--- title: Cylance vs Malware Posing as a Sneaky Flash Installer description: Had our customer had an AV (Antivirus) product that relied on signatures rather than Cylance, it would have resulted in an infected machine and lost data. image: https://blog.teamascend.com/hubfs/Blog%20Feature%20Images/072817_CylancevsMalware.jpg --- [Skip to main content](https://blog.teamascend.com/blog/cylance-vs-malware-posing-as-a-sneaky-flash-installer#main) [![cropped-Ascend-Technologies\_Vertical\_FullColor\_White](https://blog.teamascend.com/hs-fs/hubfs/Logos/cropped-Ascend-Technologies_Vertical_FullColor_White.png?width=150&height=118&name=cropped-Ascend-Technologies_Vertical_FullColor_White.png) ![cropped-Ascend-Technologies\_Vertical\_FullColor\_White](https://blog.teamascend.com/hs-fs/hubfs/Logos/cropped-Ascend-Technologies_Vertical_FullColor_White.png?width=150&height=118&name=cropped-Ascend-Technologies_Vertical_FullColor_White.png)](https://teamascend.com/) - [Show submenu for Services Services](http://teamascend.com/services/) - [Show submenu for IT Consulting IT Consulting](https://teamascend.com/services/strategic-consulting/) - [Healthcare Consulting](https://teamascend.com/services/healthcare/) - [Show submenu for Cybersecurity Cybersecurity](https://teamascend.com/services/cybersecurity/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Managed Detection & Response](https://teamascend.com/services/cybersecurity/managed-detection-response/) - [Identity Protection & MFA](https://teamascend.com/services/cybersecurity/identity-protection-mfa/) - [Email Security](https://teamascend.com/services/cybersecurity/email-security/) - [Perimeter Security](https://teamascend.com/services/cybersecurity/perimeter-security-ngfw/) - [vCISO](https://teamascend.com/services/cybersecurity/vciso/) - [Security Risk Assessment](https://teamascend.com/services/it-assessments/security-risk-assessment/) - [Penetration Testing](https://teamascend.com/services/infrastructure/penetration-testing/) - [Vulnerability Management](https://teamascend.com/services/cybersecurity/vulnerability-management-program/) - [Security Awareness Training](https://teamascend.com/services/cybersecurity/security-awareness-program/) - [Show submenu for IT Infrastructure IT Infrastructure](https://teamascend.com/services/infrastructure/) - [24/7 Support Desk](https://teamascend.com/services/infrastructure/support-desk/) - [VCIO](https://teamascend.com/services/infrastructure/vcio/) - [Managed Infrastructure](https://teamascend.com/services/infrastructure/managed-infrastructure-services/) - [Data Protection (BaaS)](https://teamascend.com/services/infrastructure/data-protection/) - [Onsite Rounding](https://teamascend.com/services/infrastructure/onsite-rounding/) - [Application Administration Services](https://teamascend.com/services/infrastructure/application-administration/) - [IT Infrastructure Assessment](https://teamascend.com/services/it-assessments/infrastructure-assessment/) - [Product](https://teamascend.com/services/infrastructure/product/) - [Show submenu for Cloud Cloud](https://teamascend.com/services/cloud-computing/) - [Ascend Cloud | Managed Private Data Center](https://teamascend.com/services/cloud-computing/edafio-cloud/) - [Hybrid Cloud](https://teamascend.com/services/cloud-computing/hybrid-cloud-solutions/) - [Cloud Security (CSPM)](https://teamascend.com/services/cloud-computing/cloud-security-posture-management/) - [Cloud Assessment](https://teamascend.com/services/cloud-computing/cloud-assessment/) - [Digitial Workspace Deployment](https://teamascend.com/services/cloud-computing/digital-workspace-deployment/) - [Cloud Migration](https://teamascend.com/services/cloud-computing/cloud-migration/) - [Show submenu for Microsoft Services Microsoft Services](https://teamascend.com/services/microsoft-365/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Microsoft 365 Copilot](https://teamascend.com/services/microsoft-365/microsoft-365-copilot/) - [Microsoft Licensing](https://teamascend.com/services/microsoft-365/microsoft-licensing/) - [Microsoft 365 