home

d2c7b48e544d9ae130f50dd4e22f6150.pe

Flash? Player Installer/Uninstaller

Adobe Systems, Inc.

The file d2c7b48e544d9ae130f50dd4e22f6150.pe, “Adobe? Flash? Player Installer/Uninstaller 10.1 r53” has been detected as malware by 40 anti-virus scanners.
Publisher:
Adobe Systems, Inc.

Product:
Flash? Player Installer/Uninstaller

Description:
Adobe? Flash? Player Installer/Uninstaller 10.1 r53

Version:
10,1,53,64

MD5:
d2c7b48e544d9ae130f50dd4e22f6150

SHA-1:
bb6d2ac9b680052929c256ccfbe438a519fc5566

SHA-256:
0dc1b24ee788cec282c9f11006cba0668075c6e5ab3cb1369d09ee65a19d9375

Scanner detections:
40 / 68

Status:
Malware

Analysis date:
4/18/2024 11:04:01 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.247287
658

Agnitum Outpost
Trojan.DL.Rubinurd
7.1.1

AhnLab V3 Security
Backdoor/Win32.CSon
2015.03.22

Avira AntiVirus
TR/Dropper.Gen
7.11.219.26

avast!
Win32:Simbot-B [Trj]
2014.9-150418

AVG
Generic19
2016.0.3136

Baidu Antivirus
Trojan.Win32.Download.Rubinurd
4.0.3.15418

Bitdefender
Gen:Variant.Kazy.247287
1.0.20.540

Clam AntiVirus
Win.Trojan.Rubinurd
0.98/21511

Comodo Security
TrojWare.Win32.Injector.ccu
21494

Dr.Web
Win32.HLLW.Autoruner.27746
9.0.1.0108

Emsisoft Anti-Malware
Gen:Variant.Kazy.247287
8.15.04.18.08

ESET NOD32
Win32/Injector.BFSU (variant)
9.11358

Fortinet FortiGate
W32/Rubinurd.BF!tr
4/18/2015

F-Prot
W32/Rubin.A.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Kazy.247287
11.2015-18-04_7

G Data
Gen:Variant.Kazy.247287
15.4.25

IKARUS anti.virus
Trojan-Downloader.Win32.Small
t3scan.1.8.6.0

K7 AntiVirus
Trojan-Downloader
13.202.15341

Kaspersky
Trojan-Downloader.Win32.Rubinurd
14.0.0.2173

Malwarebytes
Trojan.Downloader.FL
v2015.04.18.08

McAfee
Downloader-BIJ
5600.6792

Microsoft Security Essentials
Backdoor:Win32/Simbot.gen
1.1.11400.0

MicroWorld eScan
Gen:Variant.Kazy.247287
16.0.0.324

NANO AntiVirus
Trojan.Win32.Small.bzqcm
0.30.8.659

Norman
Malware
11.20150418

nProtect
Trojan-Downloader/W32.Small.32768.FW
15.03.20.01

Panda Antivirus
Trj/Genetic.gen
15.04.18.08

Qihoo 360 Security
Win32/Trojan.da0
1.0.0.1015

Quick Heal
VirTool.CeeInject.DU4
4.15.14.00

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.18.4

Rising Antivirus
PE:Backdoor.Simbot!1.9D80
23.00.65.15416

Sophos
Troj/DwnLdr-MDK
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-CeeInject
9928

Trend Micro House Call
Suspicious_GEN.F47V0102
7.2.108

Trend Micro
BKDR_SIMBOT.SMJQ
10.465.18

Vba32 AntiVirus
TrojanDownloader.Rubinurd
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Buzus.ei
38656

ViRobot
Trojan.Win32.Downloader.32768.PI[h]
2014.3.20.0

Zillya! Antivirus
Downloader.Rubinurd.Win32.1770
2.0.0.2110

File size:
32 KB (32,768 bytes)

Product version:
10,1,53,64

Copyright:
Copyright ? 1996-2010 Adobe, Inc.

Trademarks:
Adobe? Flash? Player

Original file name:
FlashUtil.exe

Language:
English (United States)

Common path:
C:\users\{user}\downloads\d2c7b48e544d9ae130f50dd4e22f6150.pe

File PE Metadata
Compilation timestamp:
8/29/2010 7:41:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
384:f98xUHQXsBCqA7xy4/q8zLei2er4H63sKXtBS29v2jIs1DPcOJT31BCg:WwAehAdBqopkTKn7gEc7NpFBCg

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 38, 03, 00, 00, 53, 56, 57, 6A, 40, 33, DB, 59, 33, C0, 8D, BD, C9, FC, FF, FF, 88, 9D, C8, FC, FF, FF, 6A, 40, F3, AB, 66, AB, AA, 59, 33, C0, 8D, BD, CD, FD, FF, FF, 88, 9D, CC, FD, FF, FF, F3, AB, 66, AB, AA, 6A, 3F, 33, C0, 59, 8D, BD, D1, FE, FF, FF, 88, 9D, D0, FE, FF, FF, 89, 5D, EC, F3, AB, 66, AB, AA, B8, 73, 1C, 40, 00, BF, 5E, 1A, 40, 00, 2B, C7, 89, 5D, F0, 89, 45, DC, B8, 55, 1F, 40, 00, 2D, 39, 1D, 40, 00, C6, 45, E4, 0A, 89, 45, E0, B8, 4D, 1A, 40, 00, 2D, 8B, 19, 40, 00...
 
[+]

Entropy:
5.4455

Developed / compiled with:
Microsoft Visual C++

Code size:
8 KB (8,192 bytes)

Remove d2c7b48e544d9ae130f50dd4e22f6150.pe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.