home

adobe_flash_setup.exe

flash setup

OOO DIGITAL MEMORI

The application adobe_flash_setup.exe by OOO DIGITAL MEMORI has been detected as a potentially unwanted program by 3 anti-malware scanners. The file has been seen being downloaded from get24update.applicationtechnica.tech and multiple other hosts.
Publisher:
OOO DIGITAL MEMORI  (signed and verified)

Product:
flash setup

Version:
1.0.0.0

MD5:
eeb19967968eceeb57d61b98b76b89bf

SHA-1:
c602b2c225c5000056595fbf5f467cd3cc496ecc

SHA-256:
9750321d2678b40af0656adffce4e65f333267012f139e1846563e0817f7e34c

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
12/26/2024 3:34:59 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/TrojanDownloader.Adload.AZ trojan
8.0.319.0

Reason Heuristics
PUP.OOODIGIT.Installer (M)
16.4.25.22

VIPRE Antivirus
Threat.4786018
29708

File size:
187.1 KB (191,568 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2016

Original file name:
Flash.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\My documents\downloads\adobe_flash_setup.exe

Digital Signature
Signed by:
OOO DIGITAL MEMORI

Authority:
COMODO CA Limited

Valid from:
12/30/2015 12:00:00 AM

Valid to:
12/29/2016 11:59:59 PM

Subject:
CN=OOO DIGITAL MEMORI, O=OOO DIGITAL MEMORI, STREET="g. Moskva, proezd Nizhnelikhoborski 3-i, d. 1 A", L=Moscow, S=Moscow, PostalCode=127238, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A020E61DC95C3CBA45FA596877E669E1

File PE Metadata
Compilation timestamp:
4/16/2016 12:08:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:fXc8Eufojifsq2eWEXQjb4tMUeTkHHRAzQ4IbLHhxy/jJdurUh1T/WLwA6FeY:poGUq2eWEQbjQUQ7hxyLur+YMFh

Entry address:
0xC2CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3781

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
41 KB (41,984 bytes)

The file adobe_flash_setup.exe has been seen being distributed by the following 17 URLs.

http://get24update.applicationtechnica.tech/dl.php?sgfds=Iu5sv4NYl_zlgN93nmUm2GAAg-MzAOgMZUlagyP7ABQ.&cid=MTA1MHw1MjA1fEJSfDN8MXx8Y3pKeipTazFETVRVeE5sOVFYMTlUV25kb1FrVmpMVkJrUWxSQ1dGRm9TRXhSfHw&conversion_id=14616237244137&app_id=4&lp_id=1543&v=tribat&stub_id=305&v_id=o1ABdDaO2vsPgvYux4OiNbMRZUlk95ddh08IYSFBKcY.&lpp=*-*-*

http://versionsupport.clickonupdate.top/dl.php?btrn=Iu5sv4NYl_zlgN93nmUm2GAAg-MzAOgMZUlagyP7ABQ.&cid=MTA1MHw1MjA1fFVTfDN8MXx8Y3pKeipTazFETVRFMU1WOXZhSFJNUm5aQmNXUmZMVkJqVmxKQ1YzVTBVR0kyfHw&conversion_id=14616313817314&app_id=4&lp_id=1543&v=tribat&stub_id=305&v_id=ANSnbZduE7Rzvd-eYXLMk_Uv66nmcCr4oK4HAtIJQX4.&lpp=*-*-*

http://safe.soft2download.website/dl.php?gwzter=E8AeT_i_eNx1fVDaFVIiw5vdn2LPPK_lhvVy7iBWfEw.&cid=MzAwNyMxMjEwMiM5NzIjMjA2OTZ8MjgyMzU3fFNBfDN8MXx8WlhCdFlXUnpYM2RwWkhSbypNekl3flkyZyp-ZEhvKk13flkyeHBZMnMqfmRHRnlTV1EqWlhCdFlXUnpMV0UzTUdJMU56VXhZMk0wWWpreE9EaGxOelEzTWpkaE4ySXhNekV3WVRZMUxUWTBNSGd5TlRBflpYQnRZV1J6WDJobGFXZG9kQSpOVEF-Y21WeGRXVnpkRkpsWmcqYUhSMGNEb3ZMM2QzZHk0MGMyaGhjbVZrTG1OdmJTOTJhV1JsYnk5RWVETnljVUpVZFdKaEwyMWhjbmRoWDNObFpXdHpYemN5TXk1b2RHMXN-ZEEqTVRRMk1UWXlPRFU1TVRRMU5nfmRnKk1RfmNtVnhkV1Z6ZEZWeWJBKmFIUjBjRG92TDNkM2R5NDBjMmhoY21Wa0xtTnZiUzkyYVdSbGJ5OUVlRE55Y1VKVWRXSmhMMjFoY25kaFgzTmxaV3R6WHpjeU15NW9kRzFzflpteGhjMmhXWlhJKk1qRXVNQ0J5TUF-YzJOeVYybGtkR2cqTVRBeU5BflkwbGtjdypNVEEwT0RjNUxERXdORGczTnl3eE1EVXpORFF-WVdSelEyRnRjR0ZwWjI1TFpYaypNVFEyTVRZeU9EVTJNall4TUF-YTJWNSpZVGN3WWpVM05URmpZelJpT1RFNE9HVTNORGN5TjJFM1lqRXpNVEJoTmpVfmMyTnlTR1ZwWjJoMCpOakF3fHw&conversion_id=14616287447370&app_id=4&lp_id=1543&v=tribat&stub_id=305&v_id=GgoJu_K8mesInhRDaSNTf0l0jQVzQpQrZIp_sYewvLM.&lpp=*-*-*