Management](https://teamascend.com/services/microsoft-365/microsoft-365-management/) - [Microsoft 365 Migration](https://teamascend.com/services/microsoft-365/) - [Show submenu for Salesforce Salesforce](https://teamascend.com/salesforce-services/) - [Consulting Services](https://teamascend.com/salesforce-services/salesforce-consulting-services/) - [Implementation Services](https://teamascend.com/salesforce-services/salesforce-implementation-services/) - [Managed Services](https://teamascend.com/salesforce-services/salesforce-managed-services/) - [Embedded Experts](https://teamascend.com/salesforce-services/salesforce-embedded-experts/) - [Optimization Assessment](https://teamascend.com/salesforce-services/salesforce-optimization-assessment/) - [Salesforce AppExchange](https://teamascend.com/salesforce-services/salesforce-appexchange/) - [HubSpot Services](https://teamascend.com/services/hubspot-services/) - [App Development](https://teamascend.com/services/application-development/) - [Show submenu for Industries Industries](https://teamascend.com/industries/) - [Financial Services](https://teamascend.com/industries/financial-services/) - [Private Equity](https://teamascend.com/industries/private-equity/) - [Insurance](https://teamascend.com/industries/insurance/) - [Manufacturing](https://teamascend.com/industries/manufacturing/) - [Healthcare](https://teamascend.com/industries/healthcare/) - [Legal](https://teamascend.com/industries/legal/) - [Accounting](https://teamascend.com/industries/accounting/) - [Show submenu for Resources Resources](https://teamascend.com/resources/) - [Client Success Stories](https://teamascend.com/client-success-stories/) - [Events](https://teamascend.com/events/) - [Solutions-Focused PDFs](https://teamascend.com/resources/#solutions) - [Blog](https://blog.teamascend.com/) - [Webinars](https://teamascend.com/resources/?_resource_type=webinar) - [All Resources](https://teamascend.com/resources/) - Show submenu for Company Company - [About Ascend Technologies](https://teamascend.com/about/) - [Leadership Team](https://teamascend.com/about/team/) - [Partners With Us](https://teamascend.com/about/partner-with-us/) - [Awards & Recognitions](https://teamascend.com/about/awards/) - [Certifications](https://teamascend.com/about/certifications/) - [Careers](https://teamascend.com/careers/) - [Internships](https://teamascend.com/careers/internships/) - [Connect](https://teamascend.com/contact/) Open main navigation Close main navigation - Show submenu for Services Services - Services - [Services](http://teamascend.com/services/) - Show submenu for IT Consulting IT Consulting - IT Consulting - [IT Consulting](https://teamascend.com/services/strategic-consulting/) - [Healthcare Consulting](https://teamascend.com/services/healthcare/) - Show submenu for Cybersecurity Cybersecurity - Cybersecurity - [Cybersecurity](https://teamascend.com/services/cybersecurity/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Managed Detection & Response](https://teamascend.com/services/cybersecurity/managed-detection-response/) - [Identity Protection & MFA](https://teamascend.com/services/cybersecurity/identity-protection-mfa/) - [Email Security](https://teamascend.com/services/cybersecurity/email-security/) - [Perimeter Security](https://teamascend.com/services/cybersecurity/perimeter-security-ngfw/) - [vCISO](https://teamascend.com/services/cybersecurity/vciso/) - [Security Risk Assessment](https://teamascend.com/services/it-assessments/security-risk-assessment/) - [Penetration Testing](https://teamascend.com/services/infrastructure/penetration-testing/) - [Vulnerability Management](https://teamascend.com/services/cybersecurity/vulnerability-management-program/) - [Security Awareness Training](https://teamascend.com/services/cybersecurity/security-awareness-program/) - Show submenu for IT Infrastructure IT Infrastructure - IT Infrastructure - [IT Infrastructure](https://teamascend.com/services/infrastructure/) - [24/7 Support Desk](https://teamascend.com/services/infrastructure/support-desk/) - [VCIO](https://teamascend.com/services/infrastructure/vcio/) - [Managed