home

adobe_flash_player-39608345.exe

Zen Bros Media

The application adobe_flash_player-39608345.exe by Zen Bros Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup program which is used to install the application. The file has been seen being downloaded from intva31.chipcircuit.info and multiple other hosts.
Publisher:
Zen Bros Media  (signed and verified)

MD5:
8177a08f269a9287bc69dab6b28498b2

SHA-1:
a339305a03f3f90d3ff09da57795e87800eadc73

SHA-256:
5b0f5a94945b128b84a8760d7cc1e25690f904096d6ef5849e5221d7271e64f3

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 12:24:24 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DownloadAdmin.ZenBrosM
16.5.20.7

File size:
471.3 KB (482,568 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\programs\adobe_flash_player-39608345.exe

Digital Signature
Signed by:
Zen Bros Media

Authority:
GoDaddy.com, Inc.

Valid from:
3/8/2016 11:12:43 PM

Valid to:
3/8/2017 11:12:43 PM

Subject:
CN=Zen Bros Media, O=Zen Bros Media, L=SAN FRANCISCO, S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00DA69A0BD854BB554

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
12288:/ThKd6hIaNYLNcYM4+Q3sMnMbI7cRFUJ6DNF99GIR6R:/VKd62AYJcYM4+Q3sMMbIIRFUJ6DNF9g

Entry address:
0x4C6E0

Entry point:
C6, 05, 70, D2, 44, 00, 00, B9, 00, 00, 46, 00, BA, 04, 00, 46, 00, B8, B0, F6, 44, 00, E8, 65, FF, FF, FF, E8, 70, FF, FF, FF, B8, 90, F6, 44, 00, E8, 16, 4B, FC, FF, C3, 00, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Code size:
301.8 KB (309,024 bytes)

The file adobe_flash_player-39608345.exe has been seen being distributed by the following 33 URLs.

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39920203&ephemeral=1&filename=adobe_flash_player.exe&cb=516690957&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39826172&ephemeral=1&filename=adobe_flash_player.exe&cb=22563802&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39909948&ephemeral=1&filename=adobe_flash_player.exe&cb=963455269&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39683869&ephemeral=1&filename=adobe_flash_player.exe&cb=465276704&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39702090&ephemeral=1&filename=adobe_flash_player.exe&cb=893225754&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39876196&ephemeral=1&filename=adobe_flash_player.exe&cb=1800483367&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39734945&ephemeral=1&filename=adobe_flash_player.exe&cb=-130611561&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39856545&ephemeral=1&filename=adobe_flash_player.exe&cb=-1542946783&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39757878&ephemeral=1&filename=adobe_flash_player.exe&cb=1295751585&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39851223&ephemeral=1&filename=adobe_flash_player.exe&cb=-1643119214&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39813857&ephemeral=1&filename=adobe_flash_player.exe&cb=-1599589733&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39829194&ephemeral=1&filename=adobe_flash_player.exe&cb=-495650731&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39815362&ephemeral=1&filename=adobe_flash_player.exe&cb=-39821501&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39854765&ephemeral=1&filename=adobe_flash_player.exe&cb=-1079972463&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39756355&ephemeral=1&filename=adobe_flash_player.exe&cb=190345192&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39691707&ephemeral=1&filename=adobe_flash_player.exe&cb=-1243804764&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39911419&ephemeral=1&filename=adobe_flash_player.exe&cb=-1484652121&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39623635&ephemeral=1&filename=adobe_flash_player.exe&cb=-1472023305&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39813981&ephemeral=1&filename=adobe_flash_player.exe&cb=1038402155&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39877788&ephemeral=1&filename=adobe_flash_player.exe&cb=-1973045344&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39870890&ephemeral=1&filename=adobe_flash_player.exe&cb=651634220&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39637084&ephemeral=1&filename=adobe_flash_player.exe&cb=651452458&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39895034&ephemeral=1&filename=adobe_flash_player.exe&cb=943384433&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39616266&ephemeral=1&filename=adobe_flash_player.exe&cb=2146747519&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39934432&ephemeral=1&filename=adobe_flash_player.exe&cb=1881361570&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39834737&ephemeral=1&filename=adobe_flash_player.exe&cb=2102422000&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39859651&ephemeral=1&filename=adobe_flash_player.exe&cb=-1238609415&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39773816&ephemeral=1&filename=adobe_flash_player.exe&cb=1110989094&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.chipcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=39888443&ephemeral=1&filename=adobe_flash_player.exe&cb=-1238017761&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.astroconnect.info/dl-pure/1202331/.../?bc=1202331&checksum=39614829&ephemeral=1&filename=559.exe&cb=2002857588&hashstring=8UQFfvpRcrYc&usefilename=true&executableroutePath=1202485&stub=true

Latest 30 of 33 download URLs

Remove adobe_flash_player-39608345.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.