home

adobe_flash_setup .exe

flash setup

Digital Vei,OOO

The application adobe_flash_setup .exe by Digital Vei,OOO has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from readyupdate.applicationtechnica.website and multiple other hosts.
Publisher:
Digital Vei,OOO  (signed and verified)

Product:
flash setup

Version:
1.0.0.0

MD5:
d05e6fb86a3343a4837522aa556ddd47

SHA-1:
887a596a18fd175afddfe2b4e20b9acec5cdf3af

SHA-256:
6b48ce90517d01674db8a707d528e09955d00b77e140687d953158672ccda3a1

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/24/2024 6:02:44 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.DigitalV.Installer (M)
16.4.18.21

File size:
187.1 KB (191,568 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2016

Original file name:
Flash.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\adobe_flash_setup.exe

Digital Signature
Signed by:
Digital Vei,OOO

Authority:
COMODO CA Limited

Valid from:
4/24/2015 5:00:00 AM

Valid to:
4/24/2016 4:59:59 AM

Subject:
CN="Digital Vei,OOO", OU=Development 2, O="Digital Vei,OOO", STREET=ul. Bratislavskaya 21 Korp. 1, L=Moscow, S=Moscow, PostalCode=109451, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0081D507B47243FED522FD7B6AA8ED0F56

File PE Metadata
Compilation timestamp:
4/16/2016 10:08:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:40zLUcoQ9mZ5UGCqbntMUeTkHHRAzQ4IbLHhxy/jJdurUh1T/WLwA6F11:h/oQ9mZ5UEbiQUQ7hxyLur+YMFv

Entry address:
0xC36E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3821

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
41 KB (41,984 bytes)

The file adobe_flash_setup .exe has been seen being distributed by the following 24 URLs.

http://readyupdate.applicationtechnica.website/dl.php?uzrs=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8MTgxOHwyNzI4NTl8MjQzMTk0fDE0NjEyNjcyMjh8NjgzZmFkNmQtZmI5OC00YzZkLWNjYzYtNzNkMDcyZTFiNmJlfDQxLjE0My44OC44fHwyfDdiODZkYTQxZDYyOTAwMDVkNzdkYWNjMDQ3YjY0MjNi&conversion_id=14612672914439&app_id=4&lp_id=1401&v=tribat&stub_id=305&v_id=2mCb9_-cVAVY70Zz4R-PNPxhmu8-pXHGNYdyMJCtAQ0.&lpp=*-*-*

http://softnewready.applicationtechnica.website/dl.php?ztse=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8NjYxNDR8MjcyODYwfDI3MjQ1N3wxNDYxMjY2MjcyfDA4YjU2ZjdkLTRlY2UtNGU3Mi1jZTljLTg3YmIzNjg4ZDJlZnw1Ljg4LjEyNi4xNjV8fDEyfDdiODZkYTQxZDYyOTAwMDVkNzdkYWNjMDQ3YjY0MjNi&conversion_id=14612663557177&app_id=4&lp_id=1526&v=tribat&stub_id=305&v_id=tw97Z1Apezyu5emxVbsMx8sSndMhvCTVAjp6WFHbyF0.&lpp=*-*-*

http://liveupdate.newsearch2update.tech/dl.php?gtrh=fR-AFg94yfhF1DG-RUmngr1dNub5IDw8Vr41PwqauVs.&cid=MTI2NjM5NnxqZXRsb2FkLnR2fFVTQXx8MTMxNDgxNjB8fHwxODc5OTU4fDIwNC45My41OC4xMzF8NDk4fDMxfHw0MXwyfDN8MHwwfHx8MXwwfDE5MjB4MTA4MHw1NmUzZTEyZjkzZTQzMC40MDMxMzU4NTI2NDAyMDk2N3wxMDE5Mnx8MHwyfGpldGxvYWQudHZ8MHwwfDB8MmMzODE3ZDJlYWRkZTNmYjJjOWYwZTVkMWQ0NDQ0ZWM=&sub=jetload.tv&conversion_id=14613136432260&app_id=129&lp_id=1526&v=tribat&stub_id=305&v_id=_xeTh1yf9KQVTtrWU2Rj3-WM-nPnHir0xAKN276X6dA.&lpp=*-*-*

