Adware.Toolbar.332

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'WebcamMaxAutoRun' = '"%ProgramFiles(x86)%\WebcamMax\wcmmon.exe" -a'
[HKLM\Software\Classes\WebcamMax Effect File\shell\open\command] '' = '"%ProgramFiles(x86)%\WebcamMax\WebcamMax.exe" "%1"'

Sets the following service settings

[HKLM\SYSTEM\CurrentControlSet\Services\WCMVCAM] 'Start' = '00000002'
[HKLM\SYSTEM\CurrentControlSet\Services\WCMVCAM] 'ImagePath' = '<DRIVERS>\wcmvcam64.sys'

Creates the following services

'WCMVCAM' <DRIVERS>\wcmvcam64.sys

Modifies file system

Creates the following files

%TEMP%\aut1597.tmp
%TEMP%\wwulyer
%TEMP%\aut1644.tmp
%TEMP%\webcammax-7.7.7.6setup.exe
%TEMP%\nst1f4c.tmp
%TEMP%\nsj1f5d.tmp\pipinstaller_clm_.exe
%ProgramFiles(x86)%\webcammax\directencode.dll
%ProgramFiles(x86)%\webcammax\shareuploader.exe
%ProgramFiles(x86)%\webcammax\webcammax.exe
%ProgramFiles(x86)%\webcammax\const.dat
%ProgramFiles(x86)%\webcammax\cv100.dll
%ProgramFiles(x86)%\webcammax\cvaux100.dll
%ProgramFiles(x86)%\webcammax\cxcore100.dll
%ProgramFiles(x86)%\webcammax\erdmpg-6.dll
%ProgramFiles(x86)%\webcammax\highgui100.dll
%ProgramFiles(x86)%\webcammax\libguide40.dll
%ProgramFiles(x86)%\webcammax\opencvlicense.txt
%ProgramFiles(x86)%\webcammax\sqlite3.dll
%ProgramFiles(x86)%\webcammax\sul.dat
%ProgramFiles(x86)%\webcammax\vcam.dat
%ProgramFiles(x86)%\webcammax\vwcsource.ax
%ProgramFiles(x86)%\webcammax\vwcsourcep.dll
%ProgramFiles(x86)%\webcammax\wcmhelper.dll
%ProgramFiles(x86)%\webcammax\wcmmon.exe
%ProgramFiles(x86)%\webcammax\wcmvcam.cat
%ProgramFiles(x86)%\webcammax\wcmvcam.exe
%ProgramFiles(x86)%\webcammax\wcmvcam.inf
%ProgramFiles(x86)%\webcammax\wcmvcam.sys
%ProgramFiles(x86)%\webcammax\wcmvcam64.cat
%ProgramFiles(x86)%\webcammax\wcmvcam64.exe
%ProgramFiles(x86)%\webcammax\wcmvcam64.sys
%ProgramFiles(x86)%\webcammax\effects\system\basic\paused.efc
%ProgramFiles(x86)%\webcammax\effects\system\basic\recording.efc
%ProgramFiles(x86)%\webcammax\effects\system\basic\snap.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\angry eyebrows i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\angry eyebrows ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\angry eyebrows iii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\crown for queen.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\eyes - carlight.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\eyes - cat.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\eyes.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\facehugger.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\green lantern.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hair - sassoon i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hair - sassoon ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hair boooo.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hair brown.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hair cool.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\halo.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - army.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - christmas.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - national guard.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - pirate.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - police i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - police ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - pretty.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat - red.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat iii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\hat iv.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\horrible mask.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\mustache - cool .efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\mustache - cute.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\mustache - full.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\mustache.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\sunglasses i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\sunglasses ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\accessories\wonder woman.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\bear sticking tongue out.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\beaver shocked.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\bikini girl running.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\bikini girl shaking hair.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\bikini girl in thought balloon.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\bull fight.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\butterfly fluttering - blue.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\butterfly fluttering - green .efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\crazy jumping frog.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\cupid's arrow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\firing - beretta.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\firing - fully automatic weapon.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\football player running back chasing.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\football player rushing to the line.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\grim reaper slashing.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\magic cake.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\monkey making funny face.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\roach walking.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\star taking a bow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\thumbs down.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\thumbs up.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\animations\yellow guy mad.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\animal - blue water dragon.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\animal - dragons.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\animal - ray.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\animal - shark.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\animal - tyrannosaur.