Ene technology inc что это

Ene Technology Inc (6243)

Все последующие выпуски Только предстоящий выпуск Получить напоминание за 1 торговый день

Позиция успешно добавлена:

Новости по 6243

Investing.com – Фондовый рынок Тайваня завершил торги понедельника ростом за счет укрепления секторов автомобильной промышленности, нефти, газа и электричества и полупроводниковой промышленности. На.

Investing.com – Фондовый рынок Тайваня завершил торги среды ростом за счет укрепления секторов оптоэлектроники, цементной промышленности и цементной промышленности. На момент закрытия на Тайваньской.

Investing.com – Фондовый рынок Тайваня завершил торги четверга ростом за счет укрепления секторов электроэнергетики, нефти, газа и электричества и транспорта. На момент закрытия на Тайваньской.

Investing.com – Фондовый рынок Тайваня завершил торги среды ростом за счет укрепления секторов электроэнергетики, целлюлозно-бумажной промышленности и электроники. На момент закрытия на Тайваньской.

Investing.com – Фондовый рынок Тайваня завершил торги пятницы ростом за счет укрепления секторов каучуковой промышленности, автомобильной промышленности и цементной промышленности. На момент закрытия.

Участвуйте в форуме для взаимодействия с пользователями, делитесь своим мнением и задавайте вопросы другим участникам или авторам. Пожалуйста, используйте стандартный письменный стиль и придерживайтесь наших правил.

Источник

Ene Technology Inc (6243)

Все последующие выпуски Только предстоящий выпуск Получить напоминание за 1 торговый день

Позиция успешно добавлена:

Участвуйте в форуме для взаимодействия с пользователями, делитесь своим мнением и задавайте вопросы другим участникам или авторам. Пожалуйста, используйте стандартный письменный стиль и придерживайтесь наших правил.

Источник

Ene Technology Inc (6243)

Все последующие выпуски Только предстоящий выпуск Получить напоминание за 1 торговый день

Позиция успешно добавлена:

Технический анализ 6243

Точки разворота 01.12.2021 13:21 GMT

Технические индикаторы 01.12.2021 13:21 GMT

Резюме: Активно покупать

Скол. средние 01.12.2021 13:21 GMT

Резюме: Активно покупать

Участвуйте в форуме для взаимодействия с пользователями, делитесь своим мнением и задавайте вопросы другим участникам или авторам. Пожалуйста, используйте стандартный письменный стиль и придерживайтесь наших правил.

Источник

The Vault

Thursday, August 13, 2020

Intro

ENE Technology Inc is a Taiwan based company founded in 1998. According to their website hxxp://www.ene.com.tw/index-en.php and Bloomberg summary:

ENE Technology Inc. develops, manufactures, and markets IC (integrated circuit) products. The Company’s products include application-specific integrated circuits (ASICs), controller ICs for power switches, and notebook keyboards.

Lets say what will happen when you hire someone with mediocre C-language understanding, who discovered official documentation just in 2020 but has a great google search skills? Nothing really bad, most of AV companies are full of such people (its a joke), but at least they have someone who can control them. ENE Technology Inc software products that will be discussed next is an example of what happens when no one control such people and their «creativity».

It’s all about I/O

When it comes to hardware vendors giveio type drivers in 90% it is all based on three main sources:

Just a coupe of bugs inside these sources:

Currently hardware vendors are mostly blatantly copy-paste from these sources with minimal changes, if any. Sometimes their drivers contain functionality their products does not need at all.

Reasons why this is a bad approach:

It is a common trend for almost EVERY gaming hw vendors available today.

Pic 2. Choose your exploits provider.

When it comes to ENE Tech Inc drivers they are based on