home

encoder_en.exe

Microsoft Expression Encoder 4

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Expression Encoder 4

Version:
4.0.3205.0

MD5:
741d8dffa1d76a86cfdd17b1fcba1ea0

SHA-1:
a2b56dfdfaea01cea16015323cc5facc1bc6c44f

SHA-256:
f8bf69fa2315ce906b1a5dda94e03b2db38e7db0a8fd962dbff395f01105937c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/30/2024 2:52:55 PM UTC  (today)

File size:
24.1 MB (25,279,344 bytes)

Product version:
4.0.3205.0

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
Encoder_Trial_en

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\encoder_en.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 10:40:29 PM

Valid to:
3/7/2011 10:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
6/1/2005 4:46:51 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
393216:/FwG2eUw7ddMJdngryuc9zNe3gcKCZiLUTJemRSN+E230vbpInCXgmGsXI8gsBi:owRdMjFNj0demwq0DpI+UsBi

Entry address:
0x5972

Entry point:
E9, 26, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9...
 
[+]

Entropy:
7.9997

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
30.5 KB (31,232 bytes)

The file encoder_en.exe has been seen being distributed by the following 42 URLs.

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1484535483&Signature=c7arPFXTnIEQCE-umC6OwrloYOW1tVoJdjdNiWzW8LQ5ErbRTiqZ5NO~Hj96Iw6zoNvHOkMdntWs8yhxHhthQ8bI7-otbisGgs06yR4MzhrQ6fo49guk30fHeXWfTU2MTRFrt8SJDqJOw7ZYcYlQsDYluPFwzkea3-ub1xMe0QI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://download2213.mediafire.com/5cfua8ch19hg/.../Encoder_en.exe

http://download2144.mediafire.com/1juvxmtdjaig/.../Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1473761397&Signature=drhHELUrW3dVtMsH3CJFPSjz~YPQJiMB-ffyUnL~1BzNYTIVGJhS0XsoqVNBuIMDIPBSbe2SzCbcr1BDevgRX4d5aXTsXUuFfHenoPEkmuoEvJL2whY7oROGVBBn0yqnqSpUb~hLfnVhpMgoFv1Pzy5uTnSwMDblwGlRM2JSlB0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://microsoft-expression-encoder.software.informer.com/.../

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1448750571&Signature=it9bggmtfobFrCKAfYGRHWfI3eMz12XMDpME7wvMoyR-WgX7mjc636MOlOzpu9lRyPD5wskfu3UZee0mItNqXelJ-Tqg2vigTt-SpI3IW0IEMyWoL1R7cM4YZyuN0vI-bOGwWzt-1d3xdnSkvZydCrkD-yioL~mD4mElVp~DgI8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://download.ap.bittorrent.com/track/stable/endpoint/utorrent/.../windows

