» MovieMode.exe
Overview
Analysis
File Details
Programs (1)

MovieMode.exe

Movie Mode

GenTechnologies Apps, LLC

This is part of an adware program designed to inject advertising in the web browser (banners, text-links) as well as modify the normal behavior of the browser as well as modify the computer’s system settings that control applications to run on startup. Part of the Injekt brand of unwanted programs. The application MovieMode.exe by GenTechnologies Apps has been detected as adware by 20 anti-malware scanners. This file is typically installed with the program Movie Mode by GenTechnologies Apps, LLC which is a potentially unwanted software program.

File name:

MovieMode.exe

Publisher:

GenTechnologies Apps, LLC (signed and verified)

Product:

Movie Mode

Version:

1.0.0.0

MD5:

8c029d006b09bbe13563fda668bcddfc

SHA-1:

c50347f7f67186274b5355e02a938bd3369b4fdc

SHA-256:

664c4b7cc51ece1620c0e2ce66724a5a798fe899567ed8f61aad5cc3cd0ebfe9

Scanner detections:

20 / 68

Status:

Adware

Explanation:

Injects display ads (banner ads), in-text ads, interstitial ads, or other types of ads in the web browser as well as alters the browsers settings (home page, search, DNS, and security protocols).

Analysis date:

4/25/2024 12:26:37 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Trash.Gen

7.11.30.172

avast!

Win32:Adware-gen [Adw]

2014.9-150522

AVG

MalSign.GenTec

2016.0.3101

Baidu Antivirus

Adware.MSIL.PullUpdate

4.0.3.15522

Comodo Security

ApplicUnwnt

18127

Dr.Web

Adware.Plugin.181

9.0.1.0142

ESET NOD32

MSIL/Adware.PullUpdate (variant)

9.9728

Fortinet FortiGate

Adware/PullUpdate

5/22/2015

IKARUS anti.virus

not-a-virus:AdWare.Win32.SaMon

t3scan.2.2.29

K7 AntiVirus

Unwanted-Program

13.176.11663

Kaspersky

not-a-virus:AdWare.Win32.SaMon

14.0.0.2002

Malwarebytes

Adware.MovieMode

v2015.05.22.01

McAfee

Artemis!29E59C1C837E

5600.6757

Qihoo 360 Security

Win32/Trojan.Adware.fb2

1.0.0.1015

Reason Heuristics

PUP.Injekt.GenTechnologiesApps

15.5.22.13

Sophos

Generic PUA MG

4.98

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

9860

Trend Micro House Call

TROJ_GEN.F47V0411

7.2.142

Vba32 AntiVirus

AdWare.SaMon

3.12.26.0

XVirus List

Win.Detected

2.3.31

File size:

132.6 KB (135,824 bytes)

Product version:

1.0.0.0

Original file name:

MovieMode.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\ProgramData\moviemode\moviemode.exe

Digital Signature

Signed by:

GenTechnologies Apps, LLC

Authority:

COMODO CA Limited

Valid from:

5/30/2013 1:00:00 AM

Valid to:

5/31/2014 12:59:59 AM

Subject:

CN="GenTechnologies Apps, LLC", O="GenTechnologies Apps, LLC", STREET=640 Grand Avenue, STREET=Suite E, L=Carlsbad, S=California, PostalCode=92008, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

06D4A5EDA561071FC293924D6DFC6300

File PE Metadata

Compilation timestamp:

2/6/2014 7:22:15 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

768:/Rs2/rh+lgjqFIhU+/9MlgwZfVmg4irHdw2OwnaQufPmsj/BCBuNuJmrQ0JB/1Pn:/q2/rh+qGFIh94LZfVE+ebJ2LOIzKGxw

Entry address:

0x567E

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

4.2600

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

14 KB (14,336 bytes)

The file MovieMode.exe has been discovered within the following program.

Movie Mode by GenTechnologies Apps, LLC

Run by Creative Island Media, LLC, this is an adware (ad-supported) web browser extension that is difficult to remove and will hijack the user's web browser search page as well as inject advertisements.

www.moviemodeapp.com

88% remove it

Remove MovieMode.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.