Infrastructure](https://teamascend.com/services/infrastructure/managed-infrastructure-services/) - [Data Protection (BaaS)](https://teamascend.com/services/infrastructure/data-protection/) - [Onsite Rounding](https://teamascend.com/services/infrastructure/onsite-rounding/) - [Application Administration Services](https://teamascend.com/services/infrastructure/application-administration/) - [IT Infrastructure Assessment](https://teamascend.com/services/it-assessments/infrastructure-assessment/) - [Product](https://teamascend.com/services/infrastructure/product/) - Show submenu for Cloud Cloud - Cloud - [Cloud](https://teamascend.com/services/cloud-computing/) - [Ascend Cloud | Managed Private Data Center](https://teamascend.com/services/cloud-computing/edafio-cloud/) - [Hybrid Cloud](https://teamascend.com/services/cloud-computing/hybrid-cloud-solutions/) - [Cloud Security (CSPM)](https://teamascend.com/services/cloud-computing/cloud-security-posture-management/) - [Cloud Assessment](https://teamascend.com/services/cloud-computing/cloud-assessment/) - [Digitial Workspace Deployment](https://teamascend.com/services/cloud-computing/digital-workspace-deployment/) - [Cloud Migration](https://teamascend.com/services/cloud-computing/cloud-migration/) - Show submenu for Microsoft Services Microsoft Services - Microsoft Services - [Microsoft Services](https://teamascend.com/services/microsoft-365/) - [Ascend Defend | Microsoft Security](https://teamascend.com/services/microsoft-365/microsoft-security-ascend-defend/) - [Microsoft 365 Copilot](https://teamascend.com/services/microsoft-365/microsoft-365-copilot/) - [Microsoft Licensing](https://teamascend.com/services/microsoft-365/microsoft-licensing/) - [Microsoft 365 Management](https://teamascend.com/services/microsoft-365/microsoft-365-management/) - [Microsoft 365 Migration](https://teamascend.com/services/microsoft-365/) - Show submenu for Salesforce Salesforce - Salesforce - [Salesforce](https://teamascend.com/salesforce-services/) - [Consulting Services](https://teamascend.com/salesforce-services/salesforce-consulting-services/) - [Implementation Services](https://teamascend.com/salesforce-services/salesforce-implementation-services/) - [Managed Services](https://teamascend.com/salesforce-services/salesforce-managed-services/) - [Embedded Experts](https://teamascend.com/salesforce-services/salesforce-embedded-experts/) - [Optimization Assessment](https://teamascend.com/salesforce-services/salesforce-optimization-assessment/) - [Salesforce AppExchange](https://teamascend.com/salesforce-services/salesforce-appexchange/) - [HubSpot Services](https://teamascend.com/services/hubspot-services/) - [App Development](https://teamascend.com/services/application-development/) - Show submenu for Industries Industries - Industries - [Industries](https://teamascend.com/industries/) - [Financial Services](https://teamascend.com/industries/financial-services/) - [Private Equity](https://teamascend.com/industries/private-equity/) - [Insurance](https://teamascend.com/industries/insurance/) - [Manufacturing](https://teamascend.com/industries/manufacturing/) - [Healthcare](https://teamascend.com/industries/healthcare/) - [Legal](https://teamascend.com/industries/legal/) - [Accounting](https://teamascend.com/industries/accounting/) - Show submenu for Resources Resources - Resources - [Resources](https://teamascend.com/resources/) - [Client Success Stories](https://teamascend.com/client-success-stories/) - [Events](https://teamascend.com/events/) - [Solutions-Focused PDFs](https://teamascend.com/resources/#solutions) - [Blog](https://blog.teamascend.com/) - [Webinars](https://teamascend.com/resources/?