» variant3109.exe
Overview
Analysis
File Details

variant3109.exe

Adobe Updater AAM Launcher

Best Prog

The executable variant3109.exe has been detected as malware by 1 anti-virus scanner.

File name:

variant3109.exe

Publisher:

A dobe Systems Incorporated (signed by Best Prog)

Product:

Adobe Updater AAM Launcher

Version:

1\,0\,0\,67

MD5:

3597957db2d73d52e2ef94ca33b10266

SHA-1:

3d4b09ca74e5d4bd76ea736f18cc1c55acce371b

SHA-256:

a484819321aeb85aba544f580b2ffc0e0f266540cda3cf13deb17beb583770a4

Scanner detections:

1 / 68

Status:

Malware

Analysis date:

11/6/2024 4:44:54 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP (M)

17.3.10.20

File size:

507.5 KB (519,656 bytes)

Product version:

1.0.0.67 (BuildVersion: 1.0; BuildDate: BUILDDATETIME)

Original file name:

aamlauncher.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\users\{user}\downloads\variant3109.exe

Digital Signature

Signed by:

Best Prog

Authority:

COMODO CA Limited

Valid from:

4/18/2016 4:00:00 AM

Valid to:

4/19/2017 3:59:59 AM

Subject:

CN=Best Prog, O=Best Prog, STREET=d.19 ul.Krasnokazarmennaya, L=Moscow, S=Moscow, PostalCode=111116, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

5CE7DCCDCBB4CC16DC53B581A7710692

File PE Metadata

Compilation timestamp:

5/25/2016 9:30:35 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

Entry address:

0x1000

Entry point:

55, 8B, EC, 81, EC, A0, 07, 00, 00, 53, 56, 57, C6, 85, 01, FF, FF, FF, 3E, 68, 1B, 10, 40, 00, C3, 33, F2, 8D, 12, EB, 06, 81, EF, D9, 8B, DF, 12, 87, C9, C6, 85, 54, FD, FF, FF, C1, C1, E9, 00, 68, 39, 10, 40, 00, C3, 33, EB, EB, 02, 33, DD, 90, 8B, D2, 8D, 12, EB, 01, 50, EB, 02, 03, C7, EB, 02, 2B, C2, 68, 59, 10, 40, 00, C3, 81, C2, 6E, 9B, 47, 0A, 8B, D2, 8B, 55, 08, 8B, D2, 89, 15, 5C, 56, 47, 00, 89, 2D, 3C, 56, 47, 00, C6, 85, 4A, FC, FF, FF, 6F, C1, E8, 00, 8D, 12, 68, 83, 10, 40, 00, C3, 2D, 11... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

431 KB (441,344 bytes)

Remove variant3109.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.