home

prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

PrtScr

FireStarter

The program is a setup application that uses the Inno Setup installer. This is installed with PrtScr 1.5. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
FireStarter

Product:
PrtScr

Description:
PrtScr Setup

MD5:
5b6bd8dbf471d288ce89500e96393a7a

SHA-1:
334c3c6447f6bc9bc2d6ebec9e9be3a50c47081c

SHA-256:
dadd264b9ae4d90304d0b9b796643412709216186ff0621e337bd2a63cc651d2

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 2:22:51 PM UTC  (today)

File size:
2.3 MB (2,461,764 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:M2bINVuRK9GUG2+clDVtVntR4BAj28GHi2bBJbkX+Zu4ZonTQfGuzx15f:hbIN79jG25lRnMBo2FrlNGTQfGs

Entry address:
0x9A58

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 6E, 96, FF, FF, E8, 75, A8, FF, FF, E8, A0, CA, FF, FF, E8, E7, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 0B, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, D4, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, AC, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 1F, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe has been discovered within the following program.

PrtScr 1.5  by FireStarter
www.fiastarta.com
About 9% of users remove it
 
Powered by Should I Remove It?

The file prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_es&type=PROGRAM&Expires=1469522849&Signature=XvtM2e86wN1AqZ-GfE8sSpybS63ZyQHbca8n2~AvbX~cYFQb2wxzeEnd8cUkNfGe-Y1Aks8rDWjD6LNQVbtfXF~HSSOHtInkUdEd3J5MKho-z3A4YQ7b99VioT1Fyf7mqqe-CFXDwd4qHpmPHcpzrtySj1Eo4tdNiptS75swUbw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://d210.cdn.m6web.fr/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1477473855&Signature=RHJnA-md~uCEn8uw9YopSOE2JmBCR8VZDpbkx3TXd4xJfFuaNKkQQh23Egm4ye-hM1-MXJCqfzFjYZDuU1f1JMpVSfcZysTMVN0MM6V4DE0oIu3PWuG2cElqQhBCIkuEF3KUarJ8a-OfSA~tPBMfnMkjXFGZ84HPuoulmX4GJA4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://download1079.mediafire.com/zv7gmz0vkcmg/.../PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/e442416ce5ef8d2bd0ed3419e42c3198/58033167/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://lb.cdn.m6web.fr/d/c/a/dc13bcc36d1c9bacee4a7aefc42cd22c/57bb62e9/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1449372551&Signature=GpVBllErqVEYfx5g1MomO5EyTOEJvfBXcObg0UaHiwo33AZDiNylS5Gem6tUP1RtiWIxPI7E0ozOBqFgk1FcC3ZR5ozhNsmYz5cDQUQYmshrvrDgdKqoDpsP9USFFujjbOQ0tI5VNxULmU0StIMSdFTu~TG4veM3~b6g07SN5O8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/37ac0905e9e34a891a7b230dca7b75b6/582d69b8/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_fr&type=PROGRAM&Expires=1481704095&Signature=YDg2YtEy3OgzcGCSAAWLL464KLGn6EbIVByuQCOGpDAeEz9UGOJraUobH46EQ0Fzelhn1J9CtKYG3x6uQch66dvApuBNuyb7v-eDgs9qphqRCfZ7F1~ACGvjO4H2Qt-pV4M2ozASEwdf6rD63Rww6uLA4e3lVL5Yxo8viwfzkz8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1476403362&Signature=icuwzqOZC1Gw1GFh9XAq~CweOePhxp5CAr1NegLJnrEMrQlLwxbo0waEMBRK79660f~1Did9LhCM4VEgn2YTU3GRuoGPVqsvAXzRKABhrK2huVTRfLdZWDN8roEgwuIlCT~CGHuDjT60Sxxm6cuzgu3Sb4kYEdjG1RgZoAPzsD4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/ca69b00245c05940c1b6c3fa754cb7f2/5817505c/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1477592196&Signature=JqG~qwOnYBQILthgRBiGu-~LBonf4bOG~p3kkLY6F4j2Dwm9rtAkPVra4pkjrQHg7NR0GwC8eQlktEWko~QUeqI4Sa1~tFC3C67bilYyTwjWwWMbmjv4Dr~pYRSPeVE4DOS~Xn~ZolpJtif89m9-4rhdzdzsnSX2tegbj6YYrQY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/43e9dab91033993642c0ed33741b2e38/580a9ade/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