home

podrä™cznik excel 2007.exe

Shockwave Flash

Macromedia, Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.bytesendclear.com and multiple other hosts.
Publisher:
Macromedia, Inc.

Product:
Shockwave Flash

Description:
Macromedia Flash Player 8.0 r22

Version:
8,0,22,0

MD5:
30fc3bd213a493beb758406571da7eae

SHA-1:
1ff8fad864e558506ec9584e03248fc54fe0b664

SHA-256:
d4b87f3962aec062fad09324b68d44a447ea062b56438ef9bca8e5f5c4a696c7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:55:34 AM UTC  (today)

File size:
2.4 MB (2,558,657 bytes)

Product version:
8,0,22,0

Copyright:
Copyright © 1996-2005 Macromedia, Inc.

Trademarks:
Macromedia Flash Player

Original file name:
SAFlashPlayer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\podrä?cznik excel 2007.exe

File PE Metadata
Compilation timestamp:
8/27/2005 10:49:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:PVHFXSFEmqiDqCbS1gickVsPTpuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuTuuug:PVHFXSCmqsSgfkVsNuuuuuuuuuuuuuuQ

Entry address:
0xDC300

Entry point:
83, EC, 44, 56, FF, 15, 28, D2, 53, 00, 8B, F0, 8A, 06, 3C, 22, 75, 13, 8A, 46, 01, 46, 3C, 22, 74, 08, 84, C0, 75, F4, 3C, 22, 75, 16, 46, EB, 13, 3C, 20, 76, 0F, 8D, A4, 24, 00, 00, 00, 00, 8A, 46, 01, 46, 3C, 20, 77, F8, 8A, 06, 84, C0, 74, 0E, 8B, FF, 3C, 20, 77, 08, 8A, 46, 01, 46, 84, C0, 75, F4, 8D, 44, 24, 04, 50, C7, 44, 24, 34, 00, 00, 00, 00, FF, 15, 70, D2, 53, 00, F6, 44, 24, 30, 01, 0F, B7, 44, 24, 34, 75, 05, B8, 0A, 00, 00, 00, 50, 56, 6A, 00, 6A, 00, FF, 15, 24, D2, 53, 00, 50, E8, FE, FB...
 
[+]

Code size:
1.2 MB (1,294,336 bytes)

The file podrä™cznik excel 2007.exe has been seen being distributed by the following 6 URLs.

http://www.bytesendclear.com/rFJmvSCtZOJe uiR6jWgQ_yNbxN VARgqckRNOR6uoyiT7Hnm12NUCueSaXtwfNY6UGkTPDhnWoqTIo9mfukHFFIB7YlzlZecdURb1HB5cL_mstgmikHi3N4kOPiP3Sxj1cLSRDE5W3BjppD4o17 KgP8tbHVG4OH0zAXMk31XrIvbWM1sCI7_w4s7Bz6WkXiDPZ8 qkVt7RELesY Wrnkyn1wrpa mgfe25EDVLwxyIQlEQytcVlYOiQzn9E1G4p5321jAENq0MM3CxFkTfC6SpMuMgnLoX16qVuNvY_BTDOkntV6Gh8cYtCr0SXhNRozjG7ZeggfTBkqL_1tal6EyXuW81245pDFutULn5XqmcpMbMmdSZWrYPsSPYwnguEaN0ozEEc 9mRHc0S7cjwsJm2qNPOb1xz5WP_HkArv_Y7jqGqVB1KOgkTfbu8QyKusEkndMTx7xRtJiVOk0rqDC2RSJhH6pazVcP46wx4ZixOFdxG65M_mWI8dw8vafiz8yut9nzOyMQEv_GRi5QO2IM0t1M9sL3GlBrMKZiooAmf3xnsv5e0SWGnoVjl46QHvWG0ypL-G3UAAGRwXkyHM9gWmnzRKQcOLS0MPMzozvcYW8ZDyoBvjEby4l79ddkxm7Vli9w_f3VBpa99GcGOKQ7K3V7Hz4N1__mzWKd9KXdwhwmAYIiTQE208PnLAQ==-E

http://www.bytesendclear.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

http://www.bytesendclear.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

http://www.bytesendclear.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

http://www.signtowntoday.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

http://s10571.chomikuj.pl/File.aspx?e=rEaEIHLlABvtBK76hMrD686ptPTrRXhD77eKOn0G6OzEcCA36ARG5OOugrOwPl0UsbQemEAU34hSRV_KrNOhFHhNmyXixVhbBUrRe8Dr_JsPFLjeVQBxxzL_IpGR0IlNQvJHBwJX7dvKnsKrU85gOhdja5yXLURpDC1M-RUZ8K8&pv=2

Scan podrä™cznik excel 2007.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.