home

iiscrypto.exe

IIS Crypto

Nartac Software Inc.

Publisher:
Nartac Software Inc.  (signed and verified)

Product:
IIS Crypto

Version:
1.6.7.0

MD5:
dead38d413b51d003c4bf5b54c5791e2

SHA-1:
e13b7cf8bb7671848298670d08e588718abf951d

SHA-256:
5d5ca029ff38639c8f0a8cb355fa0a18c7328f34b442709cabfcb30069cdb20d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/15/2025 6:15:23 AM UTC  (today)

File size:
82.2 KB (84,168 bytes)

Product version:
1.6.7.0

Copyright:
Copyright © 2011-2014 Nartac Software Inc.

Original file name:
IISCrypto.Main.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\iiscrypto.exe

Digital Signature
Signed by:
Nartac Software Inc.

Authority:
StartCom Ltd.

Valid from:
4/23/2013 1:22:07 PM

Valid to:
4/24/2015 1:41:50 PM

Subject:
E=contact@nartac.com, CN=Nartac Software Inc., O=Nartac Software Inc., L=Vancouver, S=British Columbia, C=CA, Description=hgY7dJz6ec6yx19Y

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0988

File PE Metadata
Compilation timestamp:
11/18/2014 11:41:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:QMfey8tpwRjMduFXMxfc3E1HdzYBPieIodl1KJiJLJ2J/JXTSChTc+DVqXkvUCoq:QMfey8tSjMduFXsuEpdcBPieIod6Y5UP

Entry address:
0x12B7A

Entry point:
FF, 25, 88, 2B, 41, 00, 00, 00, 00, 00, 00, 00, 00, 00, 5C, 2B, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, D6, 95, 6A, 54, 00, 00, 00, 00, 02, 00, 00, 00, 7C, 00, 00, 00, AC, 2B, 01, 00, AC, 0D, 01, 00, 52, 53, 44, 53, 63, 98, CB, BA, 45, 71, 9A, 44, 8F, 09, 6B, E2, 13, 8E, 70, DD, 01, 00, 00, 00, 43, 3A, 5C, 44, 61, 74, 61, 5C, 53, 75, 62, 76, 65, 72, 73, 69, 6F, 6E, 5C, 47, 69, 64, 64, 65, 6E, 73, 5C, 54, 72, 75, 6E, 6B, 5C, 50, 72, 6F, 6A, 65, 63, 74, 73, 5C, 4E, 61, 72, 74, 61, 63, 5C, 49, 49, 53, 43, 72...
 
[+]

Entropy:
6.2086

Code size:
67.5 KB (69,120 bytes)

The file iiscrypto.exe has been seen being distributed by the following 3 URLs.

http://files.racs.com.au/CustUpdates/.../IISCrypto.exe

https://www.nartac.com/Downloads/.../IISCrypto.exe

https://www.nartac.com/Products/.../IISCrypto.exe

Scan iiscrypto.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.