home

h264webcam_setup.exe

H264WebCam

TimHillOne Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from soft.mydiv.net and multiple other hosts.
Publisher:
TimHillOne Software

Product:
H264WebCam

Description:
H264WebCam Setup

MD5:
d216fd77772ac812483151eff83ab5a0

SHA-1:
945a2b4afd8b9dda66ddc4ed791b1ee422297a2b

SHA-256:
3bb9309fe6150eea1028d17d0386f2f3fe9b6aa4604ce4aebae803b5689f09f0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:18:35 PM UTC  (today)

File size:
4.9 MB (5,111,341 bytes)

Product version:
4.0

Copyright:
Copyright © 2006-2012 Timhillone Software.

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\h264 webcam deluxe.4.0\h264 webcam deluxe.4.0\h264webcam_setup.exe

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:+zwR9DC7oLVMCzJNqtY+PFlWfZox4m1k2yPz7VyCz0217csB3xlm28L1n2UhVd1+:2wO8SCzUY+tMfq4Wk2I7VyY17cMhlmNo

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9989

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file h264webcam_setup.exe has been seen being distributed by the following 12 URLs.

http://soft.mydiv.net/win/dlfile8a153_278572/.../H264WebCam_Setup.exe

&onid=13633&oid=3001-13633_4-10605196&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=video/capture&topicbrcrm=&pid=14450687&mfgid=6280562&merid=6280562&ctype=dm&cval=NONE&devicetype=desktop&pguid=fcd067b83a4a8f53b82b5c83&viewguid=d8iNcrmDkIS0BwV5vVjOfCSx6OGREPFU2Q7J&destUrl=http://files.downloadnow.com/s/software/14/45/06/.../H264WebCam_Setup.exe

http://files.downloadnow.com/s/software/14/44/89/.../H264WebCam_Setup.exe

http://www.techtudo.com.br/_/software/.../download

http://download.informer.com/.../h264webcam_setup.exe

http://www.downloadcollection.com/downloadredirect.php?idx=195374

http://www.freedownload64.com/getfreeware.html?pid=64682&mirror=1

http://files.downloadnow.com/s/software/14/45/06/.../H264WebCam_Setup.exe

http://h264webcam-ver3-55.software.informer.com/.../

http://h264-webcam.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPemSpzydROONygDLMhXLMTlkesa85E2lr2EB4Yvr7k9YTWh Ghjs77cQROKHjQDtReRqYYbavd 9 a6bkVAVBYbHAMtIuG9CAkaZAfk7qn8eoU/ /.../vxHRbGT3rkYtiw=

http://www.downloadcollection.com/downloadredirect.php?idx=103189

http://www.h264soft.com/.../H264WebCam_Setup.exe

Scan h264webcam_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.