freescreensharing_uninstaller.exe

FreeScreenSharing

Free Conferencing Corporation

The application freescreensharing_uninstaller.exe, “FreeScreenSharing Installer (PROD)” by Free Conferencing has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program FreeScreenSharing by Free Conferencing Corporation. This file is typically installed with the program FreeScreenSharing by Free Conferencing Corporation.
Publisher:
Free Conferencing Corporation  (signed and verified)

Product:
FreeScreenSharing

Description:
FreeScreenSharing Installer (PROD)

Version:
0.56.21.0

MD5:
b51ccf35b351491bef1be51c05b689f0

SHA-1:
96d11b50379b7200d53a2ca51e74098d3b2d0201

SHA-256:
3c3294521b5b42d259d7921c3b530b5be5c804b24accd52e1087d7d344848a8d

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 1:36:32 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Downloader.FreeConf.Installer.Meta (M)
16.4.12.13

File size:
206.7 KB (211,696 bytes)

Copyright:
© www.freescreensharing.com

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\freescreensharing\freescreensharing_uninstaller.exe

Digital Signature
Authority:
GoDaddy.com, Inc.

Valid from:
7/31/2012 3:59:57 PM

Valid to:
7/26/2013 7:26:06 PM

Subject:
CN=Free Conferencing Corporation, O=Free Conferencing Corporation, L=Long Beach, S=CA, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2784ED764D81A9

File PE Metadata
Compilation timestamp:
9/26/2011 9:21:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:azjwjnbLAHr/IFM5X2y6MraRwqF8iMk8ECXHaMcsIQaUCeS336DewKUWd5zgWJ5L:afwoSM12y6MraRwqF8iMk8ECXHaMcsId

Entry address:
0x39E9

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, A1, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, F8, 26, 7F, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, 10, 26, 7F, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, A3, 40, 00, FF, 15, 84, 91, 40, 00, 68, 04, A3, 40, 00, 68, 00, A6, 7E, 00, E8, 18, 27, 00, 00, FF, 15, B4, 90, 40, 00, 50, BF, A0, 30, 84, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
6.3936

Packer / compiler:
Nullsoft install system v2.x

Code size:
28.5 KB (29,184 bytes)

Program Uninstaller
Program name:
FreeScreenSharing

Display publisher:
Free Conferencing Corporation

Display version:
0.56.21.0

Uninstall string:
C:\users\{user}\appdata\local\freescreensharing\freescreensharing_uninstaller.exe


The file freescreensharing_uninstaller.exe has been discovered within the following programs.

FreeScreenSharing  by Free Conferencing Corporation
Publisher's description - “FreeScreenSharing is a free online meeting service designed for screen sharing, web conferencing, product demonstrations, webinars and more. The system allows for one host during a FreeScreenSharing online meeting.”
www.freescreensharing.com
About 7% of users remove it
 
Powered by Should I Remove It?

Remove freescreensharing_uninstaller.exe - Powered by Reason Core Security