?GetScope@VulcanMessage@api@vulcan@adobe@@QBE?AW4MessageScope@234@XZ
?GetSource@SuiteMessage@api@vulcan@adobe@@QBE?AVEndPoint@234@XZ
?GetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTargetSpecifierSize@GetAppPathMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@IsAppInstalledMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@IsAppRunningMessage@api@vulcan@adobe@@QBEIXZ
?GetTargetSpecifierSize@LaunchAppMessage@api@vulcan@adobe@@QBEIXZ
?GetType@VulcanMessage@api@vulcan@adobe@@QBEXPAD@Z
?GetTypeSize@VulcanMessage@api@vulcan@adobe@@QBEIXZ
?GetXmlSize@EndPoint@api@vulcan@adobe@@QBEIXZ
?GetXmlSize@VulcanMessage@api@vulcan@adobe@@UBEIXZ
?INVALID_ENDPOINT@EndPoint@api@vulcan@adobe@@2V1234@B
?IsHostMessage@HostMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z
?IsSuiteMessage@SuiteMessage@api@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z
?SetAppId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z
?SetAppId@MessageUtil@api@vulcan@adobe@@SAXAAVVulcanMessage@234@PBD@Z
?SetCmdLine@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetData@ErrorMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@GetAppPathMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@GetTargetSpecifiersMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@HostMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@IsAppInstalledMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@IsAppRunningMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@LaunchAppMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetData@SuiteMessage@api@vulcan@adobe@@UAEXPBD@Z
?SetDestination@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?SetDestinations@SuiteMessage@api@vulcan@adobe@@QAEXPBVEndPoint@234@I@Z
?SetFocus@LaunchAppMessage@api@vulcan@adobe@@QAEX_N@Z
?SetId@EndPoint@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@HostMessage@api@vulcan@adobe@@QAEXPBDI@Z
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetPayload@SuiteMessage@api@vulcan@adobe@@QAEXPBDI@Z
?SetSource@SuiteMessage@api@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?SetTargetSpecifier@GetAppPathMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@IsAppInstalledMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@IsAppRunningMessage@api@vulcan@adobe@@QAEXPBD@Z
?SetTargetSpecifier@LaunchAppMessage@api@vulcan@adobe@@QAEXPBD@Z
?TYPE@ErrorMessage@api@vulcan@adobe@@2QBDB
?TYPE@GetAppPathMessage@api@vulcan@adobe@@2QBDB
?TYPE@GetTargetSpecifiersMessage@api@vulcan@adobe@@2QBDB
?TYPE@IsAppInstalledMessage@api@vulcan@adobe@@2QBDB
?TYPE@IsAppRunningMessage@api@vulcan@adobe@@2QBDB
?TYPE@LaunchAppMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@HostMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@SuiteMessage@api@vulcan@adobe@@2QBDB
?TYPE_PREFIX@VulcanMessage@api@vulcan@adobe@@2QBDB
?ToXml@EndPoint@api@vulcan@adobe@@QBEXPAD@Z
?ToXml@VulcanMessage@api@vulcan@adobe@@UBEXPAD@Z
Name
.text
Size
223KB
Virtual Size
222KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
50KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=51, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=115, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=92, id=1, productName=Unmarked objects,
count=17, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
VulcanMessage5.dll
- IMPHASH 9612e1d064f9d31b91613782c931ed6c
- SHA256 00ab230f21c61660910787ef8334eeaff7646e0d311bbbb47ac169b6065f2c9b
- MD5 c35e1e73dd0f4fccf5f6d628d57bf2b4
- SHA1 d3771e3b9962b771e925b359b2d8e6c20452e37e
- SHA512 c459f985687b9d723eb0a447f2818a2990a2dc97e79f24bf5cd9d65ae4cceecf6f87f4c35663392603f29b57c370056b532acd3565afa19283f29d840850f09f
- SSDEEP 24576:/Adav2wLCWNLVcquoQeFl0YXEUMmRlp2gNPlDGAGm0ZNAPLTsOz:/bLtxVcqQeFl0YXEUMmRlp2gllDV0eTl
- TLSH T18D257D603D89C132CBAE11714D7CFA6A14ADA5200F3445CFA7CC2A7EDE785D26B3265B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
75:87:a0:d8:1a:51:0a:04:65:7c:d9:40:c7:65:83:9c:25:01:68:1a:1c:44:a6:e8:f4:da:af:f5:c2:e6:8e:28
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 28, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
294084
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
VulcanMessage5.pdb
ws2_32
freeaddrinfo
getaddrinfo
WSAGetLastError
WSACleanup
WSAStartup
socket
shutdown
setsockopt
send
select
recv
listen
htons
getsockopt
getsockname
getpeername
ioctlsocket
connect
closesocket
bind
accept
ntohs
ntohl
htonl
kernel32
FreeEnvironmentStringsW
GetCommandLineW
GetEnvironmentVariableW
GetCurrentProcessId
RtlCaptureStackBackTrace
GetLocalTime
VerSetConditionMask
GetEnvironmentStringsW
GetStdHandle
SetStdHandle
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFullPathNameW
LockFileEx
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
UnlockFile
WriteFile
GetTempPathW
DuplicateHandle
GetHandleInformation
SetHandleInformation
CreatePipe
ConnectNamedPipe
DisconnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetOverlappedResult
DeviceIoControl
SetEvent
ResetEvent
ReleaseMutex
OpenMutexW
CreateEventW
SwitchToThread
GetCurrentProcess
GetExitCodeProcess
SetThreadPriority
GetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
CreateProcessW
GlobalMemoryStatusEx
VirtualAlloc
VirtualFree
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
PulseEvent
WaitForMultipleObjects
GetNamedPipeInfo
CreateMailslotW
SetDllDirectoryW
CopyFileW
MoveFileExW
CreateHardLinkW
GetComputerNameW
VerifyVersionInfoW
RaiseException
Sleep
GetCurrentThread
GetCurrentThreadId
LocalAlloc
LocalReAlloc
LocalFree
FormatMessageW
LCMapStringW
SetFilePointer
GetSystemTimeAsFileTime
TerminateProcess
OpenProcess
GlobalAlloc
GlobalFree
GetConsoleWindow
HeapFree
HeapReAlloc
HeapAlloc
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
OpenSemaphoreW
GetLastError
WaitForSingleObject
CreateMutexW
ReleaseSemaphore
GetFullPathNameA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetACP
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
SetEnvironmentVariableA
GetProcessHeap
SetConsoleCtrlHandler
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
HeapSize
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
ReadConsoleW
OpenEventW
ExitProcess
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
WaitForSingleObjectEx
GetModuleHandleW
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
TlsFree
GetTickCount
CompareStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetDriveTypeW
GetFileType
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
user32
GetWindowThreadProcessId
EnumWindows
GetShellWindow
advapi32
SystemFunction036
CreateProcessWithTokenW
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
DuplicateTokenEx
AllocateAndInitializeSid
AdjustTokenPrivileges
OpenProcessToken
SetSecurityInfo
GetSecurityInfo
SetEntriesInAclW
CreateWellKnownSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
StartServiceW
StartServiceCtrlDispatcherW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfigW
RegSetValueExW
RegNotifyChangeKeyValue
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
GetUserNameW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
ShellExecuteExW
SHCreateDirectoryExW
SHFileOperationW
CommandLineToArgvW
??0EndPoint@api5@vulcan@adobe@@QAE@ABV0123@@Z
??0EndPoint@api5@vulcan@adobe@@QAE@XZ
??0ErrorMessage@api5@vulcan@adobe@@QAE@ABV0123@@Z
??0ErrorMessage@api5@vulcan@adobe@@QAE@XZ
??0GetEndPointsMessage@impl@vulcan@adobe@@QAE@ABV0123@@Z
??0GetEndPointsMessage@impl@vulcan@adobe@@QAE@XZ
??0IVulcanMessageDispatcher@api5@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageDispatcher@api5@vulcan@adobe@@QAE@XZ
??0IVulcanMessageListener@api5@vulcan@adobe@@QAE@$$QAV0123@@Z
??0IVulcanMessageListener@api5@vulcan@adobe@@QAE@ABV0123@@Z
??0IVulcanMessageListener@api5@vulcan@adobe@@QAE@XZ
??0SuiteMessage@api5@vulcan@adobe@@QAE@ABV0123@@Z
??0SuiteMessage@api5@vulcan@adobe@@QAE@PBD@Z
??0VulcanMessage@api5@vulcan@adobe@@QAE@ABV0123@@Z
??0VulcanMessage@api5@vulcan@adobe@@QAE@XZ
??1EndPoint@api5@vulcan@adobe@@UAE@XZ
??1ErrorMessage@api5@vulcan@adobe@@UAE@XZ
??1GetEndPointsMessage@impl@vulcan@adobe@@UAE@XZ
??1IVulcanMessageDispatcher@api5@vulcan@adobe@@UAE@XZ
??1SuiteMessage@api5@vulcan@adobe@@UAE@XZ
??1VulcanMessage@api5@vulcan@adobe@@UAE@XZ
??4EndPoint@api5@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4ErrorMessage@api5@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4GetEndPointsMessage@impl@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageDispatcher@api5@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4IVulcanMessageListener@api5@vulcan@adobe@@QAEAAV0123@$$QAV0123@@Z
??4IVulcanMessageListener@api5@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4MessageUtil@api5@vulcan@adobe@@QAEAAV0123@$$QAV0123@@Z
??4MessageUtil@api5@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4SuiteMessage@api5@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??4VulcanMessage@api5@vulcan@adobe@@QAEAAV0123@ABV0123@@Z
??8EndPoint@api5@vulcan@adobe@@QBE_NABV0123@@Z
??9EndPoint@api5@vulcan@adobe@@QBE_NABV0123@@Z
??_7EndPoint@api5@vulcan@adobe@@6B@
??_7ErrorMessage@api5@vulcan@adobe@@6B@
??_7GetEndPointsMessage@impl@vulcan@adobe@@6B@
??_7IVulcanMessageDispatcher@api5@vulcan@adobe@@6B@
??_7IVulcanMessageListener@api5@vulcan@adobe@@6B@
??_7SuiteMessage@api5@vulcan@adobe@@6B@
??_7VulcanMessage@api5@vulcan@adobe@@6B@
?Clone@ErrorMessage@api5@vulcan@adobe@@UBEPAV1234@XZ
?Clone@GetEndPointsMessage@impl@vulcan@adobe@@UBEPAV1234@XZ
?Clone@SuiteMessage@api5@vulcan@adobe@@UBEPAV1234@XZ
?Create@EndPoint@api5@vulcan@adobe@@SA?AV1234@PBD@Z
?CreateMessage@MessageUtil@api5@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?CreateMessageByType@MessageUtil@api5@vulcan@adobe@@SAPAVVulcanMessage@234@PBD@Z
?DESTINATION_UNREACHABLE_ERROR@ErrorMessage@api5@vulcan@adobe@@2QBDB
?GetAppId@EndPoint@api5@vulcan@adobe@@QBEXPAD@Z
?GetAppId@VulcanMessage@api5@vulcan@adobe@@QBEXPAD@Z
?GetAppIdSize@EndPoint@api5@vulcan@adobe@@QBEIXZ
?GetAppIdSize@VulcanMessage@api5@vulcan@adobe@@QBEIXZ
?GetAppVersion@EndPoint@api5@vulcan@adobe@@QBEXPAD@Z
?GetAppVersion@VulcanMessage@api5@vulcan@adobe@@QBEXPAD@Z
?GetAppVersionSize@EndPoint@api5@vulcan@adobe@@QBEIXZ
?GetAppVersionSize@VulcanMessage@api5@vulcan@adobe@@QBEIXZ
?GetConfig@IVulcanMessageDispatcher@api5@vulcan@adobe@@SA?AW4VulcanMessageErrorCode@@PAPAD0@Z
?GetData@ErrorMessage@api5@vulcan@adobe@@UBEXPAD@Z
?GetData@GetEndPointsMessage@impl@vulcan@adobe@@UBEXPAD@Z
?GetData@SuiteMessage@api5@vulcan@adobe@@UBEXPAD@Z
?GetDataSize@ErrorMessage@api5@vulcan@adobe@@UBEIXZ
?GetDataSize@GetEndPointsMessage@impl@vulcan@adobe@@UBEIXZ
?GetDataSize@SuiteMessage@api5@vulcan@adobe@@UBEIXZ
?GetDestinationCount@SuiteMessage@api5@vulcan@adobe@@QBEIXZ
?GetDestinations@SuiteMessage@api5@vulcan@adobe@@QBEXPAVEndPoint@234@@Z
?GetError@ErrorMessage@api5@vulcan@adobe@@QBEXPAD@Z
?GetErrorSize@ErrorMessage@api5@vulcan@adobe@@QBEIXZ
?GetFault@ErrorMessage@api5@vulcan@adobe@@QBEXPAD@Z
?GetFaultSize@ErrorMessage@api5@vulcan@adobe@@QBEIXZ
?GetId@EndPoint@api5@vulcan@adobe@@QBEXPAD@Z
?GetIdSize@EndPoint@api5@vulcan@adobe@@QBEIXZ
?GetInstance@IVulcanMessageDispatcher@api5@vulcan@adobe@@SA?AW4VulcanMessageErrorCode@@PAPAV1234@@Z
?GetPayload@SuiteMessage@api5@vulcan@adobe@@QBEXPAD@Z
?GetPayloadSize@SuiteMessage@api5@vulcan@adobe@@QBEIXZ
?GetResult@GetEndPointsMessage@impl@vulcan@adobe@@QBEXPAVEndPoint@api5@34@@Z
?GetResultCount@GetEndPointsMessage@impl@vulcan@adobe@@QBEIXZ
?GetScope@VulcanMessage@api5@vulcan@adobe@@QBE?AW4MessageScope@234@XZ
?GetSource@SuiteMessage@api5@vulcan@adobe@@QBE?AVEndPoint@234@XZ
