home

photoshop_13_ls16.exe

Adobe Extractor

Adobe Systems Incorporated

Publisher:
Adobe Systems Incorporated  (signed and verified)

Product:
Adobe Extractor

Version:
1.0.1.2

MD5:
5f683592f5aea3dc5172be51150a094b

SHA-1:
1337f3e6d9b3f0fabc3cbbc5fb50a504788a58b8

SHA-256:
c6bdd339a167ff663c57437ed8ee1e4abbd2c69f29a6924a1d1a661638716a36

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 8:45:00 AM UTC  (today)

File size:
1.2 MB (1,228,608 bytes)

Product version:
1.01

Copyright:
Copyright(c) 2008 Adobe, Inc.; 7-ZIP DLL Copyright(c) 2008 Igor Pavlov

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\photoshop_13_ls16.exe

Digital Signature
Signed by:
Adobe Systems Incorporated

Authority:
VeriSign, Inc.

Valid from:
12/14/2010 7:00:00 PM

Valid to:
12/14/2012 6:59:59 PM

Subject:
CN=Adobe Systems Incorporated, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Information Systems, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
15E5AC0A487063718E39DA52301A0488

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Yt5AdY2Gjr9WHahI6Wl6S1j0E6+QeWfKAbVPdDOTmdl5ogadztqxhq:gaYJ9uD6aj1L9QeWfKAbVPdDOTmdl5o5

Entry address:
0xA2318

Entry point:
55, 8B, EC, B9, 3D, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 51, 53, 56, 57, B8, 48, 1F, 4A, 00, E8, 4B, 45, F6, FF, 33, C0, 55, 68, D4, 34, 4A, 00, 64, FF, 30, 64, 89, 20, B8, 00, 01, 00, 00, E8, 6B, 6F, FD, FF, A3, 10, 07, 4C, 00, A1, 10, 07, 4C, 00, 50, 68, FF, 00, 00, 00, E8, 52, 49, F6, FF, 8D, 55, E4, A1, 10, 07, 4C, 00, E8, 05, 71, FD, FF, 8B, 55, E4, A1, EC, 72, 4A, 00, E8, EC, 26, F6, FF, A1, 40, 6F, 4A, 00, 8B, 15, EC, 72, 4A, 00, 8B, 12, E8, DA, 26, F6, FF, E8, 0D, 08, F6, FF, A1, 40, 6F, 4A, 00...
 
[+]

Entropy:
6.6287

Developed / compiled with:
Microsoft Visual C++

Code size:
651.5 KB (667,136 bytes)

The file photoshop_13_ls16.exe has been seen being distributed by the following 15 URLs.

http://58.65.128.8:809/Softwares (A - F)/Softwares (A - F)/.../Photoshop_13_LS16.exe

http://58.65.128.4:809/Softwares (A - F)/Softwares (A - F)/.../Photoshop_13_LS16.exe

http://www.emjcd.com/5e103ft10L/t-4/IHMHKHJQ/JIMQQQO/H/OONKHJNOMQPHKIMNQN/IrNJKMHvrKtLIIvLPJuLPLJsJsKJrIJO?o=u4up=f3umx4E&63x=t551%FM%ER%ER53umx4E.mp0nq.o0y%ERMp0nqb30p6o54%ERbTeb%ERDF%ER8uzFE%ERbt0504t01_DF_XeDI.q9q<ov0!5HK4-95osy7u<t551://.../oxuow-EDHLLLJ-DCHCFCEL<<S<<

http://cj.dotomi.com/63103ox54N/x38/MLQLOLNU/NMQUUUS/L/L/L?j=oD3y=oC3v6DN&FC6=2EEA%OV%Na%NaEC3v6DN.vy9wz.x97%NaVy9wzkC9yFxED%Nakcnk%NaMO%NaH38ON%Nak29E9D29A_MO_gnMR.zIz<<2EEA://.../x63x5-NMQUUUS-MLQLOLNU<<b<<

http://esd-licensing.adobe.com/AdobeLicensing/PHSP/13/.../Photoshop_13_LS16.exe

http://www.emjcd.com/77104tenm6/elq/3272524B/437BBB9/2/4226229493424AB642/984fc55g8h7f33g6A46h3A25952eddg7?c=rH72=sG7zAHR&JGA=6IIE%SZ%Re%ReIG7zAHR.z2D03.1DB%ReZ2D03oGD2J1IH%Reogro%ReQS%ReL7CSR%Reo6DIDH6DE_QS_krQV.3M3<18D!IUXH-I57zFHIz<6IIE://LLL.82DFD1N.1DB:XP/1A719-RQUYYYW-QPUPSPRY<<f<6IIE://.../z2D03-1HV-27G31I-2DLCADz2-A7C9H.6IBA<

http://cj.dotomi.com/l4117ox54N/x38/MLQLOLNU/NMQUUUS/L/L/L?h=d1rm=c0rju1B&30u=q22y%CJ%BO%BO20rju1B.jmxkn.lxv%BOJmxknY0xm3l21%BOYQbY%BOAC%BO5rwCB%BOYqx2x1qxy_AC_UbAF.n6n<<q22y://555.smxzxl7.lxv:H9/lurlt-BAEIIIG-A9E9C9BI<<P<q22y://.../jmxkn-l1F-mr0nl2-mx5wuxjm-urwt1.q2vu<

http://www.emjcd.com/cr122gv32N/v16/KJOJMJLS/LKOSSSQ/J/RQKKJLOJJJKMLLQPMO/PySMOSQtNOLxKKxNRJSuJJLLKSvSuwwJ?q=gB1w=mA1t4BL&DA4=0CC8%MT%LY%LYCA1t4BL.tw7ux.v75%LYTw7uxiA7wDvCB%LYiali%LYKM%LYF16ML%LYi07C7B078_KM_elKP.xGx<v27!CORB-QE3P282<0CC8://FFF.2w797vH.v75:RJ/v41v3-LKOSSSQ-KJOJMJLS<<Z<0CC8://.../tw7ux-vBP-w1AxvC-w7F647tw-4163B.0C54<

http://cj.dotomi.com/kf117nmvuC/mty/BAFADACJ/CBFJJJH/A/A/A?o=w0ql=bzqit0A&2zt=p11x%BI%AN%AN1zqit0A.ilwjm.kwu%ANIlwjmXzwl2k10%ANXPaX%AN9B%AN4qvBA%ANXpw1w0pwx_9B_Ta9E.m5m<<p11x://444.rlwywk6.kwu:G8/ktqks-A9DHHHF-98D8B8AH<<O<p11x://.../ilwjm-k0E-lqzmk1-lw4vtwil-tqvs0.p1ut<

http://www.emjcd.com/e6108xdml5/dkp/2161413A/326AAA8/1/5844132A8278675829/dg5d99f4e4ef22f49347959g7A956A7c?j=oD3y=oC3v6DN&FC6=2EEA%OV%Na%NaEC3v6DN.vy9wz.x97%NaVy9wzkC9yFxED%Nakcnk%NaMO%NaH38ON%Nak29E9D29A_MO_gnMR.zIz<x49!EQTD-NzQHBGQ-HSLO-S7CE75x-HRHI-EDTKT1S-Hz93-ST37S9E-H670-1OwQ07I-QI1D-1OJv8NI-H6JK-1OU0zMI<2EEA://HHH.4y9B9xJ.x97:TL/x63x5-NMQUUUS-MLQLOLNU<<b<2EEA://.../vy9wz-xDR-y3CzxE-y9H869vy-6385D.2E76<

http://cj.dotomi.com/c4106ft10J/t-4/IHMHKHJQ/JIMQQQO/H/H/H?k=l3to=e2tlw3D&52w=s440%EL%DQ%DQ42tlw3D.lozmp.nzx%DQLozmpa2zo5n43%DQaSda%DQCE%DQ7tyED%DQasz4z3sz0_CE_WdCH.p8p<<s440://777.uoz1zn9.nzx:JB/nwtnv-DCGKKKI-CBGBEBDK<<R<s440://.../lozmp-n3H-ot2pn4-oz7ywzlo-wtyv3.s4xw<

http://www.jdoqocy.com/click-2159997-10503029?sid=Trials2&url=http://trials2.adobe.com/AdobeProducts/PHSP/13/.../Photoshop_13_LS16.exe

http://prodesigntools.com/trials2/AdobeProducts/PHSP/13/.../Photoshop_13_LS16.exe

http://esd.adobe.com/AdobeProducts/PHSP/13/.../Photoshop_13_LS16.exe

http://trials2.adobe.com/AdobeProducts/PHSP/13/.../Photoshop_13_LS16.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.