home

flash_player_ax.exe

Adobe Flash Player ActiveX

Adobe Systems Incorporated

This is a self-extracting archive and installer. The file has been seen being downloaded from clientn.super-mp3-download.com.
Publisher:
Adobe Systems Incorporated

Product:
Adobe® Flash® Player ActiveX

Description:
Adobe® Flash® Player ActiveX Installer

Version:
1.0.20

MD5:
d20cc26b9b8f741c92100e1217e00e2d

SHA-1:
5d584f9a7470e4b6a04fea030eddb42b03cddc09

SHA-256:
41402c6b36b5a42c5392c360fe6df1735c2ec723c41e2627b776b12568956b81

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 12:27:43 AM UTC  (today)

File size:
1.9 MB (2,026,288 bytes)

Product version:
10.0.45.2

Copyright:
Copyright © 1996-2009 Adobe Systems Incorporated and its licensors. All Rights Reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\flash_player_ax.exe

File PE Metadata
Compilation timestamp:
1/14/2007 1:28:14 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:Wb0wcrU7F8GAOXyN7XhvoR/XUaV5A4fngK71EzKdt:WowcrUC82XBoRPUC5Xg6EzKj

Entry address:
0x36F2

Entry point:
3B, C5, 73, 04, FF, C8, 18, C2, 81, C6, 16, 0E, 83, B0, EB, 02, 89, F8, 81, F5, 20, 87, 00, 00, 8B, F9, F6, C2, 5F, 0F, C9, E8, 1E, 00, 00, 00, F7, D1, FE, C3, 69, C8, 93, 52, 71, 38, 2D, D3, 2B, 00, 00, 77, 08, 0F, AF, F6, BE, 9F, D7, 88, 97, 05, C2, 0D, 00, 00, 81, FF, 87, 15, 00, 00, 77, 03, C6, C0, F6, 19, C3, 81, C1, B7, 8B, 00, 00, 10, C8, 81, C1, 0D, 0F, 00, 00, 5B, 80, F1, 6E, 69, EE, B2, C4, 30, 20, BE, 80, 8F, FF, FF, 8A, EC, 81, F6, 96, 70, 00, 00, 85, D5, 81, EE, CF, 02, 00, 00, 15, 61, AB, 21...
 
[+]

Entropy:
7.9908  (probably packed)

Code size:
24.5 KB (25,088 bytes)

The file flash_player_ax.exe has been seen being distributed by the following URL.

http://clientn.super-mp3-download.com/.../flash_player_ax.exe

Scan flash_player_ax.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.