_resource_type=webinar) - [All Resources](https://teamascend.com/resources/) - Show submenu for Company Company - Company - [About Ascend Technologies](https://teamascend.com/about/) - [Leadership Team](https://teamascend.com/about/team/) - [Partners With Us](https://teamascend.com/about/partner-with-us/) - [Awards & Recognitions](https://teamascend.com/about/awards/) - [Certifications](https://teamascend.com/about/certifications/) - [Careers](https://teamascend.com/careers/) - [Internships](https://teamascend.com/careers/internships/) - [Connect](https://teamascend.com/contact/) - [24/7 Client Services](https://portal-ascend.okta.com/) [24/7 Client Services](https://portal-ascend.okta.com/) Malware Prevention, Endpoint Security # Cylance vs Malware Posing as a Sneaky Flash Installer ![Default Author](https://blog.teamascend.com/hubfs/Logos/Ascend/Ascend%20Technologies_Vertical_Blue.png) ASCEND TECHNICAL TEAM July 28, 2017 - [![LinkedIn](https://blog.teamascend.com/hubfs/LinkedIn-color%20(1).svg)](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fblog.teamascend.com%2Fblog%2Fcylance-vs-malware-posing-as-a-sneaky-flash-installer) - [![Facebook](https://blog.teamascend.com/hubfs/Group%203%20(1).svg)](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fblog.teamascend.com%2Fblog%2Fcylance-vs-malware-posing-as-a-sneaky-flash-installer) - [![Email](https://blog.teamascend.com/hubfs/Group%20427320686.svg)](mailto:?subject=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3ECylance+vs+Malware+Posing+as+a+Sneaky+Flash+Installer%3C%2Fspan%3E&body=https%3A%2F%2Fblog.teamascend.com%2Fblog%2Fcylance-vs-malware-posing-as-a-sneaky-flash-installer) ![](https://blog.teamascend.com/hubfs/Blog%20Feature%20Images/072817_CylancevsMalware.jpg) Thanks to the deluge of Crypto malware attacks recently, everyone in infosec has been VERY on edge about anything that pops in a quarantine. “Oh crap. What’d they hit? Where’s it going? What IS this?!” Unless you have Cylance. Recently, we noticed such a hit with one of our customers in the financial world. We received an alarm out of our SIEM that Cylance had quarantined something suspicious that was posing as a flash installer, **flashplayer\[1\].exe**.   ## The Detected Quarantined File I was able to see that it was located at the following file path: ![file path of analyzed malware](https://blog.teamascend.com/hs-fs/hubfs/cylanceblog1_large.png?width=704&name=cylanceblog1_large.png) Looking for a quick win, I checked the hash against the VirusTotal database to get some more information. At the time, there was nothing detected. We’re now up to 33 out of 57 tier 1 vendors. I’m seeing references to Artemis, which is a fairly known trojan. I wish I would had this information before. Well I didn’t, so I needed to do some further digging. Looking further into the information that Cylance was able to pull out, I was able to see right away that the metadata didn’t match up. The product name was coming up as **Undeludable** with a company name of **Slips**. ![Metadata within the malware file shows a strange company name](https://blog.teamascend.com/hs-fs/hubfs/cylanceblog3_large.png?width=294&name=cylanceblog3_large.png) Furthermore, the certificate was issued by **Comodo**, not Adobe. The publisher was a company called **“BITT” LLC**. Five minutes of web searching directed me to a site that was under construction. ![Malware metadata with timestamp and publisher source](https://blog.teamascend.com/hs-fs/hubfs/cylanceblog4_large.png?width=480&name=cylanceblog4_large.png) The detailed threat data out of Cylance showed **Undeludable** again but now I was also seeing that the original file name was referencing Unorganic8.exe. We’re definitely not dealing with Flashplayer at this point. Now I’m curious. At this time I notified the customer that we may have just saved their bacon and kept digging. Next I was able to see that this file imports MSVBVM60.DLL. This is the Visual Basic Virtual Machine. So now we have something that’s using VB and is doing process injection. I was able to pull out DllFunctionCall, an API (Application Programming Interface) function, as well. I ran strings against the executable and wasn’t able to get much. However, I did get some clues. For instance, I could see very obvious attempts to confuse any clear text information. ![cylanceblog6\_large](https://blog.teamascend.com/hs-fs/hubfs/cylanceblog6_large.png?width=106&name=cylanceblog6_large.png) Anything that was cleartext gave references to Visual Basic again as well as some wording that appeared to be giberish. Some research shows that these might actually be words in other languages. For example: Tekstilets – Finnish Beluringen – Norwegian Lithuria – Albanian Leveringssikkerheds – Danish Additional files that were attempted to be installed, (droppers), included emese.exe and a hash 40c0597e4480dacdca113d89441de747d15c4ecfba129cc9b149cd4382a96ad8   ## Flash Installer References Not Adding Up At the time of the hit, analysis in VirusTotal didn’t get me much. Now, I can see that this is where our pal Artemis can be found. While looking more into the behavior, I found references to the following: C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\powershell.exe c:\\docume~1\\admini~1\\locals~1\\temp\\40c0597e4480dacdca113d89441de747d15c4ecfba129cc9b149cd4382a96ad8 C:\\Documents and Settings\\Administrator\\Local Settings\\Application Data\\emese\\emese.exe c:\\documents and settings Since when did Flash Player need to access PowerShell? Additionally, there was even more fun in the registry: More references to VBA, but what was even more interesting were references to Wireshark! HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\Wireshark.exe HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\Wireshark.exe HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wireshark HKEY\_CURRENT\_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Wireshark HKEY\_LOCAL\_MACHINE\\Software\\Wireshark HKEY\_CURRENT\_USER\\Software\\Wireshark In addition to a number of web proxies: **HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\Fiddler.exe** https://en.wikipedia.org/wiki/Fiddler\_(software) **HTTPAnalyzerAddon** Analyzer for incoming and outgoing traffic **Charles.AMF.Document** https://www.charlesproxy.com/ **XK72 Ltd folder** http://www.xk72.com/ So far, I haven’t seen a single reference to flash.   ## Cylance Analysis At this point, I kicked this over to Cylance to let them sandbox this and get more detail. This is what I got from one of the reps we work with: *“The sample is not Adobe Flash Player. It is signed with an adware-associated Authenticode certificate, but exhibits Trojan behavior. When executed, the sample creates several instances of regsvr.exe, and injects itself into them. After the sample’s process exits, the regsvr.exe instances make a large number of outbound connections to remote servers on ports 80 and 443. The sample downloads and stores a payload in the Windows registry, which is executed through a line of Javascript that is also stored in the registry. During the course of the investigation, the file was determined to be a Malware Trojan.”* These are the IPs that it was calling out to: 118.60.127.40 – Korea 133.67.241.255 – Japan 134.148.115.243 – Australia 139.76.26.37 – USA AT&T 142.177.242.47 – Canada 173.194.26.138 – Google 200.236.87.75 – Mexico 200.7.211.1 – Ecuador 203.105.149.2 – China 220.77.93.127 – Korea 223.188.52.42 – India 6.147.118.143 – Arizona, USA 6.176.99.249 – Arizona, USA 6.220.30.199 – Arizona, USA 7.246.177.61 – Ohio, USA   ## Predictive and Preventive All in all, most of these were major TelCo’s and ISP’s from around the world. Nothing coming back to Adobe though. Once some static analysis was done it was obvious the file was malware, but I have seen malware that’s pretty good about masking itself. Had our customer had an AV (Antivirus) product that [relied on signatures](https://blog.teamascend.com/whiteboard-wednesday-av) or VirusTotal, rather than Cylance, it would have resulted in an infected machine and possible lost information. This post would have been more about how we do incident response instead of how we prevented the malware attack to begin with. *Written By: Derrick Masters, Security Engineer*   ### Table of Contents #### Get Insights Sent to Your Inbox ## Related Articles ![How to Build an AI Governance Framework a Lean IT Team Can Run](https://blog.teamascend.com/hubfs/software-engineers-collaborating-on-code-in-office-2026-09-21-23-15-07-utc.jpg) Malware Prevention, Endpoint Security ### [How to Build an AI Governance Framework a Lean IT Team Can