?GetSourceEndPoint@GetEndPointsMessage@impl@vulcan@adobe@@QBE?AVEndPoint@api5@34@XZ
?GetType@VulcanMessage@api5@vulcan@adobe@@QBEXPAD@Z
?GetTypeSize@VulcanMessage@api5@vulcan@adobe@@QBEIXZ
?GetXmlSize@EndPoint@api5@vulcan@adobe@@QBEIXZ
?GetXmlSize@VulcanMessage@api5@vulcan@adobe@@UBEIXZ
?INVALID_ENDPOINT@EndPoint@api5@vulcan@adobe@@2V1234@B
?IsRefreshEndPoints@GetEndPointsMessage@impl@vulcan@adobe@@QAE_NXZ
?IsSuiteMessage@SuiteMessage@api5@vulcan@adobe@@SA_NABVVulcanMessage@234@@Z
?ReleaseInstance@IVulcanMessageDispatcher@api5@vulcan@adobe@@SAXXZ
?SetAppId@EndPoint@api5@vulcan@adobe@@QAEXPBD@Z
?SetAppId@MessageUtil@api5@vulcan@adobe@@SAXAAVVulcanMessage@234@PBD@Z
?SetAppVersion@EndPoint@api5@vulcan@adobe@@QAEXPBD@Z
?SetAppVersion@MessageUtil@api5@vulcan@adobe@@SAXAAVVulcanMessage@234@PBD@Z
?SetConfig@IVulcanMessageDispatcher@api5@vulcan@adobe@@SA?AW4VulcanMessageErrorCode@@PBD0@Z
?SetData@ErrorMessage@api5@vulcan@adobe@@UAEXPBD@Z
?SetData@GetEndPointsMessage@impl@vulcan@adobe@@UAEXPBD@Z
?SetData@SuiteMessage@api5@vulcan@adobe@@UAEXPBD@Z
?SetDestination@SuiteMessage@api5@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?SetDestinations@SuiteMessage@api5@vulcan@adobe@@QAEXPBVEndPoint@234@I@Z
?SetId@EndPoint@api5@vulcan@adobe@@QAEXPBD@Z
?SetPayload@SuiteMessage@api5@vulcan@adobe@@QAEXPBD@Z
?SetPayload@SuiteMessage@api5@vulcan@adobe@@QAEXPBDI@Z
?SetRefreshEndPoints@GetEndPointsMessage@impl@vulcan@adobe@@QAEXXZ
?SetSource@SuiteMessage@api5@vulcan@adobe@@QAEXABVEndPoint@234@@Z
?TYPE@ErrorMessage@api5@vulcan@adobe@@2QBDB
?TYPE@GetEndPointsMessage@impl@vulcan@adobe@@2QBDB
?TYPE_PREFIX@SuiteMessage@api5@vulcan@adobe@@2QBDB
?TYPE_PREFIX@VulcanMessage@api5@vulcan@adobe@@2QBDB
?ToXml@EndPoint@api5@vulcan@adobe@@QBEXPAD@Z
?ToXml@VulcanMessage@api5@vulcan@adobe@@UBEXPAD@Z
Name
.text
Size
726KB
Virtual Size
726KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
154KB
Virtual Size
154KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=241, version=40116,
count=153, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=23907,
count=55, id=261, version=23907,
count=33, id=260, version=23907,
count=1, id=208, version=65501,
count=11, id=203, version=65501,
count=234, id=1, productName=Unmarked objects,
count=70, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=19, id=264, version=23918,
count=1, id=256, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
adobe_licensing_helper.exe
- IMPHASH 31ca12071143ca125a712153a5e9e000
- SHA256 689dfd5da48edeb9cb3e6b40b12e6ecbb10ceb7eedc240fd512d80f8beb1bc0c
- MD5 24bf65722d00ef2b91359a21372c8676
- SHA1 c8323fe0d0f6fe01b43794449131eb6f6e82f4a8
- SHA512 21c487dadfcdac5cd41c61b3f83f7f5d24c0dab8153fe77b9b4d24777fdc9decaa2aecf5d66de043ec6b7263502375cd418d67fcad8726a16c143c0c3f2c09aa
- SSDEEP 49152:w5D8lMG6PrAw36vjwNpQjvxynanf7NAhwgrm9EMK/23qdDFKLqGrxcfn7V3ZRld1:r90lZRbM8D5D
- TLSH T195C57D753218C9A7E52154B569687B4A402CF8B4D7A208CFF3C03D6D72789D3A93B72B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
27:26:d7:36:0a:20:fe:7f:cb:4a:c8:3b:9c:be:25:78:5a:f7:d1:0c:37:98:ab:65:04:ff:ae:9b:07:1e:83:6a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 28, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
1185273
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\builds\NGLU\1.0\source\nglu\public\nglu-bin\Win32\Release_x86\adobe_licensing_helper.pdb
winhttp
WinHttpCrackUrl
WinHttpConnect
WinHttpSetTimeouts
WinHttpSetCredentials
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
kernel32
GetCurrentThreadId
FindFirstFileW
FindNextFileW
GetFileSizeEx
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
GetFullPathNameW
MultiByteToWideChar
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryW
GetProcAddress
FreeLibrary
FormatMessageW
LocalFree
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentProcess
DeviceIoControl
GetTempPathW
GetVersionExW
GetComputerNameExW
FileTimeToSystemTime
GetNativeSystemInfo
RaiseException
GetModuleHandleW
GetLocalTime
GetTimeFormatW
OpenMutexW
CloseHandle
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
SetStdHandle
ReadConsoleW
SetFilePointerEx
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
GetACP
GetCommandLineW
GetCommandLineA
WriteFile
GetStdHandle
ExitProcess
GetModuleHandleExW
HeapReAlloc
GetTimeZoneInformation
ReadFile
GetFileType
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEndOfFile
SetEnvironmentVariableW
WriteConsoleW
HeapSize
GetDateFormatW
InterlockedPopEntrySList
ReleaseSemaphore
GetStringTypeW
TryEnterCriticalSection
EncodePointer
DecodePointer
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentThread
QueryPerformanceCounter
IsProcessorFeaturePresent
QueueUserWorkItem
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
VirtualAlloc
VirtualFree
VirtualProtect
advapi32
CredFree
CredEnumerateW
CredReadW
CredWriteW
GetUserNameW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyExW
RegCloseKey
CredDeleteW
shell32
SHGetKnownFolderPath
SHCreateDirectoryExW
ole32
CoInitialize
CoTaskMemFree
CoCreateGuid
shlwapi
UrlEscapeW
PathFindFileNameW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW
PathFileExistsW
PathAddExtensionW
PathIsFileSpecW
PathAppendW
PathIsDirectoryW
bcrypt
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptVerifySignature
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptHashData
BCryptDecrypt
BCryptDestroyKey
BCryptEncrypt
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptGetProperty
crypt32
CertCreateCertificateContext
CertFreeCertificateContext
CryptHashCertificate2
CryptImportPublicKeyInfoEx2
CertVerifySubjectCertificateContext
CertAddCertificateContextToStore
CertCloseStore
CertOpenStore
CryptStringToBinaryW
CryptUnprotectData
CryptProtectData
