home

EyeFiReceiver.exe

EyeFiReceiver

Eye-Fi, Inc

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Eye-Fi’.
Publisher:
Eye-Fi, Inc  (signed and verified)

Product:
EyeFiReceiver

Version:
5.13.0.134

MD5:
d9e555d6e349e8f8f52a8af083785121

SHA-1:
24e99d7c10da3b0dc1189cc30c6ac8a4d73c451f

SHA-256:
11e012973cdc6505e22dd61af5ac7ea9c16b5a5123f03a32c31cc8d6823c681a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:48:16 PM UTC  (today)

File size:
4.9 MB (5,159,200 bytes)

Product version:
5.13.0.134

Copyright:
Copyright © 2014

Original file name:
EyeFiReceiver.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\eye-fi\eyefireceiver.exe

Digital Signature
Signed by:
Eye-Fi, Inc

Authority:
thawte, Inc.

Valid from:
1/21/2015 8:00:00 AM

Valid to:
1/21/2017 7:59:59 AM

Subject:
CN="Eye-Fi, Inc", OU=Desktop Software Development, O="Eye-Fi, Inc", L=Mountain View, S=California, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2DEA232DFCEC2736E7F49F25AE47E247

File PE Metadata
Compilation timestamp:
11/18/2016 12:25:04 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
48.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:eOy12ER/6oSbjR9JHUqbSVZJxIWqOTl6EbVy:ez0t/r+NIWnl6sVy

Entry address:
0x47A856

Entry point:
FF, 25, 00, 20, 40, 00, 12, 34, 56, 78, 90, AB, CD, EF, 1C, 31, 2A, 14, 02, 26, 1A, 05, 15, 2C, 12, 29, 17, 13, 21, 09, 0F, 1E, 18, 08, 2E, 01, 0B, 03, 0C, 1F, 19, 04, 0E, 2F, 1B, 11, 0A, 07, 23, 00, 2B, 25, 30, 06, 20, 24, 16, 2D, 1D, 22, 10, 28, 27, 0D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.5670

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4.5 MB (4,688,384 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Eye-Fi

Command:
C:\Program Files\eye-fi\eyefireceiver.exe


Scan EyeFiReceiver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.