home

adobe_flash_player.zip

The file adobe_flash_player.zip has been detected as a potentially unwanted program by 6 anti-malware scanners. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from cdn.broadstoragestage.com.
MD5:
400a95432e8b1a3fc50a0d34270fe939

SHA-1:
b4154edaa3c1e180388ead890a53ce05bfb3fdc6

SHA-256:
cf48a28b5aa116ff09729d843a9baeacf9e3bc34e096e00a0be6e5b02d4ea714

Scanner detections:
6 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/25/2024 12:29:01 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3025

Dr.Web
infected with Trojan.InstallCore.866
9.0.1.05190

ESET NOD32
Win32/InstallCore.ABC potentially unwanted (variant)
9.12056

NANO AntiVirus
Riskware.Win32.InstallCore.duvwcb
0.30.24.2996

Sophos
Install Core Click run software (PUA)
4.98

VIPRE Antivirus
Trojan.Win32.Generic
42674

File size:
756.9 KB (775,115 bytes)

Common path:
C:\users\{user}\downloads\adobe_flash_player.zip

The file adobe_flash_player.zip has been seen being distributed by the following URL.

http://cdn.broadstoragestage.com/c?x= 3j4eWehm 6UQK4HHqSxoBOmnA1d0kJbjfoGnsCNmK4=&c=kucY8JIuSgebXJsqq30UR0xP0wrmU8q 7p8u7ei9nRlIKGKx 1ux9aTfhG GGGbcZN lSXCg5fwmPneVoPBxkVxe1ks0UFx0pIQNgs96cH90ad7jAyy9nvivGK2VuV sVDqGHaR7VZzbCxv1wJCmg==&downloadAs=adobe_flash_player.exe&fallback_url=http://d.castplatform.com/api/.../1?aus=3313

Remove adobe_flash_player.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.