home

adobe_flash_player-56479306.exe

Zen Bros Media

The application adobe_flash_player-56479306.exe by Zen Bros Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from intva31.systembrowser.info and multiple other hosts.
Publisher:
Zen Bros Media  (signed and verified)

MD5:
d3e790259a5c71c907c905ef2a451de4

SHA-1:
a92a4047a0373a808bfeb7261175d2ffe7689cf0

SHA-256:
5b4264998919b31577cbb385762977679d13f68c595faf0247ca482e8f8589f2

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 12:25:19 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DownloadAdmin.ZenBrosM (M)
16.6.10.22

File size:
429.3 KB (439,560 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\adobe_flash_player-56479306.exe

Digital Signature
Signed by:
Zen Bros Media

Authority:
GoDaddy.com, Inc.

Valid from:
3/8/2016 4:12:43 PM

Valid to:
3/8/2017 4:12:43 PM

Subject:
CN=Zen Bros Media, O=Zen Bros Media, L=SAN FRANCISCO, S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00DA69A0BD854BB554

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
12288:6zxKdS7vd/x3z+NiqIJQ3I11NWkeytMkUMnZtWNq:6lKdSbPj+NiqIJQ3I110keoMkUMnZWq

Entry address:
0x4D830

Entry point:
C6, 05, 70, E2, 44, 00, 00, B9, 00, 10, 46, 00, BA, 04, 10, 46, 00, B8, B0, 07, 45, 00, E8, 65, FF, FF, FF, E8, 70, FF, FF, FF, B8, 90, 07, 45, 00, E8, C6, 39, FC, FF, C3, 00, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4618

Code size:
306.1 KB (313,456 bytes)

The file adobe_flash_player-56479306.exe has been seen being distributed by the following 49 URLs.

http://intva31.systembrowser.info/dl-pure/1203367/.../?bc=1203367&checksum=73649994&ephemeral=1&filename=adobe_flash_player.exe&cb=-879974311&hashstring=cXjPGSqwJdsS&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.sitecyber.info/dl-pure/1202331/.../?bc=1202331&checksum=62034154&ephemeral=1&filename=adobe_flash_player.exe&cb=248550941&hashstring=REaXFfJj67fi&usefilename=true&executableroutePath=1203525&stub=true

http://intva31.webmasterprocessor.info/dl-pure/1202331/.../?bc=1202331&checksum=61077320&ephemeral=1&filename=adobe_flash_player.exe&cb=-821529102&hashstring=0eJAojs8HXBw&usefilename=true&executableroutePath=1203525&stub=true

http://intva31.wirelessdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56739934&ephemeral=1&filename=adobe_flash_player.exe&cb=-126776620&hashstring=k3b7Q0sVNrT8&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.wirelessdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56581837&ephemeral=1&filename=adobe_flash_player.exe&cb=72270518&hashstring=k3b7Q0sVNrT8&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.wirelessdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56484661&ephemeral=1&filename=adobe_flash_player.exe&cb=1500845113&hashstring=k3b7Q0sVNrT8&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.zonebrowser.info/dl-pure/1203367/.../?bc=1203367&checksum=73189578&ephemeral=1&filename=adobe_flash_player.exe&cb=2117623210&hashstring=N1z5WJdnSpOQ&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.processordownload.info/dl-pure/1203367/.../?bc=1203367&checksum=74207109&ephemeral=1&filename=adobe_flash_player.exe&cb=-2131680409&hashstring=xkpNFhICq03W&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.processordownload.info/dl-pure/1203367/.../?bc=1203367&checksum=74286028&ephemeral=1&filename=adobe_flash_player.exe&cb=1126309244&hashstring=xkpNFhICq03W&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.wirelessdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56655209&ephemeral=1&filename=adobe_flash_player.exe&cb=-670235777&hashstring=k3b7Q0sVNrT8&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.trendssite.info/dl-pure/1203367/.../?bc=1203367&checksum=71104947&ephemeral=1&filename=adobe_flash_player.exe&cb=803753128&hashstring=HMXfxIbcYj2e&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.downloaddot.info/dl-pure/1203367/.../?bc=1203367&checksum=72881585&ephemeral=1&filename=adobe_flash_player.exe&cb=1578121&hashstring=vQ2nnZvs3cZC&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.systemdownload.info/dl-pure/1203367/.../?bc=1203367&checksum=70441486&ephemeral=1&filename=adobe_flash_player.exe&cb=1996112618&hashstring=OssemHHiP868&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.wirelessdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56692479&ephemeral=1&filename=adobe_flash_player.exe&cb=1300612281&hashstring=k3b7Q0sVNrT8&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.wirelessdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56603077&ephemeral=1&filename=adobe_flash_player.exe&cb=420781017&hashstring=k3b7Q0sVNrT8&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.coreweb.info/dl-pure/1202331/.../?bc=1202331&checksum=68759341&ephemeral=1&filename=adobe_flash_player.exe&cb=662536638&hashstring=sE4DFMHLyXYO&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.chipinternet.info/dl-pure/1203367/.../?bc=1203367&checksum=72834138&ephemeral=1&filename=adobe_flash_player.exe&cb=964312192&hashstring=m0fAUvx6hZWE&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.linkdesktop.info/dl-pure/1202331/.../?bc=1202331&checksum=62394193&ephemeral=1&filename=adobe_flash_player.exe&cb=-1425739123&hashstring=pwV9Tmpac1Zm&usefilename=true&executableroutePath=1203525&stub=true

