mycam-1-1-32-bits.exe

Generic Internet program

The application mycam-1-1-32-bits.exe, “Generic Internet program Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from d.downloadsfilesnow.com and multiple other hosts.
Product:
Generic Internet program

Description:
Generic Internet program Setup

MD5:
7f7f982375b5fa5aac123aeed787419d

SHA-1:
0d4f682a0074f4009393c0f750dfa3fa6c3a3276

SHA-256:
84985cb4b8c2c0002c5bc48821c0fdcf87a2afed47b01f9a1d65dab2af9704bb

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/16/2024 12:34:06 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Installer.Bundler.Installer.Meta (M)
16.1.15.19

File size:
672 KB (688,111 bytes)

Product version:
1.5

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\mycam-1-1-32-bits.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:nsvpdGwhWNOlNFCeKNXGvYJbpfoC6dVOq+sXtEuK4ifuRxExubHaP/kY:nsvbGwhi4FC1XnVreXtEgZRxExM6P5

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file mycam-1-1-32-bits.exe has been seen being distributed by the following 4 URLs.

http://d.downloadsfilesnow.com/?ic_user_id=9289&data=Np7Jxbl jS4LrT2D1vBpn1ecKabwPzpSctyTHWZDoPHwSqFZH0r/XcED7DLwSip4O6zy/BZccvzYIeDya/aSEDNX3a3Wa873FfKyxwy589NylRZ7jxiLc3kPprCGTv c56KM4B/AImqn9WnbvNkp/5Onj8I7fEymIXI6MO14lg8Fp7GOV0RGrzy6lcKtChGzAZl3STeKt2pk8GnxhU2myBQV9AhoiMSkwFJMzXg/cS609TEJ81zyLwqM92LvWmJaMamA15Hi4nv3pNge mPmZDArutz1d/TSechBTfalPdWpXO/kxoDYhyoM64Uki5eMQTIm53AGu9Z7T6Ar 4mMCcAzCg4GecqYZzQOGwmrV37GhFKmG78EidKsr6zLfCel94xXcv8RukYeV3HkCvjx4fFRom2420nuNjnSUxB4vQDDBWi2dZsw11cj dgWeuKy2IebotXtuS4fMis23BwSvdP3FuICW4W/GZne2wEMyKKU8A4vCx8h 0Oaaf0GAUmnN/sqTJ9knyNM2oPPPKofxkWBKqhaubNlBcDgvp6Y4JK8SjxyXLYYh0LnnQfI08kCt8Nzv4WB5JCbWioYBQ fMkG6eIHk4eGyXT32cogQ4g120PW5OvJncWFwrWNcJzNh7rfnvD8aCtjL8w8IvO1jVUQOYDvKYG0AVNIa1X4qh4usi0x49L35GH1/AkRL3JA23M061GQZoc20YjwTONisCg==&key=cgtrf5Ac0Kdq4bqqFIGHgf Acnb/gllCWRmZHO1rR2oJaYrTU1BHHlwS1aCqfTOfLWrEPj/lwJkwjtj6EITktlbbwM8UINFJWV20s6Ze74233k7pX9p5h/IKPnpmo/V2BzJ uSZcrnG8ZAp/.../XIXl72ytCZvY8qeq4JZ9CmGOY1N66QTYE7fbN4Htxd eMAGT8iBlPCbg2jyJl

http://d.highaa.com/?ic_user_id=9289&data=pLtxWuNA6nndCm9HK81eSrsuuDyz40SrLlGBuitBoYlQRHSrvZdHM6kCw0ZYSzCfDEkSwsmCzFw9vXm3JL9dURgtx6mS8opQKWQcXBUwoT6f5dlJTNmdrn6FZgc4uyaYlgY088Ts/3uc3gx0OkHZudj6I2G/Sr/TNqEVSEkjghPyjB697y mUy7DtE6 DfqST1u/of7WvzobCOkduO0zuXuX1n64T8q3/fp0Sz5VN9msGnvFL p3RjWtrerd0gSdn 4b3NhBtPMLvp4l7ABCvycERn28iojltaJsezmDZrySvt0j9mYiE8V6kLes9dF9hPQXygh90F48R438U64n45IdWYOT1qsq2qEUg1GtV JvCZO5atGGjD3oDwqvLyBISpKfyQ/Gwm5 GKHuiNJVx8NxA1ViYWBEANpKTG7yMH BisbYiVxJXA6Ztn4mH7pW PT/wVyY8klc27BC98bjXPnnMyGpCYHEI1UYcAL3k9n 40Il5mo4e35IXdEgaz9/mF1JSAYDzPNOWPXchLAx8y8gcpZPHdAFT/4phVQeFoPiR1TE7OgnPTfd0HoFr FwiE7V5Vte3uKScj2QHdPJuvwQ9AvXP3SU0moy/lJwNWNu/s7iUpUEzdJ2NBQ0KRIDm1lc7bkph7sQ9aZ5ByLsqYNfxPWAtx2HDz8c8eMsKMdPRsN045WzN6W nHCeGn1Ja0JkKQbkhIY7a4u91C vTg==&key=RcK9UZFs8tW3ACj1UbcLukud65FADcEF7a7vbm Cip54zj/auA2KQ 1b1XSYg4cB/eeTKF217k0T/WgKZ6AwuMPdzeKHl36 dbYLFIKsT8Vczd1Cfig/jjUgroSSkP6JTJEEiFLE0wRPmCH3Bb5TIJL4t7vu1OHM/.../mGJpQbodhhcUhT7TxkBlpztHHCQvx5qliw51Bvd9WUZKKOMlU3IzQeUxmGhI9e

Remove mycam-1-1-32-bits.exe - Powered by Reason Core Security