home

freescreencapturer.exe

Screen Capturer

ScreenCapturer.com

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ScreenCapturer.com

Product:
Screen Capturer

Version:
1.0.4.42

MD5:
5c1e0a71fc7ef532672e97dc65a2d858

SHA-1:
9e1b3c9ebbb3bc36df427e21f7b5bc276fe0e276

SHA-256:
48af75ca1348d52b43398cba6708d956db5b826534db9fce1ab6b45eb7d90220

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 8:37:09 AM UTC  (today)

File size:
12.6 MB (13,259,428 bytes)

Product version:
1.0.4.42

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\freescreencapturer.exe

File PE Metadata
Compilation timestamp:
6/23/2008 8:24:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:E1SLOwKfb89Bze8PcL5ZB/zdTyzQXg7sk/PIt0:ZLfK4zzkL5ZugkX/

Entry address:
0x289C2

Entry point:
55, 8B, EC, 6A, FF, 68, 88, C8, 42, 00, 68, F0, 81, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 38, C1, 42, 00, 33, D2, 8A, D4, 89, 15, 80, 36, 48, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 7C, 36, 48, 00, C1, E1, 08, 03, CA, 89, 0D, 78, 36, 48, 00, C1, E8, 10, A3, 74, 36, 48, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 01, 15, 00, 00, FF, 15, 14, C1, 42, 00, A3, 80, 3B, 48, 00, E8...
 
[+]

Entropy:
7.9842  (probably packed)

Code size:
168.5 KB (172,544 bytes)

The file freescreencapturer.exe has been seen being distributed by the following 44 URLs.

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1476419101&Signature=hEfbohZDn4fp18dY70fP8HQWEexXGOIX6TD-2S74Kn~tozhZAf0Vycwe9FOXf3fXZNQuNVq3h6itDB5f0sN0V6wvhX9X7bhsxZeE-rRPHTrpCMka02MHnUFNyWAkBbHpifZXvQPLV0wrNvWUr5vp6SoksESU4~mtVmvJxaW8o9A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

https://free-screen-capturer.softonic.pl/download-tracker?th=1/.../6HwFjViVUr5nDkhocXO ok1f4dWBdMoBB3Vb54Bf58nf9R3EUjx6kd81YLx3syH9oquWnWS8s=

