omigaplus.exe

Omiga Plus

Taiwan Shui Mu Chih Ching Technology Limited

The application omigaplus.exe, “Omiga Plus application” by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from the user's temporary directory.
Publisher:
Taiwan Shui Mu Chih Ching Technology Limited.  (signed by Taiwan Shui Mu Chih Ching Technology Limited)

Product:
Omiga Plus

Description:
Omiga Plus application

Version:
1.4.17.7189

MD5:
604af13ecb862d52a9f74919eee87120

SHA-1:
cc62e809eaa5f32c2eabfc3dce28e426693974b7

SHA-256:
a17e2caefcc966a7a906bce38d3c0c7d29d6132e3acc4d3a7f17d64483e0e6a4

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/25/2024 3:50:11 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Thinknice (M)
16.10.15.16

File size:
1 MB (1,077,416 bytes)

Product version:
1.4.17.7189

Copyright:
Copyright (C) 2012

Original file name:
omigaplus.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\omigaplus_patch\omigaplus.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
3/13/2013 4:15:13 AM

Valid to:
3/14/2014 4:15:13 AM

Subject:
CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=新北, S=台湾, C=TW

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121243D90C81CD8FEC70E99813154FB6459

File PE Metadata
Compilation timestamp:
5/17/2013 10:03:46 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:uECCLagg+ytYNISuqvBieKE5fwaAVYSowpZJVmWGKL:sCmgVNIxqvDKekmWGKL

Entry address:
0x5E0E0

Entry point:
E8, AE, 04, 00, 00, E9, 6B, FD, FF, FF, FF, 25, D4, F1, 49, 00, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 38, 30, 4C, 00, 33, C5, 50, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, 38, 30, 4C, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F4, 64, 89, 0D, 00...
 
[+]

Code size:
632 KB (647,168 bytes)

Remove omigaplus.exe - Powered by Reason Core Security