home

adberdr940_en_us.exe

iNOSSO

Adobe Systems, Incorporated

This is a setup program which is used to install the application. The file has been seen being downloaded from download.oldapps.com and multiple other hosts.
Publisher:
Adobe Systems, Incorporated  (signed and verified)

Product:
iNOSSO(R)

Version:
2.0.0.55

MD5:
79a173a6f2b99c2664f4890617669902

SHA-1:
4652a454056b2323097a6357292db3af239bb610

SHA-256:
d6b9d482f6c40c625da7952942deaedccf114c89061b47e6df29b0ceefb96cd2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:17:09 PM UTC  (today)

File size:
26.4 MB (27,634,824 bytes)

Product version:
2.0.0.55

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\autoplay\docs\adberdr940_en_us.exe

Digital Signature
Signed by:
Adobe Systems, Incorporated

Authority:
VeriSign, Inc.

Valid from:
9/28/2009 3:00:00 AM

Valid to:
11/5/2012 2:59:59 AM

Subject:
CN="Adobe Systems, Incorporated", OU=Acrobat Engineering, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Adobe Systems, Incorporated", L=San Jose, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0290965E913340CDA6634CEF31F7FD07

File PE Metadata
Compilation timestamp:
12/14/2009 4:43:15 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
786432:dcb7LX6Yeb3sQWLuUjeTDzFk6uuwtKIJv:dO7LX8b3PWLzsDhkSKv

Entry address:
0x52DC8

Entry point:
50, E8, 00, 00, 00, 00, 5B, 81, EB, A2, 01, 00, 00, B9, 2C, 4C, 01, 00, 2B, D9, 8B, F3, 81, EB, 00, D0, 03, 00, 8B, FB, 81, EB, 00, 10, 00, 00, 57, 51, 56, E8, 89, FE, FF, FF, 83, C4, 0C, 8B, AB, C0, 00, 00, 00, 8D, 2C, 2B, 4D, 8A, 4D, 00, 80, F9, CC, 74, F7, 83, ED, 09, 8B, D3, 81, EA, 00, 00, 40, 00, 01, 55, 00, 83, C5, 06, 01, 55, 00, 8D, 50, FC, 2B, 12, 8B, F3, 03, B2, 0C, 01, 00, 00, 8B, BA, 04, 01, 00, 00, B9, AB, 01, 02, 00, E8, 64, FF, FF, FF, 8B, B2, 80, 00, 00, 00, 52, 03, F3, 8B, 46, 0C, 0B, C0...
 
[+]

Entropy:
8.0000  (probably packed)

Code size:
84 KB (86,060 bytes)

The file adberdr940_en_us.exe has been discovered within the following programs.

Download Accelerator Plus (DAP)  by SpeedBit Ltd.
Download Accelerator Plus (also referred to as DAP) is a download manager for Microsoft Windows. It uses multipart download to increase speeds, creating multiple connections of different file segments to speed up downloads.
redir.speedbit.com/redir.asp?ID=7064
22% remove it
QuickTime 7  by Apple Inc.
Publisher's description - “QuickTime Player 7 supports older media formats, such as QTVR, interactive QuickTime movies, and MIDI files on Snow Leopard and OS X Lion. It also accepts QuickTime 7 Pro registration codes, which turn on QuickTime Pro functions.”
www.apple.com
10% remove it
 
Powered by Should I Remove It?

The file adberdr940_en_us.exe has been seen being distributed by the following 35 URLs.

http://download.oldapps.com/.../AdbeRdr940_en_US.exe

http://www.bin.ge/getfilee.php?id=7687A4A0&access_key=MmIzODY2MzgwYTQ0ZGYyOThjNDA2MzA5ZmM4MGYzMWM4NDI5M2U3NmNkNWQwNDNiOTRjOGVjNmQwNjgxNDViNzAx&captcha=393032

https://e-student.kpru.ac.th/.../AdbeRdr940_en_US.exe

http://www.filehorse.com/download/file/.../

http://download-euro.oldapps.com/.../AdbeRdr940_en_US.exe

http://www.gongtham.net/.../downloads.php?cat_id=10&download_id=68

http://dms.intranet.pajak.go.id/.../download.php?session=8d269d4f4de08dd0a6fe03283c6c3d95&id=37ed4475d8914f5bcdf606091bed8b47

http://www.downloaddoo.com/ProgramId-1668-Seq--type-download-ReturnUrl.aspx

http://www.oldversion.com/common/uploaded_files/.../9.4.0_AdbeRdr940_en_US.exe

http://dc265.4shared.com/download/.../Adobe_Acrobat_Reader_940.exe

http://dc377.4shared.com/download/.../Adobe_Acrobat_Reader_940.exe

http://www.laoembassy.com/AdbeRdr940_en_US.exe

temp:Adobe Reader 9.4.0.exe

http://192.168.3.166/api/1.0/rest/file_contents/SmartWare/Tools/.../AdbeRdr940_en_US.exe

https://drive.google.com/uc?export=download&confirm=uSkJ&id=0B83IKmMInt7denlRT1JOdUhEWGc

http://.../dms/download.php?session=eafe7ae013b4f22b6640020da907bc7d&id=9433b0a3dfa063438fe6a99a8313d6fd

http://www.oldversion.com/windows/download/.../9.4.0_AdbeRdr940_en_US.exe

http://dms.intranet.pajak.go.id/.../download.php?session=11a0b91f35739803ad842863d2d5e975&id=9e3f1a7fc07ea7bc127ad3787bd3bb45

temp:AdbeRdr940_en_US.exe

http://dms.intranet.pajak.go.id/.../download.php?session=2cd1a3635dc6e83c1528c8bd53acd74f&id=4af128dd71f4d52517174e849bdf9ef9

http://dc394.4shared.com/download/.../Adobe_Acrobat_Reader_940.exe

http://www.downloaddoo.com/ProgramId-3154-Seq--type-download-ReturnUrl.aspx

http://dc368.4shared.com/download/.../Adobe_Acrobat_Reader_940.exe

http://wap.9jabaze.com/.../Abode Reader.exe

https://docs.google.com/uc?export=download&confirm=T1jJ&id=0B-3QpK6pqT2xNDU4ZTgxYTAtYmQ0MC00YjhmLTgxYzktM2IyYjkzNWQ3ZmNm

http://www.filehorse.com/download/file/.../

https://www.sascurriculumpathways.com/portal/help/thirdpartyinstallers/.../AdbeRdr940_en_US.exe

http://dl.filehorse.com/win/office-and-business-tools/.../Adobe-Reader-9.4.0.exe

http://e-student.kpru.ac.th/.../AdbeRdr940_en_US.exe

http://software.oldversion.com/download.php?f=YTo1OntzOjQ6InRpbWUiO2k6MTQ1MDkzMDgwNTtzOjI6ImlkIjtpOjQ3ODA7czo0OiJmaWxlIjtzOjI2OiI5LjQuMF9BZGJlUmRyOTQwX2VuX1VTLmV4ZSI7czozOiJ1cmwiO3M6NTQ6Imh0dHA6Ly93d3cub2xkdmVyc2lvbi5jb20vd2luZG93cy9hY3JvYmF0LXJlYWRlci05LTQtMCI7czo0OiJwYXNzIjtzOjMyOiIzMmY0MGY2YmZmMGE1YmEwOTFiOWI5ZTJlMDRkOWQ1MSI7fQ==

Latest 30 of 35 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.