home

screencast-o-matic setup.exe

Application Installer

Criteria Quality (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application screencast-o-matic setup.exe, “Application Installer Setup ” by Criteria Quality (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Installer   (signed by Criteria Quality (Fried Cookie Ltd.))

Product:
Application Installer

Description:
Application Installer Setup

MD5:
56dec79a1224017a7947dd632a599492

SHA-1:
533212d33afe71518c49e171ee7e1bc1da3622bb

SHA-256:
56f0984fc6152613ff73f397ab47a68b5001086a2fb443391ef3bda1b557c419

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
11/29/2024 4:39:45 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.Installer.Installer (M)
16.1.25.11

File size:
969.4 KB (992,656 bytes)

Product version:
1.2.7

Copyright:
Internet

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\screencast-o-matic setup.exe

Digital Signature
Signed by:
Criteria Quality (Fried Cookie Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 6:21:34 AM

Valid to:
6/29/2016 7:39:55 AM

Subject:
CN=Criteria Quality (Fried Cookie Ltd.), O=Criteria Quality (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216ABCF20419312093F809F0E003C850D7

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:wN7LKXirSl5g5MYuHz9GNh6zCaWM4UEIBtot+k2G:wR2XirSXXYuT9GrMDE6Rk2G

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9325

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file screencast-o-matic setup.exe has been seen being distributed by the following 15 URLs.

