samples_20261027_x5_pw-infected.zip
- SHA256 9683bb456a5462cad1a69141f8a18a6ea309b83a35ff00ff39e2e03c6e0f0654
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3SDSBK/PDF_3SDSBK_20261027103046.exe
Resource
win11-20260911-en
windows11-21h2-x64
32 signatures
300 seconds
General
- Target samples_20261027_x5_pw-infected.zip
- Size 2.6MB
- Sample261027-e2q5bsav5s
- SHA256 9683bb456a5462cad1a69141f8a18a6ea309b83a35ff00ff39e2e03c6e0f0654
- MD5 eac5174ba5752b39b4dff676fa5e8cdf
- SHA1 70e285527f10662bb1a0852f43f170a4be4a452b
- SHA512 50641c0b6e2a315b503304584aa2ed938d01ba4ed55989a9af78726a6bc5587086a2b89cd19421017155756faa129a9171aa59a6982db46cbeae0553b5366948
- SSDEEP 49152:DetM6AstmtUg+IvMTH6FO7HGBJb15XOlNhfSJLOU5ikcmD0RG2+2NE4XD2bXzYb+:D/6AVtjvMrbrGBJb7OjxSlzikRanXqbl
- TLSH T1FBD533B3E3E641D9E48B3371019CB4D141AC48D764BCAF53A9AFABB6309F553900B593
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/3SDSBK/cRCliEnT.DLL unpack001/85W4G8/CRCliENt.DLL unpack001/IY6P3I/CRclIeNT.DLL unpack001/LR2X1S/crCliENt.DLL unpack001/RXLZN3/CRclient.DLL
File Explorer
-
samples_20261027_x5_pw-infected.zip.zip 2.6MB
-
3SDSBK/PDF_3SDSBK_20261027103046.exe.exe 1.1MB
-
3SDSBK/cRCliEnT.DLL.dll 31KB
-
85W4G8/CRCliENt.DLL.dll 36KB
-
85W4G8/PDF_85W4G8_20261027103052.exe.exe 1.1MB
-
IY6P3I/CRclIeNT.DLL.dll 37KB
-
IY6P3I/PDF_IY6P3I_20261027103044.exe.exe 1.1MB
-
LR2X1S/PDF_LR2X1S_20261027103056.exe.exe 1.1MB
-
LR2X1S/crCliENt.DLL.dll 25KB
-
RXLZN3/CRclient.DLL.dll 35KB
-
RXLZN3/PDF_RXLZN3_20261027103054.exe.exe 1.1MB
3SDSBK/PDF_3SDSBK_20261027103046.exe
- IMPHASH 0049e6f108de46d48987026bcfe54955
- SHA256 81cf4d59df869abfe5034d160090d88bc9c573e8c5daf284fd29417d48411d5b
- MD5 8cf96be406d5b55912e4d79c2a533568
- SHA1 6f6a4f2802e72ce4b0eaad1094bb53a585bdf5d2
- SHA512 83175422ed11d694d31f23b71daf2992c1794be2250023a580490464e57bf3c8731a407d3a50bfb681f5c22fa76de2d82a88b9d1b3c4c591603dd7fc0e53ba3d
- SSDEEP 24576:+8q1L8bEuXsj6ME5pvOIogH5zpPNTKGKmmUYUsK2:FIL8bdXS6MSpvOIokpVTCUYU+
- TLSH T1FA356C0793E902ADE0B7E13C89678906E2767C5A07709ACF13A0795A2F737E19F79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d0:67:6a:d8:71:5e:4d:34:92:75:72:63:7d:4c:06:7c:5d:6a:09:fc:dd:ef:f2:4d:96:f8:df:c0:75:d4:37:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 3, 2024
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:8a:2f:31:3a:b2:c2:9c:d4:2b:06:2a:0e:46:7b:0c
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 3, 2023 - Nov 4, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
501840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Jenkins\workspace\ccd-app\main\native\win64\build\msvs_win32_x64\Release\x64\sym\CreativeCloud\CreativeCloud\Creative Cloud.pdb
kernel32
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
InitializeCriticalSectionEx
LockResource
LoadResource
CreateProcessW
SetDllDirectoryW
RtlUnwind
GetProcAddress
LoadLibraryW
CloseHandle
Process32FirstW
DeleteFileW
Process32NextW
LeaveCriticalSection
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
WaitForSingleObject
FindClose
EnterCriticalSection
GetTempPathW
RemoveDirectoryW
TerminateProcess
FindNextFileW
FindFirstFileW
AcquireSRWLockShared
DecodePointer
RaiseException
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLastError
EncodePointer
GetModuleFileNameW
WideCharToMultiByte
CopyFileW
Sleep
FreeLibrary
GetPackageFamilyName
GetCurrentProcess
FindResourceW
InitOnceExecuteOnce
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStdHandle
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
LCMapStringEx
GetCurrentProcessId
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
lstrcmpW
ReadFile
LocalAlloc
GetFileAttributesW
LocalFree
MoveFileExW
FlushFileBuffers
GetUserDefaultLangID
GetUserDefaultUILanguage
TerminateThread
CreateThread
GetFileInformationByHandle
HeapFree
SetLastError
HeapSize
CreateEventW
ProcessIdToSessionId
SetEvent
GlobalFree
HeapReAlloc
ResetEvent
HeapAlloc
GetProcessHeap
GetModuleHandleW
QueryFullProcessImageNameW
lstrcmpiW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
GetVersionExW
GetCurrentThread
VerSetConditionMask
VerifyVersionInfoW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
SetEndOfFile
SetFilePointerEx
ResumeThread
GetSystemTimeAsFileTime
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
GetStringTypeW
user32
IsWindow
PostMessageW
GetMessageW
DialogBoxParamW
GetDlgItem
ShowWindow
SetWindowTextW
EndDialog
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
advapi32
LookupAccountSidW
SetNamedSecurityInfoW
CreateWellKnownSid
SetEntriesInAclW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
GetUserNameW
ConvertSidToStringSidW
FreeSid
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetKeyValueW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