CertFindCertificateInStore
secur32
GetUserNameExW
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
533KB
Virtual Size
532KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
22KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
178KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=241, version=40116,
count=170, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=123, id=261, version=24123,
count=38, id=260, version=24123,
count=19, id=203, version=65501,
count=231, id=1, productName=Unmarked objects,
count=141, id=265, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
adobe_oobelib.dll
- IMPHASH 26768dd142f6638c6ddfe8b87168ade0
- SHA256 042098b75b361ed574a09887d523225fb95bb1ec92d843d1c068a75ea2a47e41
- MD5 047417a4032366f6b8277d80396422a5
- SHA1 4b600fc02b80d54aa6e84664d424e89d3ee19963
- SHA512 8fc35b0a0badadd074508f91b28ee643f6942cac7f0645d10c1702443acdc504e2c9e64d5d2a5e942dc97fe613fc0f958663ace977ecc06bfcd6ccf6554b83ce
- SSDEEP 49152:zkxmmZU9/G3NzgFLzskklUNseIRwGvnnodtj9ArkpKXzK+CvLoLQpEp:wxmqO/GJgFL4kkgseIRpvnnodN7sQ+
- TLSH T161F59F21B642C132E5DE01B0A57AAB7B492CA9B9133445E7F3D02E6E29705D33B3771B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
83:46:82:d2:34:54:5a:40:4f:fd:c8:e9:88:3a:b8:cb:d6:8f:d5:17:80:15:88:b7:40:de:60:b9:62:ce:ed:cb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Mar 17, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
1
Major OS version
5
Entry point
2535553
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
adobe_oobelib.pdb
winhttp
WinHttpOpen
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpConnect
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCrackUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSetCredentials
WinHttpSendRequest
WinHttpAddRequestHeaders
iphlpapi
GetIfTable
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
shlwapi
PathIsDirectoryW
PathRemoveBackslashW
PathStripPathW
PathFileExistsW
PathFindFileNameW
PathAddExtensionW
PathIsFileSpecW
PathAppendW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW
kernel32
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
Sleep
LockFileEx
UnlockFileEx
GetFileSize
WriteFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
CloseHandle
CreateSemaphoreW
LoadLibraryW
GetModuleFileNameA
CreateProcessW
SetEnvironmentVariableA
CreateFileW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
SwitchToThread
CreateThread
ResumeThread
GetModuleFileNameW
WideCharToMultiByte
ReadFile
GetSystemTime
SystemTimeToFileTime
SetFileAttributesW
GetFileAttributesW
DeleteFileW
GlobalFree
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
GetComputerNameExW
InterlockedIncrement
InterlockedDecrement
SetEvent
OpenEventW
GetVersionExW
WaitForMultipleObjects
CreateEventW
GetTimeZoneInformation
OutputDebugStringA
GetTempPathW
GetEnvironmentVariableA
QueryPerformanceFrequency
QueryPerformanceCounter
TryEnterCriticalSection
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetCurrentThread
FindClose
FindFirstFileW
FindNextFileW
GetLocalTime
GetTimeFormatW
GetDateFormatW
CreateDirectoryW
TzSpecificLocalTimeToSystemTime
CreateMutexW
ReleaseMutex
OpenMutexW
LocalAlloc
GetUserDefaultLangID
GetUserDefaultUILanguage
GetModuleHandleW
ResetEvent
InitializeCriticalSection
Process32NextW
Process32FirstW
AreFileApisANSI
HeapCreate
GetFullPathNameW
InterlockedCompareExchange
GetDiskFreeSpaceW
LockFile
GetFullPathNameA
UnmapViewOfFile
HeapValidate
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
GetSystemTimeAsFileTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
GetTickCount
GetStdHandle
GetFileType
GetModuleHandleA
GlobalMemoryStatus
WriteConsoleW
lstrlenW
CopyFileW
GetACP
CreateSymbolicLinkW
SetLastError
TerminateProcess
MoveFileExW
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStartupInfoW
GetLastError
LocalFree
GetProcAddress
FreeLibrary
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
SetConsoleCtrlHandler
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleCP
ReadConsoleW
CreateToolhelp32Snapshot
SetFilePointerEx
GetCurrentDirectoryW
SetStdHandle
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
SetFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetFileSizeEx
FlushConsoleInputBuffer
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
user32
GetProcessWindowStation
MessageBoxA
GetUserObjectInformationW
wsprintfW
advapi32
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegDeleteKeyW
SetSecurityInfo
SetNamedSecurityInfoW
GetNamedSecurityInfoW
CreateWellKnownSid
EqualSid
GetTokenInformation
OpenThreadToken
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
GetUserNameW
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
shell32
SHCreateDirectoryExW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
SHGetKnownFolderPath
ole32
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoInitialize
CoTaskMemFree
oleaut32
VariantClear
SysFreeString
SysAllocString
SysStringLen
SysAllocStringByteLen
Adobe_OOBELib_Activate
Adobe_OOBELib_ActivateForLEIDs
Adobe_OOBELib_BackDoorUpgradeCheck
Adobe_OOBELib_CalculateVC
Adobe_OOBELib_CheckForUpgradeOnline
Adobe_OOBELib_CheckSubscriptionMode
Adobe_OOBELib_CheckSubscriptionValidity
Adobe_OOBELib_CheckSubscriptionValidityOnline
Adobe_OOBELib_CheckWFType
Adobe_OOBELib_CheckforUpgrade
Adobe_OOBELib_CleanUpCachePCD
Adobe_OOBELib_CreateRef
Adobe_OOBELib_Deactivate
Adobe_OOBELib_DeactivateLicense
Adobe_OOBELib_DeactivateLicenseForSerial
Adobe_OOBELib_DeactivateLicensesForUser
Adobe_OOBELib_DisAssociateAll
Adobe_OOBELib_EncryptDecryptSerial
Adobe_OOBELib_EnumerateKeys
Adobe_OOBELib_Generate_OffLineExcpType1_ReqCode
Adobe_OOBELib_GetAdobeId
Adobe_OOBELib_GetChallengeString_UpgradeCheck
Adobe_OOBELib_GetCredentialsForProxy
Adobe_OOBELib_GetCurrentLicenseState
