home

flashplayer17ax_ma_install.exe

Adobe Download Manager

Adobe Systems Incorporated

This is a self-extracting archive and installer. The file has been seen being downloaded from admdownload.adobe.com and multiple other hosts.
Publisher:
Adobe Systems Incorporated  (signed and verified)

Product:
Adobe Download Manager

Version:
1.0.0.14s

MD5:
585180e71afe0c3d040fa6a29c334075

SHA-1:
1636bf8ec414c3711f50c841f110b7c3ef8ebc6d

SHA-256:
03244363c48ff36ce14b2cefb5fa87779cf56adb08c8c7e6fe463d2002e1b978

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:35:48 AM UTC  (today)

File size:
1.1 MB (1,124,544 bytes)

Product version:
1.0.0.14s

Copyright:
Copyright 2015 Adobe Systems Incorporated. All rights reserved.

Original file name:
Adobe Download Manager

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\flashplayer17ax_ma_install.exe

Digital Signature
Signed by:
Adobe Systems Incorporated

Authority:
Symantec Corporation

Valid from:
1/14/2014 8:00:00 AM

Valid to:
1/8/2016 7:59:59 AM

Subject:
CN=Adobe Systems Incorporated, OU=Flash Player, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
50ED674255614BF4ED3ED423CC93CA7D

File PE Metadata
Compilation timestamp:
4/9/2015 9:22:28 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:SpcaNG3MIJFWvBbEhXvMj6ILHNhjN75lQH:SBQobEdYRLD575lC

Entry address:
0x1000

Entry point:
B8, DC, D5, 7D, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 15, B7, B3, 0A, E7, 31, 17, 19, C4, 32, F7, 3A, 97, 00, CF, 37, DE, 22, 30, 17, 92, 18, 26, CE, 0A, 97, 3A, 60, 98, 6F, C2, 01, 2D, 1F, BB, 77, 85, B4, 35, F7, D2, CC, 1C, BB, 87, 3D, 43, 30, 01, 51, E1, 86, C6, E9, 40, DF, 9A, 08, CB, EF, FB, A5, 3C, 35, CB, 77, 4E, 5E, 26, B7, C5, F9, EB, 84, 6D, E6, 37, 29, 0A, B1, 33, FF, 64, 9A, 76, B2, AF, 38, 2C, 1D, B7, 62, BE...
 
[+]

Entropy:
7.9813

Packer / compiler:
PECompact v2

Code size:
1.8 MB (1,916,416 bytes)

The file flashplayer17ax_ma_install.exe has been seen being distributed by the following 7 URLs.

https://admdownload.adobe.com/bin/.../flashplayer17ax_ge_install.exe

https://get2.adobe.com/pl/flashplayer/download/.../?installer=FP_17_for_Internet_Explorer_-_ActiveX&os=Windows 7&browser_type=MSIE&browser_dist=OEM&dualoffer=true&chromedefault=false&d=Google_Toolbar_7.5&d=Google_Chrome_35.0_IE_Browser

https://admdownload.adobe.com/bin/.../flashplayer17ax_bh_install.exe

https://admdownload.adobe.com/bin/.../flashplayer17ax_ra_install.exe

https://admdownload.adobe.com/bin/.../flashplayer17ax_ma_install.exe

https://admdownload.adobe.com/bin/.../flashplayer17ax_db_install.exe

https://admdownload.adobe.com/bin/.../flashplayer17ax_fb_install.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.