home

UniCRSLocalServer.exe

Microsoft UniCRSLocalServer

Korea Electronic Certification Authority, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CROSSCERT UniCRSV3’.
Publisher:
Microsoft  (signed by Korea Electronic Certification Authority, Inc.)

Product:
Microsoft UniCRSLocalServer

Description:
UniCRSLocalServer

Version:
1, 0, 6, 0

MD5:
c43b004d44bc978aa95e890a7afebbb1

SHA-1:
34c0c47e8c6adb44249b793006546edea78b7566

SHA-256:
2d45b419a21867e288b593511d4e35288d2aab3351c1a35167486727b2d7fc89

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 10:19:59 AM UTC  (today)

File size:
194.2 KB (198,848 bytes)

Product version:
1, 0, 6, 0

Copyright:
Copyright ⓒ 2016

Original file name:
UniCRSLocalServer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\crosscert\unisigncrsv3\unicrslocalserver.exe

Digital Signature
Signed by:
Korea Electronic Certification Authority, Inc.

Authority:
Symantec Corporation

Valid from:
1/5/2016 9:00:00 AM

Valid to:
1/5/2017 8:59:59 AM

Subject:
CN="Korea Electronic Certification Authority, Inc.", O="Korea Electronic Certification Authority, Inc.", L=Suwon-Si, S=Gyeonggi-do, C=KR, SERIALNUMBER=214-86-30830, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=KR

Issuer:
CN=Symantec Class 3 Extended Validation Code Signing CA - G2, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
50BE764D51532C90E6C2660BED1153C9

File PE Metadata
Compilation timestamp:
12/30/2016 12:56:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x1A89E

Entry point:
55, 8B, EC, 6A, FF, 68, C8, E2, 41, 00, 68, 96, AC, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, C0, D1, 41, 00, 59, 83, 0D, 5C, BB, 42, 00, FF, 83, 0D, 60, BB, 42, 00, FF, FF, 15, C4, D1, 41, 00, 8B, 0D, 54, BB, 42, 00, 89, 08, FF, 15, C8, D1, 41, 00, 8B, 0D, 50, BB, 42, 00, 89, 08, A1, CC, D1, 41, 00, 8B, 00, A3, 64, BB, 42, 00, E8, 88, 03, 00, 00, 39, 1D, 50, B2, 42, 00, 75, 0C, 68, 92, AC, 41, 00, FF, 15, D0, D1...
 
[+]

Entropy:
6.4162

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
112 KB (114,688 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CROSSCERT UniCRSV3

Command:
C:\Program Files\crosscert\unisigncrsv3\unicrslocalserver.exe


Scan UniCRSLocalServer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.