app-pnp-upgrade-vstarcam.exe

Version:
1.0.0.59

MD5:
bf78b423f676416675a01ca137adc0fd

SHA-1:
2953857fe91439f573981c7e7b48670ea6a67b36

SHA-256:
681b99bec728e933aca49290d882cae115842fb4880e0398f08c2bed747299d0

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/25/2024 10:34:21 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0915
7.2.77

File size:
1.9 MB (1,999,872 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\app-pnp-upgrade-vstarcam.exe

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:neoJQhQIscKnTrCrYtil+jiVxrm6WmAJJyJOUApoSFgcj5TUMYOXXl5JpfQLB2FX:eomodgxri9om5f1jtQocVTO

Entry address:
0x19EF18

Entry point:
55, 8B, EC, 83, C4, F0, B8, 08, E9, 59, 00, E8, 38, 7D, E6, FF, A1, 08, 6A, 5A, 00, 8B, 00, E8, BC, 7F, EF, FF, 8B, 0D, F0, 66, 5A, 00, A1, 08, 6A, 5A, 00, 8B, 00, 8B, 15, FC, CC, 59, 00, E8, BC, 7F, EF, FF, A1, 08, 6A, 5A, 00, 8B, 00, E8, 30, 80, EF, FF, E8, AF, 53, E6, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.6015

Developed / compiled with:
Microsoft Visual C++

Code size:
1.6 MB (1,695,744 bytes)

The file app-pnp-upgrade-vstarcam.exe has been seen being distributed by the following URL.

Scan app-pnp-upgrade-vstarcam.exe - Powered by Reason Core Security