» app_adobe_flash_player_27_07_2016_.exe
Overview
Analysis
File Details
Downloads (1)

app_adobe_flash_player_27_07_2016_.exe

Inkscape

inkscape.org

This is a setup program which is used to install the application. The file has been seen being downloaded from bit.ly.

File name:

Publisher:

inkscape.org

Product:

Inkscape

Version:

0.48.5

MD5:

495d347907eb2e60fc3bfb98d3984787

SHA-1:

ddc5826c8953803b6700e29dbab8e4016c5fc6ca

SHA-256:

d8b91a4b5b38a88138c4104838d382cc37fe023adabf4bf466433060c61fa362

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/24/2024 11:18:04 AM UTC (today)

File size:

714 KB (731,136 bytes)

Product version:

0.48.5

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\app_adobe_flash_player_27_07_2016_.exe

File PE Metadata

Compilation timestamp:

7/25/2016 11:10:21 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

12288:QVesR2JyD09uwSQvlwkz/cNy5Z8VfgaerbQL4mwGhg/M4XrOye:Q98Jk086/cNy5KCgoGhg77Oye

Entry address:

0x58B0

Entry point:

70, 05, 28, D1, 0F, BF, C5, 0F, B7, D2, 81, EA, E2, 98, 8A, A4, 76, 06, 81, D8, 86, D4, 55, DE, 02, ED, 85, F3, C6, C1, 43, 85, D1, 4F, 69, C9, C4, 86, 7B, 82, 18, EE, E8, 5E, 00, 00, 00, 10, EA, 85, D8, 86, ED, FF, C7, F3, 2B, F0, 8A, D7, 85, EF, C7, C7, 2A, 47, 80, 42, 6A, 00, 5D, 4A, 19, CF, 87, D8, 86, D8, 3D, 25, C8, D5, C2, 81, C5, 57, 21, 09, 00, 69, FF, B0, 5C, 66, E7, F7, C5, 77, 3E, 19, FC, 08, F2, 81, ED, 56, 21, 09, 00, 46, 81, E3, F3, 28, 3C, 8D, 89, C1, 88, CE, 0F, B7, C2, 87, F6, 40, C6, C1... 
[+]

Code size:

144 KB (147,456 bytes)

The file app_adobe_flash_player_27_07_2016_.exe has been seen being distributed by the following URL.

http://bit.ly/2awWPhU

Scan app_adobe_flash_player_27_07_2016_.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.