dvdfabpasskey.exe

DVDFab Passkey

Alipay.com Corporation

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘DVDFab Passkey’.
Publisher:
Fengtao Software Inc.  (signed by Alipay.com Corporation)

Product:
DVDFab Passkey

Description:
DVDFab Passkey is a Windows-based driver that works on-the-fly to unprotect encrypted movie DVDs and Blu-ray discs. - x86

Version:
8.0.5.9

MD5:
75edaeb9543a8055af435d3c9070f67f

SHA-1:
c0e44be967e49d5afeaab3d3890bf2c39bed7383

SHA-256:
d6af1ee8dbb4ec03ea6c951c7f7c8e6cb14a6da3f738ea9f0f276c1791cc012a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
6/27/2019 8:15:23 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.TsCabk
1.3.0.4959

File size:
1.3 MB (1,370,600 bytes)

Product version:
8.0.5.9

Copyright:
Copyright (C) 2001-2010 Fengtao Software Inc. All rights reserved.

Original file name:
dvdfabpasskey.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\dvdfab passkey\dvdfabpasskey.exe

Digital Signature
Authority:
Alipay.com Corporation

Valid from:
3/8/2012 3:15:48 PM

Valid to:
3/8/2014 3:15:48 PM

Subject:
T=m-alipay, O=Alipay.com Corporation, OU=CA Center, CN=f79ab2d42437fa5a046ddb5a171bcb7c

Issuer:
CN=Alipay.com Corporation Machine CA, OU=Machine CA Center, O=Alipay.com Corporation

Serial number:
0095BC2436D17D80640532296A300A17C3

File PE Metadata
Compilation timestamp:
4/7/2012 12:17:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:5y9sdn4Y/GzSsKfZo9PA7P/oteon42S68FcPeo/4kKNLo2STW1HGXy1l:5d32Sto9G/oER/JFcPLwkYLbSKwGl

Entry address:
0x1000

Entry point:
68, 01, 60, 89, 00, E8, 01, 00, 00, 00, C3, C3, 92, 97, E9, 54, 21, D9, F7, 78, 80, EA, 3B, 30, C7, 73, 6F, 95, A0, 29, 79, 9B, B8, EF, 28, 57, 92, 5B, 66, 6C, 19, 9A, 15, 6B, 3D, C1, 74, D7, 80, 40, 08, 7A, B0, DC, 0E, A7, 33, 3A, 97, C5, E9, 92, A5, 43, A2, 7D, B3, AE, D4, 66, 63, 9D, E0, E0, 0D, 82, 2E, 11, 7A, 67, 61, FF, DC, BE, B0, 3C, 51, 47, 62, 0F, 7B, 25, 22, C6, E1, 37, B8, 5E, 7E, 19, DE, CF, 73, 72, 9D, 00, B4, 64, 80, E8, 8E, D6, FD, 95, 7C, 04, EA, 82, 99, 44, 06, 34, E1, F7, B7, 69, CA, 87...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.6 MB (1,638,400 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DVDFab Passkey

Command:
"C:\Program Files\dvdfab passkey\dvdfabpasskey.exe"


Scan dvdfabpasskey.exe - Powered by Reason Core Security