http://intva31.webmasterprocessor.info/dl-pure/1202331/.../?bc=1202331&checksum=60920042&ephemeral=1&filename=adobe_flash_player.exe&cb=1434601953&hashstring=0eJAojs8HXBw&usefilename=true&executableroutePath=1203525&stub=true

http://intva31.downloaddot.info/dl-pure/1203367/.../?bc=1203367&checksum=72956582&ephemeral=1&filename=adobe_flash_player.exe&cb=900534943&hashstring=vQ2nnZvs3cZC&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.rootemail.info/dl-pure/1203367/.../?bc=1203367&checksum=72092519&ephemeral=1&filename=adobe_flash_player.exe&cb=1748506238&hashstring=qkAZN0sLWsW5&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.tronblogging.info/dl-pure/1203367/.../?bc=1203367&checksum=70882989&ephemeral=1&filename=adobe_flash_player.exe&cb=2035989960&hashstring=bS9zVCHRuNCN&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.zonebrowser.info/dl-pure/1203367/.../?bc=1203367&checksum=73245608&ephemeral=1&filename=adobe_flash_player.exe&cb=1298017096&hashstring=N1z5WJdnSpOQ&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.comcircuit.info/dl-pure/1202331/.../?bc=1202331&checksum=67013281&ephemeral=1&filename=adobe_flash_player.exe&cb=-71579869&hashstring=1p2GLdoa6ZU5&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.computermatic.info/dl-pure/1202331/.../?bc=1202331&checksum=60580688&ephemeral=1&filename=adobe_flash_player.exe&cb=1028842130&hashstring=iDvRJBreCa35&usefilename=true&executableroutePath=1203525&stub=true

http://intva31.webmasterupgrade.info/dl-pure/1202331/.../?bc=1202331&checksum=59723211&ephemeral=1&filename=adobe_flash_player.exe&cb=1323121566&hashstring=XSPKhi0JUFds&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.neoemail.info/dl-pure/1203367/.../?bc=1203367&checksum=70718276&ephemeral=1&filename=adobe_flash_player.exe&cb=1262942427&hashstring=2UPP7MFrJLYa&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.rootemail.info/dl-pure/1203367/.../?bc=1203367&checksum=72160138&ephemeral=1&filename=adobe_flash_player.exe&cb=993022499&hashstring=qkAZN0sLWsW5&usefilename=true&executableroutePath=1203655&stub=true

http://intva31.pagedigital.info/dl-pure/1202331/.../?bc=1202331&checksum=58378914&ephemeral=1&filename=adobe_flash_player.exe&cb=-1161517501&hashstring=TV4d6IiRMMJp&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.wirelessdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56831984&ephemeral=1&filename=adobe_flash_player.exe&cb=-1967671869&hashstring=k3b7Q0sVNrT8&usefilename=true&executableroutePath=1203463&stub=true

Latest 30 of 49 download URLs

Remove adobe_flash_player-56479306.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.