home

wlite551.exe

Steve Niquille

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with multiple programs including webcamXP Lite and webcamXP 5. The file has been seen being downloaded from dl11.filekicker.net and multiple other hosts.
Publisher:
Moonware Studios  (signed by Steve Niquille)

Description:
webcamXP 5

Version:
5.5.1.5

MD5:
38c79e45a23ca801f177408d21088f26

SHA-1:
8ec9777c49171157c91d538527b41c68ae9a6ac9

SHA-256:
eb2d63e4117b918523426ee1b7523f657e406bcc763d2fc46625f3d62396c6c9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 5:17:51 PM UTC  (today)

File size:
6.5 MB (6,848,920 bytes)

Copyright:
© 2012 www.webcamxp.com

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\wlite551.exe

Digital Signature
Signed by:
Steve Niquille

Authority:
DigiCert Inc

Valid from:
3/6/2012 8:00:00 AM

Valid to:
3/11/2014 8:00:00 PM

Subject:
CN=Steve Niquille, O=Steve Niquille, L=Etoy, C=CH

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0D46F73E4FF577B40F66D61C378F8E35

File PE Metadata
Compilation timestamp:
12/6/2009 6:50:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:rLnBRf42AmvDTpbTtRCC+KRtu56hGVJsYJanf31DmBVJLEBme2mko2:Tf48vp3CTKrOVfsYJsdmlLnB62

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9985

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file wlite551.exe has been discovered within the following programs.

webcamXP 5  by Moonware Studios
Publisher's description - “webcamXP is one of the most popular webcam software for private and professional use. it offers unique features and unequaled ease of use to let you broadcast / manage your video sources or secure your company with up to 100 video sources per computer.”
www.webcamxp.com
8% remove it
webcamXP Lite  by Moonware Studios
Publisher's description - “Webcams and ip cams software allowing to broadcast & manage up to 100 sources.”
63% remove it
 
Powered by Should I Remove It?

The file wlite551.exe has been seen being distributed by the following 8 URLs.

http://dl11.filekicker.net/private/$adv-rgn3$1352044069$5293273d91976f82c3254d8fd6eff675$/id/$FK10696$236619-5C45$/cache/.../wlite551.exe

http://dl.filekicker.com/send/file/.../wlite551.exe

https://dl.filekicker.com/send/file/.../wlite551.exe

http://dl11.filekicker.net/private/$adv-rgn3$1353963923$0e5c441746e10aea669817c3bb6b7111$/id/$FK10696$236619-5C45$/cache/.../wlite551.exe

http://dl4.filekicker.net/private/$adv-rgn3$1347850694$2562996b97821815e92e7da89aa90f2c$/id/$FK10696$236619-5C45$/cache/.../wlite551.exe

http://dl5.filekicker.net/private/$adv-rgn1$1342344775$7596f676a6cf292f869d6eb102ad6ba4$/id/$FK10696$236619-5C45$/cache/.../wlite551.exe

http://dl11.filekicker.net/private/$adv-rgn3$1351655317$bbc68f120583f26519b5fbf84d9ee3ff$/id/$FK10696$236619-5C45$/cache/.../wlite551.exe

http://dl23.filekicker.net/private/$adv-rgn3$1372286068$dea37d7be7e5202954c663f5a0a58a60$/id/$FK10696$236619-5C45$/cache/.../wlite551.exe

Scan wlite551.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.