home

microsoft office proplus 2013 sp1 vl x86 en us august 2015.exe

Movie Installer

Astori LLC

The application microsoft office proplus 2013 sp1 vl x86 en us august 2015.exe, “Movie Installer Setup ” by Astori has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software.
Publisher:
Astori LLC  (signed and verified)

Product:
Movie Installer

Description:
Movie Installer Setup

Version:
1.4.3.1

MD5:
c3d316c4bb93849ffc4cf3ff042fb029

SHA-1:
22865e510cc08a81b1c1df5a3f99159a12b4daee

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/26/2024 4:48:03 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.17.11

File size:
667.8 KB (683,776 bytes)

Product version:
1.431

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Documents and Settings\{user}\My documents\microsoft office proplus 2013 sp1 vl x86 en us august 201555feff246f9d21442774820.4572\microsoft office proplus 2013 sp1 vl x86 en us august 2015.exe

Digital Signature
Signed by:
Astori LLC

Authority:
thawte, Inc.

Valid from:
9/7/2015 5:00:00 PM

Valid to:
9/7/2017 4:59:59 PM

Subject:
CN=Astori LLC, O=Astori LLC, L=Moscow, S=Moscow, C=RU

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
544BC3549576F8E9D85F2D766DBB9FAE

File PE Metadata
Compilation timestamp:
7/27/2015 1:42:21 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 34, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 1E, D8, FF, FF, E8, 6D, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 33, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 54, 86...
 
[+]

Entropy:
7.8893

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.