home

spdbsafe_v4.ocx

POWERENTER

CFCA Operation CA2

Publisher:
CSII  (signed by CFCA Operation CA2)

Product:
POWERENTER

Description:
浦发银行安全输入控件

Version:
2, 3, 3, 93

MD5:
e0342a4263cc447f3594ade37ffcbb6a

SHA-1:
ee8a74a2e260feda2e8ea32d57a2d2fe70013922

SHA-256:
9496f84fa2431e372ce9e169be680a735ff9475e1ad5137df1b175bceea3612b

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 6:45:40 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.TsCabk
1.3.0.4959

File size:
861 KB (881,656 bytes)

Product version:
2, 3, 3, 93

Copyright:
Copyright (C) 2008-2011 CSII

Trademarks:
POWERENTER

Original file name:
PowerEnterSPDB.OCX

File type:
OLE control extension (Win32 OCX)

Common path:
C:\Program Files\spdb ebank security\spdbsafe_v4.ocx

Digital Signature
Signed by:
CFCA Operation CA2

Authority:
CFCA Operation CA2

Valid from:
3/11/2009 1:58:00 PM

Valid to:
3/11/2014 1:58:00 PM

Subject:
CN=Shanghai Pudong Development Bank, OU=codesign, OU=ebank.spdb.com.cn, O=CFCA Operation CA2, C=CN

Issuer:
O=CFCA Operation CA2, C=CN

Serial number:
41C6795BB429279B07FCF8899F04D978

File PE Metadata
Compilation timestamp:
10/7/2011 11:33:44 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:/sauN02q2dNlH+1k0KvTgWic63SOtyIW/Lkd:/SO2AxKglSOhWId

Entry address:
0x1CCA6C

Entry point:
E8, 90, 1F, 00, 00, C4, 40, C2, BD, B5, 34, 51, A6, 51, B0, EB, 72, F5, AC, 93, 3E, A9, 2C, 0B, 6E, E2, DC, 85, 0B, 66, 42, 26, 97, 2A, B6, E8, 45, A0, EA, AA, 87, F8, 3F, AC, D7, B6, 82, DE, 52, DB, A5, A5, CA, 8E, 8F, 91, 81, 9E, C8, 0F, CA, 82, FE, 43, BC, FC, 29, B7, 04, 0D, AE, 16, A0, 6D, 2E, E5, 13, 84, C9, 0F, 68, C3, 77, 55, DF, 39, 03, 59, 37, BD, C3, D5, B7, 79, 8D, 50, B4, 04, AE, B2, 23, 93, 3D, BB, 4B, A4, A8, BD, B5, 34, 6B, B4, 23, 2E, 92, F4, C8, 09, 65, E1, CA, E1, 10, DC, 21, F5, FC, 83...
 
[+]

Entropy:
7.8511  (probably packed)

Code size:
148 KB (151,552 bytes)

Scan spdbsafe_v4.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.