home

didgahClientToolsShell.exe

Chargoon Didgah Client Tools Scanner ActiveX Memory Shell Manager

Didgah Client Tools

Publisher:
Chargoon Co.  (signed by Didgah Client Tools)

Product:
Chargoon Didgah Client Tools Scanner ActiveX Memory Shell Manager

Version:
1.02

MD5:
05617f9e82f3b1153daa5e3fa62eae80

SHA-1:
d4477f10d8c02992e745b53c63cb64bfceb1ceab

SHA-256:
5ae7877077f463c25dd784a411573dfa6ae59bab5fde16520d17592bcbbd1ac9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 9:04:12 AM UTC  (today)

File size:
23.4 KB (23,944 bytes)

Product version:
1.02

Original file name:
didgahClientToolsShell.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\syswow64\didgahclienttoolsshell.exe

Digital Signature
Signed by:
Didgah Client Tools

Authority:
Chargoon Certificate Authority

Valid from:
12/15/2007 4:17:06 PM

Valid to:
12/15/2009 4:27:06 PM

Subject:
CN=Didgah Client Tools, CN=Users, DC=chargoon, DC=com

Issuer:
CN=Chargoon Certificate Authority, DC=chargoon, DC=com

Serial number:
611300BF000000000004

File PE Metadata
Compilation timestamp:
3/4/2008 6:50:57 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
192:VcEv8mrxC+y6frGQErhsBVG+skFujwzJH76QKDvWZDo:VVkmU+jehsBM+u6xxKDvUDo

Entry address:
0x1224

Entry point:
68, 54, 13, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 90, 00, 00, 00, 48, 00, 00, 00, 65, BE, B3, E6, 07, C8, 95, 4D, AD, 4E, D0, D0, DD, 3A, 71, 6D, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 6C, 6C, 2E, 62, 61, 73, 64, 69, 64, 67, 61, 68, 43, 6C, 69, 65, 6E, 74, 54, 6F, 6F, 6C, 73, 53, 68, 65, 6C, 6C, 00, 6A, 43, 68, 61, 72, 67, 6F, 6F, 6E, 20, 44, 69, 64, 67, 61, 68, 20, 43, 6C, 69, 65, 6E, 74, 20, 54, 6F, 6F, 6C, 73, 20, 53, 63, 61, 6E, 6E, 65, 72, 20, 41, 63, 74, 69, 76, 65, 58...
 
[+]

Entropy:
3.8602

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
8 KB (8,192 bytes)

Scan didgahClientToolsShell.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.