» dvdfabpasskey.exe
Overview
Analysis
File Details
Behaviors (1)

dvdfabpasskey.exe

DVDFab Passkey

Alipay.com Corporation

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘DVDFab Passkey’.

File name:

dvdfabpasskey.exe

Publisher:

Fengtao Software Inc. (signed by Alipay.com Corporation)

Product:

DVDFab Passkey

Description:

DVDFab Passkey is a Windows-based driver that works on-the-fly to unprotect encrypted movie DVDs and Blu-ray discs. - x86

Version:

8.0.5.8

MD5:

561da2b11d4c892db11306e19c944957

SHA-1:

c61648ecf6cfb50c373661fbf0c36436dfe93cb7

SHA-256:

272c84181a7ee5604ff4a24449b48222db41c65a9533f5fe2a8e0bbb9c66a2e6

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 8:46:21 PM UTC (today)

File size:

1.3 MB (1,375,208 bytes)

Product version:

8.0.5.8

Original file name:

dvdfabpasskey.exe

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\dvdfab passkey\dvdfabpasskey.exe

Digital Signature

Signed by:

Alipay.com Corporation

Authority:

Alipay.com Corporation

Valid from:

3/8/2012 5:15:48 PM

Valid to:

3/8/2014 5:15:48 PM

Subject:

T=m-alipay, O=Alipay.com Corporation, OU=CA Center, CN=f79ab2d42437fa5a046ddb5a171bcb7c

Issuer:

CN=Alipay.com Corporation Machine CA, OU=Machine CA Center, O=Alipay.com Corporation

Serial number:

0095BC2436D17D80640532296A300A17C3

File PE Metadata

Compilation timestamp:

4/1/2012 12:19:45 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:wfyWgxsBQZHubg1QXR9FAyOpayjPKicw1L4RFbo48o2STW1HGjdcU:wfyPx48usQXR/Alay7CrRSbSKwCU

Entry address:

0x1000

Entry point:

68, 01, 60, 89, 00, E8, 01, 00, 00, 00, C3, C3, 92, 17, E9, 45, 46, EC, 57, C0, D8, BE, 9E, F9, 91, B8, 83, 85, 00, 51, 3B, 5C, F2, DC, DC, 7A, C5, FE, 8C, 29, 1C, 1A, 9A, 26, 34, B4, AF, 2E, A7, 28, 22, C4, 63, 85, FA, 27, 33, 3D, CF, B5, 9E, CC, 22, FE, 06, DD, C3, F8, E8, 1B, 7D, 7C, B8, 89, 59, C1, 0C, 33, 02, 50, C8, 16, 9C, 30, 7C, C9, 10, C3, 82, 4F, 7B, 50, BA, 90, 62, AF, 84, 1C, 7F, 8C, AF, 85, 14, EE, 0C, CB, 59, AA, 65, 51, 58, E8, 53, D4, AC, 7E, 91, 1F, FD, 91, A6, 7A, 66, F6, BF, 36, C4, 85... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

1.6 MB (1,637,376 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

DVDFab Passkey

Command:

"C:\Program Files\dvdfab passkey\dvdfabpasskey.exe"

Scan dvdfabpasskey.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.