» adobeairinstaller.exe
Overview
Analysis
File Details
Downloads (21)

adobeairinstaller.exe

Adobe AIR

Adobe Systems Incorporated

This is a setup and installation application. The file has been seen being downloaded from rgwha1.elcld.com and multiple other hosts.

File name:

adobeairinstaller.exe

Publisher:

Adobe Systems Inc. (signed by Adobe Systems Incorporated)

Product:

Adobe AIR

Description:

Adobe AIR Installer

Version:

21.0.0.215

MD5:

e7858079092280c04f1fb08f132068e9

SHA-1:

d8360785c749bd37fb246016bdc5a76761e0a2cd

SHA-256:

68cb66eaa0d70bf4eb14f8ada7057bd84c623154b158e15c11c7a578d8e6e890

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 1:18:07 PM UTC (today)

File size:

17.8 MB (18,681,728 bytes)

Product version:

21.0

Original file name:

Adobe AIR Installer.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\windows\temp\avast_ash2\adobe air\adobeairinstaller.exe

Digital Signature

Signed by:

Adobe Systems Incorporated

Authority:

Symantec Corporation

Valid from:

5/13/2015 8:00:00 PM

Valid to:

5/7/2017 7:59:59 PM

Subject:

CN=Adobe Systems Incorporated, OU=Flash Player, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

4EA1E89E15EA4FFA937984D88F545FBA

File PE Metadata

Compilation timestamp:

5/10/2016 12:48:21 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

393216:2EMOaK+5itRev6AGAQP7pBzoYGYxNe3BzVQc1RV+zoVF:nMLKUjvtGAQvzomNSz2c9qkF

Entry address:

0x12D4

Entry point:

E8, C6, 22, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 08, 70, 41, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 0C, 70, 41, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, 2B, 1F, 00, 00, 85, C0, 75, 06, B8, 70, 71, 41, 00, C3, 83, C0, 08, C3, 8B, FF, 55, 8B, EC, 33, C0, 39, 45, 08, 6A, 00, 0F, 94, C0, 68, 00, 10, 00, 00, 50, FF, 15, 68, 10, 41, 00, A3, EC, 7C, 41, 00, 85... 
[+]

Entropy:

7.9927 (probably packed)

Code size:

62 KB (63,488 bytes)

The file adobeairinstaller.exe has been seen being distributed by the following 21 URLs.

http://rgwha1.elcld.com/share2016/.../octet-stream&Signature=gmZ uljef59MPRi aKserztfSaI=

https://docs.google.com/a/.../uc?authuser=1&id=0B-tMoedYGAV-eDJZSTc4cm1SYjg&export=download

http://filehippo.com/download/file/.../

https://recargaslibrehp.com/AdobeAIRInstaller.exe

http://filehippo.com/download/file/.../

http://indir.gezginler.net/i/6960/.../

http://www.vaultsfunconcepts.com/R3n0jZIygcW4KSaC0umeqhRkaOwNGb4pIDxU5SmYeVtoNougDUXAfmRC8Fs_eBqc0GYC0PwaX_pE_srZq BUp4l1zz7zxjlByi1kweTvZaulUDampMA92dB84MRD9k9AwGsFYiRGBbpXjC0m1 UENNTixUnhg X2wV0nukSrXUpQV0IK70arqh8noQFZSOpy3kEJJ_rFRH4uH2usnl5JzyUgmamnTk4XJ77gehGaf7fjFKqQl45aOwWqmo_ 8l ZqOH0QuxdrPA25OPBAmvYmCpS_wSsgCUkSpTv3wOMt1FUYnheS2j9ZJvWyoZ au51qUKLNrzu_SNkrpzZq1Of3X1HqfbZAG_o4KeFf9OPNq59 WmyNKfLiGegTFL69lG72GeR B1BdFXo3x8E6e90AMBuRyzcXJoI_OKm9YZUjQr0JX1r6ZMHmdKyxwMjc_S1GklEG_IPT_U99kIniIz1MQAUJwk6PWGFM4mBaVcVir4DNo NSUp6H2h0S9qtYVsuOoezF81Bv6s9YUuDRHE07PAU7SrwQq_q15nCftIVGZUpWpuGGcqXFnrD0D_lDh3OF1iXpcJGp4l LJp9du1qDR4UlYVwusiL_RY7tq_905jFrrteNjYDpznEX0tjoMyELlhjuU_aUo c3QIgYBGL7DFn1o4Hci WSuNoUNtLiUFWGXShqd0gKxhMicmuc2bp1_kpYfhrqoBz08n Lm9dwQPF0z_ ww==-GwQCAGSYW20Tv1lgfmP0VW5GY3P59MChCgqoLUo0ysJIDnI76AEvhtcbPvK7jEa lR3OjgjRo6R5PED_lB6HktIBIAygHbgCzhqkDhlAu8goQLYK4qKL2gwgE6d9nGFv63XzHvxoNrHvagBQzm4TAch0G1Hm0_y9uKLXWA_7nM7X0wVn7FYbsCE9Nny4OxOjHlf5ef1O01WbG_GqVqxYU6NxOhw8NxqjwNotza

http://airdownload.adobe.com/air/win/download/.../AdobeAIRInstaller.exe

http://dl1.filehippo.com/.../AdobeAIRInstaller.exe

http://airdownload.adobe.com/air/win/download/.../AdobeAIRInstaller.exe

http://www.downloadcrew.com/?act=software.download&id=25839&t=1465164090&c=6e30c491c76a64802c34f217a42bc8e989893562

http://www.programosy.pl/.../pobierz,adobe-air,2.html

https://airdownload.adobe.com/air/win/download/.../AdobeAIRInstaller.exe

http://www.downloadcrew.com/?act=software.download&id=25839&t=1465930017&c=cec54fa3e58d1261bfaf12fb0a66a1b3b4d6a7fc

http://indir.gezginler.net/i/6960/.../

http://www.downloadcrew.com/?act=software.download&id=25839&t=1465801085&c=be175f25ae9ea23ebcd30ed6eeb30a23848c83fd

http://lb.cdn.m6web.fr/d/c/a/131f6e3e4df5373b7e6369e0fb056d7c/573cfebe/soft/.../adobe-air_21-0-0-215_fr_45240.exe

http://lb.cdn.m6web.fr/d/c/a/857e34354dbbe27277516d5b54658bc5/574747c1/soft/.../adobe-air_21-0-0-215_fr_45240.exe

https://airdownload.adobe.com/air/win/download/.../AdobeAIRInstaller.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.