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\dark portal.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\disaster i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\library i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\mushroom cloud.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\nature - forest.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\nature - ice.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\nature - magma.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\nuclear explosion.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\obama.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\us navy seals.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\universe - astronaut.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\universe - earth.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\universe - nebula purple.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\universe - spaceship.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\war - modern i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\war - modern ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\war in the snow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\backgrounds\zombies march.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\16 grids.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\1x10.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\1x7.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\3 in 1.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\4 grids i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\4 grids ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\4 grids iii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\4 to 1.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\9 grids.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\ball i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\ball ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\box - octahedral.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\box.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\double h.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\double i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\double ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\double iii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\fatter.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\mirror.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\paper.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\pinch i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\pinch ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\skew left.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\skew right.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\swirl i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\swirl ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\swirl iii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\thinner.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\tunnel i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\tunnel ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\upside down.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\wave i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\wave ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\wave iii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\wave iv.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\distortions\wave v.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\amazing.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\arrow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\ask.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\axe.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\blood.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\bloody mouth.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\cloud - mushroom.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\cloud.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\cobweb.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\cool.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\crazy.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\crow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\eyes - heart.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\eyes - money.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\flies.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\heart broken.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\hearts.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\hot.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\ice.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\lightning.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\max birds.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\omg.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\red face.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\sad.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\shit.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\sick.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\sleeping.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\snot.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\sorry.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\stars.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\surprise.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\sweating.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\tears.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\emotions\zip.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\1up.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\daniel radcliffe.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\federer.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\halloween avatar.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\jazz.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\johnny depp.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\kim jong.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\kobe bryant.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\kristen stewart.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\lebron james.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\mask - loki.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\mask.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\megan fox.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\michael jackson.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\mr bean.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\nejad.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\obama.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\pumpkin head.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\robert pattinson.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\shia labeouf.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\skeleton.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\skull.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\teddy bear.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\faces\tiger woods.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color black and white.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color blue.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color brighter.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color darker.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color green.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color old picture.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color pink.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color purple.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\color yellow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\emboss gray.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\emboss red.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\film color.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\film mono.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\film purple.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\fire black.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\fire green.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\fire red.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\fire yellow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\line black.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\line green.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\line red i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\line red ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\line white.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\line yellow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\mosaic big.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\mosaic medium.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\mosaic small.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\shadow i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\shadow ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\snow green.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\snow red.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\snow white.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\water gentle.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\water medium.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\filters\water strong.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\animal - monkey.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\batman.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\birthday cake.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\bugs.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\cs i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\cs ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\champion cup.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\clock - dancing girl.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\clock - lcd blue.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\cobweb.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\colorful light.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\comfortable toilet.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\death note.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\flag - canada.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\flag - united states of america.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\ghost girl.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\holding beauty.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\hole in the window.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\jingle frogs.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\lonely tv.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\love - kissing.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\love - wedding ceremony.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\matrix.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\nature - dragonfly.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\nature - gurgle.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\nature - old window.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\nature - rainbow.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\night particle - star trail.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\scaring skull.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\snow couple.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\tap.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\vista.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\frames\wanted poster.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\bbc.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\back mirror.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\big poster.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\billboard.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\cinema.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\dollar.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\keyhole.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\kobe.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\looking.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\mirror i.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\mirror ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\nba mvp.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\news.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\newspaper.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\old movie.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\psp.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\photo.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\picture.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\prison.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\rec.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\red curtain.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\screen ii.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\stadium.efc
%ProgramFiles(x86)%\webcammax\effects7\effects\scenes\iphone.efc
%ProgramFiles(x86)%\webcammax\langs7\english.lan
%ProgramFiles(x86)%\webcammax\langs7\french.lan
%ProgramFiles(x86)%\webcammax\langs7\german.lan
%ProgramFiles(x86)%\webcammax\langs7\nederlands.lan
%ProgramFiles(x86)%\webcammax\langs7\russian.lan
%ProgramFiles(x86)%\webcammax\langs7\simplified chinese.lan
%ProgramFiles(x86)%\webcammax\langs7\traditional chinese.lan
%ProgramFiles(x86)%\webcammax\res\eraser.cur
%ProgramFiles(x86)%\webcammax\res\error.png
%ProgramFiles(x86)%\webcammax\res\eye_8.xml
%ProgramFiles(x86)%\webcammax\res\fill.cur
%ProgramFiles(x86)%\webcammax\res\haarcascade_frontalface_alt.xml
%ProgramFiles(x86)%\webcammax\res\info.mht
%ProgramFiles(x86)%\webcammax\res\pen.cur
%ProgramFiles(x86)%\webcammax\res\stamp.cur
%ProgramFiles(x86)%\webcammax\res\trialnotify.mht
%ProgramFiles(x86)%\webcammax\res\images\categorydefault.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_accessories.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_animations.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_backgrounds.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_custom.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_distortions.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_emotions.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_faces.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_favorites.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_filters.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_frames.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_get more.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_install effects.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_recent.png
%ProgramFiles(x86)%\webcammax\res\images\category_effects_scenes.png
%ProgramFiles(x86)%\webcammax\res\images\led.png
%ProgramFiles(x86)%\webcammax\res\images\about.png
%ProgramFiles(x86)%\webcammax\res\images\logo.png
%ProgramFiles(x86)%\webcammax\res\images\pensize.png
%ProgramFiles(x86)%\webcammax\res\images\photomask.png
%ProgramFiles(x86)%\webcammax\res\images\playlistframe.png
%ProgramFiles(x86)%\webcammax\res\images\playlistloading.png
%ProgramFiles(x86)%\webcammax\res\images\source1.png
%ProgramFiles(x86)%\webcammax\res\images\source2.png
%ProgramFiles(x86)%\webcammax\res\images\source3.png
%ProgramFiles(x86)%\webcammax\res\images\source4.png
%ProgramFiles(x86)%\webcammax\res\images\splash.png
%ProgramFiles(x86)%\webcammax\res\images\templatemask.png
%ProgramFiles(x86)%\webcammax\res\images\videomask.png
%ProgramFiles(x86)%\webcammax\res\images\vwcsource.bmp
%ProgramFiles(x86)%\webcammax\share\fbshare.exe
%ProgramFiles(x86)%\webcammax\share\const.dat
%ProgramFiles(x86)%\webcammax\share\lang\english.lan
%ProgramFiles(x86)%\webcammax\share\reg\iecontext.reg
%ProgramFiles(x86)%\webcammax\share\res\album.png
%ProgramFiles(x86)%\webcammax\share\res\del_icon.png
%ProgramFiles(x86)%\webcammax\share\res\drag.png
%ProgramFiles(x86)%\webcammax\share\res\drag_video.png
%ProgramFiles(x86)%\webcammax\share\res\justonwall.png
%ProgramFiles(x86)%\webcammax\share\res\loggedin.html
%ProgramFiles(x86)%\webcammax\share\res\pic.png
%ProgramFiles(x86)%\webcammax\share\res\pic_gray.png
%ProgramFiles(x86)%\webcammax\share\res\profileview.dat
%ProgramFiles(x86)%\webcammax\share\res\user.png
%ProgramFiles(x86)%\webcammax\share\res\user_icon.png
%ProgramFiles(x86)%\webcammax\share\res\video.png
%ProgramFiles(x86)%\webcammax\share\res\video_gray.png
%ProgramFiles(x86)%\webcammax\share\res\video_icon.png
%ProgramFiles(x86)%\webcammax\share\skins\default.skn
%ProgramFiles(x86)%\webcammax\skins7\black ultrafx2.skn
%ProgramFiles(x86)%\webcammax\skins7\black imetal.skn
%ProgramFiles(x86)%\webcammax\skins7\blue charm.skn
%ProgramFiles(x86)%\webcammax\skins7\blue superiority.skn
%ProgramFiles(x86)%\webcammax\skins7\brown ampix2.skn
%ProgramFiles(x86)%\webcammax\skins7\default.skn
%ProgramFiles(x86)%\webcammax\skins7\gray toplevel.skn
%ProgramFiles(x86)%\webcammax\skins7\gray imetal.skn
%ProgramFiles(x86)%\webcammax\skins7\gray itmode.skn
%ProgramFiles(x86)%\webcammax\skins7\green option.skn
%ProgramFiles(x86)%\webcammax\skins7\orange powerform.skn
%ProgramFiles(x86)%\webcammax\skins7\pink brilliant.skn
%ProgramFiles(x86)%\webcammax\stamps\st13.png
%ProgramFiles(x86)%\webcammax\stamps\st14.png
%ProgramFiles(x86)%\webcammax\stamps\st15.png
%ProgramFiles(x86)%\webcammax\stamps\st16.png
%ProgramFiles(x86)%\webcammax\stamps\st17.png
%ProgramFiles(x86)%\webcammax\stamps\st18.png
%ProgramFiles(x86)%\webcammax\stamps\st19.png
%ProgramFiles(x86)%\webcammax\stamps\st20.png
%ProgramFiles(x86)%\webcammax\stamps\st21.png
%ProgramFiles(x86)%\webcammax\stamps\st22.png
%ProgramFiles(x86)%\webcammax\stamps\st23.png
%ProgramFiles(x86)%\webcammax\stamps\st24.png
%ProgramFiles(x86)%\webcammax\stamps\st25.png
%ProgramFiles(x86)%\webcammax\stamps\st26.png
%ProgramFiles(x86)%\webcammax\stamps\st27.png
%ProgramFiles(x86)%\webcammax\stamps\st28.png
%ProgramFiles(x86)%\webcammax\stamps\st29.png
%ProgramFiles(x86)%\webcammax\stamps\st30.png
%ProgramFiles(x86)%\webcammax\stamps\st31.png
%ProgramFiles(x86)%\webcammax\stamps\st32.png
%ProgramFiles(x86)%\webcammax\stamps\st01.png
%ProgramFiles(x86)%\webcammax\stamps\st02.png
%ProgramFiles(x86)%\webcammax\stamps\st03.png
%ProgramFiles(x86)%\webcammax\stamps\st04.png
%ProgramFiles(x86)%\webcammax\stamps\st05.png
%ProgramFiles(x86)%\webcammax\stamps\st06.png
%ProgramFiles(x86)%\webcammax\stamps\st07.png