http://upgradeget.clickonupdate.site/dl.php?vuctr=FOxpjjPbb5uWJF4egS_a5iOG8oqZgkc60zinEq__lyo.&cid=P23P9R4610393097179054176&sub=3903&conversion_id=14610393102422&app_id=4&lp_id=1602&v=tribat&stub_id=305&v_id=Z7zrHvVAEIyG7t4g2YIVT2-qqN_a9Glc1oHJLRTHEvo.&lpp=*-*-*

http://readyupdate.applicationtechnica.website/dl.php?uzrs=i3tCnE120uiRPGos8JmbRCR_GKOWydR8OoYMObPkBtY.&cid=10915&sid=1024382b35edb9f0447c0c25d2052a&conversion_id=14612667776521&app_id=63&lp_id=1392&v=tribat&stub_id=305&v_id=CfQ1KPQ15aclTJAEfakQL4erD3A1huXPLHGz2cjfFZ0.&lpp=*-*-*

http://getsoftnow.soft-video.top/dl.php?ertwgf=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8NjAzMHwyNzI4NTl8MjQyNTQyfDE0NjEwNDI3Njh8ZDlhYTgyZWMtMDg1ZC00NDZhLWM0YzUtMGFjNWQ0MTE0ZTBjfDExOS4xNTkuOTQuMTI5fHwzfDdiODZkYTQxZDYyOTAwMDVkNzdkYWNjMDQ3YjY0MjNi&conversion_id=14610427771739&app_id=4&lp_id=1401&v=tribat&stub_id=305&v_id=X_Vusw9brvv6OlV3s7b2T-P70KUCUe6IQsTSpoVq5Vg.&lpp=*-*-*

http://update.soft2download.website/dl.php?dfs=qU3Z7XUlfImHuT1FQ4EPPqG1uIwy8JoStrTO-HH4cqA.&cid=1461267924mb54212350935&conversion_id=14612679249415&app_id=4&lp_id=1590&v=tribat&stub_id=305&v_id=Q7nar6ioD0DBOdxxhLKbLQXknmO1p6qWit-y2CEoCno.&lpp=*-*-*

http://upgradeget.clickonupdate.site/dl.php?vuctr=FOxpjjPbb5uWJF4egS_a5iOG8oqZgkc60zinEq__lyo.&cid=P23P5R4610404822783541650&sub=3903&conversion_id=14610404841776&app_id=129&lp_id=1208&v=tribat&stub_id=305&v_id=1ufK9IixameP9MMYSQDbTot0C5REvN7d_WQHb6VRf-0.&lpp=*-*-*

http://upgradeinstall.clickonupdate.site/dl.php?ygfduy=uiDPp9eE4P6uRtw2V6VSMgRQjUwdPYOCiq2hig7_IiE.&cid=173765329456&sid=561137&conversion_id=14610407937627&app_id=4&lp_id=1569&v=tribat&stub_id=305&v_id=niNAd8D9-U_1ouwNf8yOJevSNmIhP1VZQ8jaskmUHqU.&lpp=*-*-*

http://readyupdate.applicationtechnica.website/dl.php?uzrs=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8NjYxNDR8MjcyODU4fDQwMTE5MXwxNDYxMjY1OTIwfDI3OGQ1ZTBkLTVjODgtNGNlOC1jYzc0LTQwYzI4ZDUyMTMzMHw2Mi45MC4xODcuMjUyfHwxfDdiODZkYTQxZDYyOTAwMDVkNzdkYWNjMDQ3YjY0MjNi&conversion_id=14612660515690&app_id=4&lp_id=1401&v=tribat&stub_id=305&v_id=s-G84eP67kEJFgyxmjEm5TShETEir-AljqDq5SbjTvU.&lpp=*-*-*

