The kryptex setup 4 46 3 exe (Kryptex desktop app) Kryptex File Malware Analysis
Gridinsoft Logo
File Icon

The kryptex-setup-4.46.3.exe (Kryptex desktop app) File Analysis

Updated 10 months ago
Checked by Malware Check
kryptex-setup-4.46.3.exe

Technical Analysis

File Name kryptex-setup-4.46.3.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
SSDEEP Hash
1572864:U993N+NLkImwwrbzcBRqEj5F9enc+YE+f9RceuZhkOeA8nbfGyd9sa:Uf9+NMZb4qyX9auE+kNZhKbPsa
Scanner Version 1.0.194.174
Database Version 2024-10-26 13:00:24 UTC
āš 

Suspicious File Detected

Detected by 12 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
19%
Detection Rate
70,365,976
File Size (bytes)
12/64
Engines Detected
2024-10-26
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5b86482e2b84fe87ef5605256b0e0b30
SHA1
d3964767ddaced862e6c7b7c40bd0efe5660a53d
SHA256
87880cb26db474e985f2d9775afb3f66ac536c03ef9c9361466e022000bc87c5
SHA512
7a70cb76099d5773c9def983d4bec13510ab387ee059bf06f5de5f4f8db109b6d07e28f49cecb1846027f1a051345a80f1578e616fc1ef6bf3215ac354fec9e7
ImpHash
b34f154ec913d2d2c435cbd644e91687

Security Engines with Detections (12 of 64)

CTX
exe.trojan.kryptex Malicious
BitDefender
Trojan.GenericKD.74366883 Malicious
ESET-NOD32
a variant of Win32/Kryptex.A potentially unwanted Malicious
VIPRE
Trojan.GenericKD.74366883 Malicious
Emsisoft
Trojan.GenericKD.74366883 (B) Malicious
Ikarus
PUA.Kryptex Malicious
FireEye
Trojan.GenericKD.74366883 Malicious
Arcabit
Trojan.Generic.D46EBFA3 Malicious
ALYac
Trojan.GenericKD.74366883 Malicious
DeepInstinct
MALICIOUS Malicious
Rising
PUA.Kryptex!8.12BC7 (CLOUD) Malicious
Fortinet
Riskware/Kryptex Malicious
52 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

ā–¼
Icon
Hash: 005ee6541f6b1e7b0ebc421fa3da77cb
Fuzzy: 29285bdd7f74c5f00d4cfcf9536b629d
dHash: 19c4e6b6d063b216
Image Base 0x00400000
Entry Point 0x0040338f
Compilation Time 2018-12-15 22:26:14
Checksum 0x043265d5 (Actual: 0x043265d5)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32
Exports 0 functions
Resources 33 Resources
Sections 5 Sections

Version Information

ā–¼
CompanyName Kryptex
FileDescription Kryptex desktop app
FileVersion 4.46.3.1753
LegalCopyright Copyright Ā© 2024 Kryptex
ProductName Kryptex
ProductVersion 4.46.3
Translation 0x0409 0x04e4

PE Sections

ā–¼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 26,151 bytes 26,624 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7618D4C0CD8BB67EA9595B4266B3A91F
.rdata 0x00008000 5,282 bytes 5,632 bytes 5.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EECAC1FED9CC6B447D50940D178404D8
.data 0x0000a000 462,840 bytes 1,536 bytes 4.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE DB8F31A08A2242D80C29E1F9500C6527
.ndata 0x0007b000 1,245,184 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x001ab000 56,016 bytes 56,320 bytes 5.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DE382C5FD2DCD1793ED1E7CC0477EA4E

Resource Analysis

ā–¼
Total Resources: 33 (54,214 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 45,638 bytes
84.2%
RT_DIALOG 24 6,824 bytes
12.6%
RT_GROUP_ICON 1 90 bytes
0.2%
RT_VERSION 1 592 bytes
1.1%
RT_MANIFEST 1 1,070 bytes
2%

Certificate Chain Analysis

ā–¼
Certificate Information
Product Kryptex
Description Kryptex desktop app
File Version 4.46.3.1753
Signing Date 11:29 AM 10/21/2024 (314 days ago)
Verification Status Signed
Signers xBlock Ventures OƜ; Sectigo Public Code Signing CA R36; Sectigo Public Code Signing Root R46; Sectigo (AAA)
Counter Signers DigiCert Timestamp 2024; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright Copyright Ā© 2024 Kryptex
Certificate Chain Summary
Sectigo Public Code Signing Root R46 #1 Primary
Validity Period: 2021-05-25 00:00:00 ā†’ 2028-12-31 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 16
DigiCert Trusted Root G4 #2 Chain
Validity Period: 2022-08-01 00:00:00 ā†’ 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
Sectigo Public Code Signing CA R36 #3 Chain
Validity Period: 2021-03-22 00:00:00 ā†’ 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 62 1D 6D 0C 52 01 9E 3B 90 79 15 20 89 21 1C 0A
xBlock Ventures OƜ #4 Chain
Validity Period: 2022-01-28 00:00:00 ā†’ 2025-01-27 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 40 EB BF 20 A2 D6 F0 A3 30 D5 C7 F0 B2 C1 BC 39
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #5 Chain
Validity Period: 2022-03-23 00:00:00 ā†’ 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Timestamp 2024 #6 Chain
Validity Period: 2024-09-26 00:00:00 ā†’ 2035-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0B AE 66 BC 5A BA 7F 95 87 C6 F9 E9 04 E3 33 04

āœ“ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
12 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware