home

fscapturesetup53.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.czn.uj.edu.pl and multiple other hosts.
MD5:
e75f60c7a5877ff29abbe1f72430e4cf

SHA-1:
3b30bb55ec323c63127b4068bc71fb5196a8d25e

SHA-256:
092ceff917fd92e78abd10da545a63bcf44be3cc1fc2b0a978f24b74b70e9b3b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 4:53:39 AM UTC  (today)

File size:
1.4 MB (1,425,063 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\faststone capture\zipped prog\fscapturesetup53.exe

File PE Metadata
Compilation timestamp:
11/27/2006 5:36:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:n04qhVFNqsplvyt2vWEpYXtInv8SX/0u+b514Cg3359NO0Ci0oJZcGvk371oxWuK:n9qhVxLytYRpYXtAkSX/0v51I3blrJZo

Entry address:
0x3161

Entry point:
81, EC, 7C, 01, 00, 00, 53, 55, 56, 33, F6, 57, 89, 74, 24, 18, BD, 40, 92, 40, 00, C6, 44, 24, 10, 20, FF, 15, 30, 70, 40, 00, 56, FF, 15, 70, 72, 40, 00, A3, F0, F4, 42, 00, 56, 8D, 44, 24, 30, 68, 60, 01, 00, 00, 50, 56, 68, 60, 98, 42, 00, FF, 15, 58, 71, 40, 00, 68, 30, 92, 40, 00, 68, 40, EC, 42, 00, E8, 28, 28, 00, 00, BB, 00, 64, 43, 00, 53, 68, 00, 04, 00, 00, FF, 15, B4, 70, 40, 00, E8, 64, FF, FF, FF, 85, C0, 75, 24, 68, FB, 03, 00, 00, 53, FF, 15, B0, 70, 40, 00, 68, 28, 92, 40, 00, 53, E8, 13...
 
[+]

Entropy:
7.9947

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file fscapturesetup53.exe has been discovered within the following program.

FastStone Capture 5.3  by FastStone Soft
Publisher's description - “FastStone Capture is a lightweight, yet full-featured screen capture tool that allows you to easily capture and annotate anything on the screen including windows, objects, menus, full screen, rectangular or freehand regions and even scrolling windows/Web pages.”
www.faststone.org
8% remove it
 
Powered by Should I Remove It?

The file fscapturesetup53.exe has been seen being distributed by the following 14 URLs.

http://www.czn.uj.edu.pl/kno/moolab/matlag/mod/.../view.php?id=1083

http://totalsoft.org/go.php?site=http://files.totalsoft.org/F/.../FSCaptureSetup53.exe

http://www.bytesendclear.com/VH0vkqZirZjERtwjV2xjltUbLbFJc6rrDxP3eSzdfBnLm5Dw6_B8BA6uuLoaxaxAKsaelbEINF5jDPGHZ5DewiRm6rOX2A1R0GYGSCaqOhrEjQI3A3YFk8TrCASlb1Cpq9wzqfu1cXxhu4OvTK9vEOPxUmC8yN8WmoNEo0lhntnzkkhDP4sb5fEReAA0YNscPcs_oK4hff09MPz3n264P8zXDli41fOkJjIqUELZs7givEOQxI5mppEf0uhwwnIhhmlhCJVUjZlLbXlqzhFjTxHEL8VXJyzIOU7z6XisVSKEv8eRhmMZepB9dF7 Ye9dwjE9sXLnt2YSSyExMG4H5l6FUeSRsbXL32suS5DO6vREUOO3I65DqdGrkbBs4Cz2b8M6Ibu84ahTywjhoWyzfPhHnDrYTdeDauyCku96P7_84NzsrRzsLlqkOX39GYF4zNyZUS3T1UlnoVa9z_vWtN_IHkulEpkSEXXzTPW3A4JGJ8U60OFubxK FJn0WQ16yW_XyKvWaRpo 3R713HuHZ78WaR23VzxhwwFBACYKmqSL27RyqigrD7UZlrASs5WRMTn33dkXjlHil3KRcSG5NDUuEx_zdoCYAqmNZ8Saqq_z4K1J8zL5lVad9csU9G_LjHy9WTD-G20AAGTYtrmEM zNs8kyChxy4PBdQwgI82Aih0EgbZf7xixKkVtBijtmQVsW5f6B5GC7Y6Et7pt4RukJw2H_r_Or7Y7DBRt8nOiMgZc4ndfO1 gYbBCN HklwF8O-E

http://storage.programki.pl/FSCaptureSetup53_(www.programki.pl).exe

http://files.totalsoft.org/F/.../FSCaptureSetup53.exe

http://dpcdn-s06.pl/.../FSCaptureSetup53(dobreprogramy.pl).exe

http://storage.dobreprogramy.pl/.../FSCaptureSetup53(dobreprogramy.pl).exe

http://staszic.eu/mod/.../view.php?id=625

http://www.komputerpc.pl/programy/.../FastStone_Capture_5.3(www.komputerpc.pl).exe

http://files4.biblprog.org.ua/F/.../FSCaptureSetup53.exe

http://biblprog.com/go.php?site=http://files4.biblprog.org.ua/F/.../FSCaptureSetup53.exe

http://totalsoft.org/go.php?site=http://files4.biblprog.org.ua/F/.../FSCaptureSetup53.exe

http://download.slunecnice.cz/slunecnice/525800e63ec8270c44145285faa78fb9/548c831d/win/.../FSCaptureSetup53.exe

http://www.slunecnice.cz/sw/faststone-screen-capture/free/stahnout/.../?m=525800e63ec8270c44145285faa78fb9&t=548c831d

Scan fscapturesetup53.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.