home

spdbsafe_v4.ocx

POWERENTER

CFCA Operation CA2

Publisher:
CSII  (signed by CFCA Operation CA2)

Product:
POWERENTER

Description:
浦发银行安全输入控件

Version:
2, 3, 3, 93

MD5:
9b496793b04a97020a153ea938adf881

SHA-1:
f23d1b97f1644c8a902f9f6d129e393e41bc3cb4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 3:59:19 AM UTC  (today)

File size:
849 KB (869,360 bytes)

Product version:
2, 3, 3, 93

Copyright:
Copyright (C) 2008-2011 CSII

Trademarks:
POWERENTER

Original file name:
PowerEnterSPDB.OCX

File type:
OLE control extension (Win32 OCX)

Common path:
C:\Windows\System32\spdbsafe_v4.ocx

Digital Signature
Signed by:
CFCA Operation CA2

Authority:
CFCA Operation CA2

Valid from:
3/11/2009 1:58:00 PM

Valid to:
3/11/2014 1:58:00 PM

Subject:
CN=Shanghai Pudong Development Bank, OU=codesign, OU=ebank.spdb.com.cn, O=CFCA Operation CA2, C=CN

Issuer:
O=CFCA Operation CA2, C=CN

Serial number:
41C6795BB429279B07FCF8899F04D978

File PE Metadata
Compilation timestamp:
7/11/2011 9:44:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:J6Pnq/ySvlGuRE3lNDWbUfPqqu233Q/YmSTtNHUyB73gr:kPnq/ySzSlNDWas23A/YmgtNHxEr

Entry address:
0x17972D

Entry point:
E8, 5A, EB, 04, 00, 6B, F6, FA, 94, 2F, AC, 0A, DD, EA, 36, 22, F2, FE, E6, F0, EF, EE, F0, F9, FC, E0, FB, 84, C6, 5D, FD, 3B, 8F, 0B, CB, 6C, 3E, 6C, EB, 2A, 73, BC, D8, 06, E6, C1, D4, D7, B8, 87, 21, EB, AC, 02, 3A, 68, 3E, 82, 39, E1, 1B, 96, 25, F9, E3, B1, 42, E5, 6E, 4E, 86, FE, 30, 81, C7, BA, E1, 5B, DB, C9, 15, 85, BB, 68, 01, 51, 03, 4F, 10, 47, 09, 50, 17, 40, 15, 43, 15, AE, 99, 95, 02, 52, F8, 44, 50, F0, 1F, FD, FD, 8C, C7, 92, 6E, A2, B4, E9, C2, 18, 40, 7F, 42, 57, F0, C2, CA, 8F, BD, 23...
 
[+]

Entropy:
7.8480  (probably packed)

Code size:
148 KB (151,552 bytes)

ActiveX Install
Name:
{EA9B4D5A-9A24-4103-99C6-B83CDE3F0DDA}


Scan spdbsafe_v4.ocx - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.