The application installer_adobe_flash_player_arabe.exe has been detected as a potentially unwanted program by 8 anti-malware scanners. The program is a setup application that uses the Nullsoft Scriptable Install System installer, however the file is not signed with an authenticode signature from a trusted source. Infected by an entry-point obscuring polymorphic file infector which will create a peer-to-peer botnet and receives URLs of additional files to download. The file has been seen being downloaded from ligihujofb9b1wojuy.kawopayrekoyan.info.