home

screencap.exe

tianjin zhongge technology Co.,Ltd.

Publisher:
天津市中格科技有限公司  (signed by tianjin zhongge technology Co.,Ltd.)

Description:
通用屏幕录像软件

Version:
5.52.0.0

MD5:
6813d5f5b059c5e348b50805d99d23c4

SHA-1:
f6406a058b622ddc1b46987909a3ef09a244615b

SHA-256:
71327279e0fe0cae7a1a2d06b4f616904b3cb2d7bfb12d7ad94696e6cf4975b9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 10:57:48 AM UTC  (today)

File size:
2.2 MB (2,313,544 bytes)

Product version:
5.52.0.0

Copyright:
QQ视频录像大师

Trademarks:
QQ视频录像大师

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\screencap\screencap.exe

Digital Signature
Signed by:
tianjin zhongge technology Co.,Ltd.

Authority:
VeriSign, Inc.

Valid from:
5/25/2012 8:00:00 AM

Valid to:
5/26/2015 7:59:59 AM

Subject:
CN="tianjin zhongge technology Co.,Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="tianjin zhongge technology Co.,Ltd.", L=tianjin, S=tianjin, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
559558BBB61D1F0A9E251E6726ED1254

File PE Metadata
Compilation timestamp:
2/28/2014 1:09:16 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:UFWroU7jHz6hcc8zggLb1n0XH3dq8pjMOwKxN:UFWroKT6hcfn0XH3Y8pjMOJf

Entry address:
0x48FB02

Entry point:
68, 3D, E6, D2, 0F, E8, 66, 55, 1F, 00, 68, 3D, E7, 92, 03, E8, 26, 6D, 1F, 00, C0, 14, 68, 3D, F8, 50, BF, E8, 79, 69, 1F, 00, 66, 63, CE, 68, 3D, E5, B6, 37, E8, 43, 55, 1F, 00, B3, 23, 00, 00, 45, 78, 69, 74, 50, 72, 6F, 63, 65, 73, 73, 00, 9E, 6C, 47, B8, DA, 6D, 83, 5A, 49, E0, 98, 59, A3, E7, 8B, 66, 25, E0, BE, 74, FF, E8, 53, 22, 78, 9B, EB, 07, CC, 21, BE, A4, DA, BB, 84, 17, 69, B3, C7, 2C, 65, 2C, A4, 3E, 44, 22, B3, C2, E7, 9C, DA, BB, 85, 72, B3, 84, BC, 6A, B1, C4, F1, 46, A6, B0, C4, C6, F2...
 
[+]

Entropy:
7.9110  (probably packed)

Code size:
6.5 MB (6,838,784 bytes)

Scan screencap.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.