home

saverecords.exe

Mediawave Corporation

Publisher:
Mediawave Corporation  (signed and verified)

Version:
1.0.0.0

MD5:
e0079961bf371082b35dfd23d88226d0

SHA-1:
745e5039559433a2b033f5649112cdc6e352c7d8

SHA-256:
3c76c610fc849b0116a6dd8e7484a352f20225366625e3d81b9dcd2cce63983b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 5:24:46 PM UTC  (today)

File size:
1.5 MB (1,605,128 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Application data\mediawave\himytv\saverecords.exe

Digital Signature
Signed by:
Mediawave Corporation

Authority:
Thawte, Inc.

Valid from:
7/29/2013 9:00:00 AM

Valid to:
8/29/2014 8:59:59 AM

Subject:
CN=Mediawave Corporation, O=Mediawave Corporation, L=Seongnam-si, S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
57F6127244941D42A89BBD9403FA5ED8

File PE Metadata
Compilation timestamp:
12/2/2013 5:13:14 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:KKS3kpYUAd+hmAxRMGWJHCQHMVtnr6w1BsS30/u3JzjHdSC4m7j86TseBoU5k:XcfYJxQw71+SkoHBT/BoU5k

Entry address:
0x157490

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, B8, E8, F1, 54, 00, E8, E2, 35, EB, FF, 68, 78, 75, 55, 00, 6A, FF, 6A, 00, E8, 78, 5B, EB, FF, 8B, D8, 85, DB, 74, 76, E8, 75, 5C, EB, FF, 85, C0, 75, 6D, A1, 84, F4, 55, 00, 8B, 00, E8, 85, 3D, F5, FF, A1, 84, F4, 55, 00, 8B, 00, C6, 40, 5F, 00, A1, 84, F4, 55, 00, 8B, 00, B2, 01, E8, 68, 59, F5, FF, 33, C0, E8, 39, 25, FA, FF, BA, BC, 75, 55, 00, A1, A0, 90, 4E, 00, E8, 5A, 22, FA, FF, 8B, D0, A1, A0, 90, 4E, 00, E8, 6E, 26, FA, FF, 8B, 0D, E8, F2, 55, 00, A1, 84, F4, 55...
 
[+]

Entropy:
6.5781

Developed / compiled with:
Microsoft Visual C++

Code size:
1.3 MB (1,399,808 bytes)

Windows Firewall Allowed Program
Name:
C:\Documents and Settings\All Users\Application Data\Mediawave\HiMyTv\SaveRecords.exe


Scan saverecords.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.