home

adobe_flash_player-70068697.exe

KPI Media Group

The application adobe_flash_player-70068697.exe by KPI Media Group has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The file has been seen being downloaded from intva31.computinginterface.info and multiple other hosts.
Publisher:
KPI Media Group  (signed and verified)

MD5:
e8a712b3747f10a1ca0f088d03c73b66

SHA-1:
ae86f2a10cb855da814dbf1ff475b547d6ec2eca

SHA-256:
be0bd610edb8227367d621855ce8bd821a784168b3efd737febb52a42093a752

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
5/4/2024 10:11:16 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.DownloadAdmin.KPIMediaGroup.Meta (M)
16.3.6.5

File size:
94.3 KB (96,512 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\adobe_flash_player-70068697.exe

Digital Signature
Signed by:
KPI Media Group

Authority:
GoDaddy.com, Inc.

Valid from:
12/8/2015 6:34:38 PM

Valid to:
12/8/2016 6:34:38 PM

Subject:
CN=KPI Media Group, O=KPI Media Group, L=" Oakland ", S=California, C=US

Issuer:
CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
5E43099D2166479B

File PE Metadata
Compilation timestamp:
2/8/2016 4:45:34 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
1536:3avIn5zCdzdMwdvCDggKwe2kYERFNcu8Ww1BsWjcdNkVzGZtBNFHJf:hJQbIqweXH8juNqzGZtpt

Entry address:
0x2E1D

Entry point:
E8, FC, 41, 00, 00, E9, 7F, FE, FF, FF, 55, 8B, EC, FF, 15, A4, F0, 40, 00, 6A, 01, A3, C4, 64, 41, 00, E8, 49, 47, 00, 00, FF, 75, 08, E8, DE, 46, 00, 00, 83, 3D, C4, 64, 41, 00, 00, 59, 59, 75, 08, 6A, 01, E8, 2F, 47, 00, 00, 59, 68, 09, 04, 00, C0, E8, AC, 46, 00, 00, 59, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, 9C, BF, 00, 00, 85, C0, 74, 05, 6A, 02, 59, CD, 29, A3, A8, 62, 41, 00, 89, 0D, A4, 62, 41, 00, 89, 15, A0, 62, 41, 00, 89, 1D, 9C, 62, 41, 00, 89, 35, 98, 62, 41, 00, 89, 3D, 94...
 
[+]

Entropy:
6.4907

Code size:
56 KB (57,344 bytes)

The file adobe_flash_player-70068697.exe has been seen being distributed by the following 50 URLs.

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70889311&filename=adobe_flash_player.exe&cb=1919057113&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70445079&filename=adobe_flash_player.exe&cb=419818579&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71233645&filename=adobe_flash_player.exe&cb=1006935860&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71095471&filename=adobe_flash_player.exe&cb=1526387627&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70753221&filename=adobe_flash_player.exe&cb=-614838760&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70250669&filename=adobe_flash_player.exe&cb=1734967533&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70883053&filename=adobe_flash_player.exe&cb=-1385182433&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70723339&filename=adobe_flash_player.exe&cb=1390805874&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71614933&filename=adobe_flash_player.exe&cb=-1249738812&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71050995&filename=adobe_flash_player.exe&cb=279316603&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71236321&filename=adobe_flash_player.exe&cb=34251021&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70934809&filename=adobe_flash_player.exe&cb=-287905001&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71000155&filename=adobe_flash_player.exe&cb=877614528&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70101623&filename=adobe_flash_player.exe&cb=1711128958&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71113389&filename=adobe_flash_player.exe&cb=1253277345&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70834577&filename=adobe_flash_player.exe&cb=19691238&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70546609&filename=adobe_flash_player.exe&cb=-1157644452&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70943353&filename=adobe_flash_player.exe&cb=594241357&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70833029&filename=adobe_flash_player.exe&cb=-572455423&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70406261&filename=adobe_flash_player.exe&cb=-2038438393&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71298883&filename=adobe_flash_player.exe&cb=-570718634&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71411643&filename=adobe_flash_player.exe&cb=732239010&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70318333&filename=adobe_flash_player.exe&cb=312886164&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70953591&filename=adobe_flash_player.exe&cb=1416734178&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70915429&filename=adobe_flash_player.exe&cb=1167274939&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70266481&filename=adobe_flash_player.exe&cb=315824287&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71786885&filename=adobe_flash_player.exe&cb=1676425884&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70970187&filename=adobe_flash_player.exe&cb=-1895985857&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=71353079&filename=java_runtime_enviroment_setup.exe&cb=1195663442&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

http://intva31.computinginterface.info/dl-pure/1200543/.../?bc=1200543&checksum=70947311&filename=adobe_flash_player.exe&cb=1269346038&hashstring=ap0306&usefilename=true&executableroutePath=1200375&stub=true

Latest 30 of 72 download URLs

Remove adobe_flash_player-70068697.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.