home

adobe_flash_player-40379365.exe

Zen Bros Media

The application adobe_flash_player-40379365.exe by Zen Bros Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from intva31.discdispatch.info and multiple other hosts.
Publisher:
Zen Bros Media  (signed and verified)

MD5:
18c717a470962e05d398e3ca6d43f48a

SHA-1:
843025ac6140a3b65213c8de6abb2af9371f8f1b

SHA-256:
a19223dc431d9dc58c8e14e987bb2789a4346cc912e556918289426cfb3b0262

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 8:43:55 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DownloadAdmin.ZenBrosM
16.5.21.13

File size:
471.3 KB (482,568 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\adobe_flash_player-40379365.exe

Digital Signature
Signed by:
Zen Bros Media

Authority:
GoDaddy.com, Inc.

Valid from:
3/9/2016 3:12:43 AM

Valid to:
3/9/2017 3:12:43 AM

Subject:
CN=Zen Bros Media, O=Zen Bros Media, L=SAN FRANCISCO, S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00DA69A0BD854BB554

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
12288:/ThKd6hIaNYLNcYM4+Q3sMnMbI7cRFUJ6DNF99GIR6a:/VKd62AYJcYM4+Q3sMMbIIRFUJ6DNF9j

Entry address:
0x4C6E0

Entry point:
C6, 05, 70, D2, 44, 00, 00, B9, 00, 00, 46, 00, BA, 04, 00, 46, 00, B8, B0, F6, 44, 00, E8, 65, FF, FF, FF, E8, 70, FF, FF, FF, B8, 90, F6, 44, 00, E8, 16, 4B, FC, FF, C3, 00, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.7060

Code size:
301.8 KB (309,024 bytes)

The file adobe_flash_player-40379365.exe has been seen being distributed by the following 35 URLs.

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40608974&ephemeral=1&filename=adobe_flash_player.exe&cb=1227969120&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40595293&ephemeral=1&filename=adobe_flash_player.exe&cb=1605147898&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40529430&ephemeral=1&filename=adobe_flash_player.exe&cb=-1888831649&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40593694&ephemeral=1&filename=adobe_flash_player.exe&cb=563342403&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40396768&ephemeral=1&filename=adobe_flash_player.exe&cb=1575730190&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40406421&ephemeral=1&filename=adobe_flash_player.exe&cb=-1958832075&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40420475&ephemeral=1&filename=adobe_flash_player.exe&cb=-690668066&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40396775&ephemeral=1&filename=adobe_flash_player.exe&cb=-877136752&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40602636&ephemeral=1&filename=adobe_flash_player.exe&cb=-1453865546&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40516802&ephemeral=1&filename=adobe_flash_player.exe&cb=-1676174793&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40523991&ephemeral=1&filename=adobe_flash_player.exe&cb=-194571221&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40498424&ephemeral=1&filename=adobe_flash_player.exe&cb=-1015693692&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40420912&ephemeral=1&filename=adobe_flash_player.exe&cb=1531155424&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40581444&ephemeral=1&filename=adobe_flash_player.exe&cb=1111887013&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40512837&ephemeral=1&filename=adobe_flash_player.exe&cb=1615324394&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40608132&ephemeral=1&filename=adobe_flash_player.exe&cb=-875359584&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40429789&ephemeral=1&filename=adobe_flash_player.exe&cb=263678493&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40609366&ephemeral=1&filename=adobe_flash_player.exe&cb=701833866&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40579669&ephemeral=1&filename=adobe_flash_player.exe&cb=-160609974&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40534826&ephemeral=1&filename=adobe_flash_player.exe&cb=-1560070262&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40353373&ephemeral=1&filename=adobe_flash_player.exe&cb=-1210219289&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40623614&ephemeral=1&filename=adobe_flash_player.exe&cb=2055637265&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40472412&ephemeral=1&filename=adobe_flash_player.exe&cb=-747284468&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40514693&ephemeral=1&filename=adobe_flash_player.exe&cb=-293128825&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40478949&ephemeral=1&filename=adobe_flash_player.exe&cb=1253939035&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40525257&ephemeral=1&filename=adobe_flash_player.exe&cb=-826631500&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40614620&ephemeral=1&filename=adobe_flash_player.exe&cb=-662084559&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40600472&ephemeral=1&filename=adobe_flash_player.exe&cb=-110634833&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40630868&ephemeral=1&filename=adobe_flash_player.exe&cb=299809578&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.discdispatch.info/dl-pure/1202331/.../?bc=1202331&checksum=40417178&ephemeral=1&filename=adobe_flash_player.exe&cb=1901999000&hashstring=xYwZvI7RgAw1&usefilename=true&executableroutePath=1202485&stub=true

Latest 30 of 35 download URLs

Remove adobe_flash_player-40379365.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.