MovieModeService.exe

Movie Mode Service

GenTechnologies Apps, LLC

This is part of an adware program designed to inject advertising in the web browser (banners, text-links) as well as modify the normal behavior of the browser. Part of the Injekt brand of unwanted programs. The application MovieModeService.exe by GenTechnologies Apps has been detected as adware by 25 anti-malware scanners. This file is typically installed with the program Movie Mode by GenTechnologies Apps, LLC which is a potentially unwanted software program.
Publisher:
GenTechnologies Apps, LLC  (signed and verified)

Product:
Movie Mode Service

Version:
1.0.0.0

MD5:
64cd14e3c2cf691eb698909ff07cd30c

SHA-1:
4a28781811ca6dd710036cadd19c0528fd59b09a

SHA-256:
92db6c2f6ecab3cf291524ba69f483b5e191a3da615b9226b7b19be2ffd65831

Scanner detections:
25 / 68

Status:
Adware

Explanation:
Injects display ads (banner ads), in-text ads, interstitial ads, or other types of ads in the web browser as well as alters the browsers settings (home page, search, DNS, and security protocols).

Analysis date:
2/7/2026 7:33:33 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.380518
351

Agnitum Outpost
PUA.PullUpdate
7.1.1

Avira AntiVirus
ADWARE/Adware.Gen
7.11.212.220

avast!
Win32:Adware-gen [Adw]
2014.9-160218

AVG
GenTec
2017.0.2829

Baidu Antivirus
Adware.MSIL.PullUpdate
4.0.3.16218

Bitdefender
Gen:Variant.Kazy.380518
1.0.20.245

Comodo Security
ApplicUnwnt
21233

Dr.Web
Adware.Plugin.175
9.0.1.049

Emsisoft Anti-Malware
Android.Trojan.Boqx
8.16.02.18.12

ESET NOD32
MSIL/Adware.PullUpdate (variant)
10.11245

Fortinet FortiGate
Adware/PullUpdate
2/18/2016

F-Secure
Gen:Variant.Kazy.380518
11.2016-18-02_5

G Data
Gen:Variant.Kazy.380518
16.2.24

IKARUS anti.virus
AdWare.Agent
t3scan.1.6.1.0

K7 AntiVirus
Adware
13.178.12292

Malwarebytes
Adware.MovieMode
v2016.02.18.12

MicroWorld eScan
Gen:Variant.Kazy.380518
17.0.0.147

Qihoo 360 Security
HEUR/Malware.QVM03.Gen
1.0.0.1015

Reason Heuristics
PUP.Injekt.GenTechnologiesApps (M)
16.2.18.12

Sophos
Pull Update
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
9316

Trend Micro House Call
TROJ_GEN.F47V0323
7.2.49

VIPRE Antivirus
Threat.4872425
29800

XVirus List
Win.Detected
2.3.31

File size:
61.1 KB (62,608 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © GenTechnologies Apps, LLC 2014

Original file name:
MovieModeService.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\ProgramData\moviemode\moviemodeservice.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
5/29/2013 9:00:00 PM

Valid to:
5/30/2014 8:59:59 PM

Subject:
CN="GenTechnologies Apps, LLC", O="GenTechnologies Apps, LLC", STREET=640 Grand Avenue, STREET=Suite E, L=Carlsbad, S=California, PostalCode=92008, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
06D4A5EDA561071FC293924D6DFC6300

File PE Metadata
Compilation timestamp:
3/21/2014 5:46:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:Y5LnfTVnTzwCPd3Lnag2LAJ4w98aUE3ZWvnbDjH5qDa2S:Y5rTVTs+d32g2s4w98aUEQnbDjZQa

Entry address:
0xEBAE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 00, 10, 00, 00, 00, 20, 00, 00, 80, 18, 00, 00, 00, 38, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
51 KB (52,224 bytes)

The file MovieModeService.exe has been discovered within the following program.

Movie Mode  by GenTechnologies Apps, LLC
Run by Creative Island Media, LLC, this is an adware (ad-supported) web browser extension that is difficult to remove and will hijack the user's web browser search page as well as inject advertisements.
www.moviemodeapp.com
88% remove it
 
Powered by Should I Remove It?

Remove MovieModeService.exe - Powered by Reason Core Security