home

fscapturesetup69.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
5b92038e3dfaffba491014357f4afea1

SHA-1:
239c7f1e22dad1b55ee81b02c103678723ce0caa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 1:19:17 AM UTC  (today)

File size:
1.8 MB (1,856,752 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\fscapturesetup69.exe

File PE Metadata
Compilation timestamp:
6/6/2009 4:41:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:VI6r2zISwY8aPRPhINlk5Yf/24nn08cF8RyU1eZsR0ROO8BG3:VI6c93rSLQi7nn0nqF2fROO8Bm

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9970

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file fscapturesetup69.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36871&instance=softonic_es&type=PROGRAM&Expires=1485844927&Signature=TbqZ3sIVWTyRjmnevbTs2Ic74Vf81CEN8U3AdRyYdYc-5rPs6loHQgJh5tIQAje2UvWu6UTrJLBLFXGpAbtuVeVZEb48gaC58yw0G7ZPJdPNipzkSmAsy-gl3B90YazxJTpzB94jVS7xk7LwYqz5wS1P9SUr6ufshmolhBVI6X4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

https://faststone-capture.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWvK70YmPi91jOyzJvngz57LcOvxXCN3tSozxehIgEZmVNN4VAVhkz3KcyglW1myeTRDHu7CEzPFxQSMSAkNFS/.../r3McF6Wqo28=

