home

COSEATM.ocx

EATM OCX

Cosmos Bank Taiwan

Publisher:
COSMOSBANK  (signed by Cosmos Bank Taiwan)

Product:
EATM OCX

Description:
EATM.OCX

Version:
2.00.0010

MD5:
9a0d49f35d21b5ed742d2c881d9f4fd5

SHA-1:
c1d939f344fd99a610f8b54bac02b1b3fb5b3a8b

SHA-256:
665f2420e35b636240b3fb6fd22dbbd56038d7f381beb4e8e240dd120bb3ca51

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 11:38:02 PM UTC  (a few moments ago)

File size:
110.9 KB (113,560 bytes)

Product version:
2.00.0010

Copyright:
2005~2011

Trademarks:
COSMOSBANK

Original file name:
COSEATM.ocx

File type:
OLE control extension (Win32 OCX)

Common path:
C:\windows\downloaded Program Files\coseatm.ocx

Digital Signature
Signed by:
Cosmos Bank Taiwan

Authority:
GlobalSign nv-sa

Valid from:
6/15/2009 2:47:28 PM

Valid to:
6/15/2011 2:47:28 PM

Subject:
E=joanerliang@cosmosbank.com.tw, CN=Cosmos Bank Taiwan, O=Cosmos Bank Taiwan, C=TW

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
01000000000121E2D4287D

Registration
CLSID:
{CFAD3EDD-7193-4C3C-8668-7B6AFB0D59C4}

ProgID:
CosmosBankEATM.COSMOSEATM

COM registered:
Yes

File PE Metadata
Compilation timestamp:
9/21/2010 9:02:45 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:SajysQdhxx32HHtUlfUh26mzuc0VnaD/y:dQTiHNyh6mZ0VC/y

Entry address:
0x1720

Entry point:
5A, 68, 50, 5D, 01, 11, 68, 54, 5D, 01, 11, 52, E9, E9, FF, FF, FF, 00, 00, 00, 60, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 40, 00, 00, 00, 14, 58, C2, 38, 87, 2C, 2B, 49, AD, 26, BB, CC, D5, FF, 53, 51, 00, 00, 00, 00, 02, 00, 07, 00, 00, 00, 30, 30, 30, 30, 2D, 43, 43, 6F, 73, 6D, 6F, 73, 42, 61, 6E, 6B, 45, 41, 54, 4D, 00, 36, B8, 55, AE, F5, BB, C8, A6, E6, 45, 41, 54, 4D, A4, B8, A5, F3, 00, 53, 5C, 73, 79, 73, 74, 65, 00, 33, 32, 5C, 73, 74, 64, 6F, 00, 00, 00, 00, A8, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8605

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
80 KB (81,920 bytes)

ActiveX Install
Name:
{CFAD3EDD-7193-4C3C-8668-7B6AFB0D59C4}


Scan COSEATM.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.