home

creativecloudset-up.exe

Creative Cloud

Adobe Systems Incorporated

This is a setup program which is used to install the application. The file has been seen being downloaded from www.tkqlhce.com and multiple other hosts.
Publisher:
Adobe Systems Incorporated  (signed and verified)

Product:
Creative Cloud

Description:
Creative Cloud Set-Up

Version:
3.5.1.209

MD5:
a22987a286a6222a4807347732193671

SHA-1:
3d5c6be80df0c9cb1bc2446c221699c0589467d6

SHA-256:
129884bca3956651f6f94ecfbc069bfba546a470c1ec01f1e92120c98bd81f6e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:36:24 PM UTC  (today)

File size:
676.2 KB (692,416 bytes)

Product version:
3.5.1.209

Copyright:
Copyright 2013-2016 Adobe Systems Incorporated. All rights reserved.

Original file name:
Creative Cloud.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\creativecloudset-up.exe

Digital Signature
Signed by:
Adobe Systems Incorporated

Authority:
Symantec Corporation

Valid from:
11/5/2015 4:00:00 PM

Valid to:
10/28/2017 4:59:59 PM

Subject:
CN=Adobe Systems Incorporated, OU=AAM 256, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6DC3ED4566163E279D2784C99FFFD787

File PE Metadata
Compilation timestamp:
2/12/2016 9:50:56 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:curzSC1EkEnYk7QrkRLSoKJn4eYs96DDSwjNqa0oYWDRPfpIRTuhg:dzSEEn37NRLS1JfeQjWlPfpIQhg

Entry address:
0x1000

Entry point:
B8, 54, 5E, 64, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 0D, D8, 9F, 6A, A9, E5, 7A, 2B, ED, 5C, A9, 2F, 7E, 03, F7, B8, CB, 6C, 56, 66, 25, CF, 0B, 1A, DD, 2C, 00, 0C, AB, D3, D2, CA, AA, 98, C7, 19, E2, 5B, 36, F2, ED, E2, 7F, EE, A4, 68, BA, AB, 1C, C7, ED, 11, 8C, B5, FD, F9, 3B, C4, C5, D9, 48, C2, 42, DB, 77, 89, 42, 41, 59, BB, 94, 8C, 16, A5, 9F, 1C, CD, D1, F2, 50, 65, A3, 1E, 91, AC, EB, 5D, B3, 25, 04, 97, 79, 26...
 
[+]

Entropy:
7.9088

Packer / compiler:
PECompact v2

Code size:
1.2 MB (1,243,648 bytes)

The file creativecloudset-up.exe has been seen being distributed by the following 7 URLs.

http://www.tkqlhce.com/click-2075874-10755851-1359042928000?url=https://ccmdls.adobe.com/AdobeProducts/PHSP/15/win32/.../CreativeCloudSet-Up.exe

https://ccmdls.adobe.com/AdobeProducts/ILST/19_1_1/win64/.../CreativeCloudSet-Up.exe

https://ccmdls.adobe.com/AdobeProducts/PPRO/6/win32/.../CreativeCloudSet-Up.exe

https://ccmdls.adobe.com/AdobeProducts/LTRM/5_7_1/win32/.../CreativeCloudSet-Up.exe

https://ccmdls.adobe.com/AdobeProducts/PHSP/16/win64/.../CreativeCloudSet-Up.exe

https://ccmdls.adobe.com/AdobeProducts/KCCC/1/.../CreativeCloudSet-Up.exe

https://ccmdls.adobe.com/AdobeProducts/PHSP/16/win32/.../CreativeCloudSet-Up.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.