AllocateAndInitializeSid
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
shell32
SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
CommandLineToArgvW
ord51
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ord680
ole32
CLSIDFromString
CoInitialize
CoUninitialize
CoAddRefServerProcess
OleRun
StringFromCLSID
CoTaskMemFree
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoCreateGuid
StringFromGUID2
CLSIDFromProgID
CoReleaseServerProcess
CoCreateInstance
crclient
CrashReporterInitialize
DisableCRDunamisExitEventCapture
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
api-ms-win-core-winrt-string-l1-1-0
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsIsStringEmpty
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoActivateInstance
RoRegisterActivationFactories
RoGetActivationFactory
RoRevokeActivationFactories
RoUninitialize
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
RoOriginateError
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
winhttp
WinHttpSetOption
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReadData
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpOpen
WinHttpSetTimeouts
shlwapi
PathRenameExtensionW
PathIsFileSpecW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathIsRootW
PathAppendW
PathIsSystemFolderW
PathRemoveExtensionW
PathAddExtensionW
oleaut32
VariantCopy
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
VariantInit
Name
.text
Size
697KB
Virtual Size
696KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=27412,
count=193, id=261, version=27412,
count=17, id=260, version=31616,
count=10, id=259, version=31616,
count=104, id=261, version=31616,
count=6, id=261, version=31630,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31937,
count=29, id=260, version=27412,
count=2, id=262, version=27412,
count=27, id=257, version=27412,
count=370, id=1, productName=Unmarked objects,
count=87, id=265, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,
3SDSBK/cRCliEnT.DLL
- IMPHASH a5d5026e5a6746696c5c2b3df2a64128
- SHA256 0827ff08288241f9737d5472bde5e8dd3f403d8d31c8cfead7060440e2e1abb0
- MD5 2c4be6e7510f1fd54814693a65d20d1b
- SHA1 3e8038e025c6b7a3386a6ec1d0043f4094cfcdc8
- SHA512 5a183bb044135a9723aff425b37a91c281dc59769909fc09356936cfb490d7c89f6b794d996b6356565e6964fbfca08aa3dd15e7766460a900c79ee208e68ea4
- SSDEEP 384:oUbI6vhjQUP7cn56FIwK8rLDQg4v0YwG:oe/DU4rLDQg4v0k
- TLSH T17FE2F70AF78620FCCA47C675C6BA1B37B635B4B21229BD7F0298C7764C309805B3D9A1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetErrorMode
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
lstrcatA
lstrcmpA
lstrcmpiA
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-private-l1-1-0
memcpy
strstr
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_exit
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
strlen
strncmp
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
AddCRCustomData
AdobeCrashReporterEnableSignalHandling
CrashReporterInitialize
DisableCRDunamisExitEventCapture
GetCRDialogOptions
GetCRLastErrorCode
GetCRReportSendPreference
SendCRErrorEventToDunamis
SetAppIntegrityLevelLow
SetCRDialogOptions
SetCRDialogScalingFactor
SetCRDialogUserEmail
SetCRDisplayName
SetCRHighbeamSessionId
SetCRHighbeamSessionInfo
SetCRIMSUserGuid
SetCRLocale
SetCRParentWnd
SetCRPostHandler
SetCRPostHandlerPassingExceptionInfoAndContext
SetCRPosthandlerThreadPreference
SetCRPreHandler
SetCRReportSendPreference
SetCRSessionNonGenuine
SetCRSignatureVerificationPreference
SetDunamisExitNormal
SetDunamisSessionId
SetDunamisSourceAppName
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
vmdbCOM
vmnetDHCP
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
636B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
752B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
85W4G8/CRCliENt.DLL
- IMPHASH a5d5026e5a6746696c5c2b3df2a64128
- SHA256 2479e98d213dd3c1b769b93c8eb2707d64b133b9da136dd1ff53a25b51227dfb
- MD5 24ed049b36c9196bfd7b5ce40f82b187
- SHA1 60b0908470a394875c0b9bc47182e3dfb9eaa8b4
- SHA512 e982488a37c3c1e4ef21fbf17a086a609f92b96e10c281be00dd0eeaaf9c4a54978a37ddcb7feb4a4904a2c882db9952659552d29e771230f2c1943f5bdd7f3e
- SSDEEP 192:vQdRbIr3kRgXCMXocfuUryM2MefWMpiv9mTzMpN2wvV9Foc0mcTWWxv0Yw1Td:0bIrURQHdIl3w32+PFoNHv0Ywld
- TLSH T13C03E409B38720FCCA5BC13482FB5B37B679B4611129BD7F0398C77A4C70A909A3D9A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetErrorMode
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
lstrcatA
lstrcmpA
lstrcmpiA
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-private-l1-1-0
memcpy
strstr
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_exit
