Skip to main content
D
davism95037004
Participant
November 15, 2017
Question

FlashPlayer 27.0.0.183.exe installer trying to access Lsass.exe

  • November 15, 2017
  • 1 reply
  • 1675 views

During FlashPlayer 27.0.0.183 silence install we noticed the installer trying to access memory allocated by the lsass.exe process calling the "NtReadVirtualMemory" command. Have any of you noticed this behavior?, even better, can an Adobe specialist detail why the install is doing this?

Thank you.

    This topic has been closed for replies.

    1 reply

    jeromiec83223024
    jeromiec83223024
    Inspiring
    November 15, 2017

    Can you provide some additional details, like the version of Windows and variant of Flash Player we're talking about (I'm assuming Active X), and the method you used to discover this?

    D
    davism95037004Author
    Participant
    November 16, 2017

    The OS is Windows 7 Enterprise SP1 64 or 32bits

    FlashPlayer AX is InstallAX.27.0.0.183.exe  deployed via SCCM

    Method used: Behavioral based Antivirus

    jeromiec83223024
    jeromiec83223024
    Inspiring
    November 23, 2017

    Specifically, what AV product?  I just want to reproduce it with a known-pristine copy of Flash Player so that I can confirm that it's a false positive.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices