home

snagit.exe

TechSmith Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from doc-0g-0o-docs.googleusercontent.com and multiple other hosts.
Publisher:
TechSmith Corporation  (signed and verified)

Description:
Snagit Setup

Version:
11.2.1.72

MD5:
23375c4bd17b71d826daee2090066e9b

SHA-1:
5cb531874629cf71128a3441d8fd7d2e1e38dade

SHA-256:
31fb1fdbf697869f3bf92c61ef6ec430df57066f09946fe29836c0f799245bba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:03:35 AM UTC  (today)

File size:
59.2 MB (62,083,928 bytes)

Copyright:
TechSmith Corporation

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\autoplay\docs\snagit.exe

Digital Signature
Signed by:
TechSmith Corporation

Authority:
VeriSign, Inc.

Valid from:
7/13/2011 4:00:00 AM

Valid to:
9/7/2014 3:59:59 AM

Subject:
CN=TechSmith Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TechSmith Corporation, L=Okemos, S=Michigan, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1EF0AC7FB103A025C1E8118899C59997

File PE Metadata
Compilation timestamp:
8/16/2007 10:13:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
1572864:xQ5PntKhX6HR2ayW8ofOKWmx8whx37r0z4oSnbI6dFI9kIqHLoN:4tKhX6HRAW8yOKThOEtnPdKOrc

Entry address:
0x1000

Entry point:
55, 8B, EC, 81, EC, 7C, 05, 00, 00, 53, 56, 57, BE, 04, 01, 00, 00, 56, 8D, 85, 90, FD, FF, FF, 33, DB, 50, 53, 89, 5D, F4, FF, 15, 38, 20, 40, 00, 56, 8D, 85, 90, FD, FF, FF, 50, 50, FF, 15, 34, 20, 40, 00, 8B, 3D, 30, 20, 40, 00, 53, 53, 6A, 03, 53, 6A, 01, 68, 00, 00, 00, 80, 8D, 85, 90, FD, FF, FF, 50, FF, D7, 83, F8, FF, 89, 45, FC, 0F, 84, 82, 01, 00, 00, 8D, 85, 8C, FC, FF, FF, 50, 56, FF, 15, 2C, 20, 40, 00, 8D, 85, 94, FE, FF, FF, 50, 53, 68, 58, 20, 40, 00, 8D, 85, 8C, FC, FF, FF, 50, FF, 15, 28...
 
[+]

Entropy:
7.9995

Developed / compiled with:
Microsoft Visual C++

Code size:
1024 Bytes (1,024 bytes)

The file snagit.exe has been seen being distributed by the following 22 URLs.

https://doc-0g-0o-docs.googleusercontent.com/docs/securesc/41idabctkb8va171jk8cqn770kk2pjl2/j9qfi5d92tl7u1ptcajn9v3tn7mdihe2/1477900800000/.../03595065032411736287/0B3AHANz3mwYwamFRWVV4UE04bFk?e=download

http://dc718.4shared.com/download/.../snagit.exe

http://snagit.he.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqGJpp2hl50=

http://cdn.soft-download.ru/?s=EzmZwVNa1Ku3a7EjbZSoUA&pf=Snagit_Trial_Setup.exe&pt=Snagit ??? Windows&src=softcatalog.info

http://gsf-cf.softonic.com/5cb/531/.../file?SD_used=0&channel=WEB&fdh=no&id_file=2740&instance=softonic_en&type=PROGRAM&Expires=1423400072&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Gojx3alM3m7ZHvRFkNPN0xVKYMkBO2KXXfVaiLpLgNjJvRLjXtzlnUzmJb1VWL3rQCP6sXiASB657S9KQB3y9Eo8uXKFhBVEdXmmt7IvGGwXt6-wzLV8lx-ZhueC1IQq7tBlsV8d6l-2zNuLSCp~lJdXsokByuQbewMSIKPUJy4_&filename=snagit.exe

http://cdn.soft-download.ru/?s=nImifI604DiKlQDezux4qQ&pf=Snagit_Trial_Setup.exe&pt=Snagit ??? Windows&src=softcatalog.info

http://snagit.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-enJ-HpqGmmpk=

http://installs.sevas-s.com/.../snagit-11.2.1.72.exe&u={7C7343E7-B3A9-4141-9DFC-298F4715B44B}

http://software.thaiware.com/download_url.php?id=10756

ftp://ftp2.avanquest.com/evaluation/SnagIt/.../snagit_11.2_TR_AQFR.exe

http://snagit.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqGPp5yhmZc=

http://global-shared-files-l3.softonic.com/5cb/531/.../file?nvb=20150124153901&nva=20150125034001&token=088b9e754850dd19526fe&SD_used=0&channel=WEB&fdh=no&id_file=2740&instance=softonic_en&type=PROGRAM&filename=snagit.exe

http://snagit.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-flqOHpqGllJ0=

https://doc-0c-5g-docs.googleusercontent.com/docs/securesc/j2psvk9drvfnqdhr0qbo788cgorvdmhh/f77ml06vutcofl8chom2jadann4o37p6/1438480800000/.../11897068461246743064/0B6qH8bJsixN_TExUSGhlRUJnejA?e=download

http://global-shared-files-l3.softonic.com/5cb/531/.../file?nvb=20150119170425&nva=20150120050525&token=043b95a92d32c5d4cf967&SD_used=0&channel=WEB&fdh=no&id_file=2740&instance=softonic_en&type=PROGRAM&filename=snagit.exe

http://filehippo.com/download/file/.../

http://fs31.filehippo.com/6508/.../snagit.exe

http://download.techsmith.com/snagit/enu/.../snagit.exe

http://www.filehippo.com/download/file/.../

http://fs30.filehippo.com/2982/.../snagit.exe

http://wgtot24.digitalriver.com/wgt/9B5A4FCEF11DA80C/171F14235882A3D34841170D5B9DEF7B98E4071B0EB81CCA8D273C5554AF2095AA9DA91A2976404E0D499475527CAB064DD77E4AA0F1128E324F0BD96700D8DA9DB3B0FD72047776AB745665A5B73C7D8F5DC70B1E40C906/.../snagit1121.exe

http://download.techsmith.com/snagit/.../snagit.exe

Scan snagit.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.