adobe_flash_player_2015_.exe

Croata Games

The executable adobe_flash_player_2015_.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from servertoadobe-0810.jelastic.dogado.eu.
Publisher:
Croata Games

Description:
Croata Games

Version:
1.0.0.0

MD5:
6774e86a79fb6a6fe9d917d7a23b3c73

SHA-1:
da2a5c1ef82ebf3c6732163dcfbc412555ba0c73

SHA-256:
52d972ceadcc9ee6d36c204b915bc11ccade9a7fea6bbe0620d7537e05f2c28a

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
7/8/2025 6:50:38 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.2.16.19

File size:
1.1 MB (1,148,928 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
Croata (Croácia)

Common path:
C:\users\{user}\downloads\adobe_flash_player_2015_.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:+YyAXRLkTW5AKgz8n9aT9zW4ZQI1g4iwc7zMPngrbDDTU+e4i:+Cnh9aT9zXZQJEgrb/TPe4

Entry address:
0xE7C94

Entry point:
55, 8B, EC, 83, C4, F0, B8, 54, 77, 4E, 00, E8, 1C, EC, F1, FF, 68, 2C, 7D, 4E, 00, 6A, 00, 6A, 00, E8, 76, EE, F1, FF, E8, F1, EF, F1, FF, 3D, B7, 00, 00, 00, 75, 0C, A1, 94, 14, 4F, 00, 8B, 00, E8, 9A, 85, F7, FF, A1, 94, 14, 4F, 00, 8B, 00, E8, 0A, 84, F7, FF, 6A, EC, A1, 94, 14, 4F, 00, 8B, 00, 8B, 40, 30, 50, E8, 70, F7, F1, FF, 0D, 80, 00, 00, 00, 50, 6A, EC, A1, 94, 14, 4F, 00, 8B, 00, 8B, 40, 30, 50, E8, 70, F9, F1, FF, 8B, 0D, 08, 17, 4F, 00, A1, 94, 14, 4F, 00, 8B, 00, 8B, 15, FC, 58, 4E, 00, E8...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
923.5 KB (945,664 bytes)

The file adobe_flash_player_2015_.exe has been seen being distributed by the following URL.

Remove adobe_flash_player_2015_.exe - Powered by Reason Core Security