home

adobe_flash_player.zip

The file adobe_flash_player.zip has been detected as a potentially unwanted program by 6 anti-malware scanners. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from cdn.straightbundlecentre.com.
MD5:
9325c361642806346b91808ca9c9672d

SHA-1:
f99fa525fa34a5d12a89b32f378eb5cb2e3e4e66

SHA-256:
87ec2c5221f05b929d6468565470b9d61ae8d02b5a1ceda378e772d8e835ee24

Scanner detections:
6 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/15/2024 5:28:43 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3018

Dr.Web
infected with Trojan.InstallCore.866
9.0.1.05190

ESET NOD32
Win32/InstallCore.ABC potentially unwanted application
7.0.302.0

NANO AntiVirus
Riskware.Win32.InstallCore.duvwcb
0.30.24.3079

Sophos
PUA 'Install Core Click run software'
5.17

VIPRE Antivirus
Trojan.Win32.Generic
42862

File size:
756.9 KB (775,115 bytes)

Common path:
C:\users\{user}\downloads\adobe_flash_player.zip

The file adobe_flash_player.zip has been seen being distributed by the following URL.

http://cdn.straightbundlecentre.com//c?x=2yRYvapMJsfWNQ7NQiURs9ZhwUSS4X7fwGfjJJtuuzs=&c=4Rmjqx6/jLz64obF7w6DAKBK2ptHipDHMY9ab6OiJ8NfA0jZ3k9O8l4uWCwKbTRiaC0SyYjOtoKrxrS3aXVZ1DiUBYBls3dfst9XqahSLOBg4c8vcR/hVih3YQaHgjAsbaCxeRJqlHcn3JSkobh Qg==&fallback_url=http://d.castplatform.com/api/.../1?aus=3313&downloadAs=adobe_flash_player.exe

Remove adobe_flash_player.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.