://lb.cdn.m6web.fr/d/c/a/348e65b16a4e7569b11cbfd7a43d68db/56c7048f/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://lb.cdn.m6web.fr/d/c/a/766f369f7d1a6955220a36af278a8ded/57022da7/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1476766754&Signature=GoxnxMDbp3gnhyQ5xaE97Y6~DLqC4oIJLpAOKKyhpOFp5gHLrZ5cD12lAFVfgJfvXpK8SOmswPjz1Ak4iWvZUqxVQzCee595mxIrKieXn~DRh9~Y668ChO1EMGKjkGlASK5cC5JfbYwmkENX-ctWAGF7bukNlYehr6hq4ku63NE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_fr&type=PROGRAM&Expires=1481172133&Signature=VdwmBzadC13Hqyz2h0oHiqE-6TT773vvlgJKhK3Mz2jJgCYsq19VYPoiadcgZewdmO-T5uxSLQugcHMQOpfRj4-WiQtzEkUeDfHEJ~McnyLoo1YxferDHkQSbPglyNl1GCpGtsWO81yX05Hg4b1CBOTNJ9nYUmSlxfniDPRsab8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/acfc7e06de73b573584ef9650203780d/584d654f/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1481468263&Signature=JavXRXoVSwIrwwKYNZaXXlsobcG0ytky0iY-3mKQZcYnSxIpCIc14nDAqOiD2-gYeaZNIwLYfVoaZM0MmlHLhcF7xPaRiPN3WltIpXRkxCedsgWU05GnfcgCz4QAj9oFyZuhtwjkOYjBWpN~5d~REgoIi75~kZtqIthpS8wxgwc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://download1079.mediafire.com/3w78v0ccw7zg/.../PrtScrSetup.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1439553194&Signature=W559AOqyv8IOJVTbGVmpyxRlrJkvuaHXsO3KNEh7CSpcXV8es41n2wYIyMTdw3GOBI-rtOM1~WtWeNJNC8k2jt~4R1BSWusYK3TpQmf41SGvxGmS~mAzBud4YZMzRJT1W3lVJ9AJnc470L57jQmpjh07-mmyHQpFZjQ3wMP3K0M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/46bbdcba96e5fc67c884f92f8b7fcc86/58471961/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_fr&type=PROGRAM&Expires=1479717382&Signature=U9FJiSx6~fh50Esl~bjkO3bfKX~XNN-bxcP5ddJnTU1qmdyCi69vFPTTWoh7ME~bVt3Q2qre1vVeZB0QoFpiQaQmyf3u8VUnwO0oaMeu4frsjwPsOvznBcHg5PhE2sED5t537Gyem1wZFC7qbpNDynZgm8Dxtk20qfYDzwxDbNE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1474981040&Signature=XgQsr6~pX6Kyq2zQ8-Y4YV0efs-3IsZyZybXf2ZsIhv9vuGVRUhIGXZpEaz7HZvlpO6KUMCaGwNhOfeGjxjESX1z6BN8yN~RMMhxXKUhvEjiYpBAWm975vix2cNAi139Ru14YpW-mDQEpBagBbxXTbcsmp0EnbEjsXhKy0ivZg8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/f178dbecf1f2337b5b2a5358a27e90b3/5805438c/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1449029376&Signature=RAZX3dI2F6gIyl432l2QDgYsLiOlelfzI-v1QDcjXMX3qFNv4nwnT10EgqwPcNEV8U8xG~aZgNHEPfvoCLFi4Bl9gkFKyqhKatx2wqjjMScG91-DLHbiGEh~c381LebQpiN~u6vDKE~6NyVGuJJDe0klcT5mUXx014GvPepzTY8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_es&type=PROGRAM&Expires=1480715887&Signature=bVTF7HVTeRBnAGjJN9QMFIDpD~SjE63ysMOtVqQ3nbNb8grj3mRckWu~0oxXvmGnHei2LZULSuZYLRAHS82ewxo5U2fY7LkdOtOFY2ufwd8rikhsPyHXsAxK6cieiKas0COkIDd6dBclBJOI4QA8jHt5KC2yZT~tdkUuFOliaUc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_en&type=PROGRAM&Expires=1477784139&Signature=iE1Iksu4MNwG0L4G18yh9BmM4jgKYLxQqwZfk4T3rJN5gqCwM4QpUt6jEgEFa6pQnr64alQqpO0HfRrEYsML1r1w~VTmE--GBfXdychRveEA7Bv9osCr5SHaybe7fVccB~oQFhwGKIeA6-oFNbaQqj9NHqApbiLHNccy2svyhfM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://gsf-cf.softonic.com/334/c3c/.../file?SD_used=0&channel=WEB&fdh=no&id_file=70012&instance=softonic_br&type=PROGRAM&Expires=1474433097&Signature=IRbNfDx7ouJw7UQQ7hie09klmpjQUSXftKAY1RU940JxngGWODUPDr1lLcmnv9q-0riz-Trfx4~GwZqe-MGP0fHIuy0zEz3adrfKcfU3cNWvIVZwFWEBMsiusZBpVjjjyhFG765QbXmSM2t9WyqcIWxThXJtpQ0juDgWYLfCClY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=PrtScrSetup.exe

http://lb.cdn.m6web.fr/d/c/a/d4d3fb3e11ff71026cbabcd4848f6720/58178c98/soft/.../prtscr_prtscr_1.5.0.0_win_7_vista_xp_anglais_234514.exe

Latest 30 of 117 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.