home

flvplayersetup-n05uynpvb.exe

The program is a setup application that uses the Nullsoft Install System installer. The file has been seen being downloaded from fileandmore.com.
MD5:
aad060402565a76758999565a6d0e7d0

SHA-1:
96bc114f5dfe20465d9ee8cb52417d435ebf36f3

SHA-256:
145cb336f087bc278e7ca96876e7d264227d72c267f2f0a2ba972ae08a546b8a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:54:42 AM UTC  (today)

File size:
287.1 KB (294,000 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Common path:
C:\users\{user}\downloads\flvplayersetup-n05uynpvb.exe

File PE Metadata
Compilation timestamp:
12/17/2010 4:14:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
6144:wA0m3D0o52t4+7dX3plsEJr4u8tYWCrfae0bm43fpQgp:wA0iD0oIt33LJr4xtY5rfr63PZp

Entry address:
0x39AC

Entry point:
84, C8, C6, C3, EF, FF, C0, BB, 94, EC, 42, 07, 28, EF, 0F, BE, EA, 73, 07, B7, 03, 0F, AF, DA, FE, CC, 81, F9, 29, 23, 00, 00, 76, 0B, 35, CE, FB, EB, 06, 8D, 2D, 3F, E0, 11, AD, 81, FA, 71, 13, 00, 00, 84, CD, 8B, FD, 89, CF, 69, E9, AA, E3, 66, 57, 0F, B6, D0, 0F, AF, F5, 8A, E2, E8, 1F, 00, 00, 00, 69, D8, C3, 35, B7, 2F, 88, C8, 89, C6, 89, C8, 86, DA, FE, CA, 8B, C9, 80, F3, B8, F2, FF, C3, 33, E9, 0F, AF, D6, 84, EC, 87, E8, 00, D1, 0F, AF, F9, 3A, D7, 4D, 85, F7, 8B, ED, 28, D2, 88, FE, 45, 0F, BF...
 
[+]

Code size:
28.5 KB (29,184 bytes)

The file flvplayersetup-n05uynpvb.exe has been seen being distributed by the following URL.

http://fileandmore.com/nlp/l/adorikangfeed/.../dl?p1=1&p3=-_-NDNjYl8yNF8yNTE1XzI1NDNfQ09fMTg2Ljg0LjEwMC4yMzdfYjk3Xzc1ODZfQURT-_-LqOPtmbfswtzCwobc6aWoaFebGfa_FSaDzak-V__JEbaydd2pvnrMgMMEsOPd0aqhnQPpzdugrMPgHhQmQithYuJtAq9ae00rGgQ2GbKnKaafaIvC7hkKAv8-PtmSpGTq2tDhDXWLDN2kCuY08EcpcwERifaaAKKOeiHFqNtzq8czGHsmkk2TWRTfDarwiWa6gOWeMHD5bMsLBrBcfkz44REsQYeSIYzRuzILmtIdKI3jfqsn3sU70wiaLbINzvLVG13k8V1ESNs2uJn69_SMzWpU1iAJg38qghTfFbrpAFa7rzdT4iBGkjY-ZawYxZEHbC6Kbb1rovgAUavu0-NeLLPc1WAbuVsrGcudTxGLxJy49MMEP1Zce8iQuimDNwm3apjOm1iUW136jcomOdWdr2gnElqjdhT36l-sUCkekGH3jwqaa&datetime=20140524_1758&utm_source=adorikangfeed&utm_medium=affiliate&utm_campaign=1&translate=en&tracking_percent=29.67&software_name=FLV Player&download_country=CO&rate=0.100625&margin=20&cpa_detective_session_id=5jajen3f0b2e&timestamp=1400954314&__cookie=__utma=1.1772990937.1400954306.1400954306.1400954306.1; __utmb=1.2.10.1400954306; __utmc=1; __utmz=1.1400954306.1.1.utmcsr=adorikangfeed|utmccn=1|utmcmd=affiliate|utmcct=flvp

Scan flvplayersetup-n05uynpvb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.