http://www.vaultranchbyte.com/c?x=P9g6CpEqXOehQrlI3qx qHSRJ0EZkE9FDJDlck2//vU=&c=rFhhHJ7mtqRmaMTQVQnxtk9JCePTJqCdH/nPVJrxC7Y9xRG1ssUOKfM1F pG3UxjwbI3AnOYtGZq08RGPj3RPGFY1WRjf00BvjX97SmfMhMR97N/5a0S8GjBaPNaqM25&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.nowappclear.com/c?x=FHKT1GcshFxGm79KLBkjoTdoYRwMK/THKJBheLW7DP0=&c=erp/DUzthJWJDeN9NqWjRMtPBrhFHMCOY0lqcNhAFoLD2ZB27UwXYe2a9Vwe6thfOT aGR9uoPc/IeanKYrygVR6gNPptH3Svz3khuTI/fhg1UEybTOZrzMzzWeQreCS&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=OyxrtITnDw63VCKDjsW7ung3m vkKhfFmgvz/dCIUmg=&c=iODxcBDIIl4 BE6cQbZyiVyJZ6QItXdg7CBivn5MJzDEYxo229OpR17JQlHHTHmyErk 6jOggy3ReB Ce88WMINHTT8utiuoNhbrxBxtvDF4gOe88iPR2oUfo k2cuNg&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.filestomes.com/c?x=HglEZFkVs5BV8S7ck8SFMft2AoZibQCM HERcs475QA=&c= KKA1q ektZhhB8WwGMsIWqbI1stYPUiGavznjEMzqNs7kKElxZ5BIsmLoWs KGdZQFIxVv ROBXRKP5c2nkJ4loW/reuuQcrQymDLmKo4rPn3JXHsABTBXp2jyU6Hv0&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=veYUlFmU0qtC4fledFghDlWewyyjvE7l R4pqeKeFZc=&c=YscXels0vH9T/IiVpS5UO20Ts/uBKO cS/xsd1NTkBQslN3xTD dsxIwUms0bvxTGZ KQrw38G815mpNtslegZbu4jr2x5zzN65j22dlgplkwdxJNLBLS329U2J0 2S7&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.vaultranchbyte.com/c?x=PLirhQzGkNkMUgAk4kD/VPcPJpMsdjU2NLhg8d1gtmU=&c=DeK9dw50iE/ tF9QN6i1GsqsXPpyUStmGZAPQGnVa/p98BkMg5YOgQzHqgsBJyuQvVo1EM Xh7mNbOdFKrtlKi8Js2KWTNoC8NlPDjiWYP PPWu5KJqomdiphqVdgRHn&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.apptowerstag.com/c?x=Bol38rZQPZYHDOcOzVgci8RoKST4StbMye4SbcR4L3A=&c=DkIcMybZYY KIHiTDa zpmogCWmYUY8jrWOQeO7dWrF e19iqCYG7UNmbocKPUZ0ikAdgm6lfR69BMryJ86kHxYd7NU8nzZLRkkTvf2tl5WC3wJ z4hTXhgwyS36FpuN&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=KcdtviP1C5qewQcbXv731wnsTx0A/Ajuozw8gjZu8tA=&c=qZRRZIeqi9J0ElYLj8EfufcdbuohtkLmInclISzGUqsLTwggUiAW/B7zu/4q9iKQ3lBJZ9Sj fz4ASE3aDN51QzsK6 oq/xFv eV2HEIy5UaauuOizUWfXMYqOb ETU&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=NRcatisMERBhyL9j1IloBuZ25W7VYgsXFHK9A0I3134=&c=EaS07 aDKfME4gjit55Ax6NjJO iZDwCItRWQ6ngQ2jcFI91ILOywpQF2RICJT8K42IxgddlFAVHXK3ea1iA92ca2eaMAKFXOqHCCVDhNf1AzjTceHSLOwbtO9tOvp7A&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=EgBaiHJ6aBUZpQB/2jA0nrUpGENntjdm220v4DUQBHU=&c=xx03aVxOyFOs09fO2RZIOwkt1ZihV7T2CLghh5sUB9BHYCVi4BlN9Xw6axZz1VMHVNTPJ7pznO4PQXhEmA2BMVZwOFm//JCQbOisirMQObkMRwz0PSRgw8QqaCC4uiDN&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=jD6Vdx8yJwVQoikYsIf4LLQ9HuaMME4XDB46JBM2JPM=&c=X/gTiTT MaipiQ9JZi0SxckB5sZfNctojG/3cemHB2J5qoiEE0qlEw07oar HMCQ GIngZdx29jq7XdLjdoCO42Huxqa4s9Bfmp6quohNwcdVtD6J8mhCQzfGINRrmYZ&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.nowappclear.com/c?x=hpfRepAJZEApjnw5U7crHW2tE1s8h3sAukleOjDZpT4=&c=o0qA3yygrLH875sa6hdeSz0qMPSo2C4s5ju0wQURvCNyEI/QL7xSxd7Ijl8KKvoDQif0bbi 24kUGQzqU7PTzMSRBflShSOVAoOuk1ojkR6vfyjY3CyS1ssbdFLlXnql&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.giftbestsafe.com/c?x=7qkXmuZZlnoB8l/nIWej9uLhd1 8ACb dohCU977vJg=&c=z8WO0iXexFGhIgohxqDagOSU3HAFrcn6GIYFbq0bZcyg/WDAtfOGy01krHFjnTq3LiKPPK5OrVvb 7V0JhVtvxtgwUQ4crKWa72JfICb0fUQd9O/DmA3ZrPpTDuE7clm&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=ZXlP1u6nHbVhkZ5Vo7wCKRvy6NO0SEiLKzpChoyQKcw=&c=Gvo VQYLJJzkwVBj2EmoZsfnYq2LEeHN5wf6frcLkj2NfTt45f5UY78VUgWdMDH//XdQc8/uCWMGu nw x JafR298WGOCGzlv/U d/wculp13LfdDIhRKlKnV4d2EqS&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

http://www.tourworldmeta.com/c?x=/0 OmcqwljZISmg/qm4lGscoS4DGlkNXr34atpli2gY=&c=dfPHG8MdxRcGzFW646SSlOLMxN17xPXZWuwrCnYdFyMYyj8zYd2vZgdelXRc1bKvEZWY47FtP7E beZ2AIWrdhloAZlECELSFxXnqNWGLPY9mDMww mJsmdrWhp1wXbO&downloadAs=Screencast-O-Matic Setup.exe&fallback_url=http://www.downloadfree3.com/landers/.../download.php

Remove screencast-o-matic setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.