home

2442635_stp.exe

Fake Webcam 7.2

Web Solution Mart

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
Web Solution Mart   (signed by Web Solution Mart)

Product:
Fake Webcam 7.2

Version:
Fake Webcam 7.2.0

MD5:
4425d27167b46fdd7f2ed1409e1892d4

SHA-1:
6e7b092d9c31652153646979cd7ba49047262c5f

SHA-256:
4e4dbb9a94e5b8d2b2dfd4f494151adb11d175a5453848a9af4fd38b4b4b6d77

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:26:06 PM UTC  (today)

File size:
6.7 MB (7,071,192 bytes)

Product version:
7.2.0

Copyright:
WSM 2005-2011 All Rights Reserved

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\2442635_stp.exe

Digital Signature
Signed by:
Web Solution Mart

Authority:
DigiCert Inc

Valid from:
7/20/2012 1:00:00 AM

Valid to:
7/25/2014 1:00:00 PM

Subject:
CN=Web Solution Mart, O=Web Solution Mart, L=Mississauga, S=Ontario, C=CA

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
08C9327273D02B7091C71CD09C8A7D1A

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:OozupW44yaYQkYNtOEvWHd2nqJ/f1U8qWwG7e9+p:+I4PZ/ybvbnqJHFHm4p

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file 2442635_stp.exe has been seen being distributed by the following 12 URLs.

http://dw.uptodown.com/dwn/8FBYHWKWEyJNNjUeUqmM8PqFhpWuEu9SBwrAScvs8OUjL8iNAPh2zZRw4IEicoG1X9wXVy-IBWAOVjNpEdXGC3XapdtLENRwNLub6Ve8ZzjwNn2mA7HqyrZHHKSwpeOz/RV3J955yPTkzqcLa0VRqcmFNIkYtUUG4zOkarVyMqN-ISb1wVkE0Ium1v6njyvTQ0xXf7r3hmkZwYx8zHEvSyJeG8cc6brKnH_7E2xzsJazlIeVYOGBN3fEytPXi8IIw/Al6wHy38tOvJUYFn-JNA7G2aXJ1C3eL6AMn9mq_omRzB3JIOH_ZsAZP8UsVF1wAGuUJg1yPYJEusLHBeQ7hu7sIXYWrS2L_bIDtkiRVRgtttDDb_zQ9juOicCFcTVD1N/.../

https://dw.uptodown.com/dwn/Xh4B1EUqH_ZuXZoclN4fNQ2GdkWsipaeoyE27iFneIL4x9G_PgWSyhCKQzmSS9ffMyUV7mXg1k5nGOiOarDdxfceb6Q7g22dzSZubR_Jx8475OiUC2M-LnS9kTPoB7RN/LLAY-mhUQdxecvSjtANo1Gq8Sscp-McwMDH2hypCuOKl6FRG5i_BT8se6uOYvCIU1_rHxIPVv291j9v2ia7flzvdXTmkiiCeq1KJQCj8CJpjQT7vjxbWk8_cJKytyFaL/3sWTl7pFz0pwc3MrAYa3pll8bWjXZyeYT2Ns3XwwBbVlXLbIK7pHXvOxDd_1nhgpaQl9U_WEiT93mpdbec_-8-2Oa_Is6YjxD10snz9-oH4Oy5DhPgkWKjcNUrM92yZb/.../

https://dw.uptodown.com/dwn/sdNst6iE9k_yt71mV2VuTBNs2i6RjAdtJHOvi6DxTdElDxQ-UPIHbAUfEAPr37kxiVKvVwLQ5z12rhJtV8D28eDoSDzjpYrKvRFtL76xpULunLKo3tGzC4IGiI2ASWex/r0YRGC_-PaGHrkdwVW1ZTKYB0LvosX0a0ZBXIYYs9G4DfbprjSNov9mlQKx2zNYMQlfKRLxzMhQBz9xIIzFLS8X_5Y2UHqy5uwxCU5-SIgxUfSMrnuCh-pkgZ0retm_u/Lnhn_nNSvQr1WL9oB2o8Qq7EE2CE8Fl97k2M1VYH98BRrdX_3j0PcVAO8r0m7DxGsXi66L7vaJXLzbQUHD-7r_5xkWGMUYMNsZpsbg56ErXJ6xdypkIkyXMmyRgqqIOs/.../

https://dw.uptodown.com/dwn/uvAWV-t1JBB9GeiPVjP26XLrg7JZZ1gZ2sQRqpanzegb5JBVBsu2I1PWSkmidzhAP8QHVSi-5tzX3vcvTs3GidpswX5mMHrEqiMBgvqZ6zRn0KN_ab9OlqNgYV77FXHp/7xSSfB9FL4ndTnCys4ru7xfFO78zY4V4_46QXCeQukrOM8H1OLHC1aXrQvlGQprZxxW62y816J_BEtU9udxKE7eSFONX55SJQJna_LnhrDaAXoGUokN4_udeDaym6Sqm/6C0wv3zcKHVN6sHQmcURyXbuknwwVa0SJDqu1yjXXYP3MzEAAThIo6N5MUIqyrZgng8mcfKecDKLmJceoesjSGG2V3uWZPKkVB-HqKsvvsHD-EpR8lSAFnTRdW56v6_9/.../

https://dw.uptodown.com/dwn/qn2rSYCzuICvVFkznh7Zp6tr678JeUHHlTasHHTQFLIUPIBIyDkq4ynQaScqbH3hftjd-IfspAQecQWCs0vhfAI0owQuBQfM8pbwKtKqxfoWDIlaDVu5RVg7jb4bp9KV/gZCQ3Q1rv05SbzOj-sXRwhh7ZpPMFsZysSqrqPa-rHvu8PcH6Z-bRedhomd6NPgRHrZyyFaJLiYyvnYz2xY4ew14T5Mmi7cukUhk9gLBdWLijeRdg-7p5XyJ3-gtWJQs/HGgy3HXeFxF9OhEXvCTc2HeRD6w7IKt1mjmFduRLOVwtnWc6ErSNXkIu9aCnTOpi46D0xRA5WyN1wrCaxG90BgmW8E_soo8nGWfLypXLahnLljMH6UpmG5AV_HLHqETY/.../

https://dw.uptodown.com/dwn/j-HNQuTCtr_kHnHZFC7mJKZF1tPTWVHr7ZzNUPbWqfvjXWVNRUNpqBWcvF2XAFooxjOABfvTl0Cw5fxEfsyzoMbMCN15lQs4C3Psf16N_NKo9Pq1XXIl8sM9Ik8vK7W9/j33AaDzgd8vwAO4-GEqx4YqIz3Nrri2R0RThfACt8cg1-pwJOqZAGnq1CVhVTgpRN0F7H20WbkZ_RCRlFkNlvJYoDaIJwy6Duoc0bgKFKYr4uDE6ON67l7laskNWvI-H/S05kqeR03eHmYYknNRwFH3VITBcvOKsIeOgw8L3crECj54JD8U0uD-vecTHzRSO2XuaNnnL_aGu9IX3hGKowEWc6yHEf4KpmP6iIDV0RLp_Enr-7PxM5twSOpnMkDIfC/.../

http://dw.uptodown.com/dwn/6gAK4XNCSFFiUTQpQXqNMzgnry-tfwH4vsZwM8sMB4mezOK8AmoYoSXqvUK-HAy6clF0jryT83uiOF8pRycOLp9LheXlZhyQegPh2Fnqwo-cUxPvpbHEihdiuP3S5R3V/F9pXWdXHsuxKC3ncaZlBIK5wRN2DsolrpJTKLC9Z-J0PyuLz_GZuTjPJZKOtIZMFDRovKassOUfSZdUulmtSwMO-rGiJ6UJUwJhZ6wKIm_2LV7iwp5CAyPrUjm6LWXA6/61Bn1JkwS0qg-85Kz-QKZJBiFgYJEA_R1s64Mke6AYQ_PsM145BZN2aputE3nSzGIU4fOOpuZwCtiIdqz9JarbfKGHPUkNzE30FiV71C02BXZ2uK3ZgzrG14MIbjqHp-/.../

https://dw.uptodown.com/dwn/CQYKaZZKLS2U1eUO6vGNazjLz6xqYw5IUrdEDKtVjF-J4GOrOxNiSkOwDuAnXjDfuzPzPjE4J_QK_J8zy7brd_o1XwmlvrhyEZgz7S47COrqzbxPQsRduZXd8fZ0pY20/gyiMN8TA-UFaKtmSBiWYdTyUYm0ZC4FGUArXgHFfz1K0pPChlargBdk2K9JuzfXiQtbDZzPKWUefd_gqlCaGAwaxX0SQdJJB9QxopMrl3y13vI2ZptyuU7pNrQG6g1pZ/7WXB1osqg2qRkSEgJjVIuXEljNZBjSfe46quuOYdEA3eWYKjisLj7zUxWktd2cYTJIuPprM6tIGztWNcLlG5psY3VFSf6FT6UP6R-CHVSYiwAUTyqvOapmel2op9wTOt/.../

