home

flashplayer__10155_i1436718893_il7.exe

MD5:
f3609284b5aceebc78c50d685144e6cf

SHA-1:
41fa1ce885e1cf8d5ec466f5c5e98d4af2b37a4a

SHA-256:
1cc3743bf1f2d023b23f948ff0f1d6ed1169b7e48d5ab5ec0d614e5b048104d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 9:09:51 AM UTC  (today)

File size:
350.2 KB (358,578 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\flashplayer__10155_i1436718893_il7.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:2FCO2B62M8RhrE4fF/5yBhkR4YzkApkHYB3ZQAW+6g8mErVCt2BarP:2FCO2B62M8RhrE4fF/5yBhkR4YzkApkC

Entry point:
3C, 21, 44, 4F, 43, 54, 59, 50, 45, 20, 68, 74, 6D, 6C, 3E, 0A, 3C, 21, 2D, 2D, 20, 73, 61, 76, 65, 64, 20, 66, 72, 6F, 6D, 20, 75, 72, 6C, 3D, 28, 30, 30, 35, 36, 29, 68, 74, 74, 70, 3A, 2F, 2F, 74, 68, 2E, 68, 61, 6F, 31, 32, 33, 2E, 63, 6F, 6D, 2F, 3F, 74, 6E, 3D, 61, 6D, 6F, 6E, 65, 74, 69, 7A, 65, 5F, 70, 61, 79, 5F, 73, 63, 5F, 65, 78, 30, 31, 5F, 68, 61, 6F, 31, 32, 33, 5F, 74, 68, 20, 2D, 2D, 3E, 0A, 3C, 68, 74, 6D, 6C, 20, 78, 6D, 6C, 6E, 73, 3A, 69, 65, 3D, 22, 22, 20, 64, 69, 72, 3D, 22, 6C, 74...
 
[+]

Entropy:
5.9042

The file flashplayer__10155_i1436718893_il7.exe has been seen being distributed by the following URL.

http://www.your-tsunami-file.net/allddT.html?myref=www.myplayer-hd.com&version=1.1.5.55&prefix=FlashPlayerSetup&campid=10155&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=wLTMVM2KOBA34U3H02QQLTDM&capp=FlashPlayer&AMt=1420122141543&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

Scan flashplayer__10155_i1436718893_il7.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.