home

ikeeperupdate.exe

iKeeperPSBC Update

POSTAL SAVINGS BANK OF CHINA

Publisher:
Silver Aegis  (signed by POSTAL SAVINGS BANK OF CHINA)

Product:
iKeeperPSBC Update

Description:
中国邮政储蓄银行网银助手自动升级程序

Version:
1.0.0.1

MD5:
3db137ef4e90712272f6db731a8ee2f0

SHA-1:
0dce268835ab0a1995f946aa671bb5ed70e17f3a

SHA-256:
255a7accd1379337a558a1904a7effeaf2a848ec93a75a793ed9607a3506867c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 3:33:14 PM UTC  (today)

File size:
1.2 MB (1,242,168 bytes)

Product version:
1.0.0.1

Copyright:
Copyright (C) 中国邮政储蓄银行

Original file name:
中国邮政储蓄银行网银助手自动升级程序

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\psbc\ikeeper\ikeeperupdate.exe

Digital Signature
Signed by:
POSTAL SAVINGS BANK OF CHINA

Authority:
VeriSign, Inc.

Valid from:
2/23/2012 8:00:00 AM

Valid to:
4/24/2014 7:59:59 AM

Subject:
CN=POSTAL SAVINGS BANK OF CHINA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=POSTAL SAVINGS BANK OF CHINA, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1D18B5FAB4F600FC1CF1C83CDF4134E2

File PE Metadata
Compilation timestamp:
6/3/2013 1:57:49 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:M/rBNiRvCNIk6ihg5W8opZoD+O0YDrdLTkQuiO3/N/tEu:ir2dg6mMWL0HLW/9tf

Entry address:
0x24A22A

Entry point:
9C, 60, C7, 44, 24, 20, D7, AC, 9E, BC, E8, 69, 77, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 8B, AE, 24, 00, 01, 00, 00, 00, 01, 00, 00, 00, 01, 00, 00, 00, 64, A2, 24, 00, 6A, A2, 24, 00, 68, A2, 24, 00, 00, 00, 00, 00, 00, 00, 6E, A2, 24, 00, C5, B8, 5D, EC, 6B, 57, 1D, E2, FA, 5F, 05, EF, B6, A5, 6F, 9B, C6, 27, 4B, 28, 30, 73, 4A, 74, FB, C3, A0, 95, D6, 98, 3E, 0B, D0, E9, D9, BF, 16, 21, 30, 45, B7, 8A, 3D, EC, E7, E9, 73, B3, 43, 54, 1C, 2B, 01, 8F, 6A, C3, 24, 8A, FB, 2E...
 
[+]

Entropy:
7.8857  (probably packed)

Code size:
153.5 KB (157,184 bytes)

Scan ikeeperupdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.