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_pl&type=PROGRAM&Expires=1427247654&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NDVCRXNm3RHmW9Cs2yLdspj~eZhWJkGvoKMABoHadD3eggsmTTg3GgYdh-~8ZXL0bdS~xIG09AO71MZMmBZ-TwWkKL7sz2PDUjNYn6p9oudxiuPCChBkeEvFHPjOslSWrlYiSmj45ddinijLupz-WD3n561B~tBoMxCFkG6sMFI_&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1477435255&Signature=ehk75Lvwnez87sMBGxYSvSX9twy~k82~iUUzfbwKcn2hrCE-jl3B4nRGtLnR~ChO5f51EEFRar2tFJhOsDQAVHwEuTlttQMX6expvVi0KGzpqj8lMlUI8mA1g82vWLayHa4kRQuaDqvvy--Zlplo2yiOFpgELqOczvgdaHDzy8k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_fr&type=PROGRAM&Expires=1473833869&Signature=K253RIeDMLmiARMyVqPHF9Y-meJL0OIgSru-Qf~a3rsKIwQB6ekFPfWOH96ZsSx1KePXN3Iy823ZxYzwDi9BNogEzFma9LgXBx6IJlcdru30QGa4mqTTUWZ3aiOvZhVORazgO32lcpUsdq4CObCSjecEVcKrL1SFJBNPPCezGZk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_en&type=PROGRAM&Expires=1478066849&Signature=Ankzh6FFyv56oPknn1Cj4vsenDSPeH3Mv4KhfW3MEdwuMUaLtHN8-C-0cBG77UWmateOYqqp-jnPNQuYACrv9WwWwAtJNUUA8RBNN7UfmQW7WI7PpADfng99FF-2b6O694~Y8HIBAOViQ6SE~z1GfITI5DfCPFL5hWFo18X6KlE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_fr&type=PROGRAM&Expires=1476413073&Signature=CBSADV0TfesSMJ6Os08VKBjQuCcxM6q-ZlK8RjV25Qu4ci~MphHXPyngebeGLA0rGjwald94lFAa-uKBcdqZmhBoEJ6ExTwROMB0Ql86mjFyREk2OHsHazlBczRMBcwYEZ0eBgAuPozToSCW~HA7XYiEv~YwVIj~Tx3b21MIr78_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_fr&type=PROGRAM&Expires=1482655351&Signature=XAgph3bUAYc9Taa-tp1MeUstmJAQzRsDAlrf9FtLADl7M1-6zJOH48tULUuQVtMjfRpBhUhw1jWHR7mAVCriWHNjII6YvL~t4IH-9G4WmviVi76WUxRMHXOfqwqBV4M9CAsQ9GhQUbNi2Ye2g8FC0AbreBCmFu70ODw9jidMPn0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_en&type=PROGRAM&Expires=1475131137&Signature=bO3yF~~COVnnVk0iv1N~RXBiLEeaQT7gJcFPIRwYJeG8nCcpL2jL7cIKrmAP8RQa7pVj3tzQqvv2xCezFaKDOrnP8zgwKWnDkcFFxm1C-hHpCkfPjGCUx6wK143iCKaThfFkjbarzEZQ8vFR0L~BTjk1y6EsM29kFMW6KOnwAmY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1444892637&Signature=YbzUG3X9nLS-boNAbFCUUkXTYsk99KLNsapT5eDn~nifz-7tXb2buJ0OyYDFCSPK9fm0r1V5BvB1kbiAGIaiXj5bpFFEpCfbvkOQjzMGj8Jlgq3Gmxu~5zM8wtPKTELxDxfBQ1QkfgWIoYqE-7QqTLc4l77i8xS9Aa0W~oVSaIA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_fr&type=PROGRAM&Expires=1477166146&Signature=WV1JJ8yGUmHrzFhXrLM04SvhQgXJyfq09fNsT-dwowgy53uel63PlW98ZS10KHB-8DVfCanQyyKtG8WzDf3lr~L~kCz7sx9vGJ~wqEqW3zjd4kwRNUsR-vn-VaYCGGQNR1eZsdKBqhhW-FDAte4xL5xSqrYj99fqIqq-XCO2lxA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1478963707&Signature=RP32ROl7fNnzfpoVjb39-vTdY5pIUdXP2xZmqtzOt3MkM7YZ2YPxcoHkQKhAUgYMxfuLTp62PaqWxlv-kD3di3vfC46G04Xgf-iExa0qWgYJGkF56CKs9UXNVullIjqjQijlrXpdp4Z4DHzcuyFNBkN2M4B4EaOpN054ivZAK-Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_en&type=PROGRAM&Expires=1462801048&Signature=SuNrXQiPeLF0h8pwRTlM1iEbBy~tQgdmXipIDNxemK-VbUWc1CJVCYQtpmArQYiBgKYs9ZZDvq4YOT8nf82EerGxf4AbHtboODHbB190KoCo~Y-uvWSBhRUZUycqfhaQO5wS-~QxNVz-BtdwhdwJE-U6g3vMhUn4qQG2IA33owI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_pl&type=PROGRAM&Expires=1447988710&Signature=AJfYsYCOJgZgGYgPOrnS6kvIZcrx8tMFKys2-4NlLWq-U7uBsr674yu28k9YnaQ-jdcTG4s9gWfFlmUqGKyzhs0coaLVj8~QYKeGk0v8x9wGqLYgtCmvVMTxQP8GoluWDMfuMVNIC~5UwCgwpN07pL55Royj1FZWRetZxt5F53A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

https://free-screen-capturer.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWtYUgnUjjADgBjX6IeBJQodXDqnNm8mmwa1MRua3 0fGZdhdpxtRSIthuNtoryHaMEOiI17AQ5O/.../zbbZ8iJK4imbLD6dGUJTQWQsoRVU636WuTK5W9CBQ=

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_en&type=PROGRAM&Expires=1464686175&Signature=P9j53ldff2VaUyLkDZgchuj4NeD60CcBKdZ1Hizyk-MKYiKfiYewsdjkUZVpdEsEZ8SRfQyigwMaXfhF6DAEXUHWZ-xYJsoaBhzBkmnIWaRTN4Kj82C6JfhcVorex9Sj5DRFXwywxDFrYWVy4hspxN4BSem8kW~PJZI5SkQ5Ljw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_fr&type=PROGRAM&Expires=1478414974&Signature=D5WVrILxxupLM3tVVI9SGGmpEh8UhrpzdD5NruckvjPWA9jKx-lOqqwPyHxvAUatILUgRfLaVDJ0Vda954zrJwro3yb33WdVicGnVk4gvvSH42ONzx-l~fkmFV2aEKWBrimHJZpo6DdO3e4kBj0v9TQ00b0j8M9ptQMENqTKDeo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_en&type=PROGRAM&Expires=1480208773&Signature=FzmfVhh8EVboUn5TPoHeNgX~21bRgzcEzcX~kLReoQGwnkC6jXjjq486ClAKg4Bc3xM3mqXVl6vevEq-4DWW6hHgjHiZSTtoJmDuTOwFq7w7sbWhS-OOlatuZxchRhNm5yEUWi9pv29pyv8dtFVNXK5JDa3wQ94YHfMGFIS8E0E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_fr&type=PROGRAM&Expires=1430618466&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=B-A2p3JSmI13Y-ggCt4NYkGHMz2pZj5Sq6wl6hdvkmDTYy8RYLjrCnYlmjAAoG61HvumPWZYQyPwt2rOoIquSdBhcv2u4kuyBqcUr2mYFs1M~SX4Rt7o6isO653rqxlK4QaDjzqcKdQgUruBTkleJSsFjJfv8DCkFoDwMR74k0Q_&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1478153666&Signature=PhDlGz9EaY40saOdQQtmq5WjwFRdQt6wTeaqcCfJcvZtokjiGLEHcqncfIskFTDeeoazHYewBQd5o-AQJ91IH5K4qmuL~BkWI9TLp0Cm4ksf5hAJnYOepDopJg5dmeM3lfNwsRVtT9vlx~ldiqKS0bZSDN5oRpHrfkYXHAVUVEQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1480938522&Signature=S6R69gUCkbOQFyyMI8opPe86N1EPOsgKacrtIOxd5F3j0I0CLnMnaixLAm8FALC0nbw4v2lwlAIp4~AyFwk2o1sf~j2qqG-17XAVyXRC5Hn4~knK3rLx3BaehDEOhBSDygyVE0Q9CSFTGGSfU6IW6QSCfduXfgAXliStF3nqo10_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1425596052&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Fwnb6PTpcDNelKoeoCpepE~zyqtYITkrW~~ufgSxExnH18i54~YdWPh4WwK9G0gddZZW7EFVm1PrG~diQ-c31uZq8ZFAAdhueAn0Fh-YulrOlH2xXjbu43fct~M5y0gnWvLpBBX~x~BTiHWqxvCaHtMpJxqissSlnepc3h9PBu8_&filename=FreeScreenCapturer_1-0-4-42.exe