http://softnewready.applicationtechnica.website/dl.php?ztse=-xRMXj34Npoq2oM8sE2gTM8sZWadTg2jeB3lSlHiqko.&subid=VjJ8NjYxNDR8MjYwMjk4fDM2MDU3NnwxNDYxMjY1MTg3fGU5N2JkNWFhLTA0MWMtNGQ3MC1jZGYxLWFjNTFiY2M1NjExNHw4Ni4xNzguMTg1LjIxMHx8MjR8MTQ4N2M0ZmUwZTM1MjRmYjFkNDI2NWM2YWQ1OWYwZTM=&conversion_id=14612655289378&app_id=4&lp_id=1401&v=tribat&stub_id=305&v_id=Un7PK8gEiEjZ4whwGMoEATzPuv2sB-8cvTAbrdewoHs.&lpp=w10*-*-*

http://getnewsoft.soft-video.top/dl.php?ertwgf=qU3Z7XUlfImHuT1FQ4EPPqG1uIwy8JoStrTO-HH4cqA.&cid=1461040765mb28673869271&conversion_id=14610407653265&app_id=129&lp_id=1590&v=tribat&stub_id=305&v_id=i5iu1PzNwUQs2yvdlWda4LEUiOFVpoJiQKROLMl5mkc.&lpp=*-*-*

http://readyupdate.applicationtechnica.website/dl.php?uzrs=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8Mzc2MzU0MnwyNjA2NTJ8NDAxMTkxfDE0NjEyNjYzMDB8MGE1ZTU3ZjktNmFhMS00ODE1LWM4ZmYtN2E3OTYwY2NlZGQxfDQxLjE3Ni4yNDguMTIxfHwxfDFlMmJiYjlhNzZiNDAzZDE3ZTA5YWMxNmVkOTE2YjFj&conversion_id=14612663182455&app_id=4&lp_id=1401&v=tribat&stub_id=305&v_id=5eVYJUwOTw9r8bf0ymlQ3a_OgRz343VU1z_uC6wvu3A.&lpp=*-*-*

http://update.soft2download.website/dl.php?dfs=fX0j4Q1mpL0-Kra_LBXPjPEuf-rp2hSRTOCdYRPh9YU.&cid=174305355506&conversion_id=14612650639847&app_id=4&lp_id=1362&v=tribat&stub_id=305&v_id=YdDiXNJ2z9FDhYWLRzFIPMGoRrp05cvk2iMHZkQQW_Y.&lpp=*-*-*

http://upgradeget.clickonupdate.site/dl.php?vuctr=FOxpjjPbb5uWJF4egS_a5iOG8oqZgkc60zinEq__lyo.&cid=P23P3R4610402986220514356&sub=3903&conversion_id=14610402994935&app_id=4&lp_id=1175&v=tribat&stub_id=305&v_id=K35t0Rwus-CVLDhegPpMB3wPLNsw59fNb71keKgeSbs.&lpp=w10*-*-*

http://upgradecircle.clickonupdate.site/dl.php?yftdu=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8NjYxNDR8MjcyODU4fDM2MDU3NnwxNDYxMTc2MTA3fDYyNTQ0MTNhLTBhNmQtNDBlMC1jMGQ1LWU3OWFmYjhlMGEyOXwxMTUuMjMuMTY4LjE5MHx8Mnw3Yjg2ZGE0MWQ2MjkwMDA1ZDc3ZGFjYzA0N2I2NDIzYg==&conversion_id=14611761634561&app_id=4&lp_id=1379&v=tribat&stub_id=305&v_id=TgRyy5TTKt02w0t5o3ZpUCaTiGkp5_YaTC69Fgfb71Q.&lpp=No match

http://checksoft.software-zone.download/dl.php?vyct=lS-UWQPszmuIkFAr_oll99zbw2SzO6WOVedcJifkshI.cid=29252641961461265748&sub=1115297&conversion_id=14612657493744&app_id=4&lp_id=1175&v=tribat&stub_id=305&v_id=0dR8EQHhH9i0ERksv_VFC9yGFQ7BQe4OMLZUEznzJsY.&lpp=w10*-*-*

