home

adobe_flash_player.zip

The file adobe_flash_player.zip has been detected as a potentially unwanted program by 11 anti-malware scanners. The file has been seen being downloaded from download.downloadhd.eu.
MD5:
3b2dca65996b05fd533ac88eaa6d6345

SHA-1:
285e17b8cd5d9329e499ce9d48c42b126725e311

SHA-256:
42ac28f741e0b57455e7995eb4695ccc03e5a057b0dfdb36a9edce969786b708

Scanner detections:
11 / 68

Status:
Potentially unwanted

Explanation:
Bundles additional software, mostly toolbars and other potentially unwanted applications using the Vittalia monitization installer.

Analysis date:
11/24/2024 6:04:18 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Agent
7.1.1

avast!
Win32:Adware-CKC [PUP]
2014.9-151013

AVG
Generic
2016.0.2957

Dr.Web
infected with Trojan.Vittalia.194
9.0.1.05190

ESET NOD32
Win32/DownloadAssistant.C potentially unwanted application
7.0.302.0

G Data
Win32.Adware.DownloadAssistant
15.10.25

Kaspersky
not-a-virus:HEUR:Downloader.Win32.DownloadAsist
14.0.0.1282

NANO AntiVirus
Trojan.Win32.DownloadAsist.dxlunp
0.30.26.3947

Vba32 AntiVirus
suspected of Malware-Cryptor.FSP.gen
3.12.26.4

VIPRE Antivirus
AirInstaller
44516

Zillya! Antivirus
Downloader.DownloadAsist.Win32.4
2.0.0.2444

File size:
966.8 KB (990,018 bytes)

Common path:
C:\users\{user}\downloads\adobe_flash_player.zip

The file adobe_flash_player.zip has been seen being distributed by the following URL.

http://download.downloadhd.eu/v2/click/fimjsqkl/?d=http://adobe-flash.net/files/adobe_flash_player.exe&key=14c495a5bf4b4fa1fd0fc359e0cc6e032f835f99dfde170b75ed8c39f37489ca&sid=flashnet&uid=&affiliate_image=&product_image=http://adobe-flash.net/.../flash-product.png&icon=http://adobe-flash.net/.../flash.ico&n=Adobe Flash Player&filename=adobe_flash_player

Remove adobe_flash_player.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.