home

esuncsp64.dll

ESunCSP Module

E.Sun Commercial Bank, Ltd.

Publisher:
玉山銀行  (signed by E.Sun Commercial Bank, Ltd.)

Product:
ESunCSP Module

Version:
1, 0, 4, 7

MD5:
db89e33401c43ebd86d90b9e99f917a9

SHA-1:
43b20f8e8174b8b43e0860bbb07089ca6c874be3

SHA-256:
654da938c7ea83fd46556c626b8dff4e8bc6a619198386bdeda65daa3c6df232

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 12:24:56 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V0827
7.2.362

File size:
377.1 KB (386,200 bytes)

Product version:
1, 0, 4, 7

Copyright:
Copyright 2013

Original file name:
ESunCSP.DLL

File type:
Dynamic link library (Win64 DLL)

Common path:
C:\windows\downloaded Program Files\esuncsp64.dll

Digital Signature
Signed by:
E.Sun Commercial Bank, Ltd.

Authority:
GlobalSign nv-sa

Valid from:
7/8/2011 5:06:25 PM

Valid to:
7/8/2014 5:06:25 PM

Subject:
CN="E.Sun Commercial Bank, Ltd.", OU="E.Sun Commercial Bank, Ltd.", O="E.Sun Commercial Bank, Ltd.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112115B5EBEEA806FBB06473BB0A1548EFD8

File PE Metadata
Compilation timestamp:
5/9/2013 5:35:07 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:Yxq61jg1BgV4GGaS1QiB4X7DNnTVPvK7geBQ9Dq5ZGgVXNFH:Yxf1jg1LGGj1F+7Byb

Entry address:
0x2AE54

Entry point:
48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, B7, 5B, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 8D, 05, D1, 5D, 00, 00, 48, 8D, 0D, 1A, 69, 00, 00, 48, 89, 05, FF, 6D, 02, 00, 48, 8D, 05, AC, 5D, 00, 00, 48, 89, 0D, E9, 6D, 02, 00, 48, 89, 05, F2, 6D, 02, 00, 48, 8D, 05, 9F, 5D, 00, 00, 48, 89, 0D, FC, 6D, 02, 00, 48, 89, 05, E5, 6D, 02, 00, 48...
 
[+]

Entropy:
6.2283

Code size:
226 KB (231,424 bytes)

ActiveX Install
Name:
{F0754118-706B-4E14-8ED9-96E7A18DB894}


Scan esuncsp64.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.