home

cryptapp.exe

CryptGuard

Christopher Homer

Publisher:
WinGuardPro.com  (signed by Christopher Homer)

Product:
CryptGuard

Version:
1.0.1.2

MD5:
37a5d7ec5423fd9f3550225d6cfa560a

SHA-1:
73abd51f261edf034fa720f647ff28b6885a68a4

SHA-256:
4e97cab9be12186f219966659b66f7ac8a1e8d78733a392992ef017747b48161

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/30/2024 9:11:02 AM UTC  (today)

File size:
55.6 KB (56,936 bytes)

Product version:
1.0.1.2

Copyright:
Copyright © 2016

Trademarks:
WinGuardProTM

Original file name:
cryptapp.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\winguardpro ltd\winguard\cryptapp.exe

Digital Signature
Signed by:
Christopher Homer

Authority:
Unizeto Technologies S.A.

Valid from:
9/2/2015 3:05:25 PM

Valid to:
9/1/2016 3:05:25 PM

Subject:
E=tech@winguardpro.com, CN=Christopher Homer, O=Christopher Homer, C=GB

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
428B474674E66DCB847575213F1FF26D

File PE Metadata
Compilation timestamp:
12/6/2015 3:25:12 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
80.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:ODyxS6Me0w27K6Oy/E15bzqPcssbqdthAg/W/Q6K6MU:OOxSBzOy/E1MPkWdAgu/Ql6MU

Entry address:
0xC07E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8779

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
40.5 KB (41,472 bytes)

The file cryptapp.exe has been seen being distributed by the following URL.

http://www.winguardpro.com/update/.../cryptapp.exe

Scan cryptapp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.