home

crystal-3d-impact-pro-trial.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-0o-0s-docs.googleusercontent.com and multiple other hosts.
MD5:
df66ae74fb9fe9d62fa43d64266aa364

SHA-1:
68956e823671e039ed2c5d5120f6f271a3395843

SHA-256:
738dc6f9803d78f6c8b99e2745dacf2266da64ecd16ef67492c916b8bc915e1b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/24/2024 2:46:04 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
Heur.Suspicious
21430

File size:
11.7 MB (12,228,852 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\crystal-3d-impact-pro-trial.exe

File PE Metadata
Compilation timestamp:
2/24/1997 9:25:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
196608:/DJgsnKS4G5TNNeROrgaZZZruEVQUm9DqrfEIMvD4FRpXLTbxtpA0:/DJOxcze1CXCEV/m9DqfDMvD4FRp/Ft7

Entry address:
0x43A0

Entry point:
64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 00, A0, 40, 00, 68, 34, 76, 40, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 8C, E3, 40, 00, A3, 70, B1, 40, 00, 33, C0, A0, 71, B1, 40, 00, A3, 7C, B1, 40, 00, A1, 70, B1, 40, 00, C1, 2D, 70, B1, 40, 00, 10, 25, FF, 00, 00, 00, A3, 78, B1, 40, 00, C1, E0, 08, 03, 05, 7C, B1, 40, 00, A3, 74, B1, 40, 00, E8, EA, 31, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 2F, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00, E8, 90, 20, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v4.2

Code size:
33 KB (33,792 bytes)

The file crystal-3d-impact-pro-trial.exe has been seen being distributed by the following 4 URLs.

https://doc-0o-0s-docs.googleusercontent.com/docs/securesc/u5m0t7cr9mo7dlran1i64u97llc9b4nr/7putc0buhsu5sg110nbm3i3cf5j5o0fb/1462212000000/.../06648075691879679196/0B6KX8C9qQnYWRXUzSEFkZUlxb3c?e=download

http://software-files-a.cnet.com/s/software/11/87/97/.../Crystal-3D-Impact-Pro-Trial.exe

http://download.crystalgraphics.com/Crystal-3D-Impact-Pro-Trial.exe

http://files.downloadnow.com/s/software/11/87/97/.../Crystal-3D-Impact-Pro-Trial.exe

Scan crystal-3d-impact-pro-trial.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.