https://doc-0g-2g-docs.googleusercontent.com/docs/securesc/8s56a4rm7v4co1vcsqasl5fcgg0ckfvi/bmq78ad8pku6fsuaeo181enfbi0ijtbk/1448445600000/00135904217486798783/.../0B4oMcgLVqPdheElnZE1fNGwtLUU?h=14139726340278136479&e=download

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_en&type=PROGRAM&Expires=1477163831&Signature=XwQt8FINppsz62vZZfMq7atNnJZWAuZUlAjnbXt0W6Vn7FAtMNnOxt-39kP2zIPJfROAhYvP2TKXv0CjqiqXTf23aSgx3yyfjMvGfz88GIC7yf-v-uk-TOWcTlhzFbwEiXY9~~BLCF13Xkqxp7A6WzgwQD55M8o2Yz9faRVFVpg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_es&type=PROGRAM&Expires=1475841380&Signature=Hp-9T18LmD4eRju6t6j3U6tOeT4RryEl36hvuQRvkK34ubQ6vz904ZTalX3ctuFXRPu8YWyCbKWneSCNFsdeEarmN~enrql13A62zeU1y2G75XXUZUmWJTA8oS~~OxumJvbBVi7pJ71oQELMOtlfgkbc4AfIQRRULQczMYoen9o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://free-screen-capturer.en.softonic.com/download-tracker?th=1/.../6HwFjViVUr5nDkhocXO ok1f4dWBdMoBB3Vb54Bf58nf9R3EUjx6kd81YLx3syH9oquWnWS8s=

http://www.ranchsendgift.com/zLZkSaK8DZc8l BfmfnOUTa5uTheHcu1bRBu0k5zfaWRVSE7eTIFh2MW6mPalJWyTsbugiuxqpTceS0a28WA20MuCIgGMTLm9njdQjtoe2wDE2dUPeUo_V0lr2TuSoOf5iMQzkRNZfPhJWcQHmNONcJi8fV2cj3jR6Wl uyYESVlBXF4UcTmgp2D37cCq0Goz5I_pl34MIJIVf23bSPo8S0bbupf7g==-GzQAAARqc7EJhiwYiiGJXJXxbDBwyAH7WwFFEoAGG2Pju4QgunmNI6rbYwN9UqxJQQ38jT73CRkf

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_fr&type=PROGRAM&Expires=1451060409&Signature=DTZ8o99-f13NFEFM4Pm7m8EKdcRdMqaWcaMl6f8a0j~PcElgj6LHCFgkXzQNRsyR0KiHX9amasFAHesS0CjXzKarczfOeShaJxG7rutwGTu-xt2rpNGqJ~60Sn6iTjhWEGV2MdR~BQQnck5f~wB4ZwWWk4e-GbApD1Llxtb6Jpk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://gsf-cf.softonic.com/9e1/b3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=77464&instance=softonic_en&type=PROGRAM&Expires=1465760795&Signature=Z2UhJJyue9B0viVIj7CfopN9kboSYpXgUHR-Rz8GJ23XQNI2Jh565k3YAZkMp2OMO8I2PbwEN7gJWTBPn2ZG3Sq8CXiLJfBlMOXbPB28kWAl5iyS-mMRgc8V7pIs9f1QLU4fZvAVoO6q-2vhZGmpa~-n4uRU75x--X5LkBQTNsA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FreeScreenCapturer_1-0-4-42.exe

http://www.darmoweprogramy.org/download-file/.../

Latest 30 of 44 download URLs

Scan freescreencapturer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.