home

flashplayer18.exe

FlashPlayer

Apple INC

The executable flashplayer18.exe has been detected as malware by 23 anti-virus scanners. According to AVG, this software downloads additional adware offers during setup.
Publisher:
Adobe  (signed by Apple INC)

Product:
FlashPlayer

Version:
18.0.0.0

MD5:
7cb4fd2054bd3bf0587c7ffdbf73cf3d

SHA-1:
34ad1e381cfe22d39c42c9ea05aa56f171bf5461

SHA-256:
7c2122db84c8954ef62da73b675a2074935133f3fbd994eb6c8c4e7ed96e28ba

Scanner detections:
23 / 68

Status:
Malware

Analysis date:
12/30/2024 7:07:47 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Strictor.51375
434

AhnLab V3 Security
Trojan/Win32.Agent
2015.04.19

Avira AntiVirus
TR/Dldr.Agent.193056
3.6.1.96

avast!
Win32:GenMaliciousA-OGD [Trj]
2014.9-151128

AVG
Downloader.MSIL
2016.0.2912

Baidu Antivirus
Trojan.MSIL.Agent
4.0.3.151128

Bitdefender
Gen:Variant.Strictor.51375
1.0.20.1660

Emsisoft Anti-Malware
Gen:Variant.Strictor.51375
8.15.11.28.03

ESET NOD32
MSIL/TrojanDownloader.Agent.AQY (variant)
9.11496

Fortinet FortiGate
MSIL/Agent.AQY!tr.dldr
11/28/2015

F-Secure
Gen:Variant.Strictor.51375
11.2015-28-11_7

G Data
Gen:Variant.Strictor.51375
15.11.25

IKARUS anti.virus
Trojan-Downloader.MSIL.Agent
t3scan.1.8.9.0

Kaspersky
Trojan-Downloader.MSIL.Agent
14.0.0.1054

McAfee
Artemis!7CB4FD2054BD
5600.6568

MicroWorld eScan
Gen:Variant.Strictor.51375
16.0.0.996

NANO AntiVirus
Trojan.Win32.Agent.dqsuvc
0.30.16.1110

Norman
Suspicious_Gen5.BFNDN
11.20151128

Panda Antivirus
Trj/CI.A
15.11.28.03

Sophos
Mal/Generic-S
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Kazy
9481

Trend Micro House Call
TROJ_GEN.R0C1H09D715
7.2.332

VIPRE Antivirus
Trojan.Win32.Generic
39468

File size:
188.5 KB (193,056 bytes)

Product version:
18.0.0.0

Copyright:
Copyright © 2015

Trademarks:
FlashPlayer

Original file name:
Mylo.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\flashplayer18.exe

Digital Signature
Signed by:
Apple INC

Authority:
getaCert - www.getacert.com

Valid from:
3/15/2015 4:44:29 PM

Valid to:
5/14/2015 4:44:29 PM

Subject:
CN=dev.serv6.apple.com, OU=Software Development, O=Apple INC, L=1 Infinite Loop Cupertino, S=California, C=US

Issuer:
O=getaCert - www.getacert.com, L=Seattle, S=Washington, C=US

Serial number:
0CF2

File PE Metadata
Compilation timestamp:
4/7/2015 11:05:15 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:pKGXsBqYVcXpPm/nduCnQi85lo4SssssITiZJHYzQ:pKGcBpSXgnQiQlo4SssssIkHY8

Entry address:
0x545E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
13.5 KB (13,824 bytes)

Remove flashplayer18.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.