home

flashplayer__6741_i885492789_il92.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.more-files.com.
MD5:
4a11234bc51fc60836d99632a962d118

SHA-1:
c2543e457bbc828722dd3eede675ea7a5c760006

SHA-256:
496f3311d2b237bdf9808c244dd76f882d1bdcdfc3bd567c343bb9403fd19598

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:37:22 AM UTC  (today)

File size:
315.7 KB (323,317 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\flashplayer__6741_i885492789_il92.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:MIYMh5al4Wn1C9mX33BcPBifmSeZpTR31T4aFbIuX78KiqCpHXh:MCh5alX+mX3xcPBaK1UaFDhU3h

Entry point:
9B, 00, 00, 00, 00, 66, 8B, 08, 83, C0, 02, 66, 85, C9, 75, F5, 0F, B7, 08, 66, 85, C9, 74, 0A, 85, F6, 75, 06, 81, C1, FE, FF, 00, 00, 0F, B7, C9, 8D, 7C, 01, 05, 83, E7, FC, 8D, 42, 18, 85, F6, 75, 03, 8D, 42, 12, 66, 83, 38, 7B, 74, 4D, 8B, F7, 2B, F2, 56, 52, 8B, 55, 08, 52, 53, E8, 89, 1D, 02, 00, 83, C4, 10, 83, F8, 50, 0F, 87, 3F, FF, FF, FF, 0F, B6, 80, 24, 50, 40, 00, FF, 24, 85, 14, 50, 40, 00, 8B, 4D, 08, 8B, C1, 2B, CE, 03, DE, 89, 4D, 08, 3B, C8, 0F, 87, 1D, FF, FF, FF, 8B, 4D, FC, 51, E8, 92...
 
[+]

The file flashplayer__6741_i885492789_il92.exe has been seen being distributed by the following URL.

http://www.more-files.com/alldd.html?myref=www.new-hdplugin.com&version=1.1.5.89&prefix=FlashPlayerSetup&campid=6741&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=7042816731402956680&capp=FlashPlayer&AMt=1402956708532&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

Scan flashplayer__6741_i885492789_il92.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.