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
strlen
strncmp
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
AddCRCustomData
AdobeCrashReporterEnableSignalHandling
CrashReporterInitialize
DisableCRDunamisExitEventCapture
GetCRDialogOptions
GetCRLastErrorCode
GetCRReportSendPreference
SendCRErrorEventToDunamis
SetAppIntegrityLevelLow
SetCRDialogOptions
SetCRDialogScalingFactor
SetCRDialogUserEmail
SetCRDisplayName
SetCRHighbeamSessionId
SetCRHighbeamSessionInfo
SetCRIMSUserGuid
SetCRLocale
SetCRParentWnd
SetCRPostHandler
SetCRPostHandlerPassingExceptionInfoAndContext
SetCRPosthandlerThreadPreference
SetCRPreHandler
SetCRReportSendPreference
SetCRSessionNonGenuine
SetCRSignatureVerificationPreference
SetDunamisExitNormal
SetDunamisSessionId
SetDunamisSourceAppName
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
vmdbCOM
vmnetDHCP
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
636B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
85W4G8/PDF_85W4G8_20261027103052.exe
- IMPHASH 0049e6f108de46d48987026bcfe54955
- SHA256 81cf4d59df869abfe5034d160090d88bc9c573e8c5daf284fd29417d48411d5b
- MD5 8cf96be406d5b55912e4d79c2a533568
- SHA1 6f6a4f2802e72ce4b0eaad1094bb53a585bdf5d2
- SHA512 83175422ed11d694d31f23b71daf2992c1794be2250023a580490464e57bf3c8731a407d3a50bfb681f5c22fa76de2d82a88b9d1b3c4c591603dd7fc0e53ba3d
- SSDEEP 24576:+8q1L8bEuXsj6ME5pvOIogH5zpPNTKGKmmUYUsK2:FIL8bdXS6MSpvOIokpVTCUYU+
- TLSH T1FA356C0793E902ADE0B7E13C89678906E2767C5A07709ACF13A0795A2F737E19F79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d0:67:6a:d8:71:5e:4d:34:92:75:72:63:7d:4c:06:7c:5d:6a:09:fc:dd:ef:f2:4d:96:f8:df:c0:75:d4:37:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 3, 2024
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:8a:2f:31:3a:b2:c2:9c:d4:2b:06:2a:0e:46:7b:0c
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 3, 2023 - Nov 4, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
501840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Jenkins\workspace\ccd-app\main\native\win64\build\msvs_win32_x64\Release\x64\sym\CreativeCloud\CreativeCloud\Creative Cloud.pdb
kernel32
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
InitializeCriticalSectionEx
LockResource
LoadResource
CreateProcessW
SetDllDirectoryW
RtlUnwind
GetProcAddress
LoadLibraryW
CloseHandle
Process32FirstW
DeleteFileW
Process32NextW
LeaveCriticalSection
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
WaitForSingleObject
FindClose
EnterCriticalSection
GetTempPathW
RemoveDirectoryW
TerminateProcess
FindNextFileW
FindFirstFileW
AcquireSRWLockShared
DecodePointer
RaiseException
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLastError
EncodePointer
GetModuleFileNameW
WideCharToMultiByte
CopyFileW
Sleep
FreeLibrary
GetPackageFamilyName
GetCurrentProcess
FindResourceW
InitOnceExecuteOnce
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStdHandle
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
LCMapStringEx
GetCurrentProcessId
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
lstrcmpW
ReadFile
LocalAlloc
GetFileAttributesW
LocalFree
MoveFileExW
FlushFileBuffers
GetUserDefaultLangID
GetUserDefaultUILanguage
TerminateThread
CreateThread
GetFileInformationByHandle
HeapFree
SetLastError
HeapSize
CreateEventW
ProcessIdToSessionId
SetEvent
GlobalFree
HeapReAlloc
ResetEvent
HeapAlloc
GetProcessHeap
GetModuleHandleW
QueryFullProcessImageNameW
lstrcmpiW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
GetVersionExW
GetCurrentThread
VerSetConditionMask
VerifyVersionInfoW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
SetEndOfFile
SetFilePointerEx
ResumeThread
GetSystemTimeAsFileTime
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
GetStringTypeW
user32
IsWindow
PostMessageW
GetMessageW
DialogBoxParamW
GetDlgItem
ShowWindow
SetWindowTextW
EndDialog
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
advapi32
LookupAccountSidW
SetNamedSecurityInfoW
CreateWellKnownSid
SetEntriesInAclW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
GetUserNameW
ConvertSidToStringSidW
FreeSid
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetKeyValueW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
AllocateAndInitializeSid
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
shell32
SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
CommandLineToArgvW
ord51
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ord680
ole32
CLSIDFromString
CoInitialize
CoUninitialize
CoAddRefServerProcess
OleRun
StringFromCLSID
CoTaskMemFree
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoCreateGuid
StringFromGUID2
CLSIDFromProgID
CoReleaseServerProcess
CoCreateInstance
crclient
