home

powercryptor.exe

PowerCryptor Suite

PowerCryptor Software

This is a setup program which is used to install the application. The file has been seen being downloaded from www.krylack.com and multiple other hosts.
Publisher:
PowerCryptor Software

Product:
PowerCryptor Suite

Version:
1.01.05

MD5:
4bcb87e74e1fa4c42321a973258becd3

SHA-1:
f44dfcca5f120c1272c29a6d36d2e41b297e7ba0

SHA-256:
06f3dda17f659004081b54da2d020d61a8c4423d628b5878807ebc043da36789

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
8/9/2025 10:02:06 PM UTC  (today)

Scan engine
Detection
Engine version

NANO AntiVirus
Riskware.Win32.Babylon.dfcgrj
0.28.2.62440

File size:
12.2 MB (12,817,119 bytes)

Product version:
1.01.05

Copyright:
Copyright (C) PowerCryptor Software

Original file name:
powercryptor.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\powercryptor.exe

File PE Metadata
Compilation timestamp:
3/21/2013 10:58:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:UPz6yu5cZjus8U6rk0HAG2eWomd02vK2k3hVp:+Zasj6/HYKYcX

Entry address:
0xB07F9

Entry point:
E8, AB, C9, 00, 00, E9, 79, FE, FF, FF, 8B, FF, 55, 8B, EC, 51, 53, 56, 8B, F0, 33, DB, 3B, F3, 75, 1E, E8, 01, 48, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, CB, EB, FF, FF, 83, C4, 14, 8B, C6, E9, C2, 00, 00, 00, 57, 39, 5D, 0C, 77, 1E, E8, DD, 47, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, A7, EB, FF, FF, 83, C4, 14, 8B, C6, E9, 9D, 00, 00, 00, 33, C0, 39, 5D, 14, 66, 89, 06, 0F, 95, C0, 40, 39, 45, 0C, 77, 09, E8, AE, 47, 00, 00, 6A, 22, EB, CF, 8B, 45, 10, 83, C0, FE, 83, F8, 22, 77...
 
[+]

Entropy:
7.9424  (probably packed)

Code size:
912.5 KB (934,400 bytes)

The file powercryptor.exe has been seen being distributed by the following 3 URLs.

http://www.krylack.com/gw/.../powercryptor_giveaway.exe

http://sharewareonsale.com/shop?download_file=760948&order=wc_order_53c3e3cccaf55&email=oldflyboy2@hotmail.com&key=d0b073dff46250ad2e5021dab7103945

https://sharewareonsale.com/?download_file=760948&order=wc_order_53c3e3cccaf55&email=oldflyboy2@hotmail.com&key=d0b073dff46250ad2e5021dab7103945

Scan powercryptor.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.