home

adobe_flash_player-56882652.exe

Zen Bros Media

The application adobe_flash_player-56882652.exe by Zen Bros Media has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from intva31.techdisplay.info and multiple other hosts.
Publisher:
Zen Bros Media  (signed and verified)

MD5:
f0437f6264e38c0b31ceeb994407ff4b

SHA-1:
6f2352542972d4b7ec3b5687f6f2c9baf1ee31cf

SHA-256:
af9cb24800d9fa57da4ca6aa36edf68fc34401878e4cbd63dd551b27d9bfe5e4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 3:44:11 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DownloadAdmin.ZenBrosM (M)
16.6.11.12

File size:
429.3 KB (439,560 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\adobe_flash_player-56882652.exe

Digital Signature
Signed by:
Zen Bros Media

Authority:
GoDaddy.com, Inc.

Valid from:
3/8/2016 2:12:43 PM

Valid to:
3/8/2017 2:12:43 PM

Subject:
CN=Zen Bros Media, O=Zen Bros Media, L=SAN FRANCISCO, S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
00DA69A0BD854BB554

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
12288:6zxKdS7vd/x3z+NiqIJQ3I11NWkeytMkUMnZtWNK:6lKdSbPj+NiqIJQ3I110keoMkUMnZWK

Entry address:
0x4D830

Entry point:
C6, 05, 70, E2, 44, 00, 00, B9, 00, 10, 46, 00, BA, 04, 10, 46, 00, B8, B0, 07, 45, 00, E8, 65, FF, FF, FF, E8, 70, FF, FF, FF, B8, 90, 07, 45, 00, E8, C6, 39, FC, FF, C3, 00, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4617

Code size:
306.1 KB (313,456 bytes)

The file adobe_flash_player-56882652.exe has been seen being distributed by the following 32 URLs.

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56892575&ephemeral=1&filename=adobe_flash_player.exe&cb=1065154815&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57181588&ephemeral=1&filename=adobe_flash_player.exe&cb=929150815&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56917331&ephemeral=1&filename=adobe_flash_player.exe&cb=-738903710&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56968980&ephemeral=1&filename=adobe_flash_player.exe&cb=-229711884&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57232533&ephemeral=1&filename=adobe_flash_player.exe&cb=1811443722&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56926141&ephemeral=1&filename=adobe_flash_player.exe&cb=716396913&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56936803&ephemeral=1&filename=adobe_flash_player.exe&cb=-1825058467&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57105922&ephemeral=1&filename=adobe_flash_player.exe&cb=1435178529&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57069768&ephemeral=1&filename=adobe_flash_player.exe&cb=-1160586773&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56921863&ephemeral=1&filename=adobe_flash_player.exe&cb=-912160091&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56885728&ephemeral=1&filename=adobe_flash_player.exe&cb=-1751116486&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57310238&ephemeral=1&filename=adobe_flash_player.exe&cb=1558857944&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57029009&ephemeral=1&filename=adobe_flash_player.exe&cb=348890107&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57017581&ephemeral=1&filename=adobe_flash_player.exe&cb=1994518158&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57191969&ephemeral=1&filename=adobe_flash_player.exe&cb=1796135969&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56941374&ephemeral=1&filename=adobe_flash_player.exe&cb=-863844242&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57215351&ephemeral=1&filename=adobe_flash_player.exe&cb=697394676&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57172981&ephemeral=1&filename=adobe_flash_player.exe&cb=-1233438606&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57309810&ephemeral=1&filename=adobe_flash_player.exe&cb=-467785589&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56886357&ephemeral=1&filename=adobe_flash_player.exe&cb=-202640143&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57160812&ephemeral=1&filename=adobe_flash_player.exe&cb=241822066&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57199441&ephemeral=1&filename=adobe_flash_player.exe&cb=-92341689&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56888668&ephemeral=1&filename=adobe_flash_player.exe&cb=1457163154&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56952318&ephemeral=1&filename=adobe_flash_player.exe&cb=1215666396&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57055351&ephemeral=1&filename=adobe_flash_player.exe&cb=995048888&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57033368&ephemeral=1&filename=adobe_flash_player.exe&cb=-995542848&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57290249&ephemeral=1&filename=adobe_flash_player.exe&cb=563623943&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57098452&ephemeral=1&filename=adobe_flash_player.exe&cb=2044306579&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=57148469&ephemeral=1&filename=adobe_flash_player.exe&cb=-882380730&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

http://intva31.techdisplay.info/dl-pure/1202331/.../?bc=1202331&checksum=56931391&ephemeral=1&filename=meda_player_plus_Setup.exe&cb=-1541277427&hashstring=G75BfKKPAidm&usefilename=true&executableroutePath=1203463&stub=true

Latest 30 of 32 download URLs

Remove adobe_flash_player-56882652.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.