home

freeocr.exe

FreeOCR

Ralph Richardson

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Ralph Richardson  (signed and verified)

Product:
FreeOCR

Description:
FreeOCR Setup

MD5:
6b71915696dc51fbb16a70be7e917703

SHA-1:
fb541a015f6d0e6d64a7a19f1e5e4560ae25c469

SHA-256:
29028ba709f8039371f3adaeef2c0591e42aa5b5d86d683b82f937d982a91432

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:54:35 AM UTC  (today)

File size:
411.3 KB (421,136 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Swedish (Sweden)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\freeocr.exe

Digital Signature
Signed by:
Ralph Richardson

Authority:
StartCom Ltd.

Valid from:
8/13/2012 5:18:52 PM

Valid to:
8/15/2014 1:22:36 AM

Subject:
E=ralph@softi.co.uk, CN=Ralph Richardson, L=Hornsea, S=East Riding of Yorkshire, C=GB, Description=i8e5Ih9bQ0mgWF2i

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
06F3

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:3nvpW4L8+iDNdRAeBA3pIwYYHRi3jz7Gr:3nvck8DdKecygRs7o

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file freeocr.exe has been discovered within the following program.

Cobian Backup 11 Gravity  by Luis Cobian
Publisher's description - “Cobian Backup is a multi-threaded program that can be used to schedule and backup your files and directories from their original location to other directories/drives in the same computer or other computer in your network.”
www.cobiansoft.com/cobianbackup.htm
About 1% of users remove it
 
Powered by Should I Remove It?

The file freeocr.exe has been seen being distributed by the following 25 URLs.

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1480621813&Signature=hj1QzkEdjkvDZNY-HcbuUq2Mcxh0s56PEjFtHeXb~5TaDIvjTVZUS0tAktl3KDL3fcntpY7Scoty4S7KTQIU0ouYwEKePJ8XrJ8KRwuG3zA1eR754-7Z7rRkiW88EoMJnxzOkQuClCkqh-tYQl8ilJGm7hXAqHSQHhynirLw5N0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1487385192&Signature=NCZhmOAjM1WxZrRSCOkYN0XylI14XI87aml-ccuWYSL06Leth-IJqNhr33hkMWEBeidmETc6uZY1jXsmXvmEe96ndOHz5YCjsX-7pGWzsu8AA~eE7LmvbDZ5Miq0p-QS30B6Xnw-gehQ7n-0m73H-hy3iHWSbERT2YBx7cwNXbc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1479911977&Signature=HM2zZXn0FTSzRHhCaczMjpPq8bSPySrzTglPs3pnYAB1nij2Kt3fhIH9HRZjYVft6c~tgIny0x2W9GkRhEg6fhB6YX5jjTrYB~3J8QGGZ3Tk~e4zt8FBWqr8jtbIwMJEvJk9XrI0CjlRLC0WJ~Xkhc0QTv~le~MbGDpY0fhHs34_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1478625949&Signature=SOYjAVT0jObX-3pYb38aGbMUQJYNL7jiPxFvjzRp0V~JGHFRHzD7WwMZPkPjPto4TXx4FK9yH3TcUv8N2K7dHMwePkzjcgEf6QSpxYWh-k5wWcRR7hxczSFWT76Sw2lO5Z2A8HJikbhhgwILqb64LGEP-0em4vxRkIIBiqgwRO4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1435106148&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YyzRxjAOw3woz9r089O7R2kinqJJ4LkQ3vNORCTb~S9NwCH0LvKQITSzYmwGc8xi2XuvknGtw9Nr0HTCwilqWliSJ4vl9TuGojjDKk~U-uvXntPNDD5kGbQ09ldpLHn3sfwMO~szjx0a-ptU0vTeWlI-y~bBe5Zcy94qeimMTF8_&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1476113396&Signature=YLXdfOUbkTHDHp0ureM3J3yr7tN-vlcxQ3LumU2UITbg1P0Eq78FrKrxvcKGdnTBRJiQtPw-o7rhFQ6e-2twr2pUCZ7UcIirNlbkwfQ92ODnG~VLWvAvubXNFCqAMJrY2l4OIBsIj8Voy8uGC~IXv6CARaSwTwRYvyZn1zGSRD4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1473830786&Signature=RTcW5qP~WSQodyop4qUlWorPDxEDl9BuQPnRxrhnh-jx3KSYJzpBxaa3s3ESkQ3-rUZSJ7JnqVijoO2vV96lzr5olb5yBDdVbgEsla6IKtbwMK5rfj173qjzNqD2T4~rb1~LTbXzXlPsEbEPKimLgnqTwY-1nhkfXtnY2KuaiYM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1476995496&Signature=Ua2LJM2sU~OfYaROQpAJZfvKRo9U7xOTq5f40AUeytyxw7sbjVI9BARW07zRocws8z4myIrL565nUHC5NjeswNwhM1505fmAHmD5TmObKaa-~2SQJMhNXsIP3AI~aiDnO~UOw0S6J3aRNR4jXbxOh6Ak171am33OdpLPb6-x6Gw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://dl.cdn.chip.de/downloads/.../FreeOCR_4.2.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1477412382&Signature=in8AiBwxNYGyWP4tw1j7CFGVVYt8ZwX0QocF18JaDZXEu55rqk1lxjChzum7IGzLF-dbGvkqMHpXXa2ipXg9-RqIHF2w0LgPsjtqnLChdpk~LyOs8IxwLKC4s9nkRgR9TWMtkv~ofq8eoB1Nm4GVldWoL2gNTnapzO9GPbhnSsQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1477358825&Signature=QLCBeHY0XxTccHB6RL5-4eJ22BDa2wusEEx4j8NHfULR1byPfOTKe3kvbC893opiSWQ2M404TECfH-o5D8k8jhWp9mMMTP51hrvcMjCCsbshdbTBBGp0xgWTZjeTxYicaIPdAViXgA-lr8vYY1H-w5NKh3iXgiUEel~XDKt7TTI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1478721229&Signature=D~3ZutIWG1QDq0y-i2KJL7vIU2I4Zs88EDR6wgDVqcuTClH2zRaky2d6IEZPM45mIYltnptABCLD7D3FSvxcuoL6vA4FHhML~aJS0wyJL~3fyb3nSpQ2YAvGZxnQ~m0Lkxz~nYjPexbc7cbMMuOGpYkZXl6wSneoqFJEkSMAwbs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1469039347&Signature=E7IZa2AHUmGXs~oscJ90u3qoDNrhN85PaQ~vDJEXnIKUlelcmr0sgdDxHPT8iJHP8iW55jmHEz2t3-ytrV8HG~6mV42LjCciLmDdBqoWYtPWXjhdXNpmnE8hGQR~5Xzd6MeobrkJO0wua8YyVARYZAsn1LgFcrWU5Uk8LhHYqW8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1471566429&Signature=JplRQGel8-yI6s7I1O8Iplqmlwin0820saRs8ZX6zJyi~Nqk6VzuO3HOFyjmnkYq0iPFlYVbSpTpNvHuhWU392WrazhAlmSJ5edaNRfl7Q6ZxFwebBErcxZyVEAcQ9xRE6F7Jbx0WhScWUbj34kdmnArq4ouPSnmNIpXTIKPg5I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1471894859&Signature=TD59DTOgCz-f9MxY4EOb74QF4mlWLAtu9gU4T6LkftOC2VksntkVY--wcm37rYInfjcgg5~x014UFoQxCO1YdTWvIAbayRBCPniCsuqvDnZjkzQoDUXvUBBN-He7PB9xCtwucHYkA0L9PXP4lDxathyq-jix2zlmgd~2WG-~tEc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1461633890&Signature=f721-Y~Y593s3AEbMCA4QwtoG7cuwH3s8h50W9AWYIQNAvknug5uWUiQkVUPBti999RU4LKZeKAn-z-5v0eZTGGaEmG9YZNfIm08uc~xc8jGOBbCv-bab~nGLZ053qBC5-YwFrLvgeBrkm-hb04aQhVMVxlCifTiTGm6cgjt87g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1459845854&Signature=ek339FukMDawzRXD3M-K1EORWtL0GTOndx0Yj0vUXj3UW~PmkCCooqGBZL8aKmJTzgM7Q3jN7Lyl3Aqzwtmlz73FfikCorpkO0Pjvds~VC1U0KOUlfE6WSMgv7VCqbFnOAeXQbBk8pm92YQOUEV5tv2Qrid0CAz0znHPYodYfAw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1450843285&Signature=UQCZ~P9C1mPlBZAY4gXz48v8BjVNP4lR2ZSwFH9oBepeLtJGKOxH8cJiz1TLh-qLK9cYKG4MIxQ4Phz0wVcLqhJYApj8ykAF4~U0UJ65FMVwSc7DsXl15zSHh2f4S-ZsVXc8kBaDB2EJXAW~f94780ZowPggOP51h3M~tcBD0Y4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1457411572&Signature=FmRqU4yOJF777Okx0sba0gj971JWULvvzOinDX9YYewuwy55oDvI09ycaS8yQ0Yin~lro-O-jqHC3VJpTwUczkMQOUGGKMvi8m3OG7ocWObs06ZadSYPDKliDhxD~Xoer-HV649KpbkT8Kp854DkGRylXuzkU4KuSOoc8EN~31k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://gsf-cf.softonic.com/fb5/41a/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65551&instance=softonic_en&type=PROGRAM&Expires=1445733221&Signature=Zaav0rpAdF5E6vADVpjpl-xEH8y~5HYd3oYkmKkbESPbHM30NBo5rx5amij012mmB-v-gUKSJbjNpis3pbeQcPS-xDvBCyXE0WJh5WyGCbS7AKtj-ntNOUc3p-yFLMLPlUUGzhhxe53uu-6MV8mWR6dbYDCVta7t~jUwwrCYgaQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=freeocr.exe

http://d.computerbild.de/downloads/.../freeocr.exe

http://www.paperfile.net/freeocr4.exe

http://www.paperfile.net/freeocr.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../freeocr.exe

http://software-files-a.cnet.com/s/software/12/69/38/.../freeocr.exe

Scan freeocr.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.