home

adberdr810_en_us.exe

NOSSO

This is a setup program which is used to install the application. The file has been seen being downloaded from scms.spu.ac.th.
Product:
NOSSO(R)

Version:
1.0.0.92

MD5:
3f9ab177fbf358c9cdfa8ee56fa38fc1

SHA-1:
faa6428200251837e8f171191743368166006a9a

SHA-256:
400082137c9303809eabae2064238c8b455494c7640927bde887cafb2c88cf33

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 7:32:11 PM UTC  (today)

File size:
7.1 MB (7,443,800 bytes)

Product version:
1.0.0.92

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\adberdr810_en_us.exe

File PE Metadata
Compilation timestamp:
12/12/2006 10:59:55 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
196608:UuWm9gR1VwEIb8aHIU7lMr+d2qhN5gFCgLMi:Uulac8aHL6F5

Entry address:
0x81C6E

Entry point:
E8, 00, 00, 00, 00, 58, BB, 00, 00, 40, 00, 8B, B3, C0, 00, 00, 00, 8D, 04, 33, 48, 8A, 08, 80, F9, CC, 74, F8, 83, E8, 03, 8B, 10, 8B, B3, 6C, 01, 00, 00, 03, F3, 8D, BB, 00, 10, 00, 00, 57, 8B, CA, 2B, CE, 51, 56, E8, 67, FE, FF, FF, 8D, 50, FC, 2B, 12, 8B, F3, 03, B2, 0C, 01, 00, 00, 8B, BA, 04, 01, 00, 00, B9, 3E, D6, 01, 00, E8, 6B, FF, FF, FF, 8B, B2, 80, 00, 00, 00, 52, 03, F3, 8B, 46, 0C, 0B, C0, 74, 43, 03, C3, 50, E8, 47, 00, 00, 00, 8B, E8, 8B, 0E, 03, CB, 8B, 7E, 10, 03, FB, 8B, 01, 0B, C0, 74...
 
[+]

Entropy:
7.9792  (probably packed)

Code size:
75.7 KB (77,503 bytes)

The file adberdr810_en_us.exe has been seen being distributed by the following URL.

http://scms.spu.ac.th/AdbeRdr810_en_US.exe

Scan adberdr810_en_us.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.