Adobe_OOBELib_GetDetailedActiveLicenseInfo
Adobe_OOBELib_GetDetailedLicenseStatus
Adobe_OOBELib_GetDetailedLicenseStatusEx
Adobe_OOBELib_GetDetailedLicenseStatusExForLEIDs
Adobe_OOBELib_GetEntitlement
Adobe_OOBELib_GetEntitlementsForLEIDS
Adobe_OOBELib_GetLicenseStatus
Adobe_OOBELib_GetLicenseStatusEx
Adobe_OOBELib_GetPackagePoolDetailsForPool
Adobe_OOBELib_GetPackagePoolsForAdminForOrg
Adobe_OOBELib_GetRefID
Adobe_OOBELib_GetSerialInfo
Adobe_OOBELib_GetServiceClaimData
Adobe_OOBELib_GetValueforKeyInSubDomain
Adobe_OOBELib_Get_LegacySeatID
Adobe_OOBELib_Get_OffLineExcpType1_ReqCode
Adobe_OOBELib_Get_ProductLine
Adobe_OOBELib_Get_SeatID
Adobe_OOBELib_Getversion
Adobe_OOBELib_ISOTaggingAtInstall
Adobe_OOBELib_IsLicenseAgreementAccepted
Adobe_OOBELib_LaunchPurchaseWorkFlow
Adobe_OOBELib_LoadActivationGraceLicense
Adobe_OOBELib_LoadDBCSLicenseAndActivate
Adobe_OOBELib_LoadOfflineGraceLicense
Adobe_OOBELib_LoadOnlineTrial
Adobe_OOBELib_LoadTrial
Adobe_OOBELib_ProcessExceptionFile
Adobe_OOBELib_Process_file
Adobe_OOBELib_ProtectedContentCheck
Adobe_OOBELib_QueryLicenses
Adobe_OOBELib_QueryLicensesForUser
Adobe_OOBELib_Record_EulaOnline
Adobe_OOBELib_ReducedTrialSLConfigDownload
Adobe_OOBELib_ReleaseRef
Adobe_OOBELib_RememberAdobeID
Adobe_OOBELib_RemoveKeyInSubDomainInCache
Adobe_OOBELib_RemoveLastLoggedInUser
Adobe_OOBELib_Remove_payload
Adobe_OOBELib_RetrieveLEIDForSerial
Adobe_OOBELib_Retrieve_SerialNumber
Adobe_OOBELib_Retrieve_SerialNumberEx
Adobe_OOBELib_Retryactivation
Adobe_OOBELib_SaveAdobeId
Adobe_OOBELib_SetAdobeId
Adobe_OOBELib_SetAdobeIdExtProfile
Adobe_OOBELib_SetAppXMLData
Adobe_OOBELib_SetCallerID
Adobe_OOBELib_SetClaimStatus
Adobe_OOBELib_SetClaimStatusEx
Adobe_OOBELib_SetCredentialsForProxy
Adobe_OOBELib_SetLEID
Adobe_OOBELib_SetLicenseAgreementInformation
Adobe_OOBELib_SetSerialTypeForSerial
Adobe_OOBELib_SetUniversalCookie
Adobe_OOBELib_SetValueforKeyInSubDomainInCache
Adobe_OOBELib_Set_Eula
Adobe_OOBELib_Set_EulaOnline
Adobe_OOBELib_Set_InstallLocale
Adobe_OOBELib_Set_serialnumber
Adobe_OOBELib_SuppressRegSerialNag
Adobe_OOBELib_SuppressRegistrationNag
Adobe_OOBELib_Suppress_Eula
Adobe_OOBELib_Suppress_Registration
Adobe_OOBELib_UnregisterSerials
Adobe_OOBELib_UpdateLastLoggedInUser
Adobe_OOBELib_UpdateUserSpecificIdentity
Adobe_OOBELib_UpdateUserSpecificLicensing
Adobe_OOBELib_UpgradeCheck
Adobe_OOBELib_UpgradeDoneAtInstallTime
Adobe_OOBELib_ValidateSerialOnline
Adobe_OOBELib_Validate_SerialNumber
Adobe_OOBELib_Verify_OffLineExcpType1_ServerResponseCode
GetAsnVersion
IAL_ActivateLicense
IAL_CheckSubscription
IAL_CloseSession
IAL_CreateSession
IAL_DeactivateLicense
IAL_GetAULData
IAL_GetEntitledSerialData
IAL_GetEntitlementsForLEIDS
IAL_GetLEIDForSerial
IAL_GetPackagePoolData
IAL_GetPackagePools
IAL_GetSLConfigData
IAL_GetType2aOfflineException
IAL_GetVersion
IAL_SendAppUsageData
IAL_SendEnrolTrialRequest
IAL_SetCaller
IAL_SetEULAStatus
IAL_SetLicensingLEID
IAL_SetLoggingMethod
IAL_SetProxyDetails
IAL_ValidateSerial
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
Name
.text
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
614KB
Virtual Size
614KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
129KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=241, version=40116,
count=206, id=243, version=40116,
count=30, id=242, version=40116,
count=2, id=261, version=23013,
count=2, id=199, version=41118,
count=26, id=259, version=24123,
count=34, id=260, version=24123,
count=2, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=61, id=261, version=24123,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=303, id=1, productName=Unmarked objects,
count=324, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=121, id=265, version=24215,
count=5, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=134, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
adobe_upgrade.dll
- IMPHASH 73cafe1c9aec216b9d6bcc04fd6c7570
- SHA256 57cc14fdaaed0e08d2c8c0e6b094668e5b0c9f42d56e436b2b36fee659aa7184
- MD5 2a64c2afe1bcd1f9ff385d836ebb574a
- SHA1 2b6736bb53f2125e5c1b4ab65a3d47e2ea323651
- SHA512 f336c9a0ff2985eae7410277dddbb20df0f765260971c22c2d36ce0a0f2a885263d40e59b7a6e9537873381b2821f02b901412c6a2663a743c361d284215a82c
- SSDEEP 49152:Bsbv9p3nSvRuGUdbSwAtx9F1rNrvCCS6ZlJxvsQcsReTqgcG4wE/wf6KYejgGoVe:Ba9pvdbSVTJxvCCS6jpt/K6KYrc
- TLSH T10806AE21BB82C132EDDE01B555BDEBBF482DA6040B7449D3D3D8196E9D341E22F3B64A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
ec:ef:df:67:f7:3a:0e:75:f1:44:fc:9d:0f:3d:f2:0b:1e:31:e4:f7:bc:13:62:6d:a8:28:8c:80:73:24:08:73
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Mar 17, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
2530126
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
adobe_upgrade.pdb
winhttp
WinHttpCrackUrl
WinHttpConnect
WinHttpSetStatusCallback
WinHttpSetCredentials
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpReceiveResponse
WinHttpOpen
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryDataAvailable
setupapi
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
iphlpapi
GetIfTable
shlwapi
PathStripPathW
PathRemoveBackslashW
PathRemoveBackslashA
SHDeleteEmptyKeyA
SHDeleteKeyA
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
PathRemoveExtensionW
PathAddExtensionW
PathRenameExtensionW
PathIsDirectoryW
PathAppendW
PathIsFileSpecW
kernel32
GetCurrentProcess
GetLastError
CloseHandle
lstrcmpA
lstrcpyA
lstrcatA
lstrlenA
CreateProcessA
GetStdHandle
GetFileType
WriteFile
GetCurrentThreadId
GetModuleHandleA
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus
FlushConsoleInputBuffer
QueryPerformanceFrequency
GetThreadTimes
GetCurrentThread
WideCharToMultiByte
OutputDebugStringA
LoadLibraryW
GetModuleFileNameW
GetTempPathW
