The tool is only published at https://github.com/JRDevo/VR-EyeCapture (Releases page). Copies from any other site are not mine; do not run them.
If you find a security problem (for example in the layer DLL, the tray's registration step, or a bundled third-party part), please open an issue and mark it [Security] in the title. If it should not be public, say so in the issue without details and I will reply with a private channel.