http://safe.soft2download.website/dl.php?gwzter=E8AeT_i_eNx1fVDaFVIiw5vdn2LPPK_lhvVy7iBWfEw.&cid=MzAwNyMxMjEwMiM5NzIjMjA2OTZ8MjgyMzU3fEVHfDN8MXx8WlhCdFlXUnpYM2RwWkhSbypNekl3flkyZyp-ZEhvKk1nflkyeHBZMnMqfmRHRnlTV1EqWlhCdFlXUnpMV0UzTUdJMU56VXhZMk0wWWpreE9EaGxOelEzTWpkaE4ySXhNekV3WVRZMUxUWTBNSGd5TlRBflpYQnRZV1J6WDJobGFXZG9kQSpOVEF-Y21WeGRXVnpkRkpsWmcqYUhSMGNEb3ZMM2QzZHk0MGMyaGhjbVZrTG1OdmJTOXlZWEl2YTIxSWVsOURhamN2WDE5ZmIyNXNhVzVsTG1oMGJXd35kQSpNVFEyTVRZeU56QXpOVGM0T1F-ZGcqTVF-Y21WeGRXVnpkRlZ5YkEqYUhSMGNEb3ZMM2QzZHk0MGMyaGhjbVZrTG1OdmJTOXlZWEl2YTIxSWVsOURhamN2WDE5ZmIyNXNhVzVsTG1oMGJXd35abXhoYzJoV1pYSSpNakV1TUNCeU1BfmMyTnlWMmxrZEdnKk1UTTJOZ35ZMGxrY3cqTVRBM016WTNMREV3TkRnM09RfllXUnpRMkZ0Y0dGcFoyNUxaWGsqTVRRMk1UWXlOekF5TVRRMU1BfmEyVjUqWVRjd1lqVTNOVEZqWXpSaU9URTRPR1UzTkRjeU4yRTNZakV6TVRCaE5qVX5jMk55U0dWcFoyaDAqTnpZNHx8&conversion_id=14616270776702&app_id=4&lp_id=1543&v=tribat&stub_id=305&v_id=-ZolY9t3ZrDj3EMgG_LwiLUd-k4mgEQMsfX59gZrYVU.&lpp=*-*-*

http://howtoupdate.preparedupdate.online/dl.php?gbhj=Cni9PCg7YAT9iDYq1k8GtJ42hhTyHp8VHcSTSLwFc3Y.&cid=P23P9R4616244361780884735&sub=4329&conversion_id=14616244366104&app_id=129&lp_id=1526&v=tribat&stub_id=305&v_id=WOioUNwSxkj9srBQYs9nux4MP4GVtjoJFhifbPMpEgw.&lpp=*-*-*

http://safe.soft2download.website/dl.php?gwzter=zfhHF5uIJPwUCaQYl1z7-xUZ2Mfj7SDh7iR5biCspo8.&cid=34185182091461624854&conversion_id=14616248571296&app_id=4&lp_id=1379&v=tribat&stub_id=305&v_id=2v1_1I-U-l1LhtY_jx8GUSDJWmNkVJE8HnGK9srgf-8.&lpp=*-*-*

