home

LABServiSignKeeper.exe

LABServiSignKeeper.exe

LAND BANK OF TAIWAN CO.,LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘LABServiSign’.
Publisher:
臺灣土地銀行 LAND BANK OF TAIWAN CO.,LTD.  (signed by LAND BANK OF TAIWAN CO.,LTD.)

Product:
LABServiSignKeeper.exe

Version:
1.0.16.0922

MD5:
3ee5a2afd8a8776b22956f2342d0e152

SHA-1:
824e83a768f8534c5a4f883a9902f67a5eefd642

SHA-256:
558f00283c505a1a6bd72892a8a3976e55fe80d26a7a9c1db18b17d0b66350e3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/4/2025 4:35:08 PM UTC  (today)

File size:
246.4 KB (252,352 bytes)

Product version:
1.0.16.0922

Copyright:
臺灣土地銀行 LAND BANK OF TAIWAN CO.,LTD.

Original file name:
LABServiSignKeeper.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\lab\labservisign\labservisignkeeper.exe

Digital Signature
Signed by:
LAND BANK OF TAIWAN CO.,LTD.

Authority:
Symantec Corporation

Valid from:
5/3/2016 8:00:00 AM

Valid to:
4/28/2017 7:59:59 AM

Subject:
CN="LAND BANK OF TAIWAN CO.,LTD.", OU=MIS, O="LAND BANK OF TAIWAN CO.,LTD.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6EF3B0B4CD484C36B4DFA9F849A022A5

File PE Metadata
Compilation timestamp:
10/4/2016 11:33:36 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x852E

Entry point:
E8, D4, 56, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 80, 43, 42, 00, E8, FC, 3F, 00, 00, E8, A5, 58, 00, 00, 0F, B7, F0, 6A, 02, E8, 67, 56, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 2E, 3E, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.1921

Code size:
108.5 KB (111,104 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
LABServiSign

Command:
"C:\Program Files\lab\labservisign\labservisignkeeper.exe"


Scan LABServiSignKeeper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.