home

flvplayersetup-nbp9yuhvz.exe

The program is a setup application that uses the Nullsoft Install System installer. The file has been seen being downloaded from downloadvale.com.
MD5:
fce54facbc81cce8c0c2e757e25a8006

SHA-1:
f36396412cb8824132ba4c124292131947851d18

SHA-256:
01d3fe882abde48b0e7e93216272ad9f489fefcb4fb0d3c388babe4877cee113

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:37:20 AM UTC  (today)

File size:
289.7 KB (296,672 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Install System

Common path:
C:\users\{user}\downloads\flvplayersetup-nbp9yuhvz.exe

File PE Metadata
Compilation timestamp:
12/17/2010 4:14:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
6144:xA0m3D0oC26SLoEvkfzlFjwDjKUYRn5f9uhv+yczju6SXf6aHZ:xA0iD0o/bvyzTcj0X9uF+ycG6SCw

Entry address:
0x39AC

Entry point:
EB, 06, 80, DF, 19, 0F, BF, F1, 69, FB, EF, 06, 92, 6E, C6, C3, A9, 3B, D7, 0F, B7, F6, 87, C3, 47, 03, D0, 0F, AF, C6, 8B, F3, F3, F7, C0, 7B, D0, E2, B2, 3A, DE, 33, CE, EB, 0E, 81, C7, 52, 39, 26, B4, 8A, C7, 81, C5, 42, 01, D9, 34, F3, B0, F8, 0F, AF, E8, 69, CD, C9, 98, 60, 68, 69, C8, 21, 94, C9, A1, B0, 46, B0, 2F, 2B, EE, E8, 5B, 00, 00, 00, 85, DB, 2D, CC, F2, 0E, 73, 81, FF, FF, 76, 00, 00, 72, 04, 89, D8, FF, CB, 05, EA, 31, 7C, CF, 8D, 0D, FE, 14, 00, 00, 85, F9, 78, 01, F3, 81, E9, DA, 0F, 00...
 
[+]

Code size:
28.5 KB (29,184 bytes)

The file flvplayersetup-nbp9yuhvz.exe has been seen being distributed by the following URL.

http://downloadvale.com/.../FLVPlayerSetup-Nbp9YUHVZ.exe

Scan flvplayersetup-nbp9yuhvz.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.