home

crypticdisk.exe

Exlade Cryptic Disk

Software Security Systems ChTUP

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘ExladeCrypticDisk5’.
Publisher:
Software Security Systems ChTUP  (signed and verified)

Product:
Exlade Cryptic Disk

Version:
5.1.8.0

MD5:
f2cca1b800a650bc09b3397e97589465

SHA-1:
69e3e04e9f4f5d8a490eb0cfe7e25859d2a6b158

SHA-256:
dc4638c7118cf5eee4287cf5ca2daa6937153ccbbda6b0438a306120740b263f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/10/2024 3:51:20 PM UTC  (today)

File size:
10.3 MB (10,804,120 bytes)

Product version:
5.1.8.0

Copyright:
Copyright (C) 2004-2015 Exlade

Original file name:
Exlade Cryptic Disk

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\exlade cryptic disk 5\crypticdisk.exe

Digital Signature
Signed by:
Software Security Systems ChTUP

Authority:
VeriSign, Inc.

Valid from:
2/20/2013 7:00:00 AM

Valid to:
2/21/2016 6:59:59 AM

Subject:
CN=Software Security Systems ChTUP, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Software Security Systems ChTUP, L=MINSK, S=MINSK, C=BY

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
19C8F9B0EC18A3A3D8F5016080F29DC4

File PE Metadata
Compilation timestamp:
10/23/2015 5:36:48 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
196608:q/foA8pl6gHEGeYeSfwpfMSkAv6N22QehVFnzTt9eQLZOtnkyv:dlDHeYei852DjVzTXeQLZOJv

Entry address:
0x7FE9E7

Entry point:
E8, 73, CE, FD, FF, 58, 87, 64, 6E, 52, EA, B8, FE, C5, 9C, 16, 5C, 58, 97, FF, FD, 3D, D8, 2F, 4E, 3E, 04, C0, 57, D9, 72, F0, EF, EF, FD, 1F, D4, D6, 39, 4D, 8E, 00, C7, C3, 09, 29, 1E, A8, 00, 10, 37, B7, 7C, 0E, 01, 9D, 3A, C6, C4, 94, 8D, 1A, 93, B2, 2E, AB, 6E, EF, C1, BB, 73, 68, DE, 78, 1A, A0, 31, B8, 4E, 3D, 2B, 8D, 52, 5C, 83, 0F, 58, 14, 7F, 51, F1, A8, D7, 98, 17, 73, BE, 2B, 54, 56, 9C, 05, 7A, 4F, 68, 3E, 44, 00, 77, 45, 1C, DF, 52, BD, FB, 61, CC, 4B, 86, 64, C2, 60, A3, 3E, DB, F4, 9C, 89...
 
[+]

Entropy:
7.1580

Code size:
4.1 MB (4,313,600 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
ExladeCrypticDisk5

Command:
"C:\Program Files\exlade cryptic disk 5\crypticdisk.exe" \autostart


Scan crypticdisk.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.