home

movie.exe

Shockwave Flash

Adobe Systems, Inc.

Publisher:
Adobe Systems, Inc.

Product:
Shockwave Flash

Description:
Adobe Flash Player 11.7 r700

Version:
11,7,700,224

MD5:
b934538d42e6f843b3edf5b1eeb1c849

SHA-1:
bbe88c97a7b1fba27c6217c65bccd4530aab0ca7

SHA-256:
833813384f3df0dbb6ee5fbfe75ee8823ac9fee15bcec3112fd580578d52d931

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:54:01 AM UTC  (today)

File size:
13.9 MB (14,580,485 bytes)

Product version:
11,7,700,224

Copyright:
Adobe® Flash® Player. Copyright © 1996 Adobe Systems Incorporated. All Rights Reserved. Adobe and Flash are either trademarks or registered trademarks

Trademarks:
Adobe Flash Player

Original file name:
SAFlashPlayer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\movie.exe

File PE Metadata
Compilation timestamp:
5/30/2013 12:26:38 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:uGvEW5tWGgJvyRL1YiranBcA6+OcqhCgKaotE:uGvEW5tWGgJ5nBc1+NqB3otE

Entry address:
0x6EFB5B

Entry point:
E8, D2, A6, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 44, 24, 08, 8B, 4C, 24, 10, 0B, C8, 8B, 4C, 24, 0C, 75, 09, 8B, 44, 24, 04, F7, E1, C2, 10, 00, 53, F7, E1, 8B, D8, 8B, 44, 24, 08, F7, 64, 24, 14, 03, D8, 8B, 44, 24, 08, F7, E1, 03, D3, 5B, C2, 10, 00, B8, 80, AD, AF, 00, A3, E4, A3, D1, 00, C7, 05, E8, A3, D1, 00, 67, A4, AF, 00, C7, 05, EC, A3, D1, 00, 1B, A4, AF, 00, C7, 05, F0, A3, D1, 00, 54, A4, AF, 00, C7, 05, F4, A3, D1, 00, BD, A3, AF, 00, A3, F8, A3, D1, 00...
 
[+]

Entropy:
7.3729

Code size:
7.5 MB (7,868,928 bytes)

The file movie.exe has been seen being distributed by the following URL.

https://doc-0g-b8-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/kflna4kck8ldgj7cpkibn2ggoo5dnp43/1454342400000/01899964774214250671/.../0ByUYelAZTr8EVDNINEFhckxYT0k?e=download

Scan movie.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.