home

CrypticDisk.exe

Cryptic Disk

FSPro Labs

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CrypticDisk’.
Publisher:
EXLADE, Inc.  (signed by FSPro Labs)

Product:
Cryptic Disk

Description:
Cryptic Disk App

Version:
2.7.0.0

MD5:
0d7cd53420254cf4226b75c20cd78ff4

SHA-1:
fe0dbe9f7d2d8f79b69f78b5e1a956f881dc09d6

SHA-256:
35746c34c34db69a9b35c10485f29b6b69ae390e8f65f3328d1d6e04c4abe08c

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 10:02:29 PM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
PUA.Packed.EXECryptor
0.98/18011

File size:
1.8 MB (1,863,344 bytes)

Product version:
2.7.0.0

Copyright:
2004-2009 (c) Exlade, Inc. All rights reserved.

Original file name:
CrypticDisk.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\cryptic disk\crypticdisk.exe

Digital Signature
Signed by:
FSPro Labs

Authority:
The USERTRUST Network

Valid from:
2/23/2009 1:00:00 AM

Valid to:
2/24/2011 12:59:59 AM

Subject:
CN=FSPro Labs, O=FSPro Labs, STREET=20-6 P.Toliatti st. apt. 20, L=Taganrog, S=RO, PostalCode=347931, C=RU

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
784F226B45C3BD8E4089243D747D1F59

File PE Metadata
Compilation timestamp:
3/3/2009 8:07:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:Ku+67uwh7a8xLTaEu/78ca/5IlkQrJw3qQ:KpkaQ9IYZ+lDQ

Entry address:
0x2FEA28

Entry point:
E8, 3B, FF, FF, FF, 05, D9, 5B, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 2E, 34, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, A3, 46, 63, E4, 07, C2, 25, C1, B1, A0, A4, 23, 7F, CC, 19, F8, FB, F9, 4A, F5, AC, E4, 95, 24, 13, 95, 48, EF, E8, 2A, CE, 34, 0B, CE, E3, DA, 52, 20, 89, EA, C0, CC, 16, EB, 74, 1E, 12, A0, F9, 0E, BD, DD, 2A, A2, AE, 3D, 1C, 03, D5, 20, 7D, 48, 60, 72, ED, A1, 6A, 28, 3B, 2F, 93, D1, EE, B2, 4C, 7C, 91, 3C, 63, 5D, 5C, FB, AF, E0, 01, 5B, 7A, 84, D5, EC, 7A, 38...
 
[+]

Code size:
599.5 KB (613,888 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CrypticDisk

Command:
"C:\Program Files\cryptic disk\crypticdisk.exe" \tray


Scan CrypticDisk.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.