home

screenpresso137.exe

Screenpresso

Learnpulse

This is a setup program which is used to install the application. This is installed with Screenpresso. The file has been seen being downloaded from dl.cdn.chip.de.
Publisher:
Learnpulse  (signed and verified)

Product:
Screenpresso

Version:
1.3.6.0

MD5:
949c47b31af6f8b42435b9736a82fd46

SHA-1:
4c5205c4a4dd8f9969f8cbc0981943ba8c1c1661

SHA-256:
281bbb87e1d92ce7ac8ce20997170ff745781233b77477a3b2608f545f7e576a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:42:46 PM UTC  (today)

File size:
7.5 MB (7,910,928 bytes)

Product version:
1.3.6.0

Copyright:
Copyright © Learnpulse 2012

Original file name:
Screenpresso.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\screenpresso137.exe

Digital Signature
Signed by:
Learnpulse

Authority:
Thawte, Inc.

Valid from:
5/7/2012 2:00:00 AM

Valid to:
5/8/2014 1:59:59 AM

Subject:
CN=Learnpulse, O=Learnpulse, L=TOULOUSE, S=Haute Garonne, C=FR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
0CF0EE663ED93624F258037598D19C9A

File PE Metadata
Compilation timestamp:
11/25/2012 12:00:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
98304:1HU8O6VZWGikImVyUA95iPK8yYAgJWt/J2kgRGfm1SUp9Nbm6:1HW6VZl8SCJxkWmGfmIU5

Entry address:
0x78528E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 60, 51, B1, 50, 00, 00, 00, 00, 02, 00, 00, 00, 54, 00, 00, 00, D0, 52, 78, 00, D0, 34, 78, 00, 52, 53, 44, 53, 5B, 47, DA, E5, 17, F1, 7B, 4C, AF, 0A, E1, 68, BF, 00, 7C, EF, 01, 00, 00, 00, 63, 3A, 5C, 6C, 65, 61, 72, 6E, 70, 75, 6C, 73, 65, 5C, 53, 63, 72, 65, 65, 6E, 70, 72, 65, 73, 73, 6F, 5C, 73, 72, 63, 5C, 6F, 62, 6A, 5C, 52, 65, 6C...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
7.5 MB (7,877,632 bytes)

The file screenpresso137.exe has been discovered within the following program.

Screenpresso  by LearnPulse
www.screenpresso.com
About 8% of users remove it
 
Powered by Should I Remove It?

The file screenpresso137.exe has been seen being distributed by the following URL.

http://dl.cdn.chip.de/downloads/.../Screenpresso137.exe

Scan screenpresso137.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.