http://safe.soft2download.website/dl.php?gwzter=E8AeT_i_eNx1fVDaFVIiw5vdn2LPPK_lhvVy7iBWfEw.&cid=MzAwNyMxMjEwMiM5NzIjMjA2Njd8MjgyMzU4fEJSfDN8MXx8WlhCdFlXUnpYM2RwWkhSbypOekk0flkyZyp-ZEhvKkxUTX5ZMnhwWTJzKn5kR0Z5U1dRKlpYQnRZV1J6TFRrM05UTTFPVEZoTXpOaVl6TXlNRGhoWkRsaE9ETTBZMlE0WkRVNU1tVXdMVGN5T0hnNU1BflpYQnRZV1J6WDJobGFXZG9kQSpPVEF-Y21WeGRXVnpkRkpsWmcqYUhSMGNITTZMeTkzZDNjdU5ITm9ZWEpsWkM1amIyMHZiWEF6TDNOMGFHUmpZMVZwWW1Fdk1ERmZMVjlVYjE5VFpYVXVhSFJ0fmRBKk1UUTJNVFl5T1RneE5USXdOQX5kZypNUX5jbVZ4ZFdWemRGVnliQSphSFIwY0hNNkx5OWxjRzl0WVdSek1pNDBjMmhoY21Wa0xtTnZiUzloWkhNX2RqMHhKbXRsZVQweFptVmtPVEZrTlRWak1ERTBPVGd3TXpVMU9EY3pNelprWkRBNU5UTmpOQ1owWVhKSlpEMWxjRzl0TFRGbVpXUTVNV1ExTldNd01UUTVPREF6TlRVNE56TXpObVJrTURrMU0yTTBKbU5KWkhNOUptRmtjME5oYlhCaGFXZHVTMlY1UFRFME5qRTJNams0TVRFM09EUW1ZMmc5Sm1Oc2FXTnJQU1owZWowdE15WjBQVEUwTmpFMk1qazRNVFF3TlRRbWNtVnhkV1Z6ZEZWeWJEMW9kSFJ3Y3lVelFTVXlSaVV5Um5kM2R5NDBjMmhoY21Wa0xtTnZiU1V5Um0xd015VXlSbk4wYUdSalkxVnBZbUVsTWtZd01WOHRYMVJ2WDFObGRTNW9kRzBtY21WeGRXVnpkRkpsWmoxb2RIUnd

http://how2update.preparedupdate.online/dl.php?dske=Cni9PCg7YAT9iDYq1k8GtJ42hhTyHp8VHcSTSLwFc3Y.&cid=P23P13R4616295832138159978&sub=4329&conversion_id=14616295844357&app_id=129&lp_id=1526&v=tribat&stub_id=305&v_id=7CUvJZipAD7oH6gikD55UgS0LkZktKZ7iTx1zfueA8o.&lpp=*-*-*

http://safe.soft2download.website/dl.php?gwzter=DnpSQdqzYfx_s_FrbE3AwGPmsTozys2PoBW_Y66P_HI.&cid=BOND22IrUZa-wAJN4nVv8tVt3YqC9L5_aRYB-zLgNn95DEdUO_H2CJVrXYRhwyPHT_43Tr3RcnJNIaGo5n6F5SWgZvTQCA95HnGLng7pMTfa1tZe-UKSnZgQgiQ_8DStuh3Bd7d5d8H1WWQTCie4WDar7mU67OA0wh0Ez1a9RQkYFowQm91Pid_hnrOXvrbrQuBvZAg7yc0C-ziQt6vBtLDtytSPw0KpvkYLaKO9omqim9_Ol6fNg7MQ-8xLygO33vOL0J55o0PMNtx70ZCvxRLb2narFaeOBhb22ArAUVuzmBZs0BfChavX7680wc-3vMdsSHyXEL9VH_puSrIMPN3s-yqXzPMJYL14YQLmEy6SnkMMSRBIWUaWwD4FfCqelTHTDvfOL9UTyCfpv_SrKhyDGuut089FF02j8_AA3dds6Xi-Nf_CcCWi4GZSIl3CLrLbBINUP_ZskupohgD9lm2LXcdhWYKOLzL3c8yx9MQjF2tyotJeYfFkCIRtAWcDL2ASMcQJALw&sid=[SUB_ID]&conversion_id=14616284872342&app_id=4&lp_id=954&v=tribat&stub_id=305&v_id=a2Hv0GUFzHCu9azfXJ0vSO9IYWcBbWpKcLRUvLWxtPQ.&lpp=*-*-*

http://nowinstallupgrade.freesearch4u.xyz/dl.php?vrtwev=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8Mjc1NDF8MjgzMjg1fDQwMTE5MXwxNDYxNjI3NDEyfGY0NmViNjRlLTRkNzEtNGYzMi1jZjdlLTNkOTY0MjEzZTgzZnw0MS4zNS4xMzIuMTE0fHw0fGMwYzViODljMGZjMGFmZGMxNTU2N2UxZDQ1YTc1N2Rk&conversion_id=14616274893875&app_id=4&lp_id=1526&v=tribat&stub_id=305&v_id=rh2tBikVPgyUp88MyZ5xQhOCV9y3uYC5KVq8z3hFffo.&lpp=*-*-*

