Der aida64extreme692 exe (AIDA64 Extreme) FinalWire Ltd Malware Analyse

Der aida64extreme692.exe (AIDA64 Extreme) Scan-Bericht

Aktualisiert 1 year ago

Geprüft von Malware Check

aida64extreme692.exe

Hash-Typ	Wert	Aktion
MD5	0d7859e3a7395f0feecd901d3e68d139
SHA1	01c82ec2ab8fa703a20cd0c5766309fbcfb5aed4
SHA256	c18d190c44c6f02a9d4be71bbe33d500a40d4e3afa1135f9126f5b3982f7358f
SHA512	4fc25815bf60ae50df1232a755e211c0026b2ac5fde1f5dcb50d382dcc0ddff0c46a88fafcae73fc668d51c9c621949ba8e28b01b3f64570769610a45860b1c5
ImpHash	884310b1928934402ea6fec1dbd3cf5e

Hash-Typ

Wert

Aktion

MD5

0d7859e3a7395f0feecd901d3e68d139

SHA1

01c82ec2ab8fa703a20cd0c5766309fbcfb5aed4

SHA256

c18d190c44c6f02a9d4be71bbe33d500a40d4e3afa1135f9126f5b3982f7358f

SHA512

4fc25815bf60ae50df1232a755e211c0026b2ac5fde1f5dcb50d382dcc0ddff0c46a88fafcae73fc668d51c9c621949ba8e28b01b3f64570769610a45860b1c5

ImpHash

884310b1928934402ea6fec1dbd3cf5e

PE-Analyse

Grundlegende Informationen

▼

Symbol	Hash: 30adcb5c0b2e3c35eaec2c110733c9f8 Unscharf: c98f96d6ffe5af8d4eb0870c1dc20826 dHash: 92e0b496a6cada72
Bildbasis	`0x00400000`
Einstiegspunkt	`0x0040a5f8`
Kompilierungszeit	1992-06-19 22:22:17
Prüfsumme	0x03e1de7c (Tatsächlich: 0x03e1de7c)
OS-Version	1.0
PEiD-Signaturen	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digitale Signatur	OK
Importe	5 Bibliotheken kernel32, user32, oleaut32, advapi32, comctl32
Exporte	0 Funktionen
Ressourcen	14 Ressourcen
Abschnitte	8 Abschnitte

Digitale Signaturen

▼

DigiCert Assured ID Root CA	DigiCert Inc (US)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted Root G4	DigiCert, Inc. (US)
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA	DigiCert, Inc. (US)
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1	FinalWire Kft. (HU)

Versionsinformationen

▼

Comments	This installation was built with Inno Setup.
CompanyName	FinalWire Ltd.
FileDescription	AIDA64 Extreme
FileVersion	6.92.6600.0
LegalCopyright	Copyright (c) 1995-2023 FinalWire Ltd.
ProductName	AIDA64 Extreme
ProductVersion	6.92
Translation	0x0000 0x04b0

PE-Abschnitte

▼

Name	Virtuelle Adresse	Virtuelle Größe	Rohgröße	Entropie	Eigenschaften	MD5
`CODE`	`0x00001000`	40,240 bytes	40,448 bytes	6.63 (Komprimiert)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`C3BD95C4B1A8E5199981E0D9B45FD18C`
`DATA`	`0x0000b000`	592 bytes	1,024 bytes	2.75 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1EE71D84F1C77AF85F1F5C278F880572`
`BSS`	`0x0000c000`	3,724 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0000d000`	2,384 bytes	2,560 bytes	4.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BB5485BF968B970E5EA81292AF2ACDBA`
`.tls`	`0x0000e000`	8 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0000f000`	24 bytes	512 bytes	0.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`9BA824905BF9C7922B6FC87A38B74366`
`.reloc`	`0x00010000`	2,244 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x00011000`	11,264 bytes	11,264 bytes	4.57 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`92E0FD6D5D7DF9AD5BF24FCE3BF722D0`

Entropie-Analyse-Warnung

1 Abschnitt(e) mit erhöhter Entropie (≥6.5) - mögliche Komprimierung

Ressourcenanalyse

▼

Gesamtressourcen: 14 (10,236 Bytes)

Ressourcentyp	Anzahl	Gesamtgröße	Prozentsatz
RT_ICON	4	4,640 Bytes	45.3%
RT_STRING	6	2,710 Bytes	26.5%
RT_RCDATA	1	44 Bytes	0.4%
RT_GROUP_ICON	1	62 Bytes	0.6%
RT_VERSION	1	1,268 Bytes	12.4%
RT_MANIFEST	1	1,512 Bytes	14.8%

Zertifikatsketten-Analyse

▼

Zertifikat #1

Betreff	DigiCert Trusted Root G4 DigiCert Inc US
Aussteller	DigiCert Assured ID Root CA
Seriennummer	`19414496059604725969669510860671817818`

Zertifikat #2

Betreff	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA DigiCert, Inc. US
Aussteller	DigiCert Trusted Root G4
Seriennummer	`9586110043380832440035821245782711899`

Zertifikat #3

Betreff	DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 DigiCert, Inc. US
Aussteller	DigiCert Trusted Root G4
Seriennummer	`11533403529598586876501374841704918745`

Zertifikat #4

Betreff	DigiCert Timestamp 2023 DigiCert, Inc. US
Aussteller	DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA
Seriennummer	`7002784885422699301467740558332354838`

Zertifikat #5

Betreff	FinalWire Kft. FinalWire Kft. HU
Aussteller	DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Seriennummer	`16189104388543047790406463199627617008`

Zertifikat-Verifizierungsstatus

Denken Sie daran: Dies ist das Ergebnis des Online-Virenscanners

Gridinsoft Anti-Malware verfügt über eine viel leistungsstärkere Virenscanning-Engine. Wir empfehlen, sie für eine genauere Diagnose infizierter Systeme zu verwenden. Diese kurze Anleitung hilft Ihnen bei der Installation unseres Flaggschiffprodukts für eine genauere Diagnose:

Anti-Malware herunterladen

Kommentar hinterlassen

Dateiname	aida64extreme692.exe
Dateityp	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner-Version	1.0.148.174
Datenbankversion	2023-11-25 08:01:28 UTC