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
CreateDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
CreateSemaphoreW
SetFilePointer
CreateFileW
ReadFile
SetEndOfFile
UnlockFileEx
LocalAlloc
SetFileAttributesW
LocalFree
LockFileEx
GetFileSize
FlushFileBuffers
GetFileSizeEx
GetLocalTime
GetTimeFormatW
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
Sleep
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersionExW
GetModuleHandleW
WaitForMultipleObjects
GetConsoleMode
SetEvent
GlobalFree
ResetEvent
HeapFree
LoadLibraryA
HeapSize
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
HeapDestroy
GetProcessHeap
AreFileApisANSI
HeapCreate
GetFullPathNameW
InterlockedCompareExchange
GetDiskFreeSpaceW
LockFile
GetFullPathNameA
UnmapViewOfFile
HeapValidate
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
DeleteFileW
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
WriteConsoleW
GetComputerNameExW
OpenSemaphoreW
ResumeThread
CreateThread
SwitchToThread
lstrcmpW
lstrlenW
CopyFileW
CopyFileExW
GetVolumeInformationW
GetACP
GetCurrentDirectoryA
SetCurrentDirectoryW
SetCurrentDirectoryA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetDriveTypeW
LoadLibraryExW
InterlockedFlushSList
GetProcAddress
FreeLibrary
GetEnvironmentVariableA
GetCurrentDirectoryW
ExitProcess
GetModuleHandleExW
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
SetConsoleMode
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
SetFileTime
TzSpecificLocalTimeToSystemTime
MoveFileExW
GetTimeZoneInformation
ExitThread
SetConsoleCtrlHandler
FreeLibraryAndExitThread
GetModuleFileNameA
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleCP
SetFilePointerEx
ReadConsoleW
SetStdHandle
HeapQueryInformation
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateEventW
MapViewOfFile
InterlockedPushEntrySList
RtlUnwind
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
EncodePointer
GetStringTypeW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
user32
GetUserObjectInformationW
MessageBoxA
GetDC
ReleaseDC
wsprintfW
UnregisterClassW
GetProcessWindowStation
gdi32
GetObjectA
GetDIBits
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
advapi32
GetNamedSecurityInfoW
LookupPrivilegeValueW
GetUserNameW
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
InitializeSecurityDescriptor
SetSecurityInfo
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegUnLoadKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegLoadKeyA
RegFlushKey
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
SetNamedSecurityInfoW
shell32
SHGetFolderPathW
SHCreateDirectoryExW
SHGetFolderLocation
SHGetPathFromIDListW
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoTaskMemFree
oleaut32
SetErrorInfo
CreateErrorInfo
SysFreeString
SysAllocString
VariantChangeType
VariantInit
GetErrorInfo
VariantClear
SysAllocStringByteLen
SysStringLen
AULAcceptsChallengeResponse
AULCloseSession
AULGetChallengeString
AULGetQualifyingSerialNumbers
AULGetUpgradeStatus
AULIsQualifyingSerialNumberForAnyProduct
AULIsQualifyingSerialNumberForProduct
AULNeedsUpgradeCheck
AULNextProduct
AULOpenSession
AULSetQualifyingSerialNumbers
AULSetUpgradeScenario
GetAsnVersion
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
587KB
Virtual Size
586KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=241, version=40116,
count=205, id=243, version=40116,
count=30, id=242, version=40116,
count=2, id=261, version=23013,
count=26, id=259, version=24123,
count=34, id=260, version=24123,
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=13, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=63, id=261, version=24123,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=297, id=1, productName=Unmarked objects,
count=324, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=120, id=265, version=24215,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=37, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
dispatchtable.xml
- SHA256 bcad07746f44819cde496277f938438d318c910468184ed7aaf41b125f39d4a3
- MD5 671b905340c43958adb2d53f5a218c8d
- SHA1 883138eccad7e128296fe7ab3cd45fc21453a931
- SHA512 e6eb3c5cf1a2704d689d26eba3611f889b45c9dddd53687aa1f9411a8e5920e54a30f9742cc984a1fa7f6f15c3a53d1247f106520e252587b9df6297b0e989dd
- SSDEEP 48:c11TM/T6hTnoQ5oGuHapcXPwapT+P/MlIxenRGBbks/gyM/T6hTnoQ5oGuHapcX3:bObpcXhpT+E31NObpcXhpT+E319fgPY/
- TLSH T151B11BAB286A2182069712A34DE6752FFC3BB77B44CDD058F586E63322B15B745CB680
- MD5 SHA1 SHA512 SSDEEP TLSH
imshelper.dll
- IMPHASH 226da6f5589de39e5c9f54642e5e0d10
- SHA256 e85cf245e21b448c74609d3c3a770a9ac0843185d0084e40ffa92e3550403b9b
- MD5 c2be5a0d491cbaf258e4d0e2f6255940
- SHA1 abecb8945c01839e6e096a0eec05389ded020ba8
- SHA512 d762772b9ce7107e08d5fa0b5eb77735147c7fb9ec3cb3db7aa64ec69706a36924e7ba76d920fa0f249e3abad05b5173627bd65919409efcd15ddef51cd1b172
- SSDEEP 49152:bZXnrekX1xyWK0lw5XHR95t3GDqY52YutfwywKNBgiaYf4Qk3RWKQzRCrtteQIV6:tX/VUPLyWKsQ
- TLSH T17F958BA13A08C263D27F127DA9687B95606D84F53B502EC3D3C52E2C25791E2DEB7783
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
50:e5:2b:9a:16:22:20:2b:c3:62:d3:60:85:d1:50:94:de:e6:85:b3:a9:e0:af:27:b4:cb:ce:e1:60:33:85:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 28, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
771120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\builds\NGLU\1.0\source\nglu\public\nglu-lib\Win32\Release_x86\imshelper.pdb
winhttp
WinHttpCrackUrl
WinHttpConnect
WinHttpSetTimeouts
WinHttpSetCredentials
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
kernel32
GetCurrentThreadId
GetFileSizeEx
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
FormatMessageW
LocalFree
HeapFree
HeapAlloc
GetProcessHeap
GetCurrentProcess
DeviceIoControl
GetTempPathW
GetVersionExW
FileTimeToSystemTime
GetNativeSystemInfo
RaiseException
LoadLibraryW
GetProcAddress
CreateProcessW
GetModuleHandleW
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
CloseHandle
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
SetStdHandle
ReadConsoleW
FindFirstFileExA
GetACP
SetFilePointerEx
FlushFileBuffers
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
WriteFile
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
HeapReAlloc
GetTimeZoneInformation
ReadFile
GetFileType
RtlUnwind
UnregisterWaitEx
QueryDepthSList
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
HeapSize
InterlockedFlushSList
InterlockedPushEntrySList
GetStringTypeW
TryEnterCriticalSection
EncodePointer
DecodePointer
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentThread
QueryPerformanceCounter
IsProcessorFeaturePresent
QueueUserWorkItem
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
advapi32
CredFree
CredReadW
CredWriteW
GetUserNameW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyExW
RegCloseKey
CredDeleteW
shell32
SHGetKnownFolderPath
SHCreateDirectoryExW
ole32
CoCreateGuid
CoTaskMemFree
shlwapi
UrlEscapeW
PathRemoveFileSpecW
PathFindFileNameW
PathRenameExtensionW
PathRemoveExtensionW
PathFileExistsW
PathAddExtensionW
PathIsFileSpecW
PathAppendW
PathIsDirectoryW
bcrypt
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptDecrypt
BCryptDestroyKey
BCryptEncrypt
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptHashData
BCryptGetProperty
crypt32
CertCloseStore
CryptUnprotectData
CryptProtectData
secur32
GetUserNameExW
GetNGLDeviceIdentifier
GetNGLDeviceIdentifierForOSUser
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
466KB
Virtual Size
465KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
143KB
Virtual Size
143KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=241, version=40116,
count=169, id=243, version=40116,
count=31, id=242, version=40116,
count=25, id=259, version=24123,
count=115, id=261, version=24123,
count=36, id=260, version=24123,
count=19, id=203, version=65501,
count=228, id=1, productName=Unmarked objects,
count=119, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
x64/IMSLib.dll
- IMPHASH c2cfc0d770494af182b48ab55e9c13fd
- SHA256 ec010c4a12cb28d61ec2ac2b511676f76f56b20e03fd8656f2d1f86d8a91b6ff
- MD5 5a16649ea7ef6a8a4ad2bd162ecad403
- SHA1 40bea664909364c391e6efbbb3bdc81ffe837593
- SHA512 53166fea32d5324ea4e5752bb73171c8f183b3a55ffbe0178014a9a209aaabc9415a812c103804ae43db07a9f700e790bb2f188d62b4e866d4098f547c38691b
- SSDEEP 49152:2JnG+Tha791oLblMqQSA98CK0tQupz1oyGrVc6uv5tUa/:OG+TMe3XQS9ubX6G5j/
- TLSH T1EFD58C16ABA840E5D1B7C2789A778607E7B1B80417B0DBDF06A4426E1FB3FE0167E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
1e:41:96:5a:3e:58:ec:d1:c9:dc:39:d5:95:76:ae:49:a6:c8:08:78:42:9e:0c:8a:a2:47:65:b7:13:1a:94:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 18, 2019
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US
Serial Number
09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 4, 2017 - Jan 18, 2028
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
2
Major OS version
5
Entry point
1478028
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\builds\AAM\10.0\source\dev\aamcore\target\win64\Release\OOBECommon\IMSLib.pdb
winhttp
WinHttpOpen
WinHttpCrackUrl
WinHttpConnect
WinHttpSetStatusCallback
WinHttpSetCredentials
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpGetIEProxyConfigForCurrentUser
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
setupapi
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
kernel32
CloseHandle
CreateThread
ResetEvent
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ReadFile
SetLastError
GetCurrentProcess
WriteFile
TerminateProcess
GetModuleFileNameW
GetTempPathW
CreateMutexW
FindClose
LocalAlloc
CreateFileW
GetFileAttributesW
GetVersionExW
ReleaseMutex
SetFileAttributesW
Sleep
DeleteFileW
RaiseException
DecodePointer
GetProcAddress
LocalFree
MoveFileExW
GetFileSize
SystemTimeToFileTime
CreateProcessW
GetModuleHandleW
CopyFileW
WideCharToMultiByte
GetSystemTime
FlushFileBuffers
ReleaseSemaphore
GetCurrentProcessId
CreateDirectoryW
LoadLibraryW
FreeLibrary
SetEvent
GetTimeFormatW
GetDateFormatW
QueryPerformanceCounter
GetStdHandle
GetFileType
GetCurrentThreadId
GetTickCount
GlobalMemoryStatus
LoadLibraryA
FlushConsoleInputBuffer
SetFilePointer
GetFileSizeEx
OpenMutexW
GetFileAttributesExW
CreateSymbolicLinkW
AreFileApisANSI
HeapCreate
HeapFree
GetFullPathNameW
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
OutputDebugStringW
CreateFileA
GetVersionExA
DeleteFileA
HeapReAlloc
GetSystemInfo
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
GetTimeZoneInformation
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
GetLastError
MultiByteToWideChar
CreateEventW
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
GlobalFree
GetModuleFileNameA
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
WaitForMultipleObjects
ReadConsoleW
SetFilePointerEx
GetCurrentDirectoryW
SetStdHandle
GetConsoleCP
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetLocalTime
SetConsoleCtrlHandler
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
VirtualProtect
VirtualFree
VirtualAlloc
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
RtlPcToFileHeader
EncodePointer
GetStringTypeW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
MessageBoxW
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
GetUserNameW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SetEntriesInAclW
CreateWellKnownSid
SetNamedSecurityInfoW
GetNamedSecurityInfoW
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetKnownFolderPath
SHCreateDirectoryExW
ole32
CoSetProxyBlanket
CoUninitialize
CoInitialize
CLSIDFromString
OleRun
CLSIDFromProgID
