» jrsysMSCryptoX64.dll
Overview
Analysis
File Details
Behaviors (1)

jrsysMSCryptoX64.dll

jrsysMSCryptoX64 Module

中國信託綜合證券股份有限公司

File name:

Publisher:

jrsys International Corp.. (signed by 中國信託綜合證券股份有限公司)

Product:

jrsysMSCryptoX64 Module

Description:

jrsysMSCryptoX64 Module

Version:

1.0.0.7

MD5:

d249ba848344d7e671c4812973f320cb

SHA-1:

5b040c09a81c9187caa5d199c3c49908233db397

SHA-256:

4f88c3ac16ca8d659b6a7322b2772244a7ab6e8ae0c990a8db5589f2ba1dccac

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

2/26/2025 12:29:40 AM UTC (today)

File size:

2.3 MB (2,415,816 bytes)

Product version:

1.0.0.7

Original file name:

jrsysMSCryptoX64.dll

File type:

Dynamic link library (Win64 DLL)

Digital Signature

Signed by:

中國信託綜合證券股份有限公司

Authority:

VeriSign, Inc.

Valid from:

6/17/2014 8:00:00 AM

Valid to:

8/17/2015 7:59:59 AM

Subject:

CN=中國信託綜合證券股份有限公司, OU=IT, O=中國信託綜合證券股份有限公司, L=Taipei, S=Taiwan, C=TW

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5784BE6CCF4F97060BC6026D321CBBB2

Registration

CLSIDs:

{049CCCEE-F74A-4D06-8579-ED2882731035}, {2AB6EF9B-B351-4815-AC2D-C891780AC4FF}, {3E638497-5F1F-4DEA-A9E2-F512F79934C5}, {5434D9A8-2B40-4514-AD05-7225C5A4606F}, {8FA5BE62-FD16-4133-8A41-B883C050C12E}, {ED55D3D0-BDA0-4C42-95ED-88FD808298F1}

ProgIDs:

JrsysMSCrypto.jrsysPKCS11.1, JrsysMSCrypto.jrsysUtils.1, JrsysMSCrypto.jrsysSmartCard.1, JrsysMSCrypto.jrsysCertificate.1, JrsysMSCrypto.jrsysMSCapi.1, JrsysMSCrypto.jrsysCrypto.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

7/16/2014 11:23:53 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:BwGkXWJEgFlL4PM+MNIAvXAU2w812lnq1kXTVV+J8Z/I0NdhNOhhkmY5tbzt/9:5kUS8IAAkXTVVa8Z/FNdhNOhhkmY5tbv

Entry address:

0x160C34

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 5B, BF, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 8B, C1, 0F, B7, 10, 48, 83, C0, 02, 66, 85, D2, 75, F4, 48, 2B, C1, 48, D1, F8, 48, FF, C8, C3, CC, CC, CC, 4C, 8B, DC, 4D, 89, 43, 18, 4D, 89, 4B, 20, 48, 83, EC, 38, 49, 8D, 43, 20, 45, 33, C9, 49, 89, 43, E8, E8, 51, F3, FF, FF, 48, 83, C4, 38, C3... 
[+]

Entropy:

6.1699

Code size:

1.5 MB (1,596,416 bytes)

Safe for Initializing Control

CLSID:

{049CCCEE-F74A-4D06-8579-ED2882731035}

CLSID name:

jrsysPKCS11 Class

Scan jrsysMSCryptoX64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.