http://update.soft2download.website/dl.php?dfs=OdlD_dyiiCVX0cWqZbugDjIKOp8rcwV7ORv4N8o1MQE.&cid=1461313584mb98011151112&conversion_id=14613135856701&app_id=4&lp_id=1600&v=tribat&stub_id=305&v_id=alw-apMIf1N0zRR8OUVvySBAvDlnKB6ck4q9DwopZlg.&lpp=*-*-*

http://upgradeget.clickonupdate.site/dl.php?vuctr=o9oae0_3w2bkmsGxlkmFVh-ZSlkxfh6Z11cEl9e7GlU.&cid=169210433081&conversion_id=14610394620666&app_id=4&lp_id=1362&v=tribat&stub_id=305&v_id=mFsAg2R8kTLXQjlUC_YKZ8DUblbDhkiKqaWuuHahZUE.&lpp=*-*-*

http://softnewready.applicationtechnica.website/dl.php?ztse=GGu45Ba0NmUH_NwtfDgTLxVjbRLjo7YXKJ2oaTmN2Pw.&subid=VjJ8MzA2MjJ8MjUyMTYxfDI0MzE5NHwxNDYxMjY1OTM5fDcyNGMzY2Y2LTdmYWUtNDZjOC1jNjYyLTA1MWEwNTAzNjc0MnwxMDkuNDMuMS43M3x8MXwyMDliZGI3NzU4ZWFlYTYwMDBjMDc4NzdjYjg5MDA1ZQ==&conversion_id=14612659449516&app_id=4&lp_id=1550&v=tribat&stub_id=305&v_id=2WUrtxP1kgo0KAV9V7znAkFPz_DjUrpfdr06up0WIIk.&lpp=*-*-*

http://setupupgrade.soft-video.website/dl.php?dfwg=zo1y2Xi9PFo46XICdALWKY7Iv7iHEX4a2b2o8JXIESo.&cid=6257923511461177961&conversion_id=14611779656602&app_id=4&lp_id=1594&v=tribat&stub_id=305&v_id=M-Pd0ZYM6FqNFTexoGZYWHA1nP_5R9D1tPG9vrt4-D4.&lpp=*-*-*

http://upgradeget.clickonupdate.site/dl.php?vuctr=o9oae0_3w2bkmsGxlkmFVh-ZSlkxfh6Z11cEl9e7GlU.&cid=173772254166&conversion_id=14610444451129&app_id=4&lp_id=1362&v=tribat&stub_id=305&v_id=XerfU8WgzfI2jx__tpTeqawucMEx3ta2uPy36QQgB7o.&lpp=*-*-*

http://upgrader.clickonupdate.top/dl.php?hbyvr=GGV_Pu71bPhU1fj6-XpWEl_dWmYEEwvaFUfmluMZi4I.&cid=8&sid=[SUB_ID]&conversion_id=14613142668583&app_id=4&lp_id=954&v=tribat&stub_id=305&v_id=CFi2cIW4GHjoR9HyEBdgK8ket-ZfXSAc4FbVIAz28ug.&lpp=No match

http://newliveupdate.latestsoft.xyz/dl.php?dxercec=GGu45Ba0NmUH_NwtfDgTLxVjbRLjo7YXKJ2oaTmN2Pw.&subid=VjJ8NzU4MjF8MjUyMTYxfDQwMTE5MXwxNDYxMTc2NzMwfDJhMTAzOWIxLTc5NzktNDVmZS1jNTI4LWVhOWY3MDNkOTI4N3w5MS4xOS4xMS4xNzl8fDF8MjA5YmRiNzc1OGVhZWE2MDAwYzA3ODc3Y2I4OTAwNWU=&conversion_id=14611767327604&app_id=4&lp_id=1550&v=tribat&stub_id=305&v_id=xYI7BNofZoNF2A1KU4hW2lznZZsKfMbmbX-zX9cXxHY.&lpp=*-*-*

Remove adobe_flash_setup .exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.