home

COSEATM.ocx

EATM OCX

Cosmos Bank ,Taiwan

Publisher:
COSMOSBANK  (signed by Cosmos Bank ,Taiwan)

Product:
EATM OCX

Description:
EATM.OCX

Version:
2.00.0011

MD5:
34bf6a1c1fff657c2f4232e79daf1113

SHA-1:
a7a6df9510080b7530abc0a649d66b295d1648de

SHA-256:
5475b346c67e804b4326c8ca714fff6ec57b2b7816f38d230aa2e9a14e4190c4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/18/2024 10:49:05 AM UTC  (today)

File size:
107.8 KB (110,432 bytes)

Product version:
2.00.0011

Copyright:
2005~2013

Trademarks:
COSMOSBANK

Original file name:
COSEATM.ocx

File type:
OLE control extension (Win32 OCX)

Common path:
C:\windows\downloaded Program Files\coseatm.ocx

Digital Signature
Signed by:
Cosmos Bank ,Taiwan

Authority:
GlobalSign nv-sa

Valid from:
5/16/2014 10:13:18 AM

Valid to:
7/11/2015 2:41:48 PM

Subject:
CN="Cosmos Bank ,Taiwan", OU="Cosmos Bank ,Taiwan", O="Cosmos Bank ,Taiwan", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EB131959332763A793378FDA27F720EF

Registration
CLSID:
{CFAD3EDD-7193-4C3C-8668-7B6AFB0D59C4}

ProgID:
CosmosBankEATM.COSMOSEATM

COM registered:
Yes

File PE Metadata
Compilation timestamp:
2/1/2013 5:59:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:h/fhhWvNYfMWhhaQ3mH3tUlJFUhJY0hmJ2cfyyATqY7QdxREVfJ8G0Ghpcs:FpsVYdhhx3mH3tUlvUhmqmjjREVia

Entry address:
0x1720

Entry point:
5A, 68, 50, 5D, 01, 11, 68, 54, 5D, 01, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 60, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 40, 00, 00, 00, 14, 58, C2, 38, 87, 2C, 2B, 49, AD, 26, BB, CC, D5, FF, 53, 51, 00, 00, 00, 00, 02, 00, 07, 00, 00, 00, 20, 20, 20, 3D, 20, 20, 43, 6F, 73, 6D, 6F, 73, 42, 61, 6E, 6B, 45, 41, 54, 4D, 00, 61, B8, 55, AE, F5, BB, C8, A6, E6, 45, 41, 54, 4D, A4, B8, A5, F3, 00, 30, 0D, 0A, 20, 20, 20, 20, 00, 20, 57, 65, 69, 67, 68, 74, 00, 00, 00, 00, A8, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.7822

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
80 KB (81,920 bytes)

ActiveX Install
Name:
{CFAD3EDD-7193-4C3C-8668-7B6AFB0D59C4}


Scan COSEATM.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.