home

USBKeyTools.EXE

华大智宝建行网银盾-用户管理工具 应用程序

BeiJing HuaDa ZhiBao Electronic System CO., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘USBKeyTools.exe’.
Publisher:
北京华大智宝电子系统有限公司  (signed by BeiJing HuaDa ZhiBao Electronic System CO., LTD.)

Product:
华大智宝建行网银盾-用户管理工具 应用程序

Description:
华大智宝建行网银盾用户管理工具

Version:
1, 6, 0, 46

MD5:
9a86f8a01e690e288813df16cf4e0416

SHA-1:
89b3437d60d7a65c5df3e9aeb30047bc5b53e4b3

SHA-256:
ff23d61f7fd8f1b1be44849834a80143e388cd17c62325295409bae5d5534f18

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 4:39:40 AM UTC  (today)

File size:
132.8 KB (135,992 bytes)

Product version:
1, 6, 0, 46

Copyright:
版权所有 (C) 2012

Original file name:
USBKeyTools.EXE

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\Program Files\ccbcomponents\hdzb\usbkeytools.exe

Digital Signature
Signed by:
BeiJing HuaDa ZhiBao Electronic System CO., LTD.

Authority:
VeriSign, Inc.

Valid from:
3/12/2009 8:00:00 PM

Valid to:
4/11/2012 7:59:59 PM

Subject:
CN="BeiJing HuaDa ZhiBao Electronic System CO., LTD.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="BeiJing HuaDa ZhiBao Electronic System CO., LTD.", L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
08FF526DAC4066CF055DFEA60CAD5314

File PE Metadata
Compilation timestamp:
3/26/2012 8:47:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:MIAgnsUih0m31yOIKYqcerK2Gh5yM6yGL+:MOsU7m349KJceron7L

Entry address:
0xABFB

Entry point:
55, 8B, EC, 6A, FF, 68, 70, D7, 40, 00, 68, 50, AB, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, EC, C3, 40, 00, 59, 83, 0D, 68, 13, 41, 00, FF, 83, 0D, 6C, 13, 41, 00, FF, FF, 15, F0, C3, 40, 00, 8B, 0D, 4C, 13, 41, 00, 89, 08, FF, 15, F4, C3, 40, 00, 8B, 0D, 48, 13, 41, 00, 89, 08, A1, F8, C3, 40, 00, 8B, 00, A3, 64, 13, 41, 00, E8, 17, 01, 00, 00, 39, 1D, D0, 02, 41, 00, 75, 0C, 68, 7E, AD, 40, 00, FF, 15, FC, C3...
 
[+]

Entropy:
5.8538

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
40.5 KB (41,472 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USBKeyTools.exe

Command:
C:\Program Files\ccbcomponents\hdzb\usbkeytools.exe


Scan USBKeyTools.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.