home

windows live movie maker setup.exe

The application windows live movie maker setup.exe has been detected as a potentially unwanted program by 13 anti-malware scanners. This is a self-extracting archive and installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from windows-live-movie-maker.soft32.com.
MD5:
87f12c34a957a80ca430b52e47c83e42

SHA-1:
1228d7db7fca9b1eb137400bab293c7165f14733

SHA-256:
f97f110a9289385c35fa0c660712af8f874ad4c7b97be1855b6d81a9993318be

Scanner detections:
13 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 1:52:30 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Soft32Downloader
7.1.1

Avira AntiVirus
TR/Trash.Gen
7.11.30.172

Bkav FE
W32.HfsAdware
1.3.0.6379

Dr.Web
Adware.Downware.10466
9.0.1.0252

ESET NOD32
Win32/Soft32Downloader.C potentially unwanted application
9.7.0.302.0

F-Prot
W32/Soft32Download.A.gen
v6.4.6.5.141

herdProtect (fuzzy)
variant of audacity setup.exe (Adware)
2015.9.9.6

K7 AntiVirus
Trojan
13.204.16076

Kaspersky
Packed.Win32.Krap
15.0.0.562

Malwarebytes
PUP.AdBundle
v2015.09.09.06

Quick Heal
PUA.Itntsrl.Gen
9.15.14.00

VIPRE Antivirus
Threat.4783370
40552

Zillya! Antivirus
Downloader.Soft32Download.Win32.1
2.0.0.2196

File size:
876.8 KB (897,888 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\windows live movie maker setup.exe

File PE Metadata
Compilation timestamp:
6/3/2012 2:18:27 PM

OS version:
5.0

OS bitness:
Win16

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:fDCc585RZCyojmJQiKia1HaL1F17e9Oj:fD3585RcjJjpsn1C9O

Entry address:
0x2A0440

Entry point:
60, BE, 00, 30, 5D, 00, 8D, BE, 00, E0, E2, FF, C7, 87, 34, 6C, 21, 00, A7, C0, BB, 4C, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Entropy:
7.8879

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
824 KB (843,776 bytes)

The file windows live movie maker setup.exe has been seen being distributed by the following URL.

http://windows-live-movie-maker.soft32.com/get/file/.../743910?guid=b9efd805b6eb62237e0a2d9d1a55b1f4&properties[Program Subdomain]=windows-live-movie-maker&properties[Program Name]=Windows Live Movie Maker&properties[Site]=www.soft32.com&gclid=CJ6N1-DD3bECFUuR7QodDU4AHg&s=-FkB9eQQ6F51CoEwh0728Q&t=1344790630&ext=.exe

Remove windows live movie maker setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.