freescreensharing_uninstaller.exe

FreeScreenSharing

Free Conferencing Corporation

The application freescreensharing_uninstaller.exe, “FreeScreenSharing Installer (PROD)” by Free Conferencing has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program FreeScreenSharing by Free Conferencing Corporation. This file is typically installed with the program FreeScreenSharing by Free Conferencing Corporation.
Publisher:
Free Conferencing Corporation  (signed and verified)

Product:
FreeScreenSharing

Description:
FreeScreenSharing Installer (PROD)

Version:
0.56.15.0

MD5:
e3784c0df7f6a0dc9b20e82ed8651159

SHA-1:
d1c437fcb57c4022833ae7216c265634eefa821d

SHA-256:
ba3711047c26f17d84cf6bfefeef3560c78e94d69986104125901e13f07a2bdb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 10:19:28 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.VOPackage
16.3.2.1

File size:
206.7 KB (211,688 bytes)

Copyright:
© www.freescreensharing.com

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\freescreensharing\freescreensharing_uninstaller.exe

Digital Signature
Authority:
GoDaddy.com, Inc.

Valid from:
7/21/2011 6:12:24 PM

Valid to:
7/26/2012 7:26:06 PM

Subject:
CN=Free Conferencing Corporation, O=Free Conferencing Corporation, L=Long Beach, S=CA, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B7F7198B31E78

File PE Metadata
Compilation timestamp:
9/26/2011 9:21:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:/zjwjnbLAHr/IFM5X2y6MraRwqF8iMk8ECXHaMcsIQaUCeS336DewKUWd5zgBJ52:/fwoSM12y6MraRwqF8iMk8ECXHaMcsIt

Entry address:
0x39E9

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, A1, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, F8, 26, 7F, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, 10, 26, 7F, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, A3, 40, 00, FF, 15, 84, 91, 40, 00, 68, 04, A3, 40, 00, 68, 00, A6, 7E, 00, E8, 18, 27, 00, 00, FF, 15, B4, 90, 40, 00, 50, BF, A0, 30, 84, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
6.3936

Packer / compiler:
Nullsoft install system v2.x

Code size:
28.5 KB (29,184 bytes)

Program Uninstaller
Program name:
FreeScreenSharing

Display publisher:
Free Conferencing Corporation

Display version:
0.56.15.0

Uninstall string:
C:\users\{user}\appdata\local\freescreensharing\freescreensharing_uninstaller.exe


The file freescreensharing_uninstaller.exe has been discovered within the following program.

FreeScreenSharing  by Free Conferencing Corporation
Publisher's description - “FreeScreenSharing is a free online meeting service designed for screen sharing, web conferencing, product demonstrations, webinars and more. The system allows for one host during a FreeScreenSharing online meeting.”
www.freescreensharing.com
About 7% of users remove it
 
Powered by Should I Remove It?

Remove freescreensharing_uninstaller.exe - Powered by Reason Core Security