home

crrpmodpackver062.exe

CRRP

This is a setup and installation application. The file has been seen being downloaded from downloader.disk.yandex.ru and multiple other hosts.
Publisher:
CRRP

Description:
CRRP 0.62 Installation

Version:
0.62

MD5:
f68e67ea323ed61f1764e12aafe3a806

SHA-1:
3429d85e26b1363b2da9e7258e82b871771b869b

SHA-256:
63f2724852cffe95e9b0e375d3a4c0945f5c0eb035a34a2fb001eb81c277599c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/9/2025 10:40:43 AM UTC  (today)

File size:
147.7 MB (154,871,750 bytes)

Copyright:
CRRP

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\crrpmodpackver062.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
3145728:uZV/bhA/A64vhvP8qwRPSDtNuBqUs6FZbos4+SPfL23DiJ00ewy+uHXmnnvundN+:uH/bEl4vhvkKuBqUsU7823D4NdjuHXqT

Entry address:
0x25468

Entry point:
55, 8B, EC, 83, C4, F0, B8, 88, 53, 42, 00, E8, 24, F2, FD, FF, B8, C8, 54, 42, 00, E8, 2A, 1C, FE, FF, 8B, 15, 40, 88, 42, 00, 89, 02, 8B, 15, 40, 88, 42, 00, 8B, 12, A1, 48, 88, 42, 00, E8, E4, D3, FF, FF, 8B, 15, 40, 88, 42, 00, 8B, 12, A1, DC, 87, 42, 00, E8, 7A, 64, FF, FF, A1, 40, 88, 42, 00, E8, AC, 4E, FE, FF, E8, DF, E0, FD, FF, 00, 00, 00, FF, FF, FF, FF, 01, 00, 00, 00, 2A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
145.5 KB (148,992 bytes)

The file crrpmodpackver062.exe has been seen being distributed by the following 4 URLs.

https://downloader.disk.yandex.ru/disk/c10ac5dca2b27bfbf31a8f2114f782ee02426e8a46cd2c8d9c685deccd6c0863/57b76c59/.../x-msdownload&fsize=154871750&hid=f80008b545b8e0730bb2401aeee43279&media_type=executable&tknv=v2&etag=f68e67ea323ed61f1764e12aafe3a806

https://docs.google.com/uc?export=download&confirm=0Aog&id=0B3rGZHiXKSj_UG9LbDlRYnhNam8

http://crmprp.ru/.../crrpmodpackver062.exe

https://downloader.disk.yandex.ru/disk/1e308f42a9dccd396aeef939ac5fd82e506308ce4be1cfb80aff976676b6d83a/56f57c72/.../x-msdownload&fsize=154871750&hid=f80008b545b8e0730bb2401aeee43279&media_type=executable&tknv=v2&etag=f68e67ea323ed61f1764e12aafe3a806

Scan crrpmodpackver062.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.