home

bocusertool.exe

certreg Application

Feitian Technologies Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InterPass3000_BOC’.
Publisher:
Feitian Technologies Co., Ltd.  (signed and verified)

Product:
certreg Application

Description:
certreg MFC Application

Version:
1, 0, 13, 1022

MD5:
11517d9079d263fb7920a78e38dabc68

SHA-1:
e064267a5b03387a7b2e3e58d81b7433b87ecd49

SHA-256:
24b2dc717b2434dfbee135f3cdccf2985bbe73544c702470934d6a7d6d7033ea

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 11:06:43 AM UTC  (today)

File size:
358.4 KB (367,048 bytes)

Product version:
1, 0, 13, 1022

Copyright:
Copyright (C) 2013 Feitian Technologies Co., Ltd.

Original file name:
certreg.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ftsafe\bocnet usbkey management suite\bocusertool.exe

Digital Signature
Signed by:
Feitian Technologies Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
3/25/2013 8:00:00 AM

Valid to:
6/25/2014 7:59:59 AM

Subject:
CN="Feitian Technologies Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Feitian Technologies Co., Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7410E66950047FB99A072D507E990D73

File PE Metadata
Compilation timestamp:
11/5/2013 11:27:36 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:W7z4exzjI3x5iXkj8NM4BTCkyTVtCmDPpJeYQwqCG2USU7VI9TSv/F8zGyg5co2d:W7PxAxsUwXTCkY3PyAGNFATSnF8Rg5k

Entry address:
0x207C6

Entry point:
55, 8B, EC, 6A, FF, 68, C8, 6F, 42, 00, 68, 9E, 0A, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, 5F, 57, FF, 15, 34, 55, 42, 00, 59, 83, 0D, 60, B6, 43, 00, FF, 83, 0D, 64, B6, 43, 00, FF, FF, 15, 38, 55, 42, 00, 8B, 0D, 3C, B6, 43, 00, 89, 08, FF, 15, 3C, 55, 42, 00, 8B, 0D, 38, B6, 43, 00, 89, 08, A1, 40, 55, 42, 00, 8B, 00, A3, 5C, B6, 43, 00, E8, 00, 03, 00, 00, 39, 1D, 60, AD, 43, 00, 75, 0C, 68, 34, 0B, 42, 00, FF, 15...
 
[+]

Entropy:
5.9950

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
144 KB (147,456 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InterPass3000_BOC

Command:
C:\Program Files\ftsafe\bocnet usbkey management suite\bocusertool.exe


Scan bocusertool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.