home

olycamdetect.exe

OLYMPUS ib

OLYMPUS IMAGING CORP.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘Olympus ib’.
Publisher:
OLYMPUS IMAGING CORP.  (signed and verified)

Product:
OLYMPUS ib

Description:
OLYMPUS ib Resident Program

Version:
1.3.28056.1828

MD5:
d3425faaf93c60df9ffeb80f656df17e

SHA-1:
ee012149175ed321a1d5058cfd15465ac52c05ca

SHA-256:
c959f395328946521dcd877015e0b24ed54d8837fcf9bae2578554a83789d12c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:32:54 PM UTC  (today)

File size:
116 KB (118,784 bytes)

Product version:
1.3.31297.2130

Copyright:
Copyright(C)2010 OLYMPUS IMAGING CORP.

Trademarks:
OLYMPUS ib

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\olympus\ib\olycamdetect.exe

Digital Signature
Signed by:
OLYMPUS IMAGING CORP.

Authority:
VeriSign, Inc.

Valid from:
6/10/2010 8:00:00 AM

Valid to:
6/11/2011 7:59:59 AM

Subject:
CN=OLYMPUS IMAGING CORP., OU=Device R&D Dept., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=OLYMPUS IMAGING CORP., L=2951 Ishikawa-cho Hachioji-shi, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
303536DD1BC7DDF34D70325A66C298CB

File PE Metadata
Compilation timestamp:
6/28/2010 11:07:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x36CF

Entry point:
E8, C0, 03, 00, 00, E9, 36, FD, FF, FF, 3B, 0D, 28, 80, 40, 00, 75, 02, F3, C3, E9, 40, 04, 00, 00, 53, 8A, 5C, 24, 08, F6, C3, 02, 56, 8B, F1, 74, 24, 57, 68, 5C, 3C, 40, 00, 8D, 7E, FC, FF, 37, 6A, 0C, 56, E8, 3E, 01, 00, 00, F6, C3, 01, 74, 07, 57, E8, EB, F8, FF, FF, 59, 8B, C7, 5F, EB, 13, E8, 3E, 05, 00, 00, F6, C3, 01, 74, 07, 56, E8, D5, F8, FF, FF, 59, 8B, C6, 5E, 5B, C2, 04, 00, 6A, 14, 68, D0, 63, 40, 00, E8, AF, 02, 00, 00, FF, 35, C8, 8A, 40, 00, 8B, 35, C4, 53, 40, 00, FF, D6, 59, 89, 45, E4...
 
[+]

Entropy:
5.1397

Code size:
16 KB (16,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Olympus ib

Command:
"C:\Program Files\olympus\ib\olycamdetect.exe" \startup


Scan olycamdetect.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.