home

cryptocertumscanner.exe

Asseco Data Systems S.A.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AutoRegisterCerts’. This is installed with proCertumCardManager.
Publisher:
Certum  (signed by Asseco Data Systems S.A.)

Description:
cryptoCertum Scanner

Version:
2, 0, 0, 23

MD5:
ecfc20c60591d44ab62a06c1b1fb1b71

SHA-1:
4475b3a9b80a50987d012740ba4f8d80d7662b07

SHA-256:
7795d6db270c33e25e25b9a8a5711ff3a0bd00e613b9b19a6de4a4bef6b8e882

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 10:45:24 PM UTC  (today)

File size:
157.4 KB (161,224 bytes)

Product version:
2, 0, 0, 23

Copyright:
Copyright (C) 2016, Certum

Original file name:
cryptoCertum Scanner.exe

File type:
Executable application (Win32 EXE)

Language:
Polish (Poland)

Common path:
C:\Program Files\certum\procertum cardmanager\cryptocertumscanner.exe

Digital Signature
Signed by:
Asseco Data Systems S.A.

Authority:
Unizeto Technologies S.A.

Valid from:
4/1/2016 2:03:23 PM

Valid to:
4/1/2019 2:03:23 PM

Subject:
E=info@certum.pl, CN=Asseco Data Systems S.A., OU=Certum, O=Asseco Data Systems S.A., C=PL

Issuer:
CN=Certum Code Signing CA SHA2, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
17E760B01FD0CAE0143B8F671BA7EC2C

File PE Metadata
Compilation timestamp:
10/17/2016 8:25:03 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:ZLdi6X7jcNVdF6oYKxuXuAjRnApRQUeJCjCj3uw:1Ib6LaAUCJCju

Entry address:
0xAA04

Entry point:
E8, BA, 29, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, B0, 97, 47, 00, 89, 0D, AC, 97, 47, 00, 89, 15, A8, 97, 47, 00, 89, 1D, A4, 97, 47, 00, 89, 35, A0, 97, 47, 00, 89, 3D, 9C, 97, 47, 00, 66, 8C, 15, C8, 97, 47, 00, 66, 8C, 0D, BC, 97, 47, 00, 66, 8C, 1D, 98, 97, 47, 00, 66, 8C, 05, 94, 97, 47, 00, 66, 8C, 25, 90, 97, 47, 00, 66, 8C, 2D, 8C, 97, 47, 00, 9C, 8F, 05, C0, 97, 47, 00, 8B, 45, 00, A3, B4, 97, 47, 00, 8B, 45, 04, A3, B8, 97, 47, 00, 8D, 45, 08, A3, C4, 97, 47...
 
[+]

Code size:
68.5 KB (70,144 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AutoRegisterCerts

Command:
"C:\Program Files\certum\procertum cardmanager\cryptocertumscanner.exe" \autorun


The file cryptocertumscanner.exe has been discovered within the following program.

proCertumCardManager  by Certum
www.certum.pl
About 1% of users remove it
 
Powered by Should I Remove It?

Scan cryptocertumscanner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.