CrashReporterInitialize
DisableCRDunamisExitEventCapture
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
api-ms-win-core-winrt-string-l1-1-0
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsIsStringEmpty
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoActivateInstance
RoRegisterActivationFactories
RoGetActivationFactory
RoRevokeActivationFactories
RoUninitialize
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
RoOriginateError
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
winhttp
WinHttpSetOption
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReadData
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpOpen
WinHttpSetTimeouts
shlwapi
PathRenameExtensionW
PathIsFileSpecW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathIsRootW
PathAppendW
PathIsSystemFolderW
PathRemoveExtensionW
PathAddExtensionW
oleaut32
VariantCopy
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
VariantInit
Name
.text
Size
697KB
Virtual Size
696KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=27412,
count=193, id=261, version=27412,
count=17, id=260, version=31616,
count=10, id=259, version=31616,
count=104, id=261, version=31616,
count=6, id=261, version=31630,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31937,
count=29, id=260, version=27412,
count=2, id=262, version=27412,
count=27, id=257, version=27412,
count=370, id=1, productName=Unmarked objects,
count=87, id=265, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,
IY6P3I/CRclIeNT.DLL
- IMPHASH a5d5026e5a6746696c5c2b3df2a64128
- SHA256 c831c8f9e317c79ca1fb14439b1e04ec67090b1bdbbc25549c3a7f579e5916f9
- MD5 175a8c24d31ad17dbd2fb4407f307cff
- SHA1 b9e25483ec6bda3529e7517502d3d0d3c14480d5
- SHA512 5393a760de792a8eb62bcc18d5865cc22db3f78fd67a8a41014ed734e8b5972699b254c60e012b8a7411e01b42d1ea1af664ac77544723fdc529ba7e67c46c94
- SSDEEP 384:EabWhK6QApJw6rjFMP3wUyt9FTeiOiiFvQaw4qyaiFnIwHlv0Yw4d:PC3trT4Hlv0K
- TLSH T1DF03F709F3D620FCCB87C574D5B62737B175B4621229AE3F42A8C7B60C70A905B7C9A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetErrorMode
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
lstrcatA
lstrcmpA
lstrcmpiA
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-private-l1-1-0
memcpy
strstr
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_exit
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
strlen
strncmp
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
AddCRCustomData
AdobeCrashReporterEnableSignalHandling
CrashReporterInitialize
DisableCRDunamisExitEventCapture
GetCRDialogOptions
GetCRLastErrorCode
GetCRReportSendPreference
SendCRErrorEventToDunamis
SetAppIntegrityLevelLow
SetCRDialogOptions
SetCRDialogScalingFactor
SetCRDialogUserEmail
SetCRDisplayName
SetCRHighbeamSessionId
SetCRHighbeamSessionInfo
SetCRIMSUserGuid
SetCRLocale
SetCRParentWnd
SetCRPostHandler
SetCRPostHandlerPassingExceptionInfoAndContext
SetCRPosthandlerThreadPreference
SetCRPreHandler
SetCRReportSendPreference
SetCRSessionNonGenuine
SetCRSignatureVerificationPreference
SetDunamisExitNormal
SetDunamisSessionId
SetDunamisSourceAppName
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
vmdbCOM
vmnetDHCP
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
636B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
IY6P3I/PDF_IY6P3I_20261027103044.exe
- IMPHASH 0049e6f108de46d48987026bcfe54955
- SHA256 81cf4d59df869abfe5034d160090d88bc9c573e8c5daf284fd29417d48411d5b
- MD5 8cf96be406d5b55912e4d79c2a533568
- SHA1 6f6a4f2802e72ce4b0eaad1094bb53a585bdf5d2
- SHA512 83175422ed11d694d31f23b71daf2992c1794be2250023a580490464e57bf3c8731a407d3a50bfb681f5c22fa76de2d82a88b9d1b3c4c591603dd7fc0e53ba3d
- SSDEEP 24576:+8q1L8bEuXsj6ME5pvOIogH5zpPNTKGKmmUYUsK2:FIL8bdXS6MSpvOIokpVTCUYU+
- TLSH T1FA356C0793E902ADE0B7E13C89678906E2767C5A07709ACF13A0795A2F737E19F79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d0:67:6a:d8:71:5e:4d:34:92:75:72:63:7d:4c:06:7c:5d:6a:09:fc:dd:ef:f2:4d:96:f8:df:c0:75:d4:37:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 3, 2024
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:8a:2f:31:3a:b2:c2:9c:d4:2b:06:2a:0e:46:7b:0c
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 3, 2023 - Nov 4, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
501840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Jenkins\workspace\ccd-app\main\native\win64\build\msvs_win32_x64\Release\x64\sym\CreativeCloud\CreativeCloud\Creative Cloud.pdb
kernel32
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
InitializeCriticalSectionEx
LockResource
LoadResource
CreateProcessW
SetDllDirectoryW
RtlUnwind
GetProcAddress
LoadLibraryW
CloseHandle
Process32FirstW
DeleteFileW
Process32NextW
LeaveCriticalSection
