home

shapecollage.exe

Shape Collage

Shape Collage Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is installed with the program Shape Collage.
Publisher:
Shape Collage Inc.  (signed and verified)

Product:
Shape Collage

Description:
Shape Collage - Automatic Photo Collage Maker

Version:
2.5.3

MD5:
0869df1937d65c0d3ceca948e4250a93

SHA-1:
eb005b34101abeb88681881ad02ed6e1882641ff

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
4/19/2024 3:00:38 AM UTC  (today)

Scan engine
Detection
Engine version

SUPERAntiSpyware
Trojan.Agent/Gen-Injector
10636

Vba32 AntiVirus
TrojanDownloader.Genome
3.12.24.3

File size:
96.2 KB (98,536 bytes)

Product version:
2.5.3

Copyright:
Shape Collage Inc.

Trademarks:
Shape Collage is a trademark of Shape Collage Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\shape collage\shapecollage.exe

Digital Signature
Signed by:
Shape Collage Inc.

Authority:
VeriSign, Inc.

Valid from:
10/12/2012 3:00:00 AM

Valid to:
10/13/2013 2:59:59 AM

Subject:
CN=Shape Collage Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shape Collage Inc., L=Vancouver, S=British Columbia, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
67573CFB94D6FA8B18D2651A60D7FB6A

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:rQpQ5EP0ijnRTXJKQZ7ei9n2HYRp4CMIoGzBD0q0Li:rQIURTXJKK7ei92HYMCMIoG10qj

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.4436

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file shapecollage.exe has been discovered within the following program.

Shape Collage  by Shape Collage Inc.
Publisher's description - “Create picture collages in less than a minute with just a few mouse clicks. Use photos on your computer or from the web to make collages. Adjust the collage size, size of the photos, number of photos, and spacing between photos.”
www.shapecollage.com
About 5% of users remove it
 
Powered by Should I Remove It?

Scan shapecollage.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.