Gridinsoft Logo
File Icon

The GearUP-2.47.0-uav206-af7hvoa.exe (GearUP) File Analysis

Updated 3 months ago
Checked by Malware Check
GearUP-2.47.0-uav206-af7hvoa.exe

Technical Analysis

File Name GearUP-2.47.0-uav206-af7hvoa.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.225.174
Database Version 2025-09-24 17:00:34 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
63,986,480
File Size (bytes)
2025-09-24
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
254d22b55bb863482abcdb2794d68002
SHA1
0023f6b1588bed78b0515ccc727a12cbf9120ff8
SHA256
d6bc803de09d0878e2034581e7d7168a7eedf95b0c18bd0d08a2774821dc551c
SHA512
755da285997c3c610408b3aa748dd53b9396b56031961d50214077f002290933277ea510e2e3ae9f2948a51477bc460eb80000c8599d34a3e16555284a6eefe4
ImpHash
e998d4ed5521a5fea8601ab1a82b3579

PE Analysis

Basic Information

▼
Icon
Hash: fb6d5a5b25efa1fd3a086dea4fd1d14b
Fuzzy: acafa4b75ea5c545487bad8eee12d111
dHash: 60b468b28eccf871
Image Base 0x00400000
Entry Point 0x005aa116
Compilation Time 2025-09-03 02:29:14
Checksum 0x03d0df84 (Actual: 0x03d0df84)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path D:\jenkins\jobs\CHANNEL_GEARUP\workspace\gearup-booster\install\install.pdb
Digital Signature OK
Imports 16 libraries
Exports 0 functions
Resources 33 Resources
Sections 5 Sections

Version Information

▼
CompanyName GearUP Co., Ltd.
FileDescription GearUP
FileVersion 2.47.0.417
InternalName install.exe
LegalCopyright Copyright (C) 2022 by GearUP Inc.
OriginalFilename install.exe
PrivateBuild 63f248bcd5e25683f6dca91d9c526927e06cfc50
ProductName GearUP
ProductVersion 2.47.0.417
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,896,591 bytes 1,896,960 bytes 6.91 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8D4ED89DD27818F4F9BF05823E379BF6
.rdata 0x001d1000 515,294 bytes 515,584 bytes 6.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 44EBBD2CDDFD2FAEF4DB2FAB56D431C8
.data 0x0024f000 46,688 bytes 22,528 bytes 3.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4912EAEDCB3942391470095A87E1FB44
.rsrc 0x0025b000 61,275,764 bytes 61,276,160 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AD0CF8FFEA8BB1D7806AA388F1BEAEC7
.reloc 0x03ccb000 252,792 bytes 252,928 bytes 3.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 607A55C500A7AE1B4DF1DC57FB5759FF
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 33 (61,273,902 bytes)
Resource Type Count Total Size Percentage
ZIP 1 2,828,260 bytes
4.6%
RT_ICON 16 188,479 bytes
0.3%
RT_MENU 1 80 bytes
0%
RT_DIALOG 1 284 bytes
0%
RT_STRING 7 5,458 bytes
0%
RT_ACCELERATOR 1 16 bytes
0%
RT_RCDATA 2 58,249,096 bytes
95.1%
RT_GROUP_ICON 2 236 bytes
0%
RT_VERSION 1 848 bytes
0%
RT_MANIFEST 1 1,145 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product GearUP
Description GearUP
File Version 2.47.0.417
Original Name install.exe
Signing Date 02:30 AM 09/03/2025 (128 days ago)
Verification Status Signed
Signers GearUP Portal Pte. Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert SHA256 RSA4096 Timestamp Responder 2025 1; DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1; DigiCert Trusted Root G4; DigiCert
Internal Name install.exe
Copyright Copyright (C) 2022 by GearUP Inc.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
GearUP Portal Pte. Ltd. #2 Chain
Validity Period: 2023-11-27 00:00:00 → 2025-11-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 7F 76 DD C2 E3 C5 F6 77 6F 1F 7C B3 64 D8 EC
DigiCert SHA256 RSA4096 Timestamp Responder 2025 1 #3 Chain
Validity Period: 2025-06-04 00:00:00 → 2036-09-03 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 80 EF 18 4B 8D F1 05 82 D1 C4 76 A7 95 74 68
DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1 #4 Chain
Validity Period: 2025-05-07 00:00:00 → 2038-01-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0D C7 AC 57 05 FF 21 99 2E 40 43 22 0C 3A 49 86
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for
/

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware