home

USBKeyTools.EXE

华大智宝建行网银盾-用户管理工具 应用程序

BeiJing HuaDa ZhiBao Electronic System CO., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘USBKeyTools.exe’.
Publisher:
北京华大智宝电子系统有限公司  (signed by BeiJing HuaDa ZhiBao Electronic System CO., LTD.)

Product:
华大智宝建行网银盾-用户管理工具 应用程序

Description:
华大智宝建行网银盾用户管理工具

Version:
1, 6, 0, 67

MD5:
253639ef6fd62baaab8220e5e584f984

SHA-1:
7160ecf1881ca46236052cf63f4db2516138011d

SHA-256:
7007331578954b5032d5e57167144fe8cb91f350d61866fcaca5ff6eda05299b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 4:10:32 PM UTC  (today)

File size:
693.4 KB (709,992 bytes)

Product version:
1, 6, 0, 67

Copyright:
版权所有 (C) 2014

Original file name:
USBKeyTools.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\ccbcomponents\hdzb\usbkeytools.exe

Digital Signature
Signed by:
BeiJing HuaDa ZhiBao Electronic System CO., LTD.

Authority:
VeriSign, Inc.

Valid from:
3/26/2012 8:00:00 AM

Valid to:
5/26/2015 7:59:59 AM

Subject:
CN="BeiJing HuaDa ZhiBao Electronic System CO., LTD.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="BeiJing HuaDa ZhiBao Electronic System CO., LTD.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
67D896B97BDB9FC4D250D8D9F81E9A17

File PE Metadata
Compilation timestamp:
5/6/2014 7:40:44 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:loXA5mkPsxBr+c14Xt8qNrn0g3d8cvmJiSu4MGk7:aXnkPsrr+c1cBNrn0gyyz4E

Entry address:
0x31390

Entry point:
8B, FF, 55, 8B, EC, E8, B6, 19, 01, 00, E8, 11, 00, 00, 00, 5D, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 6A, FE, 68, 90, 1F, 47, 00, 68, E0, E9, 42, 00, 64, A1, 00, 00, 00, 00, 50, 83, C4, 94, 53, 56, 57, A1, 50, 68, 47, 00, 31, 45, F8, 33, C5, 50, 8D, 45, F0, 64, A3, 00, 00, 00, 00, 89, 65, E8, C7, 45, 90, 00, 00, 00, 00, C7, 45, FC, 00, 00, 00, 00, 8D, 45, A0, 50, FF, 15, DC, C1, 45, 00, C7, 45, FC, FE, FF, FF, FF, EB, 26, B8, 01, 00, 00, 00, C3, 8B, 65, E8, C7...
 
[+]

Entropy:
5.9262

Code size:
362 KB (370,688 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USBKeyTools.exe

Command:
C:\Program Files\ccbcomponents\hdzb\usbkeytools.exe


Scan USBKeyTools.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.