home

CRM-SYS.exe

CRM-SYS

PCTRONIX

Publisher:
PCTRONIX

Product:
CRM-SYS

Version:
1.0.0.0

MD5:
6056e74e89eb25c2c8739d03ffa1911b

SHA-1:
f5590b4ffee0884964e51886a9eb2a3b182bc2f0

SHA-256:
11018d6c209aaaa599fd45ccb47a3dc07655e1ff269c69bbe8e74fc003f90e46

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/14/2025 10:50:13 PM UTC  (today)

File size:
66 MB (69,251,584 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © PCTRONIX 2010

Original file name:
CRM-SYS.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\crm-sys.exe

File PE Metadata
Compilation timestamp:
9/30/2015 2:33:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
786432:0xCSaYDPCt89jy+h8Zkf93sf5r0h+28Sd17VW88PMAMlMUUEKWC:abC

Entry address:
0x4205BEE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 1E, 39, 0C, 56, 00, 00, 00, 00, 02, 00, 00, 00, 9F, 00, 00, 00, 1C, 60, 20, 04, 1C, 40, 20, 04, 52, 53, 44, 53, BD, 17, 1A, 26, A6, 09, 45, 4D, BC, E8, A1, 91, B1, 1B, 9E, 32, 01, 00, 00, 00, 43, 3A, 5C, 55, 73, 65, 72, 73, 5C, 6D, 69, 72, 69, 61, 6D, 2E, 67, 61, 72, 61, 79, 5C, 44, 65, 73, 6B, 74, 6F, 70, 5C, 45, 73, 63, 72, 69, 74, 6F, 72, 69, 6F, 20, 4D, 47, 5C, 44, 6F, 63, 75, 6D, 65, 6E, 74, 6F, 73, 20, 4D, 69, 72...
 
[+]

Entropy:
5.7676

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
66 MB (69,221,376 bytes)

The file CRM-SYS.exe has been seen being distributed by the following URL.

https://doc-14-98-docs.googleusercontent.com/docs/securesc/hbios6ti8gu4q9r8tab2memrghnmp8l2/597fcd32r00or0t7pkl4ne6lki6ia5ji/1438869600000/10257095757765756931/.../0B2rDmbsqk9OcQmNNNFdpVGU4bVk?h=02019555421658776349&e=download

Scan CRM-SYS.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.