S1-mp64-ship.exe - May 2026

Get-Process -Name "*S1*" -ErrorAction SilentlyContinue | Select-Object ProcessName, Path
Get-ScheduledTask | Where-Object $_.TaskName -like "*S1*"

Users typically encounter S1-mp64-ship.exe after one of the following actions:

Pop-up ads claiming “Your Flash Player is out of date” or “Download this codec” frequently drop similarly named trojan files. S1-mp64-ship.exe -