» swhelper_1214154.exe
Overview
Analysis
File Details
Programs (1)

swhelper_1214154.exe

Shockwave

Adobe Systems Incorporated

This is installed with Adobe Shockwave Player 12.2.

File name:

swhelper_1214154.exe

Publisher:

Adobe Systems, Inc. (signed by Adobe Systems Incorporated)

Product:

Shockwave

Description:

Shockwave Helper

Version:

12.1.4r154

MD5:

320bc5f5c61fc4a8aa01cb75f6f0129c

SHA-1:

aa93f23955a1265cdccaffe6604bc6fb00b558d7

SHA-256:

aaf3b2779ed4a7f215792cc2509e675a718c4990068638e879f2127bb34a22fb

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 7:17:17 AM UTC (today)

File size:

1.3 MB (1,314,504 bytes)

Product version:

12.1.4

Trademarks:

Director® is a registered trademark and Shockwave(tm) is a trademark of Adobe Systems, Inc.

Original file name:

SwHelper.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\roaming\vos\spyhunter\changes\c_\fzh1liialeha7ds9\fzh1liialeha7ds9\syswow64\adobe\shockwave 12\swhelper_1214154.exe

Digital Signature

Signed by:

Adobe Systems Incorporated

Authority:

Symantec Corporation

Valid from:

1/14/2014 12:00:00 AM

Valid to:

1/7/2016 11:59:59 PM

Subject:

CN=Adobe Systems Incorporated, OU=Shockwave Player, O=Adobe Systems Incorporated, L=San Jose, S=California, C=US, SERIALNUMBER=2748129, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.2=Delaware, OID.1.3.6.1.4.1.311.60.2.1.3=US

Issuer:

CN=Symantec Class 3 Extended Validation Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:

179D59ADF23718F7715D27F6F38550EA

File PE Metadata

Compilation timestamp:

11/26/2014 7:19:04 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:/PdPCYDZV2I/sOm2il6KeOSuNA+kNAxE/Truus4Ru:/FP1D2sm2u6KXA+YTaLOu

Entry address:

0x30BD3

Entry point:

E8, FD, AB, 00, 00, E9, 89, FE, FF, FF, 66, 0F, EF, C0, 51, 53, 8B, C1, 83, E0, 0F, 85, C0, 75, 7F, 8B, C2, 83, E2, 7F, C1, E8, 07, 74, 37, 8D, A4, 24, 00, 00, 00, 00, 66, 0F, 7F, 01, 66, 0F, 7F, 41, 10, 66, 0F, 7F, 41, 20, 66, 0F, 7F, 41, 30, 66, 0F, 7F, 41, 40, 66, 0F, 7F, 41, 50, 66, 0F, 7F, 41, 60, 66, 0F, 7F, 41, 70, 8D, 89, 80, 00, 00, 00, 48, 75, D0, 85, D2, 74, 37, 8B, C2, C1, E8, 04, 74, 0F, EB, 03, 8D, 49, 00, 66, 0F, 7F, 01, 8D, 49, 10, 48, 75, F6, 83, E2, 0F, 74, 1C, 8B, C2, 33, DB, C1, EA, 02... 
[+]

Entropy:

6.6313

Code size:

827.5 KB (847,360 bytes)

The file swhelper_1214154.exe has been discovered within the following programs.

Adobe Shockwave Player 12.2 by Adobe Systems Incorporated

www.adobe.com

7% remove it

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.