http://safe.soft2download.website/dl.php?gwzter=E8AeT_i_eNx1fVDaFVIiw5vdn2LPPK_lhvVy7iBWfEw.&cid=MzAwNyMxMjEwMiM5NzIjMjA2Njd8MjgyMzU4fEJSfDN8MXx8WlhCdFlXUnpYM2RwWkhSbypOekk0flkyZyp-ZEhvKkxUTX5ZMnhwWTJzKn5kR0Z5U1dRKlpYQnRZV1J6TFRrM05UTTFPVEZoTXpOaVl6TXlNRGhoWkRsaE9ETTBZMlE0WkRVNU1tVXdMVGN5T0hnNU1BflpYQnRZV1J6WDJobGFXZG9kQSpPVEF-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

http://nowsetup.freesearch4u.xyz/dl.php?sfsfh=ixCD18FVNFrzvqXPojRYqImzd7RCg-m6oRQWVazMq3E.&subid=VjJ8OTA5NnwyNzI4ODJ8MjQzMTk0fDE0NjE2MjQyMTR8ZTc0ODVhMGYtMGM5NC00OTQ2LWM5ZjgtYTY2Mzc1MjcxNjkyfDEwNS45OC44NC45NHx8MXw3Yjg2ZGE0MWQ2MjkwMDA1ZDc3ZGFjYzA0N2I2NDIzYg==&conversion_id=14616243322131&app_id=4&lp_id=1401&v=tribat&stub_id=305&v_id=l1ilSdgiatHem2GZAJEVWcB0mhJRGnDff4X7PhN7NS0.&lpp=No match

http://safe.soft2download.tech/dl.php?sda=_pFcmjsk3J_JDpjMQxDErRgP3DXGv8C7wlF-tNQv-aM.&cid=VjJ8NzUzNXwyODI2Nzl8MzI1MDc0fDE0NjE2MjYzOTh8NzE5NzRkMjEtNGExMC00NmE5LWM2MDMtMDE0OWY1ODI2MzI1fDIwNC4yMzcuMi4yMzl8fDF8NTBjNzZmMmE5ZmFiZDgyNzM4NzdhZTRjYTViNzA0N2U=&sub=2003&conversion_id=14616264006182&app_id=4&lp_id=1518&v=tribat&stub_id=305&v_id=FSRWQM3yYuplIXj4Ja3xo_P4gJYuzBjdI8zNtx0MJNk.&lpp=w10*-*-*

http://how2update.preparedupdate.online/dl.php?dske=Fgpsb5_0EEq9XI_O0QViPaSKgkibIftbZv3o0I39ENI.&cid=P23P9R4616291281985251101&sub=4177&conversion_id=14616291294324&app_id=63&lp_id=1427&v=tribat&stub_id=305&v_id=P2jbPFUJMddVy8QMo3GgwUmxkL0RCUx_JadBG4O9-vY.&lpp=*-*-*

http://update2.whensoftworks.site/dl.php?hdgjfv=HBfZBqmjvShSyN8T7B6GF4EWeDXqP2-LqaW3Zz-EIQc.&cid=6908251521461635515&conversion_id=14616355331716&app_id=4&lp_id=1600&v=tribat&stub_id=305&v_id=JQiRu1Iy-ddPkAkCJ_ZX0TOodCn6ys-8iztLLQP_QVY.&lpp=*-*-*

http://safe.soft2download.website/dl.php?gwzter=UhtopDfT-Qw1wd0I9sitpTYHGuohmSBqFaltbtgBkBI.&cid=JMC1151_haRJIPMykf-Pc6zBXJnPb6&conversion_id=14616250360309&app_id=129&lp_id=1543&v=tribat&stub_id=305&v_id=WskOP9zJophIZmI05cRcdJFZ6YR-CWq2tUYO0BpGRNM.&lpp=No match

http://safe.soft2download.website/dl.php?gwzter=E8AeT_i_eNx1fVDaFVIiw5vdn2LPPK_lhvVy7iBWfEw.&cid=MzAwNyMxMjEwMiM5NzIjMjA2Njd8MjgyMzU4fEJSfDN8MXx8WlhCdFlXUnpYM2RwWkhSbypOekk0flkyZyp-ZEhvKkxUTX5ZMnhwWTJzKn5kR0Z5U1dRKlpYQnRZV1J6TFRrM05UTTFPVEZoTXpOaVl6TXlNRGhoWkRsaE9ETTBZMlE0WkRVNU1tVXdMVGN5T0hnNU1BflpYQnRZV1J6WDJobGFXZG9kQSpPVEF-Y21WeGRXVnpkRkpsWmcqYUhSMGNEb3ZMM2QzZHk0MGMyaGhjbVZrTG1OdmJTOXRjRE12VWxFMkxUYzRYeTFpWVM4d04xOURhR1ZwWVY5a1pWOXRZVzVwWVhNdWFIUnR-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

Remove adobe_flash_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.