home

hhukcert02.exe

hhukcert 应用程序

Beijing Huahong Integrated Circuit Design Co.,LTD

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘hhukcert02’.
Publisher:
中国工商银行  (signed by Beijing Huahong Integrated Circuit Design Co.,LTD)

Product:
hhukcert 应用程序

Description:
工行二代U盾证书服务

Version:
1, 0, 0, 7

MD5:
ec6f16ab82a3c2e804a719cc4d600be8

SHA-1:
ca88319d5d262b9bf2c7c2017510293aa590e0e5

SHA-256:
b62d5650bbce9f41c137e58b8f03622895b73d063120b0f8c973eff960c54751

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 2:16:24 AM UTC  (today)

File size:
87.9 KB (90,016 bytes)

Product version:
1, 0, 0, 7

Copyright:
版权所有 (C) 2014

Original file name:
hhukcert.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\windows\syswow64\hhukcert02.exe

Digital Signature
Signed by:
Beijing Huahong Integrated Circuit Design Co.,LTD

Authority:
VeriSign, Inc.

Valid from:
3/26/2012 8:00:00 AM

Valid to:
6/5/2015 7:59:59 AM

Subject:
CN="Beijing Huahong Integrated Circuit Design Co.,LTD", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Beijing Huahong Integrated Circuit Design Co.,LTD", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6A8D19F141A1252C34ACC127FD225A82

File PE Metadata
Compilation timestamp:
8/12/2014 9:10:27 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
1536:qiKQjzcSJb0aU1wapUfZ1SidwbxvUf6LJoOB37wOr5tPTI1G:qiKQjzcSJbhUJpUeVNvVFiI5tPR

Entry address:
0x5D0A

Entry point:
E8, 37, 47, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 53, 56, 57, 55, 6A, 00, 6A, 00, 68, 2C, 5D, 40, 00, FF, 75, 08, E8, 92, A6, 00, 00, 5D, 5F, 5E, 5B, 8B, E5, 5D, C3, 8B, 4C, 24, 04, F7, 41, 04, 06, 00, 00, 00, B8, 01, 00, 00, 00, 74, 32, 8B, 44, 24, 14, 8B, 48, FC, 33, C8, E8, 57, F0, FF, FF, 55, 8B, 68, 10, 8B, 50, 28, 52, 8B, 50, 24, 52, E8, 14, 00, 00, 00, 83, C4, 08, 5D, 8B, 44, 24, 08, 8B, 54, 24, 10, 89, 02, B8, 03, 00, 00, 00, C3, 53, 56, 57, 8B, 44, 24, 10, 55, 50, 6A, FE, 68, 34, 5D, 40, 00, 64...
 
[+]

Entropy:
6.4824

Code size:
61.5 KB (62,976 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
hhukcert02

Command:
C:\windows\syswow64\hhukcert02.exe


Scan hhukcert02.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.