home

flvplayersetup.exe

The application flvplayersetup.exe has been detected as a potentially unwanted program by 20 anti-malware scanners. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
MD5:
3757ebbc62c02aac8fb2bfe54286c5a8

SHA-1:
a5b9c0ddf3a52632eb98572fa6a321fcace6cbc8

SHA-256:
d62b853285dd4e63ad77be41a6183cdbfda22618d68eeee9ec0bb726208b52c0

Scanner detections:
20 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
4/25/2024 8:55:07 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Adware
7.1.1

Avira AntiVirus
PUA/InstallCore.Gen
3.6.1.96

AVG
Adware InstallCore
2016.0.3129

Clam AntiVirus
W32.Adware.InstallCore-1
0.98/21511

Comodo Security
ApplicUnwnt.Win32.AdWare.InstallCore.3
21884

Dr.Web
Adware.InstallCore.43
9.0.1.0115

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.62453
8.15.07.26.04

ESET NOD32
Win32/InstallCore.T potentially unwanted application
9.7.0.302.0

herdProtect (fuzzy)
variant of uninstall.exe
2015.7.26.4

K7 AntiVirus
Unwanted-Program
13.185.13888

MicroWorld eScan
Gen:Variant.Adware.Graftor.62453
16.0.0.621

NANO AntiVirus
Trojan.Win32.InstallCore.cqwokw
0.30.20.1219

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.25.0

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
23.00.65.15423

Sophos
Install Core
4.98

SUPERAntiSpyware
Adware.InstallCore
9915

Total Defense
Win32/InstallCore!Adware
37.0.11260

Vba32 AntiVirus
Signed-Adware.InstallCore
3.12.26.3

VIPRE Antivirus
Threat.4786018
34232

Zillya! Antivirus
Trojan.Black.Win32.16869
2.0.0.2153

File size:
996.8 KB (1,020,688 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\software\players\flvplayersetup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ffgqCO/4Xp/GZBBME/Kmmny0bJ8TkLwqb1ujOEcXguWM7wSgCDbsZY7uICby:f39ZBBMeG3cw1uKtX9f7wSzsZXby

Entry address:
0xC181B

Entry point:
55, 8B, EC, 83, C4, F0, B8, 9D, 5E, 42, 00, E8, 18, E5, FF, FF, 80, 00, 00, 6A, 00, 8B, 03, 50, E8, 62, FD, FF, FF, 33, C0, 89, 03, 5D, 5F, 5E, 5B, C3, 90, 53, 56, 57, 55, 83, C4, EC, 89, 4C, 24, 04, 89, 14, 24, C7, 44, 24, 08, FF, FF, FF, FF, 33, D2, 89, 54, 24, 0C, 8B, E8, 8B, 04, 24, 03, C5, 89, 44, 24, 10, 8B, 1D, E4, 25, 47, 00, EB, 51, 8B, 3B, 8B, 73, 08, 3B, EE, 77, 46, 8B, C6, 03, 43, 0C, 3B, 44, 24, 10, 77, 3B, 3B, 74, 24, 08, 73, 04, 89, 74, 24, 08, 8B, C6, 03, 43, 0C, 3B, 44, 24, 0C, 76, 04, 89...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
787 KB (805,888 bytes)

Remove flvplayersetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.