Run](https://blog.teamascend.com/blog/ai-governance-framework-for-lean-it-teams-ascend) September 24, 2026 [Read Now ![arrow](https://blog.teamascend.com/hubfs/SVG%20(2).svg)](https://blog.teamascend.com/blog/ai-governance-framework-for-lean-it-teams-ascend) ![How to Choose the Right Salesforce Products for Your Business](https://blog.teamascend.com/hubfs/AdobeStock_1458786464.jpeg) Malware Prevention, Endpoint Security ### [How to Choose the Right Salesforce Products for Your Business](https://blog.teamascend.com/blog/how-to-choose-the-right-salesforce-products-for-your-business) September 22, 2026 [Read Now ![arrow](https://blog.teamascend.com/hubfs/SVG%20(2).svg)](https://blog.teamascend.com/blog/how-to-choose-the-right-salesforce-products-for-your-business) ![What Is Shadow AI, and Why Is It a Compliance Risk Right Now?](https://blog.teamascend.com/hubfs/woman-working-from-home-at-desk-with-laptop-2026-03-13-01-57-07-utc.jpg) Malware Prevention, Endpoint Security ### [What Is Shadow AI, and Why Is It a Compliance Risk Right Now?](https://blog.teamascend.com/blog/shadow-ai-compliance-risk-regulated-industries) September 17, 2026 [Read Now ![arrow](https://blog.teamascend.com/hubfs/SVG%20(2).svg)](https://blog.teamascend.com/blog/shadow-ai-compliance-risk-regulated-industries) [![Ascend Technologies](https://blog.teamascend.com/hs-fs/hubfs/Logos/Ascend/Ascend%20Technologies_Horizontal_FullColor_White.png?width=200&height=107&name=Ascend%20Technologies_Horizontal_FullColor_White.png)](https://teamascend.com/) Contact 833-639-2285 - - - - - - Company - [About](https://teamascend.com/about/) - [Services](https://teamascend.com/services/) - [Testimonials](https://teamascend.com/client-success-stories/) - [Partner With Us](https://teamascend.com/about/partner-with-us/) - [Resources](https://teamascend.com/resources/) - [Contact](https://teamascend.com/contact/) - [Careers](https://teamascend.com/careers/) - Services - [IT Consulting](https://teamascend.com/services/strategic-consulting/) - [Cybersecurity](https://teamascend.com/services/cybersecurity/) - [IT Infrastructure](https://teamascend.com/services/infrastructure/) - [Cloud](https://teamascend.com/services/cloud-computing/) - [24/7 Support Desk](https://teamascend.com/services/infrastructure/support-desk/) - [Microsoft Services](https://teamascend.com/services/microsoft-365/) - [Salesforce Services](https://teamascend.com/salesforce-services/) - [HubSpot Services](https://teamascend.com/services/hubspot-services/) - [App Development](https://teamascend.com/services/application-development/) ### Empowering Technology. Powered by People. Technology is critical to businesses across all industries. Today's technology must be smart, reliable, adaptable, and secure. At Ascend Technologies, we deliver solutions at the highest level, from cloud computing to proactive cybersecurity strategies to Salesforce excellence. And the team? As impressive as the tech. Our practical support is focused on one thing: your success. Let's see what we can do together. [Contact Us](https://teamascend.com/contact/) ©2026 Ascend Technologies, LLC, All Rights Reserved | [Privacy Policy](https://teamascend.com/privacy-policy/) ```json { "@context" : "https://schema.org", "@type" : "WebPage", "breadcrumb" : { "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://blog.teamascend.com", "name" : "Home", "position" : 1 } ] }, "dateModified" : "2020-02-06T21🇲🇲03", "description" : "Had our customer had an AV (Antivirus) product that relied on signatures rather than Cylance, it would have resulted in an infected machine and lost data.", "name" : "Cylance vs Malware Posing as a Sneaky Flash Installer", "primaryImageOfPage" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/2733374/Blog%20Feature%20Images/072817_CylancevsMalware.jpg" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://content.teamascend.com/hubfs/Ascend-Technologies-HubSpot-Logo.png" }, "name" : "Ascend Technologies", "url" : "https://blog.teamascend.com" }, "url" : "https://blog.teamascend.com/blog/cylance-vs-malware-posing-as-a-sneaky-flash-installer" } ```