home

820f7ce0-6c10-4ea3-a5ad-bae77186d341

Adobe Self Extractor

Adobe Systems, Incorporated

Publisher:
Adobe Systems Incorporated  (signed by Adobe Systems, Incorporated)

Product:
Adobe Self Extractor

Version:
15.10.20056.167417

MD5:
3a28dc6cb03067b0609b6007c16eec4a

SHA-1:
b89aa02e342d296f0afbe65d195e2fd717e2711a

SHA-256:
1da5d9f8d4f1ac9b12807670cdd805efd84b47975915361074a043fd7594bc3c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 4:34:43 PM UTC  (today)

File size:
80.7 MB (84,602,040 bytes)

Product version:
15.10.20056.167417

Copyright:
Copyright 2016 Adobe Systems Incorporated. All rights reserved.

Original file name:
AdobeSelfExtractor.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\adobe\6058ec1a-3ac7-4b3a-832b-233133e6b17e\dc003792-de3d-48c9-8610-62775054c077\820f7ce0-6c10-4ea3-a5ad-bae77186d341

Digital Signature
Signed by:
Adobe Systems, Incorporated

Authority:
Symantec Corporation

Valid from:
5/13/2015 5:00:00 PM

Valid to:
5/7/2017 4:59:59 PM

Subject:
CN="Adobe Systems, Incorporated", OU=Acrobat DC, O="Adobe Systems, Incorporated", L=San Jose, S=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
10FB713319027F3F1F1C0667B3C38CA9

File PE Metadata
Compilation timestamp:
12/18/2015 4:37:23 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
1572864:zx1gtlHmiHYQEMgBtPMAV2mussvcHhvsOgUhmiWRBld9M+pGj+k9:V1gtlGinFYtP8TssvcHhEOgjiWRJ93GR

Entry address:
0x22BF1

Entry point:
E8, 90, 74, 00, 00, E9, 7F, FE, FF, FF, 3B, 0D, E0, C6, 44, 00, 75, 02, F3, C3, E9, 71, 45, 00, 00, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 00, 08, 45, 00, FF, 15, 3C, A2, 43, 00, 85, C0, 75, 18, 56, E8, 8F, 23, 00, 00, 8B, F0, FF, 15, C8, A2, 43, 00, 50, E8, 94, 23, 00, 00, 59, 89, 06, 5E, 5D, C3, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 77, 6F, 53, 57, A1, 00, 08, 45, 00, 85, C0, 75, 1D, E8, C1, 71, 00, 00, 6A, 1E, E8, 17, 72, 00, 00, 68, FF, 00, 00, 00, E8, AE, 0D, 00, 00, A1, 00...
 
[+]

Entropy:
7.9989  (probably packed)

Code size:
228 KB (233,472 bytes)

The file 820f7ce0-6c10-4ea3-a5ad-bae77186d341 has been seen being distributed by the following 20 URLs.

http://www.filepuma.com/file/1455322806c10599/adobe_acrobat_reader_dc_15.010.20056/.../0/

http://rgwha1.elcld.com/share-public/.../octet-stream&Signature=OdDVePgvrga4zRqZ2Lz5hD0Dr4k=

http://pr26.rapidgator.net//.../index&session_id=izvroZwir4IMyRBeNJ6gZ1WMNvnLC76P

http://www.filehorse.com/download/file/.../

http://share2.earthlinktele.com/download.aspx?file=352435615

https://www.dropbox.com/s/.../AcroRdrDC1501020056_en_US.exe

https://www.kaldata.com/modules.php?modid=1&action=download&id=147

http://www.filepuma.com/file/1452808642c10599/adobe_acrobat_reader_dc_15.010.20056/.../0/

http://www.filepuma.com/file/1452815029c10599/adobe_acrobat_reader_dc_15.010.20056/.../0/

http://dl.filehorse.com/win/office-and-business-tools/.../Adobe-Acrobat-Reader-DC-2015.010.20056.exe

http://www.filepuma.com/file/1454352647c10599/adobe_acrobat_reader_dc_15.010.20056/.../0/

https://download.id/.../adobereader_DOWNLOAD.ID.exe

http://www.filepuma.com/file/1453395951c10599/adobe_acrobat_reader_dc_15.010.20056/.../0/

https://ardownload2.adobe.com/pub/adobe/reader/win/AcrobatDC/.../AcroRdrDC1501020056_en_US.exe

http://www.filepuma.com/file/1452770361c10599/adobe_acrobat_reader_dc_15.010.20056/.../0/

ftp://ftp.adobe.com/pub/adobe/reader/win/AcrobatDC/.../AcroRdrDC1501020056_en_US.exe

http://ardownload.adobe.com/pub/adobe/reader/win/AcrobatDC/.../AcroRdrDC1501020056_en_US.exe

http://www.filehorse.com/download/file/.../

http://download.id/.../adobereader_DOWNLOAD.ID.exe

http://down.filepuma.com/files/document-management/.../Adobe_Acrobat_Reader_DC_v2015.010.20056.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.