home

mp3audiorecorder.exe

MP3 Audio Recorder

GloryTimes Inc.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘MP3AudioRecorder’.
Publisher:
GloryTimes Inc.  (signed and verified)

Product:
MP3 Audio Recorder

Version:
11.0.0.0

MD5:
e9e168d2338a5fc708f045ef6291811a

SHA-1:
5d41b3ddad07a773a40f35f27065c055fe883b91

SHA-256:
174d15c3652aaa5d6fcb5e43142496ff80e7591e40efc25dd49a04722da79649

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:43:40 PM UTC  (today)

File size:
4.7 MB (4,928,800 bytes)

Product version:
11.0.0.0

Copyright:
Copyright(c) 2014 GloryTimes Inc. all right reserved!

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mp3 audio recorder\mp3audiorecorder.exe

Digital Signature
Signed by:
GloryTimes Inc.

Authority:
VeriSign, Inc.

Valid from:
12/26/2013 6:00:00 PM

Valid to:
12/27/2014 5:59:59 PM

Subject:
CN=GloryTimes Inc., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=GloryTimes Inc., L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5C483445E2B0C16B2367B2A55785BBE8

File PE Metadata
Compilation timestamp:
10/9/2014 1:51:49 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:UvugyZyl8twDDGZ2Libox+aZX8KCV+GZNAcsPmedJY45aq66R8D3Pkf/XSFnJB:UvutylAIu2pZX8X7TKJHaq5RWkUH

Entry address:
0x5CE579

Entry point:
E9, 42, 4B, 49, 00, F2, 15, CE, 82, FA, 89, 63, 17, DD, 6C, 68, EA, DD, E3, 12, 87, E4, D2, FA, 51, 80, 29, BB, 15, CF, 61, 90, A0, 12, DA, 02, 59, 14, F8, 7D, 71, 69, 73, 22, 6A, BE, 07, 19, 54, 13, 2F, 12, BC, E4, 53, CD, 71, E5, 3E, 4C, 8A, A1, D2, 46, 16, FA, BC, ED, DF, 69, D5, 81, 8F, 48, 37, 0E, C2, 28, 17, 1F, 37, 5F, 63, 9B, 16, EF, 8F, D3, E5, B9, 06, EF, 43, F7, 91, 09, F9, FD, E7, 1F, FB, 0F, 98, C9, 65, 96, 5D, 67, DC, 16, 5C, 80, 84, 14, A8, 6B, 85, 7E, 24, 5E, 4E, 1A, 72, CD, A0, 1C, B2, FE...
 
[+]

Packer / compiler:
Xtreme-Protector v1.05

Code size:
2.4 MB (2,492,928 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MP3AudioRecorder

Command:
C:\Program Files\mp3 audio recorder\mp3audiorecorder.exe


Scan mp3audiorecorder.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.