home

flvplayer.exe

MD5:
e0a3a6bc9498085615ae00ef6e7b24bc

SHA-1:
9aaadc3e99a569cf706dfc9a1829e196c9acacf4

SHA-256:
07667bedec8eeaad5b64efe38d43ab2fb221958258c7c87d762897c135f8b9d1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:11:03 PM UTC  (today)

File size:
439 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\flvplayer.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12:H4s9XJF5R9z96JoitMclR3skyhzDD6bcRQnt2Y:Ys9XL5vQnHlRlyd3gdt2Y

Entry point:
23, 21, 2F, 75, 73, 72, 2F, 62, 69, 6E, 2F, 70, 65, 72, 6C, 0A, 0A, 75, 73, 65, 20, 43, 47, 49, 20, 71, 77, 28, 56, 61, 72, 73, 20, 63, 6F, 6F, 6B, 69, 65, 20, 75, 70, 6C, 6F, 61, 64, 29, 3B, 0A, 75, 73, 65, 20, 43, 47, 49, 3A, 3A, 43, 61, 72, 70, 20, 71, 77, 28, 66, 61, 74, 61, 6C, 73, 54, 6F, 42, 72, 6F, 77, 73, 65, 72, 29, 3B, 0A, 0A, 24, 63, 67, 69, 20, 3D, 20, 6E, 65, 77, 20, 43, 47, 49, 3B, 0A, 25, 70, 61, 72, 61, 6D, 73, 3D, 20, 24, 63, 67, 69, 2D, 3E, 56, 61, 72, 73, 3B, 0A, 0A, 6D, 79, 20, 24, 66...
 
[+]

Entropy:
5.3684

The file flvplayer.exe has been seen being distributed by the following 15 URLs.

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzuw8nDzaKnaFgbGfa_F8aDzac-VF_J-baAdyZPAM6VPdrttstanKbMg0JMMgigIGPTPYtaGbAaOaaAAGkt9acObdzn1mdaOQj7fzlDQUQJfuxih7Tla9hVxgpkDgsog1PF4CdcHWzUbibGqeHL-ADujfusrLHjOB2V6ZKb3M4GdyuqglBuBIjTgiRTMA9hbe1wGUyIRYztdtZ2cL8Goe8oGSaffI8aCyjxrAfY8i9O43sCuqy0zCSN9Eb2B2AO5bcKnOGWa1yJQ2oqTHci4iQluUedEPBEwl4q0b_oJIdMZ2yvKDjuKz-APb2SwklbksHAoaznYsdvdDOlvJP5pcwcU2-idOUigktcvztyZLICuefaekHboxjAGiVYkNow_X_YDtrqHeK8nDzaK&fwd=&log_click_as=click

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtztwL6KtaKnaFAbGfa_F8avbac-VF_J-baAdcZuip9tru9M88KzIbQbO6P9GqnrnEQstezP8G6a0qdaaMguIQzgA1Jdaq0q9q9ObdnXwyFg-qXXrwHWDGX222qagXcs6Y5ltbiCknbk8wCoLaSbrqiHG-eyLqBgGG86wB7TS4OVYu0QYcfgm33m1XvuUqGAl4lXGXi1j2Cb1oWFaqhnPUSoJsd9MCWsdnUQ5UccaktGsvVP69mm9uoJvzWBUfNxHXCaZtqEjCK1lcGLWGKk-TeNbJwS3DQn4s5qICt0aTfND42fmZWBpIslTM3G2AvJkpoUQlEg0DuusbNc7BtLfk5WZLbXOaRl76QhbsmII0AAOveGhbMiaJssLiwlngYbLV9p5U4i5WPsO9bPssY&fwd=&log_click_as=click

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzswEpfba4naFybGfa_F8avbas_VF_J-baAdHYcQdz2uMMQrnA0an00dtJn11aPb1tPhupeyagyeGjgqKM1qQnmnYqgnjJOPaAcA3WnxQJ22cZg7QMSX1ThBj5qCdd1N6YYqarvj6fzcJQwURRaNahHecctev63NabjoUaPS49x2Ie2c0jHy7fCaRvtcTkcQbf4yhTQVr1AIdreGdkeRnPKZbjf3G8kZr6cvJUqYSacafyPl7vQpMyvdw83tR1AxLXw7GLXLuouGkiXMkvVZboioVhAo28bd2tS0KStBi4X4aHyrOf6wnRN4l2IRZw6ttHIBbLt6aspt5AJjseXDos0KBDqrdzMFiyt8mX-EgIzKK4QGjCPPkwqydujquhFncsKVvfDlr-f_j3ofcfiq49xeG&fwd=&log_click_as=click

