Associated Malware Groups
The unsafe files using this name are associated with the malware group:
File Behavior
FLASH_UPDATE.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- This process creates other processes on disk
- Executes a Process
- This Process Deletes Other Processes From Disk
- Can communicate with other computer systems using HTTP protocols
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Executes Processes stored in Temporary Folders
- The Process is polymorphic and can change its structure
- Creates system tray popups, messages, errors and security warnings
FLASH_UPDATE.EXE has been the subject of the following behavior:
- Executed as a Process
- Created as a process on disk
- Added as a Registry auto start to load Program on Boot up
- Executed by Internet Explorer
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Terminated as a Process
Country Of Origin
The filename FLASH_UPDATE.EXE was first seen on Sep 9 2008 in the following geographical regions of the Prevx community:
- SPAIN on Sep 9 2008
- The UNITED STATES on Sep 9 2008
- The EUROPEAN UNION on Sep 13 2008
- SINGAPORE on Dec 3 2008
File Name Aliases
FLASH_UPDATE.EXE can also use the following file names:
- BOLIVAR23.EXE
- 60669262.SVD
- 84320318.EXE
- 80872693.EXE
- BOLIVAR28.EXE
- FLASH_UPDATE[n].EXE
- FLASH_UPDATE(n).EXE
- O2DL55H7.EXE
- FLASH_UPDATE[1].EXE
- KENNY16.EXE
- 23F56RSI.EXE
- 5LYOZQE9.EXE
- 60875461.EXE
- KENNY15.EXE
- Z82UHPQD.EXE
- RWEMKG7M.EXE
- J8KJBR8L.EXE
- PQCTMBV5.EXE
- QI55VZB1.EXE
- AHTML3JH.EXE
- JZWZONUW.EXE
Filesizes
The following file size has been seen:
- 47,616 bytes
- 27,136 bytes
- 18,944 bytes
- 21,504 bytes
File Type
The filename FLASH_UPDATE.EXE refers to many versions of an executable program.
File Activity
One or more files with the name FLASH_UPDATE.EXE creates, deletes, copies or moves the following files and folders:
- Creates c:\windows\bolivar23.exe
- Creates c:\653s45643.bat
- Deletes c:\653S45~1.BA
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.