home

youcam_7.0.0623.0_deluxe_full.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from f35.x8top.net and multiple other hosts.
MD5:
04af19f396ca7248b9d8bbdfded927bd

SHA-1:
a8e673b713986952314d342cc3fbc1103a6ef695

SHA-256:
be6f783df8c9de74fd6b99ae33ba38c6dd83ca619f38a7d187a4a91676b1964d

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/2/2024 9:26:06 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/MoleBox
7.1.1

File size:
348.3 MB (365,261,936 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
8/2/2002 9:01:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:hewNSWFruYnX7m6LrzX/zETEQ6J5MUSPlOTNKhQj2hzMjDsai8SUKDWBP0HYRGdN:lnruYnLtLYR60lOpKhQqqYai8SFSqHx

Entry address:
0x8FB23

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, B9, D1, A4, 95, F1, 49, 7E, 18, 7E, 93, 66, A8, F0, 14, 96, B8, B5, 29, 3E, 4C, C5, B7, 76, 3B, 1C, 23, 93, 08, 6C, F2, D1, 63, 3C, 11, 4E, 51, 8F, AE, 7D, 65, E7, BF, 43, 7C, 3D, 96, 3D, CE, 8B, C4, 78, 1B, 78, 28, B0, 5D, 8B, C4, 78, 1B, 78, 28, B0, 5D, E9, 3A, 69, 00, 00, E9, 4E, 69, 00, 00, E9, 49, 69, 00, 00, E8, 6E, FB, FF, FF, 7E, 04, 01, 00, 2D, 97, 00, 00, BA, 6B, 2E, 35, 74, 0D, 91, 56, 7F, 66, A4, 8D, C3, 9C, A1, F6, CA, F8, E0, 37, A6, 52, 19, 41, 4E...
 
[+]

Entropy:
8.0000

Packer / compiler:
MoleBox v2.0

The file youcam_7.0.0623.0_deluxe_full.exe has been seen being distributed by the following 12 URLs.

http://f35.x8top.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f30.y8top.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f51.y8top.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://c236.y8top.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f51.x8top.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f30.x8top.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://c236.x8top.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f30.softwaretop.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f51.softwaretop.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://c36.softwaretop.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f70.softwaretop.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

http://f50.softwaretop.net/2107tmp/cf/larger/.../cyberlink-youcam_7006230.exe

Scan youcam_7.0.0623.0_deluxe_full.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.