The os2go 4 1 portable exe (EaseUS OS2GO Application) CHENGDU YIWO Tech Development Co , Ltd File Malware Analysis
Gridinsoft Logo
File Icon

The os2go_4.1_portable.exe (EaseUS OS2GO Application) File Analysis

Technical Analysis

File Name os2go_4.1_portable.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version 1.0.223.174
Database Version 2025-09-01 05:00:50 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
57,971,896
File Size (bytes)
2025-09-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
dc30dfd081bbeb98aac79ad691565329
SHA1
2397ceb696a2bbbc91bf6bd02db0369d9a619ddb
SHA256
7f86f9fbb6f14efce4d2649b86ba3e525d260fc8d4d5fb3deda6a3709588d91c
SHA512
55dbb59885b2efd0e72b5b9c48c9d7a1ecaba70e778e65cb51f2a7ec1489b80c1c3db70c725bac251e06492ab85096a86e107839debefae83ccdeec2770862f0
ImpHash
f4639a0b3116c2cfc71144b88a929cfd

PE Analysis

Basic Information

Icon
Hash: 9d2675785fab1c4b2466ee5abcfa3e50
Fuzzy: b2e38e9f745e275cbc4759cb33072cab
dHash: 8669e88a8ae86186
Image Base 0x00400000
Entry Point 0x00403552
Compilation Time 2024-03-30 16:55:23
Checksum 0x03752e07 (Actual: 0x03752e07)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 7 libraries
ADVAPI32, SHELL32, ole32, COMCTL32, USER32, GDI32, KERNEL32
Exports 0 functions
Resources 16 Resources
Sections 5 Sections

Version Information

CompanyName CHENGDU YIWO Tech Development Co., Ltd
FileDescription EaseUS OS2GO Application
FileVersion 4.1.0
LegalCopyright Copyright (c) 2004-2025 EaseUS. All rights reserved.
ProductName EaseUS OS2Go
ProductVersion 4.1.0
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 26,872 bytes 27,136 bytes 6.48 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 595406EA4E71EF6F8675A1BD30BCC8F9
.rdata 0x00008000 5,220 bytes 5,632 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A995B118B38426885FC6CCAA984C8B7A
.data 0x0000a000 174,104 bytes 1,536 bytes 4.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7A91EC9F1C18E608C3F3F503BA4191C1
.ndata 0x00035000 90,112 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x0004b000 33,616 bytes 33,792 bytes 5.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D9C0E5FC30143DF238B1694CA8A410EB

Resource Analysis

Total Resources: 16 (32,690 bytes)
Resource Type Count Total Size Percentage
RT_ICON 10 30,347 bytes
92.8%
RT_DIALOG 3 636 bytes
1.9%
RT_GROUP_ICON 1 146 bytes
0.4%
RT_VERSION 1 720 bytes
2.2%
RT_MANIFEST 1 841 bytes
2.6%

Certificate Chain Analysis

Certificate Information
Product EaseUS OS2Go
Description EaseUS OS2GO Application
File Version 4.1.0
Signing Date 06:02 AM 07/15/2025 (51 days ago)
Verification Status Signed
Signers CHENGDU YIWO Tech Development Co., Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Copyright Copyright (c) 2004-2025 EaseUS. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
CHENGDU YIWO Tech Development Co., Ltd. #2 Chain
Validity Period: 2024-07-09 00:00:00 → 2027-07-09 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 04 44 A4 D0 F5 97 15 99 6A BF 0C 2B 81 F2 C8 DD
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #3 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #4 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware
An unexpected error occurred. Please try again later.