home

pcscreencapture-2-3.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
9673ec33348bf229e8bb4a94e7d57de7

SHA-1:
43a5959954a282aef92a5b477385ac35f2519b66

SHA-256:
6700ef1a7d358adb39834e8dea8b58db99b1919504204cf8eb1cd138e146b134

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:11:49 PM UTC  (today)

File size:
1.3 MB (1,354,752 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
11/17/2008 5:26:01 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:cNRJJBuP66qw8rKvtq3vlZ5H8HJZkWjQ1DoTb7d7rCRNLXnYTAsMbubv/T88888b:0/JYP6d7L3vlZAp8ufYJYTsur/i

Entry address:
0xB8A54

Entry point:
55, 8B, EC, 83, C4, F0, B8, 14, 7D, 4B, 00, E8, F8, EA, F4, FF, A1, A0, F3, 4B, 00, 8B, 00, E8, 44, 08, FD, FF, A1, A0, F3, 4B, 00, 8B, 00, BA, B8, 8A, 4B, 00, E8, DB, 02, FD, FF, 8B, 0D, 0C, F1, 4B, 00, A1, A0, F3, 4B, 00, 8B, 00, 8B, 15, 70, 6C, 4B, 00, E8, 33, 08, FD, FF, A1, A0, F3, 4B, 00, 8B, 00, E8, 77, 09, FD, FF, E8, D6, C0, F4, FF, 00, 00, B0, 04, 02, 00, FF, FF, FF, FF, 11, 00, 00, 00, 50, 00, 43, 00, 20, 00, 53, 00, 63, 00, 72, 00, 65, 00, 65, 00, 6E, 00, 20, 00, 43, 00, 61, 00, 70, 00, 74, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
735 KB (752,640 bytes)

The file pcscreencapture-2-3.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1482832091&Signature=bohA0SH3n9vOHi0R3gJClLqpG4auL9V6P9~Y-9vsZH5WLcVUtfObtV4gduUhaMvzZ~ZdBNIop6Xhyy3jgIpqIu~0nRc6McqQckKK4aw5zjSuohEFrur5L5WpEUSaz-Wu7t0hweW-Y5YuKh8fkNxfhOnwzl7GTcAPiAVpoRWZiY8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1483847944&Signature=arIUTpmGdgv7KwaH57dbRfwntMXt6ghJEvmpsI1uva1chODOFUVk7m9suEWSd--ZaUrPshopp68Di2dPJkH857TNKm26XTVmaL1yFMkCZpPv7f912ALsh2xttSGxXyemRwnhmMCH5KR4EO2qTRprwYcM-P5efQIvn0ZE-8ThO~s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1482846214&Signature=UJRf8vzCJ4bsl3BPNhCrm2RmxXDuI0A-a7RFkqZ5VDTjihkquh~NPqWDiRrdYDcbnu5sfTl1D6tPOfAYuhY6Dvofp9JpzEvs0ROEH7LM0EP4vrE9CxuakkZsPWdOpxJaQR964xvc1SeaSUoGjhYyB0J7dCbttk1enRVoqJPIbPo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1485253414&Signature=T-ZsUxVfzENT5huybZ56bkyRYKlQrdpbPLiZ901Hy1h~febMimbBASSSptUmv~DnNZsSw5GQoii6iq3iJyUQ2fyobsjFUcDPbdJ5xnLEgnujSRjYtSi-rG~tsGg7gJw3EVFC3AZozbWbjxcKjaYDGGLZBttfjsqG1QknKYOs7Ps_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1469540578&Signature=HjPORmbqLq8BVegVapYsw-bFknpDKg5-F7W7JMgAWgnNiUV22mkxVPNFBTcNdjw7pzEnxsmr5PQTzfB6ZRqVXDqjxgw-Un67YsMe8Ry1ctiUZXX8ohvp8DLcsNYPUgK-BrplC01rr0kjbYAllcBAXioZpJB-YZxv6DT~1BXa-vo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://lb.cdn.m6web.fr/d/c/a/a3c64397ccafd2cafeed62f871abbb3b/58128a70/soft/.../pc-screen-capture_2-3_fr_263358.exe