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1481200507&Signature=E15ogQSaQlgW5s--rFFA1SCZlTe6ek7BoWHrWGCuV1Uq0dF0sJWT25T3rpJvNVp7XvLpnbQ6bLg-3EnL114aKK-6e2Dr5T3dPApP9AnYH2r1m1Uehus0A~x5dvesDcMqCYrnQNjVdczgqFVYheDhV7SX0YyntE-9DXpa9TjIYjM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1482881619&Signature=EJfoFxbxIYBc8uYkwFIIwfSxSYlOZhjg-fBksCHbdewnoGfTxLUC9jFdia11r1xt9YWuMc0vEo1RtYqx08pdz6NOITKO~fJmh6mDMcV6u3smURNJqJjU55MbnLhJNhITmai4XJEFZluNKOUVKFyxXficxPIJiQLDKJQahXeaTHg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1470784533&Signature=Ovt3dElER~tq3L-hNT-SzJBIyR5Ws4NGNwgJF0qshUmHdEpsVBi1ktRV2npSRxAvKwLyefp1sHbUz8lIjWrS69ErQjNgJWr~6XYwqBPJb6AV5WMI3-7hhB6r91gYInLCiK3NK13wF1K8rQM7tJFVAM-rnpSd3Gs6XjEgQQAmvf4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1477645079&Signature=FPl3BVFqFzTEGgTSjR6tyqxaNfVA41uyzkFpwl6oIZL4QInj-pgP0IQiRMZVQFvDyFociu-EMrZu5KoSkyS7lVb~PF1g9M8Ok6BTnG7RZgR-eX6ewPBI~hnff-3KEgvR5AXkmWL4VDQDV67q-xRn~BLOBXnKuD12yxMW90ooBOE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1476238010&Signature=H9XsQCza6TYZ4C6D42tkPJ~uLjnCFCxzi1L~5aCzEOo2q24caiA2krifZITI37IAwaLSnJXkbD7UwenEx7JMF5ojjkdw3cnKzPVAWR3JuZzjZukvuciqbK4VK9ZLQHHC4ttQ~2GSTRb3cOkj5zgZGlgY8ErwbuamuYffwdgkx5g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1481116817&Signature=EAtXQnZodG4E84ohCHYKIqSHt42y0FrxEFUZXGEhKJ9bbXVmA8w0FQTsMpvc3M7a-HTPswkVstjvnncM4aXxUjXf~99WBugoCVyfQPUNj25GnpNWcEoeegc1ZVwrusUba5PgtoGPuzloVYDZV~ohf4g30MeDMIabm2vfk-EMIkE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://download2144.mediafire.com/wn1ovrkarw7g/.../Encoder_en.exe

https://download.microsoft.com/download/4/3/2/.../Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_fr&type=PROGRAM&Expires=1479875884&Signature=a58RKbQ~ANSlQhA77g2IVv2HTQvBJQEudEL1SyxiCO3jgDf29O00wLvBc-2UAyughfrHftJcsaA6dVIsxOvnegPi917tzmhb9HQ1-tid0ACI97-YUsRkS5sDeyoONtZTVBCwsPkphxwlxdN7d6venf7LWP-t4BQM8o9aHNR--tk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1474850453&Signature=hld1VwYcUbktAucvTwesV0nX7Dr5SesZsS0AIjNLtfH0PJvWr8AVjhM79aqjEtPcNqzIWU1-OColB9I9xEgSkUM2HtOEMmsR6i1x0J8ABW46OP0EvQ6NtbZ40MPtSKib6xSUxfyhNAyysXzaeTeWij1oB6inHd18Babn4qR~eh0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1470505871&Signature=JF2hpwLE4N~i~4Jqoz5daB21G-aBJLtKdqn6N59vIL6BeRb3VCc3f2reC154m1v05IdGXc1fiwdWXfbbBDQH~A5KZeh5j2BodU9SpjfJobHSo0hE4X5zeglHp8eEFs6Aeb8MDIfRqfjhtViICoXA9hn97SFxEmVF1UA3H3~TmNE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1475598842&Signature=VX0JXfmKfe883Xxl1Xa~ADv3gPjgtuWgq-tcij1PTK8gohjRK1mzWRorO-ROqFtvosMe6uZSmPkjXyDmuNv61hS0wSQUkIzdX13Ouun4wfKXIRKkYmWKJXqvKlAt6AamDmiv~Q-JzKCCVNO-7RpguEoIDvB4IT85PTafY5B15g0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1461540259&Signature=VmG7HbCqT-o505MaEko681fkJwU2O6UaMbXQikmGKnLozv1e3hIlAzPe6uZ~QUpFZ4jQX3ci92INSncAMruh7sHCJOje6kL3rPPZWn9qpf6NBcmYEpI-fSFxj3gCf1eIDYj4neGBJlUFwKAjcvfPiHOApAEztOrZDRSyq5eLv9Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1472400996&Signature=Kgqw0zqHyRiDBK5dqVCTkvKonHenk-lCyQSrqPyOKl6pstdHJd2R8nlzfNkMDP-bboGdwJXE5Sp4qxPMvzfh8VVbL4nLoAbUabSlHHzwQ9KmEv4RuZ1NpMg0PyPv1tBbj2psxx8wwgK5P41XbJewf1aDT6ybUgIPjIuRGT112hE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1474228846&Signature=AWvAM2tjvxh~YSFE0L5vEBFSxFxbu46nXg5reossKckPKetGfh0aO9m1lY7U88aUXno49q-PlB~xQXT7bGq3oNYr5quqa7RFva8WSJYdRhox0s63FzyDqu-lVgkOj5F8OfYwaIy1-sNSIpbG4-SYKV3fTZbCRz5Q0Sx21houu1Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

