File Name | ChipGenius_v4_21_0701.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.193.174 |
Database Version | 2024-10-22 00:00:25 UTC |
Malware family: Agent
Hash Type | Value | Action |
---|---|---|
MD5 |
c225785c18c5ec684ea5a10fb3d56cc3
|
|
SHA1 |
05e12f3ec7cf52f915a974213b8aa3d7f3ffe28d
|
|
SHA256 |
8fd831c5bb24ee51f65699da378f127044314e7184042e44646b40c507d09bb4
|
|
SHA512 |
fbdbc67c8ab522ed940c4fe448587f3000b2754443c0d504b25203858c97442ac80795fa9005e889ad2bd6610a73449eb1dd29331bfb14b7d28333c8f6ab1c36
|
|
ImpHash |
de3863888c83837b13b7c1a90a18d46c
|
Icon |
Hash: 5546cef5569d09b3baa4b5ee93595cda
Fuzzy: 3eb6ded481a412ab8041bde966acde31 dHash: 9042c1f87c9e4015 |
Image Base | 0x00400000 |
Entry Point | 0x00508c70 |
Compilation Time | 2021-07-02 13:58:46 |
Checksum | 0x00000000 (Actual: 0x00054773) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
2 libraries
KERNEL32, MSVBVM60 |
Exports | 0 functions |
Resources | 37 Resources |
Sections | 3 Sections |
Translation | 0x0804 0x04b0 |
Comments | 方便实用的USB设备主控芯片识别工具 |
CompanyName | 数码之家 |
FileDescription | U盘/MP3主控芯片识别工具 |
LegalCopyright | ~~翁软在线 创意无限~~ |
LegalTrademarks | 哈尔滨工业大学研究生院 哈尔滨理工大学软件与微电子学院 |
ProductName | Chip Genius |
FileVersion | 4.21.0701 |
ProductVersion | 4.21.0701 |
InternalName | ChipGenius_v4_21_0701 |
OriginalFilename | ChipGenius_v4_21_0701.exe |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
l020 |
0x00001000 |
864,256 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
l021 |
0x000d4000 |
221,184 bytes | 219,648 bytes | 8.00 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
FA0F69D0417BD119C75F0C40F7D36149 |
.rsrc |
0x0010a000 |
86,016 bytes | 85,504 bytes | 2.87 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CFFFB01A0D85AB28E10BAD3BA9D8963B |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
MYDIGIT | 4 | 130,976 bytes | |
RT_ICON | 7 | 83,488 bytes | |
RT_STRING | 22 | 10,164 bytes | |
RT_GROUP_ICON | 2 | 112 bytes | |
RT_VERSION | 1 | 896 bytes | |
RT_MANIFEST | 1 | 388 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Agent.oa without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system