home

install_flashplayer.exe

The application install_flashplayer.exe has been detected as a potentially unwanted program by 2 anti-malware scanners. This is a setup program which is used to install the application.
MD5:
5834dc6f76d9010d09d2fa112d717471

SHA-1:
e60d1011feb4fdbb404ec00af960d8810a2538b9

SHA-256:
685d8da1e70f16196b4f9f571569448ef5cafc94366dfb6dc284653d007adc53

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 1:43:36 PM UTC  (today)

Scan engine
Detection
Engine version

Emsisoft Anti-Malware
Gen:Variant.Symmi.61290
11.5.0.6191

Reason Heuristics
Adware.Downloader (M)
16.3.8.21

File size:
2.7 MB (2,805,760 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\install_flashplayer.exe

File PE Metadata
Compilation timestamp:
3/7/2016 3:59:03 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:8ioOUUOSjNMKFuGJL6NdpkHQfbPjJTmNZ7er:8iNvLLbQfLju

Entry address:
0x24C9E4

Entry point:
55, 8B, EC, 83, C4, EC, 33, C0, 89, 45, EC, B8, C0, 0A, 64, 00, E8, 23, F1, DB, FF, 33, C0, 55, 68, 8F, CA, 64, 00, 64, FF, 30, 64, 89, 20, 68, 9C, CA, 64, 00, 6A, 00, 6A, 00, E8, 0B, 03, DC, FF, E8, 7E, 04, DC, FF, 3D, B7, 00, 00, 00, 75, 28, 8D, 55, EC, A1, 54, A5, 65, 00, 8B, 00, E8, 40, B8, E7, FF, 8B, 45, EC, BA, 06, 00, 00, 00, E8, C7, 91, DC, FF, A1, 54, A5, 65, 00, 8B, 00, E8, 57, B0, E7, FF, A1, 54, A5, 65, 00, 8B, 00, E8, C3, AD, E7, FF, 8B, 0D, 94, 9B, 65, 00, A1, 54, A5, 65, 00, 8B, 00, 8B, 15...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.3 MB (2,405,888 bytes)

The file install_flashplayer.exe has been seen being distributed by the following 2 URLs.

http://[::ffff:343e:de19]/?GET=1

https://app.sugarsync.com/wf/D3941539_030_849579943/getfile/.../install_flashplayer.exe

Remove install_flashplayer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.