home

flashplayer_21.2.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from storage-eu-4.sharefile.com.
MD5:
12600abc770ff7230c8a12280c789fb4

SHA-1:
cdf2c199ddb34a77b6d529f770c37c29e9cc88fb

SHA-256:
0a58411772bf7398177502d26701c2fee980bc4c1cd7e240effff5f6e9e4dddf

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/27/2024 9:46:51 PM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/SuspPack.N.gen!Eldorado (generic, damaged, not disinfectable)
4.6.5.141

File size:
3.5 KB (3,551 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\flashplayer_21.2.1.exe

File PE Metadata
Compilation timestamp:
12/2/2015 9:26:47 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
48:OEP+QD9LaUdiFVP0H5qcX8fHJYutM+ebSMbKErXkwEhS9VSHHWIj+shtZHuN5Ac:nPrD9LaU6POYcMfJ7Ov2MbKwBGtp2l

Entry address:
0x1000

Entry point:
B8, C8, 32, 55, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 2F, 9C, FE, A2, CA, 40, E3, 38, 9A, 74, 9C, 05, C3, DC, B8, 91, 9F, 40, 45, C2, 52, 40, 46, 8D, 9F, 18, 30, 13, 0C, 1A, C8, 98, 60, 89, AC, D9, 74, 74, A6, 46, 27, 70, EC, 0D, E3, D7, 78, 16, 8E, 87, 99, C2, F1, 34, A5, 55, F7, F1, EA, AC, C5, C2, 30, B6, B5, CC, AD, AA, 8E, 2B, D9, 59, 9B, 82, E6, EA, 7A, F7, 8A, 18, 0C, 5A, FB, 63, C9, 72, B4, CC, 1B, CE, A7, E3, 8E...
 
[+]

Packer / compiler:
PECompact v2

Code size:
713 KB (730,112 bytes)

The file flashplayer_21.2.1.exe has been seen being distributed by the following URL.

https://storage-eu-4.sharefile.com/download.ashx?dt=dt87213533ff0e4db1acab2de203e4d3b7&h=RXZL3SLcw7t6TY0HA13wmGM737Jv7Q9tdng5vLwNI g=

Scan flashplayer_21.2.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.