Ran an avast scan and it detected CRC832.exe as malware-gen in windows\syswow64\tasks\sysprep as well windows\syswow64\tasks\sysprep - copy. I can’t find any information about it online, however. Does anyone know what this is?
https://www.herdprotect.com/crc832.exe-af8af028867d81d8f81d617e3e81a82639546947.aspx
https://www.reasoncoresecurity.com/crc832.exe-af8af028867d81d8f81d617e3e81a82639546947.aspx
I don’t understand anything on those sites which is why I was asking here.
Does anyone know what this is?Upload and scan the file at www.virustotal.com if scanned before, click rescan for a fresh result Post link to scan result here
I don’t see it in the location avast specified so I can’t upload it onto VT.
It seems a real detection (if it is the same file).
SHA256: 2619992602b64e98295c40b00d550eba6636aa13bc91077da5d77fb86d7e3560
9/55 though many are generic. https://www.virustotal.com/en/file/2619992602b64e98295c40b00d550eba6636aa13bc91077da5d77fb86d7e3560/analysis/
Did avast move it to chest (quarantine)
Yes. Avast moved it to chest.
create a new folder and name it “virustotal uploads” and exclude that folder from avast scanning
extract the file from avast quarantine to this folder and you should now be able to upload it to virustotal
Avast 2016: Exclude certain files or websites from scanning >> https://www.avast.com/faq.php?article=AVKB168#artTitle
Avast 2016: Using the Virus Chest >> https://www.avast.com/faq.php?article=AVKB21#artTitle
Turned up as the same thing that Simion posted.
yepp the exact same file > MD5 828e48ee1272ef0b2a937ac9dd6070e8
and old > First submission 2014-10-26 12:27:52 UTC ( 1 year, 6 months ago )