home

flashtool-0.9.16.1-windows.exe

Flashtool

Androxyde

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
Androxyde

Product:
Flashtool

Version:
0.9.16.1

MD5:
7642bad4e8a32905972874cc34f326ca

SHA-1:
da0afc12bdc04053d926b64a6c0c523e6dbaad51

SHA-256:
e5f82bc10958a555e306e4cb268e79f7c8c25dbb70e455cf07f07124e2c9e833

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 10:50:32 AM UTC  (today)

Scan engine
Detection
Engine version

Zillya! Antivirus
Trojan.Scar.Win32.84286
2.0.0.1940

File size:
174.2 MB (182,619,407 bytes)

Product version:
0.9.16.1

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\flashtool-0.9.16.1-windows.exe

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:YNO/04grSZX+zI0kXAKB5AlabBqjr/dPoOukz09TamLM27jeR33mstd/F:YT4xX+krXAs50QBqNPosiV1eh3msrd

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file flashtool-0.9.16.1-windows.exe has been seen being distributed by the following 21 URLs.

https://docs.google.com/uc?export=download&confirm=B_gz&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://docs.google.com/uc?export=download&confirm=bjU8&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

http://d06.unr.li/dl/.../flashtool-0.9.16.1-windows.exe

https://docs.google.com/uc?export=download&confirm=cLU8&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://docs.google.com/uc?export=download&confirm=CIlM&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://docs.google.com/uc?export=download&confirm=8HD4&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://docs.google.com/uc?export=download&confirm=4jln&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://docs.google.com/uc?export=download&confirm=e3IV&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://docs.google.com/uc?export=download&confirm=JWaB&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://docs.google.com/uc?export=download&confirm=KfsP&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://mega.nz/persistent/.../CdpSiYJS

https://onedrive.live.com/download.aspx?cid=C7AAB5DC6319F04A&resid=C7AAB5DC6319F04A!138&ithint=.exe

https://mega.co.nz/temporary/.../lYQGWQ5Q

http://fileshare1040.depositfiles.org/auth-14041713552a41d3d4fe087522d2fbe6-187.187.71.125-1516635959-155468927-guest/.../flashtool-0.9.16.1-windows.exe

http://s18.filefactory.com/get/f/7c9ywtqdc44j/.../flashtool-0.9.16.1-windows.exe

http://www.xperiadownload.cz/phocadownload/userupload/download/.../flashtool-0.9.16.1-windows.exe

http://am4-r1f6-stor08.uploaded.net/.../d27e0d29-022f-43f1-8bfc-4b21de4e99e0

https://doc-10-04-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/5n8sllfbdfjqhlq0h0rdvfuu9pukvofv/1410019200000/04228903648380718980/.../0ByK8JL7P6wDTVi1Xazd4M1RzOUU?h=16653014193614665626&e=download

https://docs.google.com/uc?export=download&confirm=bwJB&id=0ByK8JL7P6wDTVi1Xazd4M1RzOUU

https://cloclo19.datacloudmail.ru/weblink/get/.../flashtool-0.9.16.1-windows.exe

http://s18.filefactory.com/get/f/7c9ywtqdc44j/.../flashtool-0.9.16.1-windows.exe

Scan flashtool-0.9.16.1-windows.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.