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzyweXVcaKnaFibGha_FSaDbac-VF_J-bazddLjuPPMKnXtnYegaMjmKjq0u10jnOS00aaaaaa10aqiMeg0WttH0AIgzwo9QLv7z2CApfz1J9NQfbbEHSuepSlzioV3tRO1s5sMmcGeWcHbuakYFQWa0OesaWbl8Yvm_qEq9LBMWOySIYX5GU5KhsroLArRkbL4TyXurFgOgMwEQjEyALJhQPuGnSIhaeD9n_1xwxzJhxr1UYpL6FxbcjeO8KIOeL1PsmfeGHGyIiVW02U5CzOj5WIB3AigTgAou0-GJFZwQBNvzTavcoMMa0PJBqe54khkNwMuTKEYYtGklKvcMgVJizohJ9yUeA_jjXbfySCku5j6bb-Yh_zp6l-sUCkekgHGi8vaG&fwd=&log_click_as=click

http://a.ad-sys.com/.../traclick?tenant=AD&static=1707&gcontext=LqOPtmbfswtzuwHz2AaKnaFsbGfa_FSaubaI-VF_J-aaA7gY0OrtAOONA01tbaZKguQNQbQgbBnecmbnkJayMMPecQudAAana0aabnLL8ATA6RWLrXEAvXw6Zj0ohglp5eo980M2BuMuA9vRbRDMgyqSKHMHP-72msqc-Bgh6UYd1AetW5tfqatzqGki3bYL8olXhyaLbAim4synPP-1aljtH2QTHiMqKse1gGD7hxLkA3ZzJhHF74AhJD83qOLhZnW0v9JqIuDMLsa0cehJKIYHyk5vCsl5ZCffpQ1ic2ZuwhhFgIBdP_Y3sLB4rXjSfifgLRUfAqxCgtDUUcQSYeyysuzfcrAwR00IMijbqvmhqyNQqZLQoA7F6enY6N8pCxuKu4bjygTwaP&tracked_sys=ADS&supply_partner=${SUPPLY_PARTNER_ID}&pub_id=1181&zone=1181&camp=${CAMPAIGN_ID}&source_url=7208e2a72f5e17

http://a.adorika.net/.../traclick?tenant=AD&static=1707&gcontext=LqOPtmbfswtzuwHz2AaKnaFsbGfa_FSaubaI-VF_J-aaA7gY0OrtAOONA01tbaZKguQNQbQgbBnecmbnkJayMMPecQudAAana0aabnLL8ATA6RWLrXEAvXw6Zj0ohglp5eo980M2BuMuA9vRbRDMgyqSKHMHP-72msqc-Bgh6UYd1AetW5tfqatzqGki3bYL8olXhyaLbAim4synPP-1aljtH2QTHiMqKse1gGD7hxLkA3ZzJhHF74AhJD83qOLhZnW0v9JqIuDMLsa0cehJKIYHyk5vCsl5ZCffpQ1ic2ZuwhhFgIBdP_Y3sLB4rXjSfifgLRUfAqxCgtDUUcQSYeyysuzfcrAwR00IMijbqvmhqyNQqZLQoA7F6enY6N8pCxuKu4bjygTwaP&tracked_sys=ADS&supply_partner=${SUPPLY_PARTNER_ID}&pub_id=1181&zone=1181&camp=${CAMPAIGN_ID}&source_url=7208e2a72f5e17