http://lb.cdn.m6web.fr/d/c/a/936a7f25ca338b4cf7a40e7569f9dd55/5814b439/soft/.../pc-screen-capture_2-3_fr_263358.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1486454114&Signature=bamzw-cLph9PtjRKaczMYsrfksPO6XX4MOP1XIzkhIns1iErMy7oW9Rxi8yslW8jKJvKnbTR6KYg6SAHDYcWf1zcNZKiVdudYyqlw1h5kpGFvhHYoLykviNrA0evlmokf0qDFqSORby6wWCXBSROkAwjph4z8IR~oeSOaREbcsY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1478688079&Signature=E0RrMg47E~vzidYmFa8GoZdu1Q3wR0R-UjD7~VkRiOw7B~Ge9usACYHFYU1hNXNF6kdwRAB4-83ozLbVg9muvCgaGimxCT~V-rUX2KRmxKcfqOitE5Ems7zwKkaUCaSJZsimeNF7qmFGN0BK22dH1Pr9n7V2w4BOdLvVtSoCYVA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://lb.cdn.m6web.fr/d/c/a/c019333ed0821f2c70862da2c457462a/5890cc9f/soft/.../pc-screen-capture_2-3_fr_263358.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1447746383&Signature=dZ2E8osaspenb7aykY89xKmQFs9~ePbVRpQgzsCFXMWfqjTB2Ui92Nr8n~aV9Ei0G5ZettwiiwJIMXXpAI14vV2UrfFXGNe1MOJG9POKgcGiUwUwiwsx2LJyliTd5QIi4fY15CoOtN-kQ0zajFbTSnWvyii1IWGbNPjSa8ZsoS8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1481700457&Signature=P1Fs-a-8CoouB0Ugo4Kuaj-Um2Oz6itcz3hcEBKlfxHgeVctLCI7wc9G15QYAIy8wAr8OAKYOcXTeZN2Dw3wd5c~SRm~frJnhmrAIbyUj7Iy7AsZrf-usK6cteFVC0tl1Sn6Kqwplkx4icMEQFxATLIGUrhIYZ3M2JZBji~Dbq4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1477287812&Signature=TaiMA04TV8jU1-rsiRmiblYzemuWqaBsOVTNxqbXWuEFa3lDBPSrpGpANHF-at0woDLq93jKQrbCz60foisP3mXFUCcPi8oSTniqxx9o13ypitCxEeQbPVRAWHQsIv8hXlc7RuAg8OgJgXdQ2m4-dIjBud1mw3PZ-SKO5WaKD28_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_en&type=PROGRAM&Expires=1487009009&Signature=gsgmOymhwEk4ZOl478q8oNiLMa5ZaBaBbpH~FYdrFVnFXbrwBRje27vdPSB6SnrvKYnKsAda5I9D~2nUmhYm7zU2PY5Tb5U8TnDbqNsd398vXrrk3-f5uF-CNsD6mro-dJg-yC~-5pck46Ljk~R~oTxGuTRxb-xdb-U4WVHa-bE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://d110.cdn.m6web.fr/soft/.../pc-screen-capture_2-3_fr_263358.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1485399266&Signature=KmA2v0hE2TwLjTFrJJkfWXgkTQxgaayfNQJY-mtKQ7rdahJH1kWbahDMqEOSu-X8goOMSQHVaiLGOvLPrhFed4BqJGcLMLMF3RBConfPTtE7agpppXXAr22YZfjI56yWXbPsifjN0miqyJf09CmFY0OPpaEFEpsqGUnUi2573zY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1464917470&Signature=FR5ibxRqcAGDYOzqE362Kw3EuEOS96-4nVPN7VVXdAiPUSsX4kZgmNe-4Gwhgm2eqURIpNfK15W6KzAxrep-secIZwG7v81RGhNwIKxpYcefWAwQ6ZrynKtovvdsBH0E~HvlfyJHX23M~mkgYVCo~hcihhnvpi136Hd~tZluDAY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1476364190&Signature=Vd0LqcwCVLbVxlWeoPZl6P~WDShfKSV6r407PimKoMS5jCssQ61AcQS~s1zmUkscWvGps5vRKltrUP20425QE0SuQ0VhvYurApGXHb3WaC7RtMzXl7UNn2P~YjMMOHwV0S2aTOpbqKVe2Q6Oix5mZyew8WiwDmDIOHP1BZ8OzDo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1477532158&Signature=g8tIBgL514NDLFaWDniHrN3eJYpLpwZ0ikDh2ggsYWYDpX-LcQLjZFDV5XYAvcZ~NSbTyNrMMkz93BaFa1ry3p09FdRShtD0YaeSm0mv5KnaRcFhz5AcDl74Bazt~gkIQBDaw6bG8c4mfnRtlYOW9EDsWFQGqsTwJspcCINzOe0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1480563190&Signature=Lp3QVk1mQ6zquPZjP-Z4gGMKw3q~RYnhAU5LreDJC8Ft4cJCq1dC5KY5BqpVMNMIlvaOSnWChetmPD~GxAfWfM3-xyrxjruzY-BlqfqmLgIS4j5a1jzPIZv1RzZrIcGfzzkWwdYf8N97U~tTS1sWcBJazZ1bsTGgj~Xj1~~ygEc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1472534124&Signature=INeHQxE0wFqhy0a8Oq7ppByIYkzE9bbBjhafGBWjU5zCiz5hB0jMauZAw0a9mApBeokbk556cAjQGw9HgHx2uGOR4yJEKzllCAfTxHKQ1Mdd-rZnIpuo-EsPl4AAyyYbuya2GkDvT5oDD5GJB76AkmjtQdZ71Yvor7vWoeElm08_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_en&type=PROGRAM&Expires=1474139468&Signature=OrP9IWIvU08wcYsT-A1bFmabAzT9VJlp79mXTnYQjO98B5zGjKjkR1gJmJbJV3hokexdHZm3VW6xJL6woR4jxdY~fyq~Sg6lY8Fo-ws42A3esmf2DRt9C7vWNU4xfgN4IamT5okYAMSl9zE7lRT3IhvYl86sOcvW8TmcJTixV90_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1465425764&Signature=fM~O1KgOliEgSXUAKZqeuGxQMtmGmmFwS33I9BzKZ2DV2b7u3k-eHKJvlNj7-6PrHgdRiQLGzpHjTkLwlR5bKx7FZx69GnymPsCT4Q-uUNs-Ey1urLHz1NX1anQLZGjjQs7TNpzvsFQgA07FwRH7J~LNG6TmdZxhKjNX2Dqhx70_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://lb.cdn.m6web.fr/d/c/a/99f16d19bd430a9a020e6368db68285f/5825c85e/soft/.../pc-screen-capture_2-3_fr_263358.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1478407005&Signature=GGuhZNm1LuZ~-sTjq5vQ2upDV8bAAV6T0b-jlwaRklhEo34p6ZUL-gEfM3HV-6zg8dXax~HKQ7-Wa9V-2yqgiZzi1taLKY7oEpUSNk7Zwa2jViIz3uqu9QjnJay7RuKFwAtiQLVEXdbntbAgPQsfJYI36dicIxOxC4GHEnV46BE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1479209821&Signature=OCXFh0zjgUwS38pN1Lxi0sYM9WSow~ksOlG2DxMubPpDk49F3qHz0CGcm9WkQHro031R1VecAGQvh7UAIejdSVHua-Y0D5Q55r064NezYRjVNNWGg3Ci09k4boana~v~IYrtBNEWWvWoc9I2~STlc4~fe4giG~pE5HfioiRUu28_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://lb.cdn.m6web.fr/d/c/a/e1674c21aca600ff6c56d92c1ab02e8a/581e4581/soft/.../pc-screen-capture_2-3_fr_263358.exe

http://lb.cdn.m6web.fr/d/c/a/e1fc0e474449c7eeb76531b39f764ce1/57d994c7/soft/.../pc-screen-capture_2-3_fr_263358.exe

http://gsf-cf.softonic.com/43a/595/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74755&instance=softonic_es&type=PROGRAM&Expires=1469246131&Signature=alQ-1PgEyvvoasDTJjfv1Pfu2iTMFfPwp3WGT3xt95HRQMxsAqFLfGES626dzAnVlgelaoo5CknYU~iesceqxCNB9noVfkI5jpAvR85YV1ugzYiUd1V1CzjzX0MQeTU18gJRq87UUZbjdeaObDONHppUWmV1zaOQprWK6aB-Z3s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=pcscreencapture.exe

http://lb.cdn.m6web.fr/d/c/a/b38116caff0c2b503def3bf16571cd91/5830bd3e/soft/.../pc-screen-capture_2-3_fr_263358.exe

Latest 30 of 205 download URLs

Scan pcscreencapture-2-3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.