» encoder_es.exe
Overview
Analysis
File Details
Programs (2)
Downloads (31)

encoder_es.exe

Microsoft Expression Encoder 4

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with multiple programs including Microsoft Expression Encoder 4 Screen Capture Codec and Microsoft Expression Encoder 4. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.

File name:

encoder_es.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Microsoft Expression Encoder 4

Version:

4.0.1651.0

MD5:

30e5c7c733608752af116b60a1071daf

SHA-1:

0078544df16c27993e517b4cb53d57eaf1384b66

SHA-256:

a628b94d9bdac8411e97361c95d2c5bda3da94c6e86686aeabb3d9dbef8240fc

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/23/2024 12:06:30 PM UTC (today)

File size:

28.4 MB (29,815,152 bytes)

Product version:

4.0.1651.0

Original file name:

Encoder_Trial_es

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

12/7/2009 2:40:29 PM

Valid to:

3/7/2011 2:40:29 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

6101CF3E00000000000F

File PE Metadata

Compilation timestamp:

6/1/2005 9:46:51 AM

OS version:

5.2

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

786432:v8g+MzWbjxhCjF1BtlWCST+xk+rP5gCd88S2PGhLfL6nJfC:v8g+MzWbjxhCrBto5+xXTdd8/vZfWnJK

Entry address:

0x5972

Entry point:

E9, 26, FA, FF, FF, 8B, 44, 24, 04, EB, 17, 80, F9, 3B, 75, 0C, 84, C9, 74, 14, 40, 8A, 08, 80, F9, 0A, 75, F4, 80, 38, 20, 7F, 09, 40, 8A, 08, 84, C9, 75, E3, 33, C0, C2, 04, 00, 8B, 4C, 24, 04, EB, 05, 84, C0, 74, 11, 41, 8A, 01, 3C, 0A, 75, F5, 41, 51, E8, C0, FF, FF, FF, C2, 04, 00, 33, C0, EB, F9, 53, 8B, 5C, 24, 0C, 56, 8B, 74, 24, 0C, 57, C6, 03, 00, EB, 0C, 56, E8, CB, FF, FF, FF, 8B, F0, 85, F6, 74, 2D, 80, 3E, 5B, 75, EF, 8D, 46, 01, EB, 0A, 84, C9, 74, 1F, 80, F9, 20, 7E, 0A, 40, 8A, 08, 80, F9... 
[+]

Entropy:

7.9997

Packer / compiler:

tElock 0.99 - 1.0 private

Code size:

30.5 KB (31,232 bytes)

The file encoder_es.exe has been discovered within the following programs.

Microsoft Expression Encoder 4 by Microsoft Corporation

Publisher's description - “Encode a wide array of video file formats, stream live from webcams and camcorders or screen capture your PC. Make simple edits to video files and enhance your media with overlays and advertising.”

www.microsoft.com/expression/products/Encoder4_Overview.aspx

8% remove it

Microsoft Expression Encoder 4 Screen Capture Codec by Microsoft Corporation

Publisher's description - “Expression Encoder's approachable user interface gives designers, editors and producers the ability to generate gorgeous VC-1 encoded content wrapped in a Silverlight experience.”

go.microsoft.com/fwlink/?LinkID=75064

6% remove it

The file encoder_es.exe has been seen being distributed by the following 31 URLs.

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1483251596&Signature=iPejinN522KdFFjkRR2Zg-4vrjkwN~8YSulurA3PJED6YP2TlL59cvDR~tetrqubSyVLDwbQV~hcBVb32RcKiLo1QrjH4VRc0AlnTeCMgNniE~vaQcFJrBNm82t3fCKRNHm4KbhnTvp3LBV~k-EuDLKLL-mTewAGaxcRkO5nzGI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1481720689&Signature=N7uibdZEUUZ6x4v~cryBcH-lWwJRugD78MFBZUNdiJpcYSk3tzHPF0ySvLLe5N2XME~4-NUTd2BXeirC0Lkc9ysJ57XrL3D7K3hq9nyiK-Ivo1AjP6nd~Z0iIL5-Tn5TCXOez6Ha9O1KogufyLOgL4gIz037y-uwNPsnysccwNQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://microsoft-expression-encoder.nl.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOOI0JEyWPmdVq6X t7ei5/RFuKohmZ StbeWFObqNnUiI6F2zthIw1kyOfPtvfeBTT6K27EwylQHfJQdRlW2EXWNbjJLWTeM g3DBVLEMsEf4hPWGm2CmtchbFDi0lmHLB0V1ZCICPQFkuxJScTZvBB3fSputZM/.../2746u2Fli0I59

http://download1751.mediafire.com/5y67xqt73e2g/.../Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1441532917&Signature=fAL-Yp4Md3O7SxnognVi9NxGW87mJ0RAbqYm0LfUfVj4Kaymzi5ifoQih5F1U7wFbKk3wPtwhLR0R9xIWfmeTmTOGxrDVjrsah7uKBo4sGvswQYljZ0n0Rn1VQ9NRCnfkwVb8ybdu0fXYjFJtLW3MuPXB3hae6G648fU~ZDqDdg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://download1751.mediafire.com/508z95b1bywg/.../Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1475572221&Signature=Ib-XcN9FXAUvUH2OhL5Pe1TEdDN4WNJYJsosWko-OWxNf~wqlfrsWiYZ7IAV-GQngJriDsttq6oHGuFZ6jUhMB3z~FnAQl1iG-7P28VXqEJTJ88D7zncet9aWEWP2TldpWayiSWPRypo4uOI4XdMuPECrfC9AwHD4p3fA1Q7lQE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1476087951&Signature=M4kJEMSy-T3cc~L-Iq~CzbEcjmjSn57P1ji19g3MDpKoRmL0rdAxWsldPzRd0~To8WTEslE79FJ11hNEkOQ3YE2TMS~CEsXxZ6YmMn~iYTGtft9GqQDzKtb-Lc22TyJgYHynRvdPFM~BkigRwY9QvVjd-UKd981srS5VtWtPELY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://download1751.mediafire.com/tu2mgz6ggi9g/.../Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1447482150&Signature=X-uUBWLoDZgKazYVB3Yf7jnxnHKyAxuKWRpsidzHMsW-hp4K-qD5A5Jugfx-HKEb91UC8yL6T~aYQSKqlOoQVwlFPLgKPur-vAVhqYo-rfpSKj-PN2tze6nttet5XGFCXdGITd4SpVqc7lwnSHQh8ldSKwL0j5STxIo-O6BesqE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1463632779&Signature=YL6EoSzWYF65~qEnuYu4e8mRezmImFY-2E9Pg3NEEkyMzdXEu7zzNpYMeY8sqbxPOpSEicf7MBD70NYsbDiSmuiZbw7RcTHmZrIWVP6opSRVnkrlVzR2CWjZXgyxVkGdr4QWyrLPM9R2JfpV7QvjQTvwOhsg0WN3c36iEq5VpKo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1445562873&Signature=KNElyIZDCZoX9xMXlLklyhccNA7m95cL4JgrLAVEZ0gLZW4rJeXcuXKkm5bepWKSpz6YhTIce8vPgCTOXZim3fnay7VSTk8jSTGG0qPcolfDku3hQD-GRJYkjfnrpiEXaNL1k6stYmqp9EqWs0siKJmGDfb7cwaOoCatnr6LkZs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1447342454&Signature=XauitR0QLq2U027SKAhfTDFpdM7MJd5My~OWoiazUFt-FTt9lzlIgvtNLiuKwR8ej5Knjyl47dhFcHMAnnsKkSUbLWtfXbSob21jYEryKqZRXvzMj5ITNdU3JwNKfiPPKrTjHsmChIzsneMNgmXxa-rfcJ~X~Htvxko-NV21Rmw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1446009122&Signature=FpVdyZ8tY6p17xyr7E4l52-RtpezV2Cp1tjU5qCIKzxFmIAt72a0mxkPGE3t8NiKOvLI5sYC~bEfR4ZhovReg21hapUwCdkTX6Wr5ZV-VQflkt7vFxuXgQXoPOIWLDs9KjPz3xTCQxsOnJ5tUBQwn~xvDb2B00PMSAMgt2tvAgk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1456743651&Signature=D5xZJiztNBBL3t15DA434PKSDmBg5zIYpoB2haqMc8IowTbZT08RZGm4qXFYOBCWsm1zBcI-DvvlKmHinFjNe2Nya16HzCMq1XMFNZhjd8HDVJjMsJOavjg6xGRSB319IaqLaGdBxP7T7LZuNL4ivWGpUSg3A63TdgOrPRIOs9o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://download1857.mediafire.com/7dt9cw81itqg/.../Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1460896387&Signature=LtwBmepxYHzT2zCAqm-LRBoNB1ARVCLg-LhGCFFGnidwL66yRuXITkenGzD4cy1NgNPDFMwlEm3O8uncEPCiMFOjzH21jtrgQjO0uNcfoGkG6k2FEF8tC5ryrZtTCmgSICQ1JBAvOFZ38EPqLsCJpsE~2DuYETo~n-PAddh8L~8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1433624414&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=bv1qbmhlOET1vtjyUY0XXU99FyHfW5cRpUoil~hwxjPmdf2RchULayOOd5V7nfmXkFVtVDfyrsVtgQEPx3KFAAg9IIcB96MaJgNJrV0KlyZnDsxlsdKUMZ3X2jj8E52Gd81Vz4ehpCQWJjee7wIYvKnui0ro3Q4htlkYLKmtukU_&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1430656252&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=AhK3aKELU1Ki4O5TBSfDYah6U0C8fcbxY0MP~MLWvoM-d9Xmkn4-koV3cnmluJrJX8en526bJm6CeoC8WSOC1~H7cKkoCJBhl2tEniw-EcbE0Ox9IfieXGLbMEpZoV3PvZ3pcMJ5NBdV6J-GeGUQDf5~~NNQdkmWzl4oGzdb4Oc_&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1442791540&Signature=LvX5DaYuS7RBmw9YtwSM-HMY5HAeQnMZTC2M6h0MKl75Sx2jPH4pFPKzx92RFmBpAyqjvTi~QYdqWi1bHBJoBwwpiHq46PyRedyAUUm~lL2~-zEeFF1nREKjMOZM55Ox~M0i2UY91Qu1z8915-q3xw~H6NIJoa5MQ5RJnhztYyE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1456376984&Signature=YWL3rIE5dtlMaVXFlrXloOglwJSiISoPOWkNGTSbHxG7isF2doPyx0Y94srtZ~9j3BfIQUqN8-X1n1qG-hBo0Ss-CXK5mhtzVAFZFIVru8Bmrhe8faaW~Ym8Qr-rMqbs0~en-1~uNEN66YCy~GbIkXXGtBRM8V3xs87diuz0ZLk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1448456444&Signature=bOESio6YJTSGs-Oc8vmaKcpHQ5GT7-qLZoblR04a0LPUnPlTFpVhSrsEM4flR5aATBuIG2nZVcY8yfzUH~BcVjBq~XRVyw9BfVqsdoFXHamtRyq177q1Ebm99IS6-IgHkHwKORnIHdSlWXIfZ9fCV5tk8tmyJ0IKnfHluaF4UjU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1454998456&Signature=B-vv5a9INrQcplbe0k~y6zDIqoD5ObljdOyCvj0-eXM5i45~13IeJtrEkrKXpkFbZz8NY~48tBQkw-GswvjSgbPXEMJUpt4WQu~jyMteWDZUod1QaLlXV0sqw2AYbcNaeDM5DrM8awYkemrsPG7liShIcnD9LPtikqm4RqV5gdM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1450441938&Signature=RV-2SdRnq8PUPSf5TDYLOinqLqxEjPDj~GUJLNRgslS-9CkEhcTtC2PQT0VVzh37cg4-3Nja8rxVK-HDLi8EkU2YvLtNFDT7fMd9PnYCyvvnrfQdJedb5dKqTlhrLJp40k4KFDkAtg2apwSKbefJG8SxQrQuUb1F7SFmWnjniNg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://microsoft-expression-encoder.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWuB0xjNR5JSGrkMAV3IsobLenaBa swYQ2HdZmG464YEVKMyh4HZDkaG tV3kjNiPFWxDwCvf20PiVjoMjj kncitJ8UU/fSksvfWo/9Vm/7b4csx3L4j0n0OOWcCHQiv2pJSD1eJnJc1lZU2ao7qvLB6iXskqhlMBeQ4gliRj3oi13XsG5 vObtxhinL2Ek/.../

