The visualcam exe WISE Software Solutions, Inc File Malware Analysis

The visualcam.exe File Analysis

Updated 3 days ago

Checked by Malware Check

visualcam.exe

Hash Type	Value	Action
MD5	a728625f6a3c76672a3cdb9e05d42d80
SHA1	bc8fd5196d20540639a1cc5c6e15c4170119c37b
SHA256	cd7143afc6fa282bf877ed8b4d6262a805f4fedd384d7423f3e7084a9ee1658c
SHA512	e872c2cf3114b3e989a60770dee4542ce045a8c98526890df98bb6ad93ad1e121dc48be14045e63187bb319af38526592da5933e742cc18da25449e0ddca6ad0
ImpHash	67cfec3c3bb58476a1968a7da30c9e98

Hash Type

Value

Action

MD5

a728625f6a3c76672a3cdb9e05d42d80

SHA1

bc8fd5196d20540639a1cc5c6e15c4170119c37b

SHA256

cd7143afc6fa282bf877ed8b4d6262a805f4fedd384d7423f3e7084a9ee1658c

SHA512

e872c2cf3114b3e989a60770dee4542ce045a8c98526890df98bb6ad93ad1e121dc48be14045e63187bb319af38526592da5933e742cc18da25449e0ddca6ad0

ImpHash

67cfec3c3bb58476a1968a7da30c9e98

PE Analysis

Basic Information

▼

Icon	Hash: bdb27dd80cfb08c4d0db17ecd400be5c Fuzzy: 182d7c9d8aef42176cebd559904a3dd2 dHash: ccbb4d686a33b3e8
Image Base	`0x140000000`
Entry Point	`0x1421a22f0`
Compilation Time	2024-10-24 00:10:40
Checksum	0x00fe3067 (Actual: 0x00a04e4d)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	45 libraries
Exports	1121 functions
Resources	935 Resources
Sections	11 Sections

Version Information

▼

CompanyName	WISE Software Solutions, Inc.
FileDescription	VisualCAM Executable
FileVersion	16.9.150.0
InternalName	VisualCAM
LegalCopyright	Copyright © 1989-2024 WISE Software Solutions, Inc.
LegalTrademarks	VisualCAM, GerbTool, esiCAM, LaserViaCAM and WiseView are trademarks of WISE Software Solutions, Inc.
OriginalFilename	VisualCAM.exe
ProductName	WISE Software VisualCAM
ProductVersion	16.9.0.0
Translation	0x0409 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
	`0x00001000`	9,203,712 bytes	3,809,792 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`0682B2FCB14D29FDFECECA691F3DB54C`
	`0x008c8000`	1,196,032 bytes	328,704 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D12CF5DBB0EEBA424B3882760F827963`
	`0x009ec000`	3,923,968 bytes	1,208,832 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`75E1B20C37061ECFC94094A873B3FC82`
	`0x00daa000`	1,634,304 bytes	307,712 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`9CC81F4076E7B2893A2E4D44B19F835E`
	`0x00f39000`	479,232 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
	`0x00fae000`	4,096 bytes	512 bytes	0.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`E7501D42729B86D447F5628421200528`
	`0x00faf000`	4,096 bytes	512 bytes	0.18 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`9692BECD1255FA8920F5E6AF02B66C58`
	`0x00fb0000`	913,408 bytes	104,960 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F821337B99FD6CB9478057EFC44A9CB7`
`.rsrc`	`0x0108f000`	552,960 bytes	550,912 bytes	4.57 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`16AAD6222164D7FDB2C433400F1B6120`
	`0x01116000`	13,516,800 bytes	304,128 bytes	8.00 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`A15EE5CCC8AD16A17DF77A460DCFA8B4`
	`0x01dfa000`	3,842,048 bytes	3,841,536 bytes	7.89 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`99D7D5520A53C81391CA7B8458882CCF`

Entropy Analysis Alert

7 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 935 (862,906 bytes)

Resource Type	Count	Total Size	Percentage
AFX_DIALOG_LAYOUT	61	122 bytes	0%
RT_CURSOR	10	3,136 bytes	0.4%
RT_BITMAP	81	328,800 bytes	38.1%
RT_ICON	144	150,774 bytes	17.5%
RT_MENU	5	21,862 bytes	2.5%
RT_DIALOG	370	290,136 bytes	33.6%
RT_STRING	89	57,730 bytes	6.7%
RT_ACCELERATOR	1	48 bytes	0%
RT_GROUP_CURSOR	7	182 bytes	0%
RT_GROUP_ICON	134	2,820 bytes	0.3%
RT_VERSION	1	1,092 bytes	0.1%
RT_MANIFEST	1	798 bytes	0.1%
None	31	5,406 bytes	0.6%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	visualcam.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.223.174
Database Version	2025-08-24 10:00:41 UTC

The visualcam.exe File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification