home

USBTip.exe

Pinnacle USB Tip

Pinnacle Systems GmbH

The executable USBTip.exe, “Pinnacle USB Tip - for Multi Media eXtensions” has been detected as malware by 12 anti-virus scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘USBToolTip’.
Publisher:
Pinnacle Systems GmbH  (signed and verified)

Product:
Pinnacle USB Tip

Description:
Pinnacle USB Tip - for Multi Media eXtensions

Version:
1.0.18.00

MD5:
8b1a77ff674d753b7b22e3a2827643b1

SHA-1:
fff39344ed8bc4265316cb7f3b39e62a07cb53f3

SHA-256:
be010360c0e8a4d9b766035bbba6a57faaf4833ce9bf70496bb087bd492a165a

Scanner detections:
12 / 68

Status:
Malware

Analysis date:
4/23/2024 8:44:51 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Parite
160119-0

AVG
Win32/Parite
2015.0.4522

Dr.Web
Win32.Parite.2
9.0.1.05190

Emsisoft Anti-Malware
Win32.Parite
10.0.0.5366

ESET NOD32
Win32/Parite.B virus
7.0.302.0

F-Prot
W32/Parite.B
4.6.5.141

F-Secure
Win32.Parite.B
5.15.21

McAfee
Virus.W32/Pate.b
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.213.5956.0

Norman
Win32.Parite.B
03.02.2016 07:38:05

Sophos
Virus 'W32/Parite-B'
5.23

VIPRE Antivirus
Threat.46249
47014

File size:
369.5 KB (378,336 bytes)

Product version:
1.0.18.00

Copyright:
© 2003-2007 by Pinnacle Systems GmbH

Original file name:
USBTip.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pinnacle\shared files\programs\usbtip\usbtip.exe

Digital Signature
Signed by:
Pinnacle Systems GmbH

Authority:
VeriSign, Inc.

Valid from:
10/17/2006 2:00:00 AM

Valid to:
10/17/2009 1:59:59 AM

Subject:
CN=Pinnacle Systems GmbH, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Pinnacle Systems GmbH, L=Braunschweig, S=Niedersachsen, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
77DA0DFF826A5CE5F5E1C5C5C111E863

File PE Metadata
Compilation timestamp:
2/20/2007 11:07:54 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
6144:t0GaiXEVXjW83Z11111S1SE111r2VX11111nm1111211111S1S11R11111S1S11X:tLXb83I2/2szw/LAykaErX/d36THNu

Entry address:
0x30000

Entry point:
90, 90, 68, D9, EC, 29, 00, 59, 90, 90, BF, 26, 00, 43, 00, 90, 90, 68, 98, 05, 00, 00, 5A, FF, 34, 3A, 31, 0C, 24, 8F, 04, 3A, 90, 4A, 83, EA, 03, 90, 90, 75, EE, 90, 31, 91, 28, 00, D9, EC, 29, 00, D9, EC, 69, 00, 3C, A6, 29, 00, 91, E0, 2A, 00, 39, F9, 2A, 00, D9, 5C, 2B, 00, D8, EC, 29, 00, E5, 8C, 69, 00, A1, 6B, 69, 00, 85, 6B, 69, 00, 99, 6C, 29, 00, AF, 6B, 29, 00, 83, 6B, 29, 00, E5, 8C, 29, 00, AF, 6B, 29, 00, 83, 6B, 29, 00, D9, EC, 29, 00, D9, EC, 29, 00, D9, EC, 29, 00, D9, EC, 29, 00, D9, EC...
 
[+]

Code size:
20 KB (20,480 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
USBToolTip

Command:
C:\Program Files1\pinnacle\shared~1\programs\usbtip\usbtip.exe


Remove USBTip.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.