home

211872.exe

TechSmith Corporation

This is a setup and installation application. The file has been seen being downloaded from software-files-a.cnet.com and multiple other hosts.
Publisher:
TechSmith Corporation  (signed and verified)

Description:
Snagit Setup

Version:
11.4.2.263

MD5:
9d51ee484b9fb5623fd0210b61b87cde

SHA-1:
ed3063b49655a640a42049e8f74268cbca76b2a6

SHA-256:
4b7522bc75e62571722bd20ee9461b3aec6cff4c0c459ce7005929d039492626

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 12:08:25 PM UTC  (today)

File size:
67.6 MB (70,920,536 bytes)

Copyright:
TechSmith Corporation

File type:
Executable application (Win64 EXE)

Common path:
C:\ProgramData\allmyapps\install\211872.exe

Digital Signature
Signed by:
TechSmith Corporation

Subject:
CN=TechSmith Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TechSmith Corporation, L=Okemos, S=Michigan, C=US

Serial number:
1EF0AC7FB103A025C1E8118899C59997

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
1572864:gTtKsFjhI6I8vWuCH0YT6n+GObF1U5KisNYATM/3alVVz:gJKsd+utpYT6MF6QZYAg/3aTVz

Entropy:
7.9995  (probably packed)

The file 211872.exe has been seen being distributed by the following 10 URLs.

http://software-files-a.cnet.com/s/software/13/04/20/.../snagit.exe

http://download2016.mediafire.com/3acdhp9c3cng/.../snagit.exe

http://download1461.mediafire.com/w9b8ahb7z5cg/.../snagit.exe

http://software.thaiware.com/download_url.php?id=10756

http://www.filepuma.com/file2/1394969450c5023/snagit_11.4.0/.../

http://software-files-a.cnet.com/s/software/13/62/38/.../snagit.exe

http://www.softportal.com/getsoft-1040-snagit-2.html

http://download.techsmith.com/snagit/enu/.../snagit.exe

http://download.techsmith.com/snagit/enu/.../snagitup.exe

http://download.techsmith.com/snagit/.../snagit.exe

Scan 211872.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.