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzuwHz2AaKnaFsbGfa_FSaubaI-VF_J-aaA7gY0OrtAOONA01tbaZKguQNQbQgbBnecmbnkJayMMPecQudAAana0aabnLL8ATA6RWLrXEAvXw6Zj0ohglp5eo980M2BuMuA9vRbRDMgyqSKHMHP-72msqc-Bgh6UYd1AetW5tfqatzqGki3bYL8olXhyaLbAim4synPP-1aljtH2QTHiMqKse1gGD7hxLkA3ZzJhHF74AhJD83qOLhZnW0v9JqIuDMLsa0cehJKIYHyk5vCsl5ZCffpQ1ic2ZuwhhFgIBdP_Y3sLB4rXjSfifgLRUfAqxCgtDUUcQSYeyysuzfcrAwR00IMijbqvmhqyNQqZLQoA7F6enY6N8pCxuKu4bjygTwaP&fwd=&log_click_as=click

http://a.ad-sys.com/.../traclick?tenant=AD&static=1707&gcontext=LqOPtmbfswtzBwxy6laqnaFwbGfa_F8auHac-VF_J-baAdrT0e6PPNNIuTn99tutj90Og0OHMggMzO9ettBsAsnnGgHmOPnnLakcgA0GaAup20YOOE0acc6l2lZvgy56iK000szeGlaGXDUWy8VkG7Kpy1hI2X4lYtaOc4IQIQiQ1NRwiGveBdBbRSMOY6Izohy8ErguOeM1vXGZiGcosiIRqxo0bB7TvqPRSW56bOc-Izt__odiNHjGzjzlyO46dMxVBt1uxuTo9EfxXfulJh6jUs5SaiXGWWNjMntGS9Q6JJu11KqbXPzcjg2C2qHrE9BfPrd_Lv4KSWUbkTyVBO1moNMsaIwYrIrKRs7Ef7GqAnorefCqLJCnXi0ynM1cKcccNvyjMfPvLcrn_rC6DXrYHtKqyllxq6a&tracked_sys=ADS&supply_partner=${SUPPLY_PARTNER_ID}&pub_id=5875&zone=6812&camp=${CAMPAIGN_ID}&source_url=cfd8d83e288a75

http://a.adorika.net/.../traclick?tenant=AD&static=1707&gcontext=LqOPtmbfswtzBwxy6laqnaFwbGfa_F8auHac-VF_J-baAdrT0e6PPNNIuTn99tutj90Og0OHMggMzO9ettBsAsnnGgHmOPnnLakcgA0GaAup20YOOE0acc6l2lZvgy56iK000szeGlaGXDUWy8VkG7Kpy1hI2X4lYtaOc4IQIQiQ1NRwiGveBdBbRSMOY6Izohy8ErguOeM1vXGZiGcosiIRqxo0bB7TvqPRSW56bOc-Izt__odiNHjGzjzlyO46dMxVBt1uxuTo9EfxXfulJh6jUs5SaiXGWWNjMntGS9Q6JJu11KqbXPzcjg2C2qHrE9BfPrd_Lv4KSWUbkTyVBO1moNMsaIwYrIrKRs7Ef7GqAnorefCqLJCnXi0ynM1cKcccNvyjMfPvLcrn_rC6DXrYHtKqyllxq6a&tracked_sys=ADS&supply_partner=${SUPPLY_PARTNER_ID}&pub_id=5875&zone=6812&camp=${CAMPAIGN_ID}&source_url=cfd8d83e288a75

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzBwxy6laqnaFwbGfa_F8auHac-VF_J-baAdrT0e6PPNNIuTn99tutj90Og0OHMggMzO9ettBsAsnnGgHmOPnnLakcgA0GaAup20YOOE0acc6l2lZvgy56iK000szeGlaGXDUWy8VkG7Kpy1hI2X4lYtaOc4IQIQiQ1NRwiGveBdBbRSMOY6Izohy8ErguOeM1vXGZiGcosiIRqxo0bB7TvqPRSW56bOc-Izt__odiNHjGzjzlyO46dMxVBt1uxuTo9EfxXfulJh6jUs5SaiXGWWNjMntGS9Q6JJu11KqbXPzcjg2C2qHrE9BfPrd_Lv4KSWUbkTyVBO1moNMsaIwYrIrKRs7Ef7GqAnorefCqLJCnXi0ynM1cKcccNvyjMfPvLcrn_rC6DXrYHtKqyllxq6a&fwd=&log_click_as=click

