win-recorder.exe

win-recorder

YouEye, Inc.

Publisher:
YouEye, Inc.  (signed and verified)

Product:
win-recorder

Version:
1.0.0.0

MD5:
08b22149c85f404b9549400dd927bb58

SHA-1:
f3f29aaeaf9355b74a192b7c034758b2a988f8d5

SHA-256:
3bd6ef2b9a39fc1dee161875a7e9410a919e3e4441a0ca7f21c2c87bbb55a7be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 5:51:34 PM UTC  (today)

File size:
2.4 MB (2,473,656 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
win-recorder.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\apps\2.0\0vpjdmvq.xcl\3rdylpew.6xt\win-...app_69caea2af895454b_0001.0002_22274ca3f0f352c7\win-recorder.exe

Digital Signature
Signed by:

Authority:
thawte, Inc.

Valid from:
9/16/2015 5:30:00 AM

Valid to:
11/15/2016 5:29:59 AM

Subject:
CN="YouEye, Inc.", O="YouEye, Inc.", L=Mountain View, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
7A2831F8731B3A40B6FE3D4ECBCAB3AD

File PE Metadata
Compilation timestamp:
9/26/2015 2:21:40 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:KAqEC2CB7mnCYIRcucwZGEDBjRy0txeCYIRcAyr6heOWBkhBOVoWy7m:KAqEC2CBgCWubYCWAywe7kWy

Entry address:
0x205A4E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9801

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
2 MB (2,112,512 bytes)

Scan win-recorder.exe - Powered by Reason Core Security