home

adobe flash player2015.exe

MAX POINT

The executable adobe flash player2015.exe has been detected as malware by 20 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from storage.googleapis.com.
Publisher:
MAX POINT

Description:
MAX POINT

Version:
102.104.108.508

MD5:
74d30c5aebd065967d37daa52f25f9a8

SHA-1:
2e469312df7a77df43c302d2dfdbbcba6a9fb0a6

SHA-256:
6ee33a029b738fa5ca966faeea113880ad2813d35d8920170c621cc2e775724e

Scanner detections:
20 / 68

Status:
Malware

Analysis date:
4/20/2024 3:03:09 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2832063
393

AhnLab V3 Security
Malware/Win32.Generic
2015.11.07

Avira AntiVirus
TR/Dldr.Agent.1746944.1
8.3.2.2

Arcabit
Trojan.Generic.D2B36BF
1.0.0.590

avast!
Win32:Dropper-gen [Drp]
2014.9-160107

Baidu Antivirus
Trojan.Win32.Banload
4.0.3.1617

Bitdefender
Trojan.GenericKD.2832063
1.0.20.35

Bkav FE
HW32.Packed
1.3.0.7383

Emsisoft Anti-Malware
Trojan.GenericKD.2832063
8.16.01.07.03

Fortinet FortiGate
W32/Banload.AAGXV!tr.dldr
1/7/2016

F-Secure
Trojan.GenericKD.2832063
11.2016-07-01_5

G Data
Trojan.GenericKD.2832063
16.1.25

IKARUS anti.virus
Trojan-Downloader.Win32.Banload
t3scan.1.9.5.0

Kaspersky
Trojan-Downloader.Win32.Banload
14.0.0.852

McAfee
Artemis!74D30C5AEBD0
5600.6527

MicroWorld eScan
Trojan.GenericKD.2832063
17.0.0.21

nProtect
Trojan.GenericKD.2832063
15.11.06.01

Panda Antivirus
Generic Suspicious
16.01.07.03

Trend Micro
TROJ_GEN.R021C0OK115
10.465.07

Zillya! Antivirus
Downloader.Upatre.Win32.56463
2.0.0.2496

File size:
1.7 MB (1,746,944 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
Turco (Turquia)

Common path:
C:\users\{user}\downloads\adobe flash player2015.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:hJEa5tI3W09Agpq0eyabtF6RzDZDu8A4AOay7p8fB0FdOH/eXKXI+WWRdgZln:hJEgsx9AsqHFwNt+zyFVdnXKXIf

Entry address:
0x2EBF8B

Entry point:
60, 60, E9, 62, 2B, 00, 00, E8, F1, 07, 01, 00, E9, 3C, A9, EF, FF, 66, 0F, BE, F8, 8B, 7D, 08, E8, 02, 2A, 07, 00, C7, 44, 24, 28, 4E, 8C, 5E, 00, E8, 48, AD, F0, FF, 8D, 64, 24, 44, 0F, 85, 12, 25, 07, 00, 9C, 8D, 64, 24, 04, E8, 32, 3D, 08, 00, 56, 8D, 64, 24, 04, E9, 4C, 3D, 08, 00, E3, 71, B0, 36, 18, 6C, C2, 04, 20, 9C, F4, 36, ED, CB, B1, 37, B8, 16, 4E, 8E, 59, 37, 6F, 96, 74, BD, CA, 68, D8, 1D, 7C, F9, 9A, 6E, E4, E6, EA, 8D, BB, D3, 14, D9, 1E, 20, F5, 27, C8, C0, 6A, E1, F5, EF, 04, EF, D3, 4F...
 
[+]

Code size:
791 KB (809,984 bytes)

The file adobe flash player2015.exe has been seen being distributed by the following URL.

https://storage.googleapis.com/.../Adobe Flash Player2015.exe

Remove adobe flash player2015.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.