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1475700276&Signature=MzOjEo2TkVjRM7Fuo08hpdsTZRv8UtFf7ZzR4OK9ZhLaHpSGelWgzdoemf6fx~Xx5LmlnSn7Pl1KlyZOUJ0cfjaDkU2zIOkXfYjDyKgtAw49tMJeyr0TBnhsYs2uwpgU6X4DaNnocV1FzAustDSE5AQ~d9etmoTkXtQ715-MkVk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36871&instance=softonic_es&type=PROGRAM&Expires=1461833284&Signature=AcUDS2oErlvGLc5uY838e5DW6IUwdJAtW-7wCN3oLD1QkFXClVpeMeU04K4lEaVjhSZppkZJCIGBgsZIiWoJaixSUvKxdn1FnIc4UoYjkzfzR6KdQ3heD1s23R~DBmwyxXucYVCpxAZ4cM-4Vq8IyiOaoPdusggwu5-wAoRZgCk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1485118260&Signature=Sq~7G5Ac-DeIT~-wmT7S5uyvT7CQ4v5VqRd2GJhO5Jl87rachCTE75bgFGfkCxDfe6743hf2YwvZDZYmPsc5gNc2pMk40f2L2VsUJ5vZWQhVxfLAErSP6F7r2A5y11sQX78YsmdS3sNbn30IR758aLLme9orBX~cO1hUUWnfZ~U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1436439791&Signature=ZHOSBCLHKSXAcU06skJLS7evw1s5onNUhi31KREneimSCc9WcNETH9SRIuVpAQL3kawN1sxAAmECnSnWt1LBuzmlMBdz5JXMPrlSyK2uW2gcjbxmn9Erk7m8KHGQqDPu2DqEV211rIB7sDNnrySqqPe~wSsX~5pg86OwN~o22os_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_fr&type=PROGRAM&Expires=1485563536&Signature=YOSPkvl0BgQwo3Wtd2tlkYzsr7nH~WG4wkP1t2a~uPLcD8Onyf7j3su0-SuGDk3U2QYNeODhKVqodjch05J03xfIgm96yvHXN6WT5dilutHXTxjHP-WbYg7qduFQiz58pk4WfwWaUlWsSvJS1gL3ZGDZ7RWyMC4hDflSs-7BH7w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_fr&type=PROGRAM&Expires=1476057424&Signature=VxS6hFqxk-JEDVUDXqYSr9nz0whdU5gNRH7dadet0EwdzEq1mFg4LJoZ~aop6orK2zywyMaQrgRYoHaKt0~d3DBu49xe1peMDj9aOBlEAzXBFhcQTQtmbOykMke59LqbzwsjmIiO8jV0oBSxSqjKs4VsCmtqwOenczJa9PE3wMc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1438997372&Signature=Ve7uVEMSuRXvBloXUAJIX8djxwj4x5LG7EdWoyZU7kLKDZNOpDbmmOPXe5pKWg~tTzFGenK3N2W6KKr56LG7u2TqpBMhQ~kIz5CFTaJWsXeoydG2E7swliyNiwztXGwZ1S04776PcMXX~3ymVtcSnbnlJsCCyEPLO4b0kq0RO2o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1477250874&Signature=gR22ZAcS1~z5vARfjDv3gOv8rDhATmWt8x0Mk7pQLaBPO6pop7Q3NsVzytCHEwBQdUGx17FaTlTOoHUZA0PUjFQMrdh4BQTIr-z39iMJGc6mc5julMAFxqL7aGQ2H2YVrg1yyvqhXuDPvVtZFTa7jXu4ATsRhIggB9mpVXjhI7g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1474831040&Signature=Ue8-yXNgW3j6lcrf5zDHLzI0a5-GkwQqsJCSC4kmc1ANOjLa9aKqYXYc7cMrBMMcxP1PsgGZ3MHgMbUUGpd1IZyR3LIcn6ZgHcdJa6d01dGDXK~rt8PELR-mnaoi50GhsJu8MYpyR-GvWgKIAxMv0DcX5s7S8OvkzsVV4KTE8WA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1427611438&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dylI~UIKNmErPQtAitKdgCjNfJpGfhBsHrvHNSpcFbrTcZvRpaOwHkFamKhSZg7Uoo7jAd6v71yTJ7oVTT8mP7ZTnpoXBLrLSHZCUWtPh2W09li8bJhn1cnY-FXsJdtkVBZMDAsesdOXWEI0DNXhCJqwUHj5usqMjB4stGrIwJY_&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1477381184&Signature=ALMVoEw-ju-G4sal8h3Qz7mBNSLOHR7gw7p7m4AhEAu9qyQhzQFFmrlx6bx-2OHJ4iKBn7~YfrR-r4dFfGxPeQgS64OBSrNrPJ3-5elxQlBvI3Rw9tttuFDkxD871RU-iisRxPCSy7wTgBanACXWvGL-9yO8vrqSLuBDBfJm90Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1476721010&Signature=eIsh9GHiASy3sOJu67oyvdF8jX75hI-QCzwLm1aAPN9Wcqv0feGZtL53fKbFs~pBpRUXz-X-zzvwF9rYxgvFrHdGyC1qnSZmMWp8TM5bA~JaJFT2poTGrfkqvmOFKq3BIkQfa0ePB-23JMIfxFutT0JPRE06xh9hE~M5ZyITfq4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1480467749&Signature=Fben39-GZv-28mkCLvSG2VteVraVGDn31Pgri2pccgDXVSWfVlm~Qh0HR2RauQRxo7iOOYjhm4RR4AyfMx1eLnDw2P3B8EpPx~2uWVHNaUpjbygxaRLiF7uCOGpv1NrB-uxPdiM~joeLwGPvl7b2vxK27D1JvyLvaEC~dOkv3xc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1477497833&Signature=KmohaYj4spx13AdLJUYdO7t0ddGgep2rIYIvUQdWMbcDeMm1kKaYu0pLbajVZGijR2DdzkvuCBOSEPUYbnxItKbfG9Yn1OTy6B4KGHxq1k-HQLXIE-uBdG7c6ygZeUywQdSEScAjURI7MGtJvz8F65AkIm~6hNXkd7vf6Unuml4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36871&instance=softonic_es&type=PROGRAM&Expires=1473953989&Signature=BvQCIQScAFQkNREpOKYGOJljU1MuSS1F7SC9Zg7kTcZR~Zi8lIv~0PLsS25rOLML2TCpODaRseQms77H5fsoW4Vi4bHhNS4stg9DJVWgxDmekpmOscFLw-NwZr3dkVONzuvUWAsXaV0o5IDy1BZsGaSAObwBIFCVra6qFDBVwIM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1476943136&Signature=C7p3sDMulYqYJvAozzit8EWYklp3aPnxbRNTM82EyOU4nyN3J7ZKXM7RU093e9m6qgBoKvlpbf27XHjHQcASDAiX~g6K64dVLfx5sgWszvtaWsCy4n~ekayMlPTzQCUOgW~Dyiyo4atCov8G7WDhhHMIZdCpOX1MCGH3KWbDXDU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36871&instance=softonic_es&type=PROGRAM&Expires=1448870236&Signature=CO-9KaXRFMrh2ZE-WK8ftrCecSApzY34H1emY1Ti5PQXoYlv05zDrZaD~e5GBlc-yJGluoK37IIamCXFZiYWt8ngxe2CHLvJQnJnpcXgZClDs9k~88ZtFDRdpKlu61hvpeXej2QrdTobJQbOGOZUvVdLRwjhyZVS07FnYixI~s0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1478809318&Signature=GK2C7jl2S3R12YsfZar-zhEbxWmO7azN6VRfeehFL4bITYh5jsXDwr863X-SSss7mIxc2IjZSpv5QzvhJUXXnbQ~PUekmr2H0PFxP15rEG-1N6FqG6gMATiOMtigx26IUbjVXFTdd4kbosGkVQt8xjemcaAwFhvG4mfer04XcWY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1477290576&Signature=Tv4jdike8uNB9FzdwA6jbyf8mSE-DjCl4T7WMBmFjj51N8k7e6ODaz5g7cWHgJm3MBOh85VoDuE~fcJsv~~G7Pxi2RY1yK4s6g3HE-TBvjQUdzl~tUz0Zrphhqse2CapvUy63r4Ug22wbRp8CXPnX3sUokLjHE-IdMDCisCpdfc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=36871&instance=softonic_es&type=PROGRAM&Expires=1464877766&Signature=F7Bsi6gn~XaVFpgFHm28ZEnHOmJ9z9QlVc2~DUTqIG0IidPcP9ratetsIeRy19cHKAzX3HHtXxFmhVncFidz-pgecnZr7MRVJPpZSz2fdA~qy~Dr5k5p9vmgNCPP~eyeQzETbCB2yAkwiQVqZg2VI2mzxarGs4e1O-R5XUcYcaU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_fr&type=PROGRAM&Expires=1478725263&Signature=E--QD21hMHvc5ibG8vfTUQQzA3OpOpA2QsIa2~DhRCachweHW5m7IGjfAx75zYFZOQJT5b689CJ7n0ujhz~y2DP3HiG~WEow6QScOTbT6IulSCYPBFjR3xuN5ecwckQp8-1JwkG6ThwoulWYtRY5~X7pYf8ngjkFZFoSy8y7dBE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1473810633&Signature=cjKP6feynT0eg3fQGiFb1mLulGmVrrG9tBQgQGHXnx-Xt6qk19WACKvNPiPFXOy3kfObhhbmRh~ey0cFagmFKFGJnA51HtsCksFeT1FxC5ShPx6rgWdjrciJ0SgZ89rXoVXN1DLqW30Pyt6R1~~tXNwfVEFHqqeau7E-EuTAa8M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1476223285&Signature=INXEukmICC9ksJUwgvvadiGqTxk6ZU2hBepgzbGjY2oUgtc4UBIjFZaAboK4JlML-9FAoQWdfB4wGiPFpzc5fF-A8opFpSJobqCQJIkFKnHJbQiZVTWYsFxq3L8OicuBTyY5rwQq0hEUHN~C7i3rRNh9HdHz7j31yn14Lb1B1c8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

https://faststone-capture.fr.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMoF3ivMrAkL/.../vZvcGxoQ9VIsKhTJqpbA8haXH3VVEAiIGeBDK0HID13wv4JmN49PHeeaKRag AZ4gfMNk9OgV9QFnCWQ6BQOGRg=

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_fr&type=PROGRAM&Expires=1482282511&Signature=Cod2F0fGFHtQnLTyygpBx3eLnQgUFkHVMVdHsW0P1J7lj8lxa~YHpnHVwqRlQOlr~5cXvp4Xjb~ICTvEkMvut7sZK5WOIr7HCqYRGzF4LcSv5-n35hLoSFCwSG0p35bltd7uOdzKspCTsd1Wjv1cwY~xQWdwEnvsSsBD6~dsJhQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1450363013&Signature=KNrfpYRTSIOBP-eXivMNhUAWxNyHwZxSd8zqrHqmBr4K1MkM82ydSupghGrywklTpUVMNV5s1b8boaY8o9fNadQofIOjI6ylLNWfpe2Q~YTfolZgULnsQvPn3mozlmcvPX7QTzvYn9ssN9YcaW0AgltfWNQo-o3E-S6z6rvFtZk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1475270210&Signature=NlBHstyyjx6v2sdrU6MrjhKf3-NSbN7GQHDGlLpbp1Ipsr9hgKZryfug8WN1VYjn4n~fhdUVm4ZUI9fW4Bo7uQyaIVExPY-7OQhdg4ww3OS7gYapva9kU~IdMCzA6ttzrncGc2jXCNGM4ctq-IV2oJ4~g-B~D1Ozj6Ew36qhUuM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

http://gsf-cf.softonic.com/239/c7f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=44633&instance=softonic_en&type=PROGRAM&Expires=1479090082&Signature=dWAU4rn9FEidV9lJ-70CvVIBFyMGdjIiaB-e1M-sVZWzHORAmgIj6ojScWBNRBcN9UeC2k~J-x2SAFxt5-CGEZFHjAfcYAu-chT8ufY94dbY3BgpGL8A8tn0Gs08yJyC1UkfVVTJ81V1xtoOC6MvgxWu9jnbFunbK7Xpqfk~33A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=FSCaptureSetup69.exe

Latest 30 of 90 download URLs

Scan fscapturesetup69.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.