home

iiscrypto40.exe

IIS Crypto

Nartac Software Inc.

Publisher:
Nartac Software Inc.  (signed and verified)

Product:
IIS Crypto

Version:
1.4.5.0

MD5:
4296a67e825a89e9abce83a935c05c26

SHA-1:
08f3e0746798382d2b63d0a4aa65a738ad63fcf2

SHA-256:
4ced0fc38330128525e1cabe58856293e9a8c3b653d4dc930c734be4dc9a62d3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/15/2025 6:09:09 AM UTC  (today)

File size:
89.7 KB (91,880 bytes)

Product version:
1.4.5.0

Copyright:
Copyright © 2011-2013 Nartac Software Inc.

Original file name:
IISCrypto.Main.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\iiscrypto40.exe

Digital Signature
Signed by:
Nartac Software Inc.

Authority:
StartCom Ltd.

Valid from:
4/22/2013 11:22:07 PM

Valid to:
4/23/2015 11:41:50 PM

Subject:
E=contact@nartac.com, CN=Nartac Software Inc., O=Nartac Software Inc., L=Vancouver, S=British Columbia, C=CA, Description=hgY7dJz6ec6yx19Y

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0988

File PE Metadata
Compilation timestamp:
11/5/2013 5:06:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:HjDxmJix+VAeRjLd8Ypic1sp2au63Aeyodw1KJiJLJ2J/JXTSChTc+DVqXkvUCoM:HjDxmJixyjLd8YAcsoau6weyodLY5U1Z

Entry address:
0x14C82

Entry point:
FF, 25, 90, 4C, 41, 00, 00, 00, 00, 00, 00, 00, 00, 00, 64, 4C, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, EF, 6B, 79, 52, 00, 00, 00, 00, 02, 00, 00, 00, 7E, 00, 00, 00, B4, 4C, 01, 00, B4, 2E, 01, 00, 52, 53, 44, 53, F9, 2E, D6, 1B, 1E, 8F, 98, 48, BB, D0, 72, 09, 7B, 0D, 91, 3C, 01, 00, 00, 00, 43, 3A, 5C, 44, 61, 74, 61, 5C, 53, 75, 62, 76, 65, 72, 73, 69, 6F, 6E, 5C, 47, 69, 64, 64, 65, 6E, 73, 5C, 54, 72, 75, 6E, 6B, 5C, 50, 72, 6F, 6A, 65, 63, 74, 73, 5C, 4E, 61, 72, 74, 61, 63, 5C, 49, 49, 53, 43, 72...
 
[+]

Entropy:
6.2108

Code size:
75.5 KB (77,312 bytes)

The file iiscrypto40.exe has been seen being distributed by the following URL.

https://www.nartac.com/Products/.../IISCrypto40.exe

Scan iiscrypto40.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.