CCBCertificate.exe

CCBCertificate 应用程序

Beijing Daming Wuzhou Science & Technology Co.,Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘CCBCertificate’. This is installed with DMWZ CCB USBKey.
Publisher:

Product:
CCBCertificate 应用程序

Description:
CCBCertificate Microsoft 基础类应用程序

Version:
2, 1, 7, 8

MD5:
ea2070dcb6ddfdf57c61ba506521e9ee

SHA-1:
da95229cd40c699247592c95d3df55a6591ba20a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 2:07:19 PM UTC  (today)

File size:
339.2 KB (347,320 bytes)

Product version:
2, 1, 7, 8

Copyright:
版权所有 (C) 2009

Original file name:
CCBCertificate.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ccbcomponents\dmwz\ccbcertificate.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
6/25/2010 8:00:00 AM

Valid to:
8/15/2012 7:59:59 AM

Subject:
CN="Beijing Daming Wuzhou Science & Technology Co.,Ltd.", OU=Research and Development Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Beijing Daming Wuzhou Science & Technology Co.,Ltd.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
13E724B3B226CE970913663453DB6A3F

File PE Metadata
Compilation timestamp:
7/5/2011 1:06:49 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:Iq8mBtZdnY4UaPlD018Yolby0h0VV5g7v:IRmXUaND01f0avg7v

Entry address:
0x1F3BD

Entry point:
E8, E5, 8E, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 6A, 00, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 5E, 8F, 00, 00, 83, C4, 14, 5D, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 08, 40, 40, 66, 85, C9, 75, F6, 2B, 45, 08, D1, F8, 48, 5D, C3, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33...
 
[+]

Entropy:
6.3613

Code size:
202.5 KB (207,360 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CCBCertificate

Command:
C:\Program Files\ccbcomponents\dmwz\ccbcertificate.exe


The file CCBCertificate.exe has been discovered within the following program.

DMWZ CCB USBKey  by Beijing Daming Wuzhou science and technology Co.,Ltd
www.bdtech.com.cn
About 9% of users remove it
 
Powered by Should I Remove It?

Scan CCBCertificate.exe - Powered by Reason Core Security