CoCreateInstance
StringFromGUID2
CoInitializeSecurity
CoInitializeEx
CoCreateGuid
oleaut32
SysStringLen
GetErrorInfo
VariantClear
VariantChangeType
VariantCopy
SysAllocString
SysAllocStringByteLen
SysFreeString
VariantInit
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathIsFileSpecW
PathIsDirectoryW
PathRemoveExtensionW
PathAddExtensionW
PathAppendW
PathRenameExtensionW
PathFindFileNameW
IMS_EEPLogin
IMS_createRef
IMS_createRefEx
IMS_createRefExWithXMLParams
IMS_createRefForProductVersion
IMS_deregisterClientFromGroup
IMS_fetchAccessToken
IMS_fetchAccessToken2
IMS_fetchAccounts
IMS_fetchContinueToken
IMS_fetchDefaultUserInfoForClientId
IMS_fetchFeatureFlags
IMS_fetchIDPResponseForKey
IMS_fetchReleaseFlag
IMS_fetchUserProfileData
IMS_getDeviceID
IMS_getProxyCredentialsFromIMSLibSession
IMS_logOutUserForClient
IMS_registerClientToGroup
IMS_releaseData
IMS_releaseRef
IMS_revokeDeviceToken
IMS_setProxyCredentials
IMS_setProxyCredentialsInIMSLibSession
IMS_setRetryAfterResponseHandlingData
IMS_setUserAsDefaultForClientId
IMS_storeDeviceTokenAndUserProfile
IMS_storeDeviceTokenAndUserProfileEx
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
631KB
Virtual Size
631KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
164KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=241, version=40116,
count=192, id=243, version=40116,
count=27, id=242, version=40116,
count=2, id=261, version=23013,
count=1, id=199, version=41118,
count=8, id=259, version=24123,
count=117, id=261, version=24123,
count=41, id=260, version=24123,
count=1, id=259, productName=VS2015 UPD1 build 23506, version=23506,
count=2, id=135, version=30729,
count=8, id=261, productName=VS2015 UPD1 build 23506, version=23506,
count=317, id=1, productName=Unmarked objects,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=327, id=260, productName=VS2015 UPD2 build 23918, version=23918,
count=13, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=52, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
x64/imshelper.dll
- IMPHASH 7facf3589331ee07ad5af189ff4c0a95
- SHA256 17f9395ba30403ea1bfe240b458a1532b874a796a834a7d5ba771def68aeadc8
- MD5 952013975a28fbda5722345fe4cba1f8
- SHA1 f1a8d3785003e13ca823a46a01f5fa4f6d893fb9
- SHA512 535bacfd4e2825b1d99a02ff2119c26549ba9284148e01b2c656ba5f6c988e0f1871f0b28f69bc26469f6d723f7d6261fb9e514280bc45613a89f01eb5d14495
- SSDEEP 49152:tV/PatLXv/MC59Y9yRk3MrJQauqxOeXfkY9zNlEwxt4C:tUMC5Rk3mOkxTbEwIC
- TLSH T1FAC56EAD769842D9CA63C4B8C8129A86F72171258B315EDF1261132E1F37BF6437F9E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c7:f6:43:02:5d:22:29:9d:b1:e8:44:46:1d:71:dc:27:7e:1a:4e:a7:3d:6e:e6:45:6b:d2:7c:68:f5:94:09:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 28, 2020
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
06:f2:4d:9f:4d:b0:7b:d7:ec:ad:06:7f:5e:e2:6c:29
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 31, 2019 - Feb 3, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
938132
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\builds\NGLU\1.0\source\nglu\public\nglu-lib\x64\Release_x64\imshelper.pdb
winhttp
WinHttpCrackUrl
WinHttpConnect
WinHttpSetTimeouts
WinHttpSetCredentials
WinHttpSendRequest
WinHttpGetProxyForUrl
WinHttpQueryAuthSchemes
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
kernel32
GetCurrentThreadId
GetFileSizeEx
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
FormatMessageW
LocalFree
HeapFree
HeapAlloc
GetProcessHeap
DeviceIoControl
GetTempPathW
GetVersionExW
FileTimeToSystemTime
GetNativeSystemInfo
RaiseException
LoadLibraryW
GetProcAddress
CreateProcessW
FreeLibrary
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
CloseHandle
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
SetStdHandle
ReadConsoleW
HeapReAlloc
GetTimeZoneInformation
ReadFile
GetFileType
RtlUnwindEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
GetACP
SetFilePointerEx
FlushFileBuffers
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
WriteFile
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
SetEndOfFile
InterlockedPushEntrySList
InterlockedPopEntrySList
GetStringTypeW
TryEnterCriticalSection
RtlPcToFileHeader
EncodePointer
DecodePointer
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
GetCurrentThread
QueryPerformanceCounter
IsProcessorFeaturePresent
QueueUserWorkItem
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
SetEvent
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
advapi32
CredDeleteW
CredReadW
CredWriteW
GetUserNameW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyExW
RegCloseKey
CredFree
shell32
SHCreateDirectoryExW
SHGetKnownFolderPath
ole32
CoTaskMemFree
CoCreateGuid
shlwapi
PathRenameExtensionW
PathIsDirectoryW
PathAppendW
UrlEscapeW
PathAddExtensionW
PathFileExistsW
PathRemoveExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathIsFileSpecW
bcrypt
BCryptCreateHash
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptFinishHash
BCryptHashData
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptEncrypt
BCryptDestroyKey
BCryptDecrypt
crypt32
CertCloseStore
CryptUnprotectData
CryptProtectData
secur32
GetUserNameExW
GetNGLDeviceIdentifier
GetNGLDeviceIdentifierForOSUser
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
725KB
Virtual Size
724KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
22KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
157KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=169, id=243, version=40116,
count=28, id=242, version=40116,
count=8, id=259, version=24123,
count=114, id=261, version=24123,
count=38, id=260, version=24123,
count=19, id=203, version=65501,
count=232, id=1, productName=Unmarked objects,
count=119, id=265, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,