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzvwzZZzaanaFmbGfa_FSawjac-V__JEaae7jIJOLreprXqG9aTjBqbkiJdzAqrdaOa0qdsWOMgeNIEQbON6M6OPs_6HdGTqQQk4UWJudgIgRM7fik0IbcZZiGE-A05ZN-KMAipOwj-wgqHOKmqYCZsLWGbjvQIP_9itQ0Lw4rc75ilK5A846K2Q4AS2fLOQINtzgHHvHXWbWMqGEP9x7Caz2RmLVbhvML34CS62-9voxDpE9Gi9hqKLcZeqfHAn2dQNbaociNEXvjQG1h67olnXcldXIvMXJD_2qlyWqMP7rZ8EGmWqiTIaZ5LZyCtLs6ou2VuofzLmhKt3k566-uMZH7sAmANJtsmXHzNL2BXXe0r5ZWO_4_5UPiOWcsS55SaG&fwd=&log_click_as=click

http://a.ad-sys.com/.../traclick?tenant=AD&static=1707&gcontext=LqOPtmbfswtzrwjyXxaunaFBeGaaae_vd8fWiu_c9769amnemRPgjPt5tznzYtXiba0Kr9KMudX00eezOEGgb0aKgafjtga1maethAmQnGgc7HxfBLuVOl10op6MLP6CtADaVUpI3FgfsioVdclzTZdzNVfasyqbkrnrN6bOOafqnp39CYgwclWvyR0xmWbY4kTiJBcgULdErdBYyqLrxzAXkmIDiry7ysyKrcec8RtyWpaaO2D9xtwzQnC3mTMASQ6C3lWPkDJyybUKsDdBt4tGxJI6XuJCfS-f3JN6XmtmLJselAe8HnYTfRJfPAxfOPxVwatHOtrC7LjOCqxYqWfA7dmMFS7uy5sgwg4Gm6X4XQyfC-I8wRxJMGWbOestvvjOsCoNpX_YDXrYHtKqybxjuXa&tracked_sys=ADS&supply_partner=${SUPPLY_PARTNER_ID}&pub_id=2215&zone=2329&camp=${CAMPAIGN_ID}&source_url=d191e9234e1beb

http://a.adorika.net/.../traclick?tenant=AD&static=1707&gcontext=LqOPtmbfswtzrwjyXxaunaFBeGaaae_vd8fWiu_c9769amnemRPgjPt5tznzYtXiba0Kr9KMudX00eezOEGgb0aKgafjtga1maethAmQnGgc7HxfBLuVOl10op6MLP6CtADaVUpI3FgfsioVdclzTZdzNVfasyqbkrnrN6bOOafqnp39CYgwclWvyR0xmWbY4kTiJBcgULdErdBYyqLrxzAXkmIDiry7ysyKrcec8RtyWpaaO2D9xtwzQnC3mTMASQ6C3lWPkDJyybUKsDdBt4tGxJI6XuJCfS-f3JN6XmtmLJselAe8HnYTfRJfPAxfOPxVwatHOtrC7LjOCqxYqWfA7dmMFS7uy5sgwg4Gm6X4XQyfC-I8wRxJMGWbOestvvjOsCoNpX_YDXrYHtKqybxjuXa&tracked_sys=ADS&supply_partner=${SUPPLY_PARTNER_ID}&pub_id=2215&zone=2329&camp=${CAMPAIGN_ID}&source_url=d191e9234e1beb

http://a.ad-sys.com/.../click?tenant=AD&context=LqOPtmbfswtzrwjyXxaunaFBeGaaae_vd8fWiu_c9769amnemRPgjPt5tznzYtXiba0Kr9KMudX00eezOEGgb0aKgafjtga1maethAmQnGgc7HxfBLuVOl10op6MLP6CtADaVUpI3FgfsioVdclzTZdzNVfasyqbkrnrN6bOOafqnp39CYgwclWvyR0xmWbY4kTiJBcgULdErdBYyqLrxzAXkmIDiry7ysyKrcec8RtyWpaaO2D9xtwzQnC3mTMASQ6C3lWPkDJyybUKsDdBt4tGxJI6XuJCfS-f3JN6XmtmLJselAe8HnYTfRJfPAxfOPxVwatHOtrC7LjOCqxYqWfA7dmMFS7uy5sgwg4Gm6X4XQyfC-I8wRxJMGWbOestvvjOsCoNpX_YDXrYHtKqybxjuXa&fwd=&log_click_as=click

http://iron.zbane.com/c/.../flvplayer.exe

Scan flvplayer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.