home

cryptocertumscanner.exe

Unizeto Technologies SA

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘AutoRegisterCerts’. This is installed with proCertum CardManager.
Publisher:
Unizeto Technologies SA  (signed and verified)

Description:
cryptoCertum Scanner

Version:
2, 0, 0, 17

MD5:
a24c51dae2a640d8a491057a069e97f2

SHA-1:
addf84e23ed3047f3892746ddbcb3e8fa5ad896f

SHA-256:
e8c0232d4866e036199690d139e7ed0fdf33a62348c8629d335f582a172e51e9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 10:41:58 PM UTC  (today)

File size:
130.8 KB (133,928 bytes)

Product version:
2, 0, 0, 17

Copyright:
Copyright (C) 2009-2012, Unizeto Technologies SA

Original file name:
cryptoCertum Scanner.exe

File type:
Executable application (Win32 EXE)

Language:
Polish (Poland)

Common path:
C:\Program Files\unizeto\procertum cardmanager\cryptocertumscanner.exe

Digital Signature
Signed by:
Unizeto Technologies SA

Authority:
Unizeto Technologies S.A.

Valid from:
7/28/2011 11:21:34 AM

Valid to:
7/27/2012 11:21:34 AM

Subject:
E=infolinia@unizeto.pl, CN=Unizeto Technologies SA, OU=OFP, O=Unizeto Technologies SA, C=PL

Issuer:
CN=Certum Level III CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
7C24BFAEE0F684D8ACA57E3B8E3BD207

File PE Metadata
Compilation timestamp:
6/25/2012 2:39:12 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:JuqRX7jcNVVpkhVFxMHx9Xq/bcAA7MAzEXZ:xe5OhJM+/J

Entry address:
0xAF97

Entry point:
E8, 5B, 37, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, F0, A6, 47, 00, 89, 0D, EC, A6, 47, 00, 89, 15, E8, A6, 47, 00, 89, 1D, E4, A6, 47, 00, 89, 35, E0, A6, 47, 00, 89, 3D, DC, A6, 47, 00, 66, 8C, 15, 08, A7, 47, 00, 66, 8C, 0D, FC, A6, 47, 00, 66, 8C, 1D, D8, A6, 47, 00, 66, 8C, 05, D4, A6, 47, 00, 66, 8C, 25, D0, A6, 47, 00, 66, 8C, 2D, CC, A6, 47, 00, 9C, 8F, 05, 00, A7, 47, 00, 8B, 45, 00, A3, F4, A6, 47, 00, 8B, 45, 04, A3, F8, A6, 47, 00, 8D, 45, 08, A3, 04, A7, 47...
 
[+]

Code size:
75 KB (76,800 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
AutoRegisterCerts

Command:
"C:\Program Files\unizeto\procertum cardmanager\cryptocertumscanner.exe" \autorun


The file cryptocertumscanner.exe has been discovered within the following program.

proCertum CardManager  by Unizeto
www.unizeto.pl
About 8% of users remove it
 
Powered by Should I Remove It?

Scan cryptocertumscanner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.