adobe flash player 2015.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from bit.ly and multiple other hosts.
Version:
15.0.0.0

MD5:
2bf7bd3f5178bab89aaca4080df012c7

SHA-1:
8b398f5c07105879688319406574b0281500c84c

SHA-256:
f3e96dd9a70330c5bcd4eab84dccf78695638e2b6dfb50c93f967c8bf59ba82b

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
7/8/2025 1:35:35 AM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/TrojanDownloader.Banload.EU (variant)
9.12337

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

Rising Antivirus
PE:Malware.RDM.39!5.2D[F1]
23.00.65.15929

File size:
375 KB (384,000 bytes)

Product version:
15.0.0.0

Copyright:
Copyright © 2015

Original file name:
Icmp.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\adobe flash player 2015.exe

File PE Metadata
Compilation timestamp:
9/30/2015 8:11:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:fzJ+lM+sEvWfROJLhfJpreQ00ws/R3b/rz3qhg32GhNvrCxofifmZzD7jRE3dXhz:8WROJNhpeBUDnqM2GhNzEhw9gfYVI

Entry address:
0x36D0E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
211.5 KB (216,576 bytes)

The file adobe flash player 2015.exe has been seen being distributed by the following 5 URLs.

Scan adobe flash player 2015.exe - Powered by Reason Core Security