home

adobe_flash_player-32204831.exe

Sparkle And Stuff Media

The application adobe_flash_player-32204831.exe by Sparkle And Stuff Media has been detected as a potentially unwanted program by 2 anti-malware scanners. The file has been seen being downloaded from intva31.spartafile.info and multiple other hosts.
Publisher:
Sparkle And Stuff Media  (signed and verified)

MD5:
71eb089151553fb1e3b30ea0b3b5c803

SHA-1:
caba867642047566b1315665ed7c8e1d19db6bcc

SHA-256:
dbdb8245b98f692ba3a7e4b22769d1eeee4ee2dcc4dfdbd4574be2bd7c06a47d

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
5/21/2024 10:06:24 PM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Trojan.Win32
t3scan.2.0.9.0

Reason Heuristics
PUP.SparkleA (M)
16.5.6.15

File size:
471.3 KB (482,600 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\adobe_flash_player-32204831.exe

Digital Signature
Signed by:
Sparkle And Stuff Media

Authority:
GoDaddy.com, Inc.

Valid from:
3/8/2016 4:16:38 PM

Valid to:
3/8/2017 4:16:38 PM

Subject:
CN=Sparkle And Stuff Media, O=Sparkle And Stuff Media, L=SAN FRANCISCO, S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
7C322E486F0877BB

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
12288:fThKd6hIaNYLNcYM4+Q3sMnMbI7cRFUJ6DNF99GIR6+:fVKd62AYJcYM4+Q3sMMbIIRFUJ6DNF9j

Entry address:
0x4C6E0

Entry point:
C6, 05, 70, D2, 44, 00, 00, B9, 00, 00, 46, 00, BA, 04, 00, 46, 00, B8, B0, F6, 44, 00, E8, 65, FF, FF, FF, E8, 70, FF, FF, FF, B8, 90, F6, 44, 00, E8, 16, 4B, FC, FF, C3, 00, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, FF, FF, FF, FF, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.7058

Code size:
301.8 KB (309,024 bytes)

The file adobe_flash_player-32204831.exe has been seen being distributed by the following 42 URLs.

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32379212&ephemeral=1&filename=adobe_flash_player.exe&cb=-1638683660&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32520670&ephemeral=1&filename=adobe_flash_player.exe&cb=-201765741&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32755341&ephemeral=1&filename=adobe_flash_player.exe&cb=-157904918&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32812272&ephemeral=1&filename=adobe_flash_player.exe&cb=1661937106&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32758078&ephemeral=1&filename=adobe_flash_player.exe&cb=-175774440&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32358231&ephemeral=1&filename=adobe_flash_player.exe&cb=-21794212&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32683962&ephemeral=1&filename=adobe_flash_player.exe&cb=2029246851&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=33008112&ephemeral=1&filename=adobe_flash_player.exe&cb=1284561304&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32677017&ephemeral=1&filename=adobe_flash_player.exe&cb=-1266214312&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32220390&ephemeral=1&filename=adobe_flash_player.exe&cb=-195726134&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=33007757&ephemeral=1&filename=adobe_flash_player.exe&cb=322458695&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32600921&ephemeral=1&filename=adobe_flash_player.exe&cb=602864064&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32625964&ephemeral=1&filename=adobe_flash_player.exe&cb=268811887&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32620979&ephemeral=1&filename=adobe_flash_player.exe&cb=-1596380137&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32597254&ephemeral=1&filename=adobe_flash_player.exe&cb=1416688007&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32971629&ephemeral=1&filename=adobe_flash_player.exe&cb=-154759883&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32392212&ephemeral=1&filename=adobe_flash_player.exe&cb=67991888&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32844354&ephemeral=1&filename=adobe_flash_setup.exe&cb=-1357555685&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32892461&ephemeral=1&filename=adobe_flash_player.exe&cb=1367269627&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32927675&ephemeral=1&filename=adobe_flash_player.exe&cb=-2019744115&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32494904&ephemeral=1&filename=adobe_flash_player.exe&cb=-1096947768&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32591743&ephemeral=1&filename=adobe_flash_player.exe&cb=-196834932&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32563519&ephemeral=1&filename=adobe_flash_player.exe&cb=-1089186482&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32856841&ephemeral=1&filename=adobe_flash_player.exe&cb=161171916&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32985997&ephemeral=1&filename=adobe_flash_player.exe&cb=1921144031&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32848064&ephemeral=1&filename=adobe_flash_player.exe&cb=700313690&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32839133&ephemeral=1&filename=adobe_flash_player.exe&cb=-957832272&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32752886&ephemeral=1&filename=adobe_flash_player.exe&cb=-1685833890&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.electradev.info/dl-pure/1202331/.../?bc=1202331&checksum=35166656&ephemeral=1&filename=adobe_flash_player.exe&cb=489442508&hashstring=IczdojJFuj9J&usefilename=true&executableroutePath=1202485&stub=true

http://intva31.spartafile.info/dl-pure/1202331/.../?bc=1202331&checksum=32618054&ephemeral=1&filename=adobe_flash_setup.exe&cb=715021598&hashstring=CtVmf4lMVinY&usefilename=true&executableroutePath=1202485&stub=true

Latest 30 of 42 download URLs

Remove adobe_flash_player-32204831.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.