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
WaitForSingleObject
FindClose
EnterCriticalSection
GetTempPathW
RemoveDirectoryW
TerminateProcess
FindNextFileW
FindFirstFileW
AcquireSRWLockShared
DecodePointer
RaiseException
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLastError
EncodePointer
GetModuleFileNameW
WideCharToMultiByte
CopyFileW
Sleep
FreeLibrary
GetPackageFamilyName
GetCurrentProcess
FindResourceW
InitOnceExecuteOnce
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStdHandle
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
LCMapStringEx
GetCurrentProcessId
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
lstrcmpW
ReadFile
LocalAlloc
GetFileAttributesW
LocalFree
MoveFileExW
FlushFileBuffers
GetUserDefaultLangID
GetUserDefaultUILanguage
TerminateThread
CreateThread
GetFileInformationByHandle
HeapFree
SetLastError
HeapSize
CreateEventW
ProcessIdToSessionId
SetEvent
GlobalFree
HeapReAlloc
ResetEvent
HeapAlloc
GetProcessHeap
GetModuleHandleW
QueryFullProcessImageNameW
lstrcmpiW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
GetVersionExW
GetCurrentThread
VerSetConditionMask
VerifyVersionInfoW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
SetEndOfFile
SetFilePointerEx
ResumeThread
GetSystemTimeAsFileTime
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
GetStringTypeW
user32
IsWindow
PostMessageW
GetMessageW
DialogBoxParamW
GetDlgItem
ShowWindow
SetWindowTextW
EndDialog
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
advapi32
LookupAccountSidW
SetNamedSecurityInfoW
CreateWellKnownSid
SetEntriesInAclW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
GetUserNameW
ConvertSidToStringSidW
FreeSid
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetKeyValueW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
AllocateAndInitializeSid
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
shell32
SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
CommandLineToArgvW
ord51
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ord680
ole32
CLSIDFromString
CoInitialize
CoUninitialize
CoAddRefServerProcess
OleRun
StringFromCLSID
CoTaskMemFree
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoCreateGuid
StringFromGUID2
CLSIDFromProgID
CoReleaseServerProcess
CoCreateInstance
crclient
CrashReporterInitialize
DisableCRDunamisExitEventCapture
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
api-ms-win-core-winrt-string-l1-1-0
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsIsStringEmpty
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoActivateInstance
RoRegisterActivationFactories
RoGetActivationFactory
RoRevokeActivationFactories
RoUninitialize
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
RoOriginateError
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
winhttp
WinHttpSetOption
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReadData
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpOpen
WinHttpSetTimeouts
shlwapi
PathRenameExtensionW
PathIsFileSpecW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathIsRootW
PathAppendW
PathIsSystemFolderW
PathRemoveExtensionW
PathAddExtensionW
oleaut32
VariantCopy
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
VariantInit
Name
.text
Size
697KB
Virtual Size
696KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=27412,
count=193, id=261, version=27412,
count=17, id=260, version=31616,
count=10, id=259, version=31616,
count=104, id=261, version=31616,
count=6, id=261, version=31630,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31937,
count=29, id=260, version=27412,
count=2, id=262, version=27412,
count=27, id=257, version=27412,
count=370, id=1, productName=Unmarked objects,
count=87, id=265, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,
LR2X1S/PDF_LR2X1S_20261027103056.exe
- IMPHASH 0049e6f108de46d48987026bcfe54955
- SHA256 81cf4d59df869abfe5034d160090d88bc9c573e8c5daf284fd29417d48411d5b
- MD5 8cf96be406d5b55912e4d79c2a533568
- SHA1 6f6a4f2802e72ce4b0eaad1094bb53a585bdf5d2
- SHA512 83175422ed11d694d31f23b71daf2992c1794be2250023a580490464e57bf3c8731a407d3a50bfb681f5c22fa76de2d82a88b9d1b3c4c591603dd7fc0e53ba3d
- SSDEEP 24576:+8q1L8bEuXsj6ME5pvOIogH5zpPNTKGKmmUYUsK2:FIL8bdXS6MSpvOIokpVTCUYU+
- TLSH T1FA356C0793E902ADE0B7E13C89678906E2767C5A07709ACF13A0795A2F737E19F79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d0:67:6a:d8:71:5e:4d:34:92:75:72:63:7d:4c:06:7c:5d:6a:09:fc:dd:ef:f2:4d:96:f8:df:c0:75:d4:37:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 3, 2024
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:8a:2f:31:3a:b2:c2:9c:d4:2b:06:2a:0e:46:7b:0c
