home

freecell.exe

Système d'exploitation Microsoft Windows

Microsoft Corporation

This is a setup program which is used to install the application. It is installed as part of the Windows XP OS. The file has been seen being downloaded from www.windows8facile.fr and multiple other hosts.
Publisher:
Microsoft Corporation

Product:
Système d'exploitation Microsoft® Windows®

Description:
Jeu FreeCell du pack Entertainment

 
Part of the Windows XP Operating System

Version:
5.1.2600.0 (xpclient.010817-1148)

MD5:
043d073dff5e3ad85fda67d8c30f4305

SHA-1:
97f0a927f14b4f49e7f9b87e1f8408273581b880

SHA-256:
841a08c5528df26af32dbce0616f66fa9158d3b51cb4006576517177f3b10992

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 6:20:56 PM UTC  (today)

File size:
54.5 KB (55,808 bytes)

Product version:
5.1.2600.0

Copyright:
© Microsoft Corporation. Tous droits réservés.

Original file name:
freecell

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\Windows\System32\freecell.exe

File PE Metadata
Compilation timestamp:
8/17/2001 10:54:14 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
768:30lXu1+4OPebQCvuzAHmvwPaYUI6oaPQkCyUTnB+brReEDl2epN:V+HCv6cRPaYUIOCKN

Entry address:
0x5438

Entry point:
6A, 70, 68, 70, 15, 00, 01, E8, DC, 01, 00, 00, 33, DB, 53, 8B, 3D, AC, 10, 00, 01, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03, C8, 81, 39, 50, 45, 00, 00, 75, 12, 0F, B7, 41, 18, 3D, 0B, 01, 00, 00, 74, 1F, 3D, 0B, 02, 00, 00, 74, 05, 89, 5D, E4, EB, 27, 83, B9, 84, 00, 00, 00, 0E, 76, F2, 33, C0, 39, 99, F8, 00, 00, 00, EB, 0E, 83, 79, 74, 0E, 76, E2, 33, C0, 39, 99, E8, 00, 00, 00, 0F, 95, C0, 89, 45, E4, 89, 5D, FC, 6A, 02, FF, 15, AC, 11, 00, 01, 59, 83, 0D, 80, 83, 00, 01, FF, 83, 0D, 84, 83...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
20.5 KB (20,992 bytes)

Windows Firewall Allowed Program
Name:
C:\WINDOWS\system32\freecell.exe


The file freecell.exe has been seen being distributed by the following 2 URLs.

http://www.windows8facile.fr/download/.../?wpdmdl=8678

http://www.windows8facile.fr/download/.../?wpdmdl=8657

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.