home

b34btbztdb0vavaw.exe

The executable b34btbztdb0vavaw.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from www.installpath.com and multiple other hosts.
MD5:
20879c987e2f9a916e578386d499f629

SHA-1:
c7b33ddcc42361fdb847036fc07e880b81935d5d

SHA-256:
9f2981a7cc4d40a2a409dc895de64253acd819d7c0011c8e80b86fe899464e31

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/3/2025 11:18:56 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.18.0

File size:
4 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\appdata\local\temp\b34btbztdb0vavaw.exe

File PE Metadata
OS bitness:
Win64

Entropy:
2.0000

Packer / compiler:
RLPack FullEdition V1.1X

The file b34btbztdb0vavaw.exe has been seen being distributed by the following 2 URLs.

http://www.installpath.com/dd/alldd.html?myref=www.newhdplugin.net&version=1.1.5.89&prefix=FlashPlayerSetup&campid=6741&instid[appname]=FlashPlayer&instid[appsetupurl]=https://launchpad.net/lightspark/trunk/lightspark-0.5.3/ download/Lightspark-0.5.3-win32.exe&instid[appimageurl]=http://www.tsxnrey.com/i/White Smoke Inc/.../150x150_v1Logo.jpg&prefix=FlashPlayer&ti1=32743755871396784125&capp=FlashPlayer&AMt=1396784132763&AMh=7fn2b4gxIWmb09igS84d2Ie2zMXUjQgM3KAUfCzDKPbVydo5QZMSwcespsmVBC1AtdCH3iBb48loOaw3

http://downloads.updatesoftnow.com/get/click/.../?uid=5c5e614cb87f403f8d490e0257635669&sid=xx&filename=Setup

Remove b34btbztdb0vavaw.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.