home

fscapture.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-0k-3o-docs.googleusercontent.com and multiple other hosts.
MD5:
bdb0b87d300b3aeb98797ff0a3c54924

SHA-1:
8d4e3b79b5d1f9281a829b713a835bcc012fc8d2

SHA-256:
85994f9ccde55bcb8c50e3481d6230b8d6f47accdffbc6c90b707a596673c4d5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 7:59:34 PM UTC  (today)

File size:
1.1 MB (1,111,552 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\faststone capture\fscapture.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:K9GA0uHseVgT4gj6ISEDVcCMNsjJrIK6XmQ0HH6kAv:KQA/Mk/W69KwCjEfIakAv

Entry address:
0x382E10

Entry point:
60, BE, 00, E0, 67, 00, 8D, BE, 00, 30, D8, FF, C7, 87, 10, 77, 2A, 00, 18, 2E, 7D, 24, 57, 83, CD, FF, EB, 0E, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46...
 
[+]

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.22 (Delphi) stub

Code size:
1 MB (1,069,056 bytes)

User Start Menu Item
Name:
fscapture.exe


The file fscapture.exe has been discovered within the following programs.

FastStone Capture 5.3  by FastStone Soft
Publisher's description - “FastStone Capture is a lightweight, yet full-featured screen capture tool that allows you to easily capture and annotate anything on the screen including windows, objects, menus, full screen, rectangular or freehand regions and even scrolling windows/Web pages.”
www.faststone.org
8% remove it
FileHippo App Manager  by FileHippo.com
Publisher's description - “The FileHippo App Manager will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases. These are then neatly displayed in your browser for you to download.”
filehippo.com/download_update_checker/58783
50% remove it
 
Powered by Should I Remove It?

The file fscapture.exe has been seen being distributed by the following 4 URLs.

https://doc-0k-3o-docs.googleusercontent.com/docs/securesc/q6l4qrsks0e9g3549eutj0vpv2h8mmsq/o8nb0c09ejc7c4h97786fctp4tctl8mm/1456704000000/.../04436658981552429799/0B42Dr3dzHiLTQU5QR05HV29RSEk?e=download

https://docs.google.com/a/.../uc?authuser=0&id=0ByOrKYsHkw4fLUZKUUtEblJoR0E&export=download

https://doc-14-1o-docs.googleusercontent.com/docs/securesc/5gdp180i34ev9lipnf7hje4rtusqk21u/ela7siq81jbfo455pled0oka91qedbdl/1464026400000/.../04361400143938134847/0BxP6uIxq2qJfUUVSU1NrSVdrdlk?e=download

https://doc-00-74-docs.googleusercontent.com/docs/securesc/eqlbb39c36quga00csn76lkpihq6gktu/ol9geki2ri6dihumm99fnhv0ufj0th4h/1453140000000/17825817909330675846/.../0B0SQqkh9CdhFSUQ4NGNaV2gxMWc?h=03140136193818165030&e=download

Scan fscapture.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.