home

swftools-0.8.1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.swftools.org.
MD5:
8637bf3cc32f677e8928927b91f7b354

SHA-1:
46a1c9cd43512d79759c66ee1fba81a9e69d7da2

SHA-256:
72ad367a3cc381282e4b79f3884fb1d6d22ffcf88065f90a3c1897f5836ce5cf

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/23/2024 10:28:49 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.CDB
1.3.0.4959

File size:
2.8 MB (2,966,528 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\nec\sp350\datameeting\swftools\swftools-0.8.1.exe

File PE Metadata
Compilation timestamp:
2/28/2007 1:44:21 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.56

CTPH (ssdeep):
49152:DzXP8wtdf9yKVz+bvekE5LhlZpe0mBllemNTgt+gQTMaCbuDZ93MW1:DzXP19XkbvE5Lhlk8wOVQTMaCbuDZ939

Entry address:
0x1230

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, F4, 62, 6B, 00, E8, 88, FF, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, F4, 62, 6B, 00, E8, 68, FF, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, 8B, 45, 08, 89, 04, 24, FF, 15, 0C, 63, 6B, 00, 89, EC, 5D, C3, 8D, 76, 00, 8D, BC, 27, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, 8B, 45, 08, 89, 04, 24, FF, 15, 00, 63, 6B, 00, 89, EC, 5D, C3, 90, 90, 90, 90, 90, 90, 90, 90, 90, 90...
 
[+]

Entropy:
7.8842

Packer / compiler:
Video-Lan-Client

Code size:
2.7 MB (2,824,704 bytes)

The file swftools-0.8.1.exe has been seen being distributed by the following URL.

http://www.swftools.org/swftools-0.8.1.exe

Scan swftools-0.8.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.