iiscryptocli40.exe

IIS Crypto Command Line

Nartac Software Inc.

Publisher:
Nartac Software Inc.  (signed and verified)

Product:
IIS Crypto Command Line

Version:
1.6.7.0

MD5:
b1f6dd91b02382383e25b25cc6ea805c

SHA-1:
190319ca38dd0a21b2de75f590a817fdaaaebb3e

SHA-256:
5ff7a1964e52bdbf0e59c4722313b29509a84d5809e5353493a4777ebf6aea2f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/15/2025 6:10:52 AM UTC  (today)

File size:
78.7 KB (80,592 bytes)

Product version:
1.6.7.0

Copyright:
Copyright © 2011-2014 Nartac Software Inc.

Original file name:
IISCrypto.Cli.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\iiscryptocli40.exe

Digital Signature
Authority:
StartCom Ltd.

Valid from:
4/23/2013 5:22:07 AM

Valid to:
4/24/2015 5:41:50 AM

Subject:
E=contact@nartac.com, CN=Nartac Software Inc., O=Nartac Software Inc., L=Vancouver, S=British Columbia, C=CA, Description=hgY7dJz6ec6yx19Y

Issuer:
CN=StartCom Class 2 Primary Intermediate Object CA, OU=Secure Digital Certificate Signing, O=StartCom Ltd., C=IL

Serial number:
0988

File PE Metadata
Compilation timestamp:
11/18/2014 2:37:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:3cKukfOH8WuMF2oE+2iRXSuodl1KJiJLJ2J/JXTSChTc+DVqXkvUCowl/s2T5mb/:zm8mF2oYiRXVod6Y5U1EItBo41oUnG/b

Entry address:
0x11E8A

Entry point:
FF, 25, 98, 1E, 41, 00, 00, 00, 00, 00, 00, 00, 00, 00, 6C, 1E, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, CD, 94, 6A, 54, 00, 00, 00, 00, 02, 00, 00, 00, 80, 00, 00, 00, BC, 1E, 01, 00, BC, 00, 01, 00, 52, 53, 44, 53, B9, 56, 61, 84, F1, EB, ED, 40, 92, 04, 32, D4, 69, 11, 32, B4, 01, 00, 00, 00, 43, 3A, 5C, 44, 61, 74, 61, 5C, 53, 75, 62, 76, 65, 72, 73, 69, 6F, 6E, 5C, 47, 69, 64, 64, 65, 6E, 73, 5C, 54, 72, 75, 6E, 6B, 5C, 50, 72, 6F, 6A, 65, 63, 74, 73, 5C, 4E, 61, 72, 74, 61, 63, 5C, 49, 49, 53, 43, 72...
 
[+]

Entropy:
5.7923

Code size:
64 KB (65,536 bytes)

The file iiscryptocli40.exe has been seen being distributed by the following URL.

Scan iiscryptocli40.exe - Powered by Reason Core Security