home

updateflashplayer_cf8d7068.exe

The executable updateflashplayer_cf8d7068.exe has been detected as malware by 25 anti-virus scanners.
MD5:
c84032f977a06412943b328b40027a98

SHA-1:
fe2b9336285e1fbdfea9443f3e31019e3f220daa

SHA-256:
3601c010c752a738b585ef29dc76063e912721160aa40116146e89a87f14acfd

Scanner detections:
25 / 68

Status:
Malware

Analysis date:
4/17/2024 11:37:44 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Agent.BEAV
701

AhnLab V3 Security
Trojan/Win32.Necurs
2014.07.22

Avira AntiVirus
TR/Crypt.ZPACK.72565
7.11.163.86

avast!
Win32:Dropper-gen [Drp]
2014.9-150305

AVG
Inject2
2016.0.3179

Baidu Antivirus
Trojan.Win32.Injector
4.0.3.1535

Bitdefender
Trojan.Agent.BEAV
1.0.20.320

Dr.Web
BackDoor.Slym.14322
9.0.1.064

Emsisoft Anti-Malware
Trojan.Agent.BEAV
8.15.03.05.08

ESET NOD32
Win32/Injector.BHYA (variant)
9.10134

Fortinet FortiGate
W32/Cidox.ALCM!tr
3/5/2015

F-Secure
Trojan.Agent.BEAV
11.2015-05-03_5

G Data
Trojan.Agent.BEAV
15.3.24

IKARUS anti.virus
Trojan.Win32.Cidox
t3scan.1.6.1.0

Kaspersky
Trojan.Win32.Cidox
14.0.0.2391

Malwarebytes
Trojan.Kelihos.ED
v2014.07.15.07

McAfee
Generic-FAUT!C84032F977A0
5600.6835

Microsoft Security Essentials
TrojanDropper:Win32/Rovnix
1.10802

MicroWorld eScan
Trojan.Agent.BEAV
16.0.0.192

NANO AntiVirus
Trojan.Win32.PornoAsset.dchzzk
0.28.2.60990

Panda Antivirus
Trj/CI.A
15.03.05.08

Qihoo 360 Security
Malware.QVM19.Gen
1.0.0.1015

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
Suspicious_GEN.F47V0715
7.2.64

VIPRE Antivirus
Trojan.Win32.Generic
31492

File size:
148 KB (151,552 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temp\updateflashplayer_cf8d7068.exe

File PE Metadata
Compilation timestamp:
6/7/2014 9:59:37 PM

OS version:
1.10137

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
0.1

CTPH (ssdeep):
3072:bbWk1OAK2dbdoDcOR2j/JsLcODdW4EsD95A4fV:bbWLuOzR2yLZdWlsZl

Entry address:
0x2526

Entry point:
55, 8B, EC, 6A, FF, 68, 90, 35, 40, 00, 68, 90, 00, 40, 00, 64, A1, 00, 00, 00, 00, 90, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 90, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, 90, 15, C8, 31, 40, 00, 59, 83, 0D, 24, 43, 40, 00, 61, 83, 0D, 28, 43, 40, 00, FF, FF, 15, C4, 31, 40, 00, 8B, 0D, 18, 43, 40, 00, BE, 08, 90, 15, C0, 31, 40, 00, 8B, 0D, 5C, EE, 40, 00, 89, 08, A1, BC, 31, 40, 00, 8B, 00, A3, 20, 43, 40, 00, E8, 16, 01, 00, 00, 39, 1D, 30, 40, 40, 00, 75, 0C, 68, A8, 26, 40, 00, 90, 15, B8, 31...
 
[+]

Entropy:
7.6603

Developed / compiled with:
Microsoft Visual C++

Code size:
8 KB (8,192 bytes)

Remove updateflashplayer_cf8d7068.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.