%ProgramFiles(x86)%\webcammax\stamps\st08.png
%ProgramFiles(x86)%\webcammax\stamps\st09.png
%ProgramFiles(x86)%\webcammax\stamps\st10.png
%ProgramFiles(x86)%\webcammax\stamps\st11.png
%ProgramFiles(x86)%\webcammax\stamps\st12.png
%ProgramFiles(x86)%\webcammax\stamps\st33.png
%ProgramFiles(x86)%\webcammax\stamps\st34.png
%ProgramFiles(x86)%\webcammax\stamps\st35.png
%ProgramFiles(x86)%\webcammax\stamps\st36.png
%ProgramFiles(x86)%\webcammax\stamps\st37.png
%ProgramFiles(x86)%\webcammax\stamps\st38.png
%ProgramFiles(x86)%\webcammax\stamps\st39.png
%ProgramFiles(x86)%\webcammax\stamps\st40.png
%ProgramFiles(x86)%\webcammax\stamps\st41.png
%ProgramFiles(x86)%\webcammax\stamps\st42.png
%ProgramFiles(x86)%\webcammax\stamps\st43.png
%ProgramFiles(x86)%\webcammax\stamps\st44.png
%ProgramFiles(x86)%\webcammax\stamps\st45.png
%ProgramFiles(x86)%\webcammax\stamps\st46.png
%ProgramFiles(x86)%\webcammax\stamps\st47.png
%ProgramFiles(x86)%\webcammax\stamps\st48.png
%ProgramFiles(x86)%\webcammax\stamps\data\st13.png
%ProgramFiles(x86)%\webcammax\stamps\data\st14.png
%ProgramFiles(x86)%\webcammax\stamps\data\st15.png
%ProgramFiles(x86)%\webcammax\stamps\data\st16.png
%ProgramFiles(x86)%\webcammax\stamps\data\st17.png
%ProgramFiles(x86)%\webcammax\stamps\data\st18.png
%ProgramFiles(x86)%\webcammax\stamps\data\st19.png
%ProgramFiles(x86)%\webcammax\stamps\data\st20.png
%ProgramFiles(x86)%\webcammax\stamps\data\st21.png
%ProgramFiles(x86)%\webcammax\stamps\data\st22.png
%ProgramFiles(x86)%\webcammax\stamps\data\st23.png
%ProgramFiles(x86)%\webcammax\stamps\data\st24.png
%ProgramFiles(x86)%\webcammax\stamps\data\st25.png
%ProgramFiles(x86)%\webcammax\stamps\data\st26.png
%ProgramFiles(x86)%\webcammax\stamps\data\st27.png
%ProgramFiles(x86)%\webcammax\stamps\data\st28.png
%ProgramFiles(x86)%\webcammax\stamps\data\st29.png
%ProgramFiles(x86)%\webcammax\stamps\data\st30.png
%ProgramFiles(x86)%\webcammax\stamps\data\st31.png
%ProgramFiles(x86)%\webcammax\stamps\data\st01.png
%ProgramFiles(x86)%\webcammax\stamps\data\st02.png
%ProgramFiles(x86)%\webcammax\stamps\data\st03.png
%ProgramFiles(x86)%\webcammax\stamps\data\st04.png
%ProgramFiles(x86)%\webcammax\stamps\data\st05.png
%ProgramFiles(x86)%\webcammax\stamps\data\st06.png
%ProgramFiles(x86)%\webcammax\stamps\data\st07.png
%ProgramFiles(x86)%\webcammax\stamps\data\st08.png
%ProgramFiles(x86)%\webcammax\stamps\data\st09.png
%ProgramFiles(x86)%\webcammax\stamps\data\st10.png
%ProgramFiles(x86)%\webcammax\stamps\data\st11.png
%ProgramFiles(x86)%\webcammax\stamps\data\st12.png
%ProgramFiles(x86)%\webcammax\stamps\data\st32.png
%ProgramFiles(x86)%\webcammax\stamps\data\st33.png
%ProgramFiles(x86)%\webcammax\stamps\data\st34.png
%ProgramFiles(x86)%\webcammax\stamps\data\st35.png
%ProgramFiles(x86)%\webcammax\stamps\data\st36.png
%ProgramFiles(x86)%\webcammax\stamps\data\st37.png
%ProgramFiles(x86)%\webcammax\stamps\data\st38.png
%ProgramFiles(x86)%\webcammax\stamps\data\st39.png
%ProgramFiles(x86)%\webcammax\stamps\data\st40.png
%ProgramFiles(x86)%\webcammax\stamps\data\st41.png
%ProgramFiles(x86)%\webcammax\stamps\data\st42.png
%ProgramFiles(x86)%\webcammax\stamps\data\st43.png
%ProgramFiles(x86)%\webcammax\stamps\data\st44.png
%ProgramFiles(x86)%\webcammax\stamps\data\st45.png
%ProgramFiles(x86)%\webcammax\stamps\data\st46.png
%ProgramFiles(x86)%\webcammax\stamps\data\st47.png
%ProgramFiles(x86)%\webcammax\stamps\data\st48.png
%ProgramFiles(x86)%\webcammax\ran\vistalib32.dll
%ProgramFiles(x86)%\webcammax\ran\vistalib64.dll
%ProgramFiles(x86)%\webcammax\ran\ran.exe
%WINDIR%\inf\c_media.pnf
%TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\set3f66.tmp
%TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\set3f77.tmp
%TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\set3f78.tmp
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
%WINDIR%\inf\oem3.pnf
%ProgramFiles(x86)%\webcammax\privacy policy.url
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\webcammax\webcammax.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\webcammax\help.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\webcammax\webcammax site.url
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\webcammax\purchase webcammax.url
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\webcammax\privacy policy.url
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\webcammax\uninstall webcammax.lnk
C:\users\public\desktop\webcammax.lnk
%ProgramFiles(x86)%\webcammax\videodecorder\config.ini
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ff_liba52.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ff_libdts.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ff_libfaad2.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ff_libmad.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ff_samplerate.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ffdshow.ax
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ffdshow.ax.manifest
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\ffmpegmt.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\gnu_license.txt
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\libavcodec.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\libmpeg2_ff.dll
%ProgramFiles(x86)%\webcammax\videodecorder\decorder\libmplayer.dll
%ProgramFiles(x86)%\webcammax\videodecorder\splitter\flvsplitter.ax
%ProgramFiles(x86)%\webcammax\videodecorder\splitter\mp4splitter.ax
%ProgramFiles(x86)%\webcammax\videodecorder\splitter\matroskasplitter.ax
%ProgramFiles(x86)%\webcammax\videodecorder\splitter\mpegsplitter.ax
%ProgramFiles(x86)%\webcammax\videodecorder\splitter\realmediasplitter.ax
%ProgramFiles(x86)%\webcammax\uninst.exe
%TEMP%\aut6d8c.tmp
%TEMP%\aut6dfb.tmp
%TEMP%\aut6e2b.tmp
%TEMP%\wbcn88setting.dat
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-695426f7-ed8.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-695426f9-1170.pma
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
%LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\log
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
%LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
%LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal

Sets the 'hidden' attribute to the following files

<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat

Deletes following files that it created itself

%TEMP%\aut1597.tmp
%TEMP%\wwulyer
%TEMP%\aut1644.tmp
%TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\wcmvcam.inf
%TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\wcmvcam64.cat
%TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\wcmvcam64.sys
%TEMP%\nsj1f5d.tmp\pipinstaller_clm_.exe
%TEMP%\webcammax-7.7.7.6setup.exe
%TEMP%\aut6d8c.tmp
%TEMP%\aut6dfb.tmp
%TEMP%\aut6e2b.tmp
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001

Moves the following files

from %TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\set3f66.tmp to %TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\wcmvcam.inf
from %TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\set3f77.tmp to %TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\wcmvcam64.cat
from %TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\set3f78.tmp to %TEMP%\{64546bb2-b69e-df43-84da-89ba010a0547}\wcmvcam64.sys
from <SYSTEM32>\catroot2\edbtmp.log to <SYSTEM32>\catroot2\edb.log
from %TEMP%\wbcn88setting.dat to %ALLUSERSPROFILE%\webcammax\setting.dat
from %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current

Modifies the following files

%LOCALAPPDATA%\microsoft\edge\user data\last version
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
%LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\web data
%LOCALAPPDATA%\microsoft\edge\user data\default\visited links
%LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
%LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
%LOCALAPPDATA%\microsoft\edge\user data\default\history
%TEMP%\.ses

Substitutes the following files

%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG

Network activity

Connects to

'co####.edge.skype.com':443
'cl#####.webcammax.net':80
'we###mmax.com':80

TCP

HTTP GET requests

http://cl#####.webcammax.net/client/?PI####################################################################
http://www.we###mmax.com/templates/rt_infuse_j15/js/rokutils.js

Other

'co####.edge.skype.com':443

UDP

DNS ASK co####.edge.skype.com
DNS ASK cl#####.webcammax.net
DNS ASK we###mmax.com

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: ''
ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'

Creates and executes the following

'%TEMP%\webcammax-7.7.7.6setup.exe' /S
'%TEMP%\nsj1f5d.tmp\pipinstaller_clm_.exe' -b -pid CLM
'%ProgramFiles(x86)%\webcammax\wcmvcam.exe' /i
'%ProgramFiles(x86)%\webcammax\wcmvcam64.exe' /i /f wcmvcam.inf

Executes the following

'<SYSTEM32>\svchost.exe' -k DcomLaunch -p -s DeviceInstall
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument http://client7.webcammax.net/client/?PID=WCM&ACTION=installed&IVER=7.#.7.6.MultiLanguage&ILAN=MultiLanguage
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://client7.webcammax.net/client/?PID=WCM&ACTION=installed&IVER=7.#.7.6.MultiLanguage&ILAN=MultiLanguage
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://client7.webcammax.net/client/?PID=WCM&ACTION=installed&IVER=7.#.7.6.MultiLanguage&ILAN=MultiLanguage' (with hidden window)

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial