home

crc32.exe

Alchemy Mindworks

Publisher:
Alchemy Mindworks  (signed and verified)

MD5:
e551572b40455eb55c383fbda13a9a36

SHA-1:
015b1f8b5de7390a06fb5e3d4e539ec62c099fde

SHA-256:
dfe3c2688dcb5e867dd889e3fdfccb725210bd1d69e3cde76f17fffa08cc2318

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 11:26:31 AM UTC  (today)

File size:
461.4 KB (472,432 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\crc32.exe

Digital Signature
Signed by:
Alchemy Mindworks

Authority:
The USERTRUST Network

Valid from:
8/12/2009 5:00:00 PM

Valid to:
8/13/2011 4:59:59 PM

Subject:
CN=Alchemy Mindworks, O=Alchemy Mindworks, STREET=Box 5200, L=Huntsville, S=Ontario CANADA, PostalCode=P1H 2K6, C=CA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00AC9C102E3FE0A28A7231267D93BC5AE7

File PE Metadata
Compilation timestamp:
11/19/2011 3:34:29 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
6144:X4lpSs3S1TiDiNhcPTUZO1Vugdk5FxE44L7o+yx59dsvOgOJgCw1:St3S1FNhcAZO1gEkuiTdsvDV5

Entry address:
0x1000

Entry point:
A1, 5A, 20, 43, 00, C1, E0, 02, A3, 5E, 20, 43, 00, 57, 51, 33, C0, BF, A0, DE, 43, 00, B9, E8, BD, 44, 00, 3B, CF, 76, 05, 2B, CF, FC, F3, AA, 59, 5F, 64, 67, 8B, 16, 04, 00, 89, 15, 6E, 20, 43, 00, 8B, 42, F8, A3, 66, 20, 43, 00, 8B, 42, FC, A3, 6A, 20, 43, 00, 83, EA, 04, 89, 15, F8, 89, 44, 00, 83, EA, 04, 3B, D4, 73, 02, 8B, E2, 6A, 00, E8, 7F, 89, 02, 00, 59, 68, 2C, 20, 43, 00, 6A, 00, E8, AD, FE, 02, 00, A3, 62, 20, 43, 00, 6A, 00, E9, 28, ED, 02, 00, E9, 43, 8A, 02, 00, 00, 00, 00, 55, 8B, EC, 83...
 
[+]

Entropy:
6.8254

Code size:
194 KB (198,656 bytes)

The file crc32.exe has been seen being distributed by the following URL.

http://crc9.software.informer.com/.../

Scan crc32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.