https://microsoft-expression-encoder.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOOI0JEyWPmdVq6X t7ei5/RFuKohmZ StbeWFObqNnUiI6F2zthIw1kyOfPtvfeBTT6K27EwylQHfJQdRlW2EXz6B9UEer5drB3ZEho7w4PclfEt9tCsyPid5e/7GuXAsbYY8MgQ77z2Ila4gCx0KyBgxVPSP/.../2746u2Fli0I59

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1478981455&Signature=LBuCinZC87qAmTi6VKHa4FWEpny0KvMfYdjHtweywD6ssGTgEhFCVJGSVtV8K1i96T59cKoRvlZqNYQ2Yqts0mlsswiWXfGzp7ZCAGeSxrIpodrswCarPuuRb8XUWAAVocj86ukkQLjQ-82TUUNZTdubSFk6bl30TvMVAy0F5gE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1460200162&Signature=a-EcCOgYS-TXUfaYmvhX5GZNjUIfRH4jGEcfcbhXUnLpA2Cxa~RN4if4WEGW7ROB4Tt0SmqrDNNkiJsdIJ478dDMPs0qqqubR3u0iWBPLRp-~8drjeDQd-R1nQFiO1rLm8WGnLMa3FDqFWx3kl4YZLQRRqJ1LjkyaoE3F85wwRk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1470720123&Signature=R-lDkf3MOeirFh-70poyFOoPZeQunT2EgAVzskNUfhHbHBlD1ZTw5DG1j~~BLf3GYofK5ztywffoWf4rI00CQViCFvMVZxu71dGwCwtol-qwvWl~YC4HUtpyJ-GHLl4IQqb-VyQyRNcK0i3UqO2W~ADkublzVFAp0DPA54KQ9TI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1445857250&Signature=BQwb3D1TUIt~xW7gbqFIctMg4HAlIJpvinMfaqYH~xPv34cuHoADKUZwOdsfqCKPOa9QHgqc-SiZoXcjF~QcJw0Au3U1P3tH31vxuTEts9H0ffSzKGu-C~Ia2ADXq7yrO9SM1rOWIM5Yo~x1kRBEubrpRAt4Xg6uHJk0AiV9Dkw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1462637141&Signature=LJNvKBMFaik2AxfKIo3g1iHaGt5vyQemIBCMuv8o8cJ53v1Ggr0Za3fkHqTPcA9wnxwxQ1MW7ExIfcPp9jc-4poP5ebDz-cuOUBUgtq1vTGHj2IGWHhw80yYgjqQm5v1UVIjCpjbyVp0rDPntbra5KoTG9hSG8GVafbihFzCQyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

http://download1626.mediafire.com/ocsjj3buuacg/.../Encoder_en.exe

http://gsf-cf.softonic.com/a2b/56d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_en&type=PROGRAM&Expires=1468213868&Signature=f0ZWoJOG1d5S8L1GzrZ5EFIDGRsrtWkjxym3yFpdss65YixAblYKHW7YNzcEtf-ruADD1~vNALDdkebiHoiV-f8~3L43cqZ~mWFcNP1x-R11rZEC02MeffBNWYw-0ehhFID0s8OYb9ROHKIH36MWEe48Qd9SoQnusz9lLeHpkmc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_en.exe

Latest 30 of 42 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.