home

reader11_en_ga_install.exe

This is a setup and installation application. The file has been seen being downloaded from admdownload.adobe.com.
MD5:
980d5188b3abc49a7ce1516b06dface1

SHA-1:
bf804e609a7a78b8eb773eae657f0494583cebe7

SHA-256:
65d9c95f001d9c2f8df6bb8b1a1a68c4ce91c7bf43f282d98c03a07b0187fb79

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 5:13:56 AM UTC  (today)

File size:
419.2 KB (429,304 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
7/1/2016 12:07:12 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
12288:Hgu31X6qoXOb57OElTHP+n2j2W9sttd7Vo5of:HguFmX7ElTv+n2jqVVo5of

Entry address:
0x1000

Entry point:
B8, 34, 82, 82, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, DB, B0, 64, A8, FE, 52, F8, E2, 48, 09, 30, 56, 5D, 8F, 20, 76, EB, 30, B5, 84, F7, B8, F8, 7C, C8, 75, 30, 54, 31, A1, DA, 33, 45, 38, BB, C3, 03, 8C, A1, F8, 5C, DF, 39, 71, 7A, DC, 59, 67, 34, A8, 81, D5, 32, 98, 7E, 23, 00, 38, A6, 74, 33, DA, B6, 10, 29, 7C, 88, 81, 3D, D8, C3, C4, 92, 25, 48, B2, E9, F6, 6A, 69, A7, 16, BB, B4, 89, C9, AD, 97, 5A, 1E, 50, E9, FC...
 
[+]

Entropy:
7.9991

Packer / compiler:
PECompact v2

Code size:
1.9 MB (1,949,696 bytes)

The file reader11_en_ga_install.exe has been seen being distributed by the following URL.

https://admdownload.adobe.com/bin/.../reader11_en_ga_install.exe

Scan reader11_en_ga_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.