https://dw.uptodown.com/dwn/n6TcrLaez2lJMzuHQwkju7L_ja89X8C2Dw2Q32QNObK7E8tKM7Hu8qb9eBUudBKkkUAYFCWC-HZ2w6b4-Ug6RsbnKsYR5zWY_Xbnsh_1y-2uZgi3QTZNrVs4lEzlzYAP/JqiLTgQnC68ffJb8SLzK5JpJyZ9-z265LVMuOjTtCc9h4d4r4Fe1Lf9rYugO4ecWWgs1KPpIlZmJbDsTvLE8eZLleKanc2YcKrhExZdtUMn7e7zCDlRMbLAeT1ocaccP/3IKs1H5LdqcgNEnjAJxhAOH9Z0K9_10x5gEcq8pKqhGpsAetSbcTkxELSxfLb61VK5gzVHCn2FzyLjMUDXGpWNy-MWqnm7-Jm_Q9pirEeARyP8iQ9QCW0FG6UYVeAhvF/.../

http://dw.uptodown.com/dwn/oK5svOdM79g3zo-cTDkVmgCokoOW8BwYeRKuiOjG7-EYRYYvPaXE85-C6vEzRJ0r7u6N7uuv0a0BUW-TyTVblpehtn0FvqwQMVBTwbHhF_AoYtcF0rvg0OdVLOtaciab/N3X3pVUtxSet5EUw7MtLrSNKl99zYkhvF3Ro67zdgM8lVSyoZiHfCa0JuvV2Ff7pnejPfLJhyashdhJU_cd4Um5v64HGSCNF0JfOmRleqdvi5TU3vuXl4Y9w61f_TnTF/NAJziFkaLRJd24m9qRhP4VCT4CsVNsDqV5xC8gftQXsJ2kcgBwbYlLF9Yuc6Mg7lfxBDVKA-RX2KwBuLPv9bl7Gol28ofqAab5muKlFBo1hfizX6mmVauLlol7Khi4AA/.../

http://dw.uptodown.com/dwn/HCbVX8PFEBq_AqKlQj-os74LQcTQtjOJpfSq_K19xHC-SSFkbcCjsVd_Zkf6ZkDbo6xnvpar2jrVqzrETcKGmB-16RxwYmRlD0vxLEbo4f8QrjqoXCbKEdOjCoD53VLI/dRYbjhaJo0hEzSDMmeafYufFlfgikelq3hdY8QNZYU0BtfZO_EcxtEAhFTEqfAosJEaCnWfo8kOB0UXQDgC4p4_96yvSl1tRrKZh_9U9qMgAxWoXPOGb5f2_kK3YQvCo/eUNDRdQzQCU_YXsZ6Ptzn8XBRQo0-VKfZR7SpQXZpiZtItE1rrGccA1unRZy_KsYR310iKjCU_UfIZVS5d5HNMi_Ap44JOnvnm14fyakS-OKljbDB8u1ykjXE46xDjI_/.../

http://dw.uptodown.com/dwn/sa0oeiRy2LvFZ_WXjFZQDgdWPNdWanBx7Bb55wCHO1-58GqXnsteclXemUVjQd8CxN-Bx1bxXESnJRdCRNx9B_UuS1WQYODoat5gyEfN8tNoMHIelCpRV9Kob34CzK9o/LXdFng6fS7R_PuLlpVRtrL9gdjgevKmBUbuasCV7OEaWoMw7duVFDQDF-g_CNjVuIgzuLoXyzwkysFWfvaceQeDeZl7_33da8zbCryd-1xy51O8BusPTn8vxFLgpbKKj/X_tpRnxuDjRzRdZvPRUknPlSf4uAhjveYXyVYvspJJDH7EU5QQ54BXeULHa_NhLh1rAJc4IkHvcxw4epK_xZ8lnymz2NwqUDgiH02AORgoJ6MIMOsu1vAflfjhfGGi85/.../

Scan 2442635_stp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.