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1452235227&Signature=EcIHmzzp98rrMH9ReT9dPJkGQAZ~bW656H~jHJnXcjdXzjznMIrZ3QGzNc8Ljq3dfbxqBvM1Zg5GC97aZAUkfvd~17pqCejhbj06sVJfqGxUVXOysr32iH4n-nm9QCpqy5fDJS6qdAZvgW1tLz9m~RekrYq29svmbB0EJ3VKwSo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1453211849&Signature=cNqzmQ9An67h5~EQ1PTrxSl7jawr151qYOxYl9Q8tavzwcpW9rrje04pPlfLDL78UKaWKHdM0F6HP1L-rSZQQ1Mj-0T~QsJr4DhmwnAdXhuFyKqxsQMmhlHa8WE5oalVvkqEkLlSqcqKx8VGuGIGkfP6piOxcFXXjoFz2kZEP14_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

http://gsf-cf.softonic.com/007/854/.../file?SD_used=0&channel=WEB&fdh=no&id_file=281620&instance=softonic_es&type=PROGRAM&Expires=1450908612&Signature=O4oZBEWjlZjfTuW1MZOebF8dwD6qcE972wPcUraXNJ1kUFJsl514zkD6Rm0eRZY9ZMXz1aEXpve2ji68gpEy3BSyDiHR2UzfdUn6u0WeEaRlY4vBfSvSNuoykA4YxXED-P4brvz4PG6~4HrsQUaqv5vmIWZZIDyYxxQ6vkbit5I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Encoder_es.exe

https://download.microsoft.com/download/C/A/E/.../Encoder_es.exe

http://download.microsoft.com/download/C/A/E/.../Encoder_es.exe

Latest 30 of 31 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.