» capturewiz.exe
Overview
Analysis
File Details

capturewiz.exe

CaptureWizPro

PixelMetrics

File name:

capturewiz.exe

Publisher:

PixelMetrics (signed and verified)

Product:

CaptureWizPro

Description:

CaptureWiz Pro application file

Version:

5.4.2.0

MD5:

6e7b5bb4fd3dbc70dc9c1b2090fcbed3

SHA-1:

3e884f09545c871195995262ecda1b900f243994

SHA-256:

d9acfa794c858c0523415f222de9e8f2d2bdf1723f2ab777c28264e98eed2cb6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/8/2024 7:33:04 AM UTC (today)

File size:

4.9 MB (5,165,680 bytes)

Product version:

1.0.0.0

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\{random}.tmp\capturewiz.exe

Digital Signature

Signed by:

PixelMetrics

Authority:

COMODO CA Limited

Valid from:

2/25/2015 12:00:00 AM

Valid to:

2/25/2020 11:59:59 PM

Subject:

CN=PixelMetrics, O=PixelMetrics, STREET=2250 S Joliet Way, L=Aurora, S=CO, PostalCode=80014, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

774A8157A4C3AA02779E33FFBEED5820

File PE Metadata

Compilation timestamp:

6/29/2015 3:41:11 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:Pfrw0r26dEoSXFXYmp/XefZ4RxQVUVpZsJ5hoWRxup8C20Ia+jTpxV+NTVddxeBV:rXep/GDVUVpZsPhTa8++522T3

Entry address:

0x31EBCC

Entry point:

55, 8B, EC, B9, 05, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, B8, 64, 0F, 71, 00, E8, 2B, C6, CE, FF, 33, C0, 55, 68, 4B, EE, 71, 00, 64, FF, 30, 64, 89, 20, A1, 28, B4, 72, 00, 8B, 00, E8, E5, CE, DF, FF, 8D, 55, E8, B8, 01, 00, 00, 00, E8, 0C, 5B, CE, FF, 8B, 45, E8, 8D, 55, EC, E8, D9, 64, CF, FF, 8B, 55, EC, B8, 70, 3F, 7B, 00, E8, B4, 89, CE, FF, 33, C0, 55, 68, 29, EE, 71, 00, 64, FF, 30, 64, 89, 20, A1, 70, 3F, 7B, 00, BA, 64, EE, 71, 00, E8, 1F, 91, CE, FF, 75, 2E, A1, 28, B4, 72, 00, 8B, 00, BA, 7C... 
[+]

Entropy:

6.3640

Developed / compiled with:

Microsoft Visual C++

Code size:

3.1 MB (3,268,096 bytes)

Scan capturewiz.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.