9726195_stp.exe

Webcam Video Capture 7.0

Web Solution Mart

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Webcam Simulator   (signed by Web Solution Mart)

Product:
Webcam Video Capture 7.0

Version:
Webcam Video Capture

MD5:
4583a6d9775de5901ba1fdc8abd55509

SHA-1:
53b581cddc1dbdf5b163d10d5a6561b5ae757ff7

SHA-256:
513e1d953f734a955300598d3113780df73f55df97494df4cb02877cfb86a861

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:44:50 PM UTC  (today)

File size:
2.9 MB (3,046,696 bytes)

Product version:
7.0.0

Copyright:
Webcam Simulator 2005-2011 All Rights Reserved

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\9726195_stp.exe

Digital Signature
Authority:
DigiCert Inc

Valid from:
7/20/2012 1:00:00 AM

Valid to:
7/25/2014 1:00:00 PM

Subject:
CN=Web Solution Mart, O=Web Solution Mart, L=Mississauga, S=Ontario, C=CA

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
08C9327273D02B7091C71CD09C8A7D1A

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:jatA9dHOjh9yCKHjuczu44nLtSJGNH9B8VtYBbEBTwABbNn8kxWOUETU0ovey6:utAPQDmjuczu44x0GNdBoYBbEBTvBbNR

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file 9726195_stp.exe has been seen being distributed by the following 29 URLs.

http://lb.cdn.m6web.fr/d/c/a/932d3e9ba945e1b09c1c9c53073f0608/58801ac7/soft/.../webcam-video-capture_7-0-0_en_190552.exe

http://d110.cdn.m6web.fr/soft/.../webcam-video-capture_7-0-0_en_190552.exe

http://lb.cdn.m6web.fr/d/c/a/e7ac6d11720e361691b68bd3623250e1/584833cb/soft/.../webcam-video-capture_7-0-0_en_190552.exe

http://lb.cdn.m6web.fr/d/c/a/5f8daa401708f85f9724fe260d9e48b1/5810a69b/soft/.../webcam-video-capture_7-0-0_en_190552.exe

&onid=13633&oid=3001-13633_4-10671720&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=video/capture&topicbrcrm=&pid=12921822&mfgid=6287274&merid=6287274&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=459358797e4d7fccdcd5e0e6&viewguid=hGO9TttjhRVxY59hNZ01NIXXj03yGcXHK4Sz&destUrl=http://files.downloadnow.com/s/software/12/92/18/.../wvcsetup.exe

http://download.freedownloadmanager.org/Windows-PC/.../FREE-7.0.html?ac10aa

&onid=13633&oid=3001-13633_4-10671720&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=video/capture&topicbrcrm=&pid=12921822&mfgid=6287274&merid=6287274&ctype=dm&cval=NONE&devicetype=<!--esidesktop&pguid=ef5ebed326039e30dbaa10a9&viewguid=fZWs0YSICGS20ooLfaytcYP69DY-UvoJ5xLc&destUrl=http://files.downloadnow.com/s/software/12/92/18/.../wvcsetup.exe

&onid=13633&oid=3001-13633_4-10671720&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=video/capture&topicbrcrm=&pid=12921822&mfgid=6287274&merid=6287274&ctype=dm&cval=NONE&devicetype=desktop&pguid=d0e63fce4c3528db8cd3cdb1&viewguid=c-YueWK@pnZKEIUCE@sNxTO3epUm@IIq5kBc&destUrl=http://files.downloadnow.com/s/software/12/92/18/.../wvcsetup.exe

&onid=13633&oid=3001-13633_4-10671720&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=video/capture&topicbrcrm=&pid=12921822&mfgid=6287274&merid=6287274&ctype=dm&cval=NONE&devicetype=desktop&pguid=b455b5858189bb54e30acb70&viewguid=Z9XXixPoZ9ECyu@BRkN-jDMoxBaK6XINguRx&destUrl=http://files.downloadnow.com/s/software/12/92/18/.../wvcsetup.exe

Scan 9726195_stp.exe - Powered by Reason Core Security