| File Name | cool-android-assistant.exe |
| File Type |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Scanner Version | 1.0.231.174 |
| Database Version | 2025-12-22 05:00:35 UTC |
No threats detected by our scanner
| Hash Type | Value | Action |
|---|---|---|
| MD5 |
810456cd4f54cf56b771c038b06a175d
|
|
| SHA1 |
525d98710def1ce4bb0b53a07048ac9b766158e3
|
|
| SHA256 |
146adc67a00b79c3342f2ab67e067dd06f12dc44c87177eae5f006346772c259
|
|
| SHA512 |
964554b6f9890eef513cf583fc240eaff4d1047507e82493b4a37447c2750ac7c712245db0d2611bd8d0f169a89a6d9d355f6396e04b631773616ddb0ba539d7
|
|
| ImpHash |
56a78d55f3f7af51443e58e0ce2fb5f6
|
| Icon |
Hash: 59ace865b7c4702fd2a4778f78761232
Fuzzy: 4430f78a749f432b3ae8e0df74d6e947 dHash: 32e9d4f49498c4f0 |
| Image Base | 0x00400000 |
| Entry Point | 0x004034f7 |
| Compilation Time | 2021-09-25 21:55:49 |
| Checksum | 0x01881ff1 (Actual: 0x01881ff1) |
| OS Version | 4.0 |
| PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
|
| Digital Signature | OK |
| Imports |
7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32 |
| Exports | 0 functions |
| Resources | 33 Resources |
| Sections | 5 Sections |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
|---|---|---|---|---|---|---|
.text |
0x00001000 |
25,877 bytes | 26,112 bytes | 6.44 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
26E66BEA3B62728A217AE7BF343EBC1A |
.rdata |
0x00008000 |
5,018 bytes | 5,120 bytes | 5.15 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
691F0273DAD50EC603F6FEDF850B58EE |
.data |
0x0000a000 |
131,896 bytes | 1,536 bytes | 4.01 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
4B75405561A3FCC45B8FE27A6808F3B5 |
.ndata |
0x0002b000 |
167,936 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.rsrc |
0x00054000 |
194,640 bytes | 195,072 bytes | 6.17 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D5C50D92FC6C415798A59FD1A565BD21 |
| Resource Type | Count | Total Size | Percentage |
|---|---|---|---|
| RT_ICON | 6 | 184,623 bytes | |
| RT_DIALOG | 25 | 6,910 bytes | |
| RT_GROUP_ICON | 1 | 90 bytes | |
| RT_MANIFEST | 1 | 1,260 bytes |
| Signing Date | 09:06 AM 09/18/2025 (114 days ago) |
| Verification Status | Signed |
| Signers | SHENZHEN QIXINGSHI TECHNOLOGY CO.,LTD; Sectigo Public Code Signing CA EV R36; Sectigo Public Code Signing Root R46; Sectigo (AAA) |
| Counter Signers | Sectigo Public Time Stamping Signer R36; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46 |
48 FC 93 B4 60 55 94 8D 36 A7 C9 8A 89 D6 94 1633 D7 08 A8 91 40 53 19 E2 A5 BB D3 39 B9 AD 6E6E 60 05 C1 EB B9 75 B9 5D 40 C6 FE CA 12 64 05A4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 247A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68✓ This file has been digitally signed and the certificate chain has been verified
OK
Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:
Download Anti-MalwareThis file appears clean, but regular security maintenance is important
Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware
Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!