home

cexpert.exe

CryptoExpert Professional

SecureAction Research LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘cryptoexpert’.
Publisher:
SecureAction Research, LLC  (signed by SecureAction Research LLC)

Product:
CryptoExpert Professional

Version:
2, 0, 0, 3046

MD5:
2741b83234431ab04b8226ec96aa6048

SHA-1:
5fefbb14c182f5ae502597388802ba726c1bc8f9

SHA-256:
e6f63863fc2bd6bb30dc0b989b6d642ae8987a06242485c101799bd6fb498e9a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:38:38 PM UTC  (a few moments ago)

File size:
1.2 MB (1,253,648 bytes)

Product version:
2, 0, 0, 3046

Trademarks:
(C) Copyrigt SecureAction Research, LLC

Original file name:
cexpert.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\cryptoexpert 2007 pro\cexpert.exe

Digital Signature
Signed by:
SecureAction Research LLC

Authority:
GlobalSign nv-sa

Valid from:
1/24/2007 7:33:56 PM

Valid to:
1/24/2008 7:33:56 PM

Subject:
E=support@secureaction.com, CN=SecureAction Research LLC, O=SecureAction Research LLC, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000110546B8203

File PE Metadata
Compilation timestamp:
4/13/2007 11:52:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

Entry address:
0x1000

Entry point:
68, 01, B0, 5B, 00, E8, 01, 00, 00, 00, C3, C3, 11, 39, 02, 3C, 46, 24, 34, 69, 99, 4A, 4F, A3, DA, 06, 8F, 99, EB, 78, F8, 95, 70, 0E, EF, 89, D3, 25, 47, F5, 39, CE, 3A, 57, 1A, 3F, 7F, 10, 25, AC, EB, 24, F5, E4, FE, 43, 69, 20, 63, 7F, 51, 4D, 36, C2, 88, F8, 63, 77, 3D, 3E, D6, 51, 0B, 33, 13, E9, B0, 13, 89, B2, D0, BF, 8E, CF, D2, 28, 05, FB, 33, 1E, F7, 64, 6D, 64, DD, AB, 1A, 46, 8A, 6C, 92, 51, F0, 46, DE, 80, C6, B6, AB, 6D, 36, 30, 25, AB, 9A, 63, C4, 8B, 6F, 4B, 36, 1A, A9, 3E, 37, 92, 12, 1D...
 
[+]

Entropy:
7.0068

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
984 KB (1,007,616 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
cryptoexpert

Command:
"C:\Program Files\cryptoexpert 2007 pro\cexpert.exe" \t


Scan cexpert.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.