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 3, 2023 - Nov 4, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
501840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Jenkins\workspace\ccd-app\main\native\win64\build\msvs_win32_x64\Release\x64\sym\CreativeCloud\CreativeCloud\Creative Cloud.pdb
kernel32
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
InitializeCriticalSectionEx
LockResource
LoadResource
CreateProcessW
SetDllDirectoryW
RtlUnwind
GetProcAddress
LoadLibraryW
CloseHandle
Process32FirstW
DeleteFileW
Process32NextW
LeaveCriticalSection
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
WaitForSingleObject
FindClose
EnterCriticalSection
GetTempPathW
RemoveDirectoryW
TerminateProcess
FindNextFileW
FindFirstFileW
AcquireSRWLockShared
DecodePointer
RaiseException
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLastError
EncodePointer
GetModuleFileNameW
WideCharToMultiByte
CopyFileW
Sleep
FreeLibrary
GetPackageFamilyName
GetCurrentProcess
FindResourceW
InitOnceExecuteOnce
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStdHandle
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
LCMapStringEx
GetCurrentProcessId
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
lstrcmpW
ReadFile
LocalAlloc
GetFileAttributesW
LocalFree
MoveFileExW
FlushFileBuffers
GetUserDefaultLangID
GetUserDefaultUILanguage
TerminateThread
CreateThread
GetFileInformationByHandle
HeapFree
SetLastError
HeapSize
CreateEventW
ProcessIdToSessionId
SetEvent
GlobalFree
HeapReAlloc
ResetEvent
HeapAlloc
GetProcessHeap
GetModuleHandleW
QueryFullProcessImageNameW
lstrcmpiW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
GetVersionExW
GetCurrentThread
VerSetConditionMask
VerifyVersionInfoW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
SetEndOfFile
SetFilePointerEx
ResumeThread
GetSystemTimeAsFileTime
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
GetStringTypeW
user32
IsWindow
PostMessageW
GetMessageW
DialogBoxParamW
GetDlgItem
ShowWindow
SetWindowTextW
EndDialog
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
advapi32
LookupAccountSidW
SetNamedSecurityInfoW
CreateWellKnownSid
SetEntriesInAclW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
GetUserNameW
ConvertSidToStringSidW
FreeSid
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetKeyValueW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
AllocateAndInitializeSid
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
shell32
SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
CommandLineToArgvW
ord51
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ord680
ole32
CLSIDFromString
CoInitialize
CoUninitialize
CoAddRefServerProcess
OleRun
StringFromCLSID
CoTaskMemFree
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoCreateGuid
StringFromGUID2
CLSIDFromProgID
CoReleaseServerProcess
CoCreateInstance
crclient
CrashReporterInitialize
DisableCRDunamisExitEventCapture
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
api-ms-win-core-winrt-string-l1-1-0
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsIsStringEmpty
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoActivateInstance
RoRegisterActivationFactories
RoGetActivationFactory
RoRevokeActivationFactories
RoUninitialize
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
RoOriginateError
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
winhttp
WinHttpSetOption
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReadData
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpOpen
WinHttpSetTimeouts
shlwapi
PathRenameExtensionW
PathIsFileSpecW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathIsRootW
PathAppendW
PathIsSystemFolderW
PathRemoveExtensionW
PathAddExtensionW
oleaut32
VariantCopy
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
VariantInit
Name
.text
Size
697KB
Virtual Size
696KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=27412,
count=193, id=261, version=27412,
count=17, id=260, version=31616,
count=10, id=259, version=31616,
count=104, id=261, version=31616,
count=6, id=261, version=31630,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31937,
count=29, id=260, version=27412,
count=2, id=262, version=27412,
count=27, id=257, version=27412,
count=370, id=1, productName=Unmarked objects,
count=87, id=265, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,
LR2X1S/crCliENt.DLL
- IMPHASH a5d5026e5a6746696c5c2b3df2a64128
- SHA256 06af1bf179a975e67e9909fe1e7cc855573e1708aad52ba707a39a966d99e246
- MD5 1a7fa857c0e1a8918e192dbb8f7f2f97
- SHA1 775d7c6e9726a61d67cf87e013f64560301e409e
- SHA512 429aa35f0dfdca42ecd54036eaeb5508661fa081c51ab92893a98192cb6eb9519cd70c9086b71c35cd17a829967ad4f15338474e7b912001e62bdc8f5a1a5bd0
- SSDEEP 192:1BQdRbNn3kGgXC36fptVvPY/U01fWll++QSmTzMEc1rfOnHu3c0m8TWWxv0Yw1q:1GbNnUGQzLvAHylAwJ1LOHudHv0Ywo
- TLSH T1DDC2E409B6A630ECCB5BC134C5FB6B37A275B0711119BD7F4298C67A0C72E405A3E9A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetErrorMode
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
lstrcatA
lstrcmpA
lstrcmpiA
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-private-l1-1-0
memcpy
strstr
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_exit
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
strlen
strncmp
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
AddCRCustomData
AdobeCrashReporterEnableSignalHandling
CrashReporterInitialize
DisableCRDunamisExitEventCapture
GetCRDialogOptions
GetCRLastErrorCode
GetCRReportSendPreference
SendCRErrorEventToDunamis
SetAppIntegrityLevelLow
SetCRDialogOptions
SetCRDialogScalingFactor
SetCRDialogUserEmail
SetCRDisplayName
SetCRHighbeamSessionId
SetCRHighbeamSessionInfo
SetCRIMSUserGuid
SetCRLocale
SetCRParentWnd
SetCRPostHandler
SetCRPostHandlerPassingExceptionInfoAndContext
SetCRPosthandlerThreadPreference
SetCRPreHandler
SetCRReportSendPreference
SetCRSessionNonGenuine
SetCRSignatureVerificationPreference
SetDunamisExitNormal
SetDunamisSessionId
SetDunamisSourceAppName
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
vmdbCOM
vmnetDHCP
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
636B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
RXLZN3/CRclient.DLL
- IMPHASH a5d5026e5a6746696c5c2b3df2a64128
- SHA256 5e114f17b380a26a992d6a64e28fd4704fa6a3d21948aa26a4f3e660af4ca1b4
- MD5 96ffd26fb0ca530ff2494a579afbd534
- SHA1 d547c101a8ce9bd95ca956050db2567ba3dc7c04
- SHA512 eb62913b950b0dcb3912ed2a04004bb131e1a36a012cb04bf2bb104d0d638ecccedb7f3590da69a1d469523d9eab2793d183a64180125a84fe4115055636a26e
- SSDEEP 192:QDn9Rb6loEwjgXC7wTk/E/iU8zjCcfWefqU/mTzMtwDa7/Z7c0mpWWxv0Yw1k9:QTb6lpwjQTk/ExunbcwuDSdkv0YwO9
- TLSH T11FF2E609B78230ECCB9BC174C5BA6777A279B4700219BE7F0398C7761C70A80673E9A5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4592
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcAddress
GetTempPathA
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetErrorMode
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
lstrcatA
lstrcmpA
lstrcmpiA
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-private-l1-1-0
memcpy
strstr
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_exit
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
strlen
strncmp
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
AddCRCustomData
AdobeCrashReporterEnableSignalHandling
CrashReporterInitialize
DisableCRDunamisExitEventCapture
GetCRDialogOptions
GetCRLastErrorCode
GetCRReportSendPreference
SendCRErrorEventToDunamis
SetAppIntegrityLevelLow
SetCRDialogOptions
SetCRDialogScalingFactor
SetCRDialogUserEmail
SetCRDisplayName
SetCRHighbeamSessionId
SetCRHighbeamSessionInfo
SetCRIMSUserGuid
SetCRLocale
SetCRParentWnd
SetCRPostHandler
SetCRPostHandlerPassingExceptionInfoAndContext
SetCRPosthandlerThreadPreference
SetCRPreHandler
SetCRReportSendPreference
SetCRSessionNonGenuine
SetCRSignatureVerificationPreference
SetDunamisExitNormal
SetDunamisSessionId
SetDunamisSourceAppName
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
vmdbCOM
vmnetDHCP
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
996B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
636B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
744B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
68B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
RXLZN3/PDF_RXLZN3_20261027103054.exe
- IMPHASH 0049e6f108de46d48987026bcfe54955
- SHA256 81cf4d59df869abfe5034d160090d88bc9c573e8c5daf284fd29417d48411d5b
- MD5 8cf96be406d5b55912e4d79c2a533568
- SHA1 6f6a4f2802e72ce4b0eaad1094bb53a585bdf5d2
- SHA512 83175422ed11d694d31f23b71daf2992c1794be2250023a580490464e57bf3c8731a407d3a50bfb681f5c22fa76de2d82a88b9d1b3c4c591603dd7fc0e53ba3d
- SSDEEP 24576:+8q1L8bEuXsj6ME5pvOIogH5zpPNTKGKmmUYUsK2:FIL8bdXS6MSpvOIokpVTCUYU+
- TLSH T1FA356C0793E902ADE0B7E13C89678906E2767C5A07709ACF13A0795A2F737E19F79311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d0:67:6a:d8:71:5e:4d:34:92:75:72:63:7d:4c:06:7c:5d:6a:09:fc:dd:ef:f2:4d:96:f8:df:c0:75:d4:37:8b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Sep 3, 2024
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=2748129,CN=Adobe Inc.,OU=AAM 256,O=Adobe Inc.,L=San Jose,ST=ca,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
09:8a:2f:31:3a:b2:c2:9c:d4:2b:06:2a:0e:46:7b:0c
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 3, 2023 - Nov 4, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
501840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\Jenkins\workspace\ccd-app\main\native\win64\build\msvs_win32_x64\Release\x64\sym\CreativeCloud\CreativeCloud\Creative Cloud.pdb
kernel32
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
InitializeCriticalSectionEx
LockResource
LoadResource
CreateProcessW
SetDllDirectoryW
RtlUnwind
GetProcAddress
LoadLibraryW
CloseHandle
Process32FirstW
DeleteFileW
Process32NextW
LeaveCriticalSection
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
WaitForSingleObject
FindClose
EnterCriticalSection
GetTempPathW
RemoveDirectoryW
TerminateProcess
FindNextFileW
FindFirstFileW
AcquireSRWLockShared
DecodePointer
RaiseException
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLastError
EncodePointer
GetModuleFileNameW
WideCharToMultiByte
CopyFileW
Sleep
FreeLibrary
GetPackageFamilyName
GetCurrentProcess
FindResourceW
InitOnceExecuteOnce
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStdHandle
GetTimeZoneInformation
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
LCMapStringEx
GetCurrentProcessId
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
lstrcmpW
ReadFile
LocalAlloc
GetFileAttributesW
LocalFree
MoveFileExW
FlushFileBuffers
GetUserDefaultLangID
GetUserDefaultUILanguage
TerminateThread
CreateThread
GetFileInformationByHandle
HeapFree
SetLastError
HeapSize
CreateEventW
ProcessIdToSessionId
SetEvent
GlobalFree
HeapReAlloc
ResetEvent
HeapAlloc
GetProcessHeap
GetModuleHandleW
QueryFullProcessImageNameW
lstrcmpiW
GetFileSizeEx
FileTimeToSystemTime
GetLocalTime
GetTimeFormatW
SystemTimeToFileTime
GetDateFormatW
CreateMutexW
ReleaseMutex
OpenMutexW
GetVersionExW
GetCurrentThread
VerSetConditionMask
VerifyVersionInfoW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
SetEndOfFile
SetFilePointerEx
ResumeThread
GetSystemTimeAsFileTime
SetThreadPriority
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
GetExitCodeThread
GetStringTypeW
user32
IsWindow
PostMessageW
GetMessageW
DialogBoxParamW
GetDlgItem
ShowWindow
SetWindowTextW
EndDialog
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
advapi32
LookupAccountSidW
SetNamedSecurityInfoW
CreateWellKnownSid
SetEntriesInAclW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
GetUserNameW
ConvertSidToStringSidW
FreeSid
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetKeyValueW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
AllocateAndInitializeSid
RevertToSelf
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetNamedSecurityInfoW
shell32
SHGetFolderLocation
SHGetFolderPathW
SHGetPathFromIDListW
CommandLineToArgvW
ord51
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ord680
ole32
CLSIDFromString
CoInitialize
CoUninitialize
CoAddRefServerProcess
OleRun
StringFromCLSID
CoTaskMemFree
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
CoCreateGuid
StringFromGUID2
CLSIDFromProgID
CoReleaseServerProcess
CoCreateInstance
crclient
CrashReporterInitialize
DisableCRDunamisExitEventCapture
ShowCRDialogOnlyOnFirstCrash
ShowCRNativeDialogOnCrash
api-ms-win-core-winrt-string-l1-1-0
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsIsStringEmpty
WindowsDeleteString
WindowsCreateStringReference
WindowsGetStringRawBuffer
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoActivateInstance
RoRegisterActivationFactories
RoGetActivationFactory
RoRevokeActivationFactories
RoUninitialize
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
RoOriginateError
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
winhttp
WinHttpSetOption
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReadData
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpSetCredentials
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpOpen
WinHttpSetTimeouts
shlwapi
PathRenameExtensionW
PathIsFileSpecW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathIsRootW
PathAppendW
PathIsSystemFolderW
PathRemoveExtensionW
PathAddExtensionW
oleaut32
VariantCopy
GetErrorInfo
SysAllocString
SysFreeString
VariantClear
VariantInit
Name
.text
Size
697KB
Virtual Size
696KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
212KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
140KB
Virtual Size
139KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=27412,
count=193, id=261, version=27412,
count=17, id=260, version=31616,
count=10, id=259, version=31616,
count=104, id=261, version=31616,
count=6, id=261, version=31630,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=31937,
count=29, id=260, version=27412,
count=2, id=262, version=27412,
count=27, id=257, version=27412,
count=370, id=1, productName=Unmarked objects,
count=87, id=265, version=31630,
count=1, id=255, version=31630,
count=1, id=151,
count=1, id=258, version=31630,