» trackir5.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

trackir5.exe

TrackIR 5.2.0.1

NaturalPoint, Inc

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘NaturalPoint’. This is installed with TrackIR 5.

File name:

trackir5.exe

Publisher:

NaturalPoint, Inc. (signed by NaturalPoint, Inc)

Product:

TrackIR 5.2.0.1

Description:

TrackIR 5.2.0.100

Version:

5.2.0.100

MD5:

7308a6a8cbd4aeb1832767a9aeed9809

SHA-1:

5427862b1638597f8444a8787deacba2f596bd7a

SHA-256:

c41e412f792ac7922d942f1a8d5704b363f7b1ae020cbd25f2bf6a4fb02937e0

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 2:13:11 PM UTC (today)

File size:

12.4 MB (12,972,224 bytes)

Product version:

5.2.0.100

Original file name:

TrackIR.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\naturalpoint\trackir5\trackir5.exe

Digital Signature

Signed by:

NaturalPoint, Inc

Authority:

GlobalSign nv-sa

Valid from:

11/9/2012 2:04:58 PM

Valid to:

2/9/2016 2:04:58 PM

Subject:

E=support@naturalpoint.com, CN="NaturalPoint, Inc", OU=Support, O="NaturalPoint, Inc", L=Corvallis, S=Oregon, C=US

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11216488A7CF53385ECD1C0736232C95B710

File PE Metadata

Compilation timestamp:

12/19/2012 2:24:29 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

196608:b8ezYg/gHKWJ3c9Omlv7kUm9uQ8s5XaFKrcI3QhmGc1771:hYg/gRJ+qks5aj8V1X1

Entry address:

0x2A512E

Entry point:

E8, CF, CB, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 64, 83, 7D, 08, 00, 75, 13, E8, F5, 7C, 00, 00, 6A, 16, 5E, 89, 30, E8, C9, CD, 00, 00, 8B, C6, EB, 4B, 83, 7D, 10, 00, 74, 19, 39, 75, 0C, 72, 14, 8D, 04, 36, 50, FF, 75, 10, FF, 75, 08, E8, 24, 0F, 00, 00, 83, C4, 0C, EB, C4, FF, 75, 0C, 6A, 00, FF, 75, 08, E8, D2, 82, DA, FF, 83, C4, 0C, 83, 7D, 10, 00, 74, B8, 39, 75, 0C, 73, 0E, E8, A8, 7C, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, AF, 6A, 16, 58, 5E... 
[+]

Entropy:

6.8901

Code size:

4.3 MB (4,486,144 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

NaturalPoint

Command:

C:\Program Files\naturalpoint\trackir5\trackir5.exe

The file trackir5.exe has been discovered within the following program.

TrackIR 5 by NaturalPoint

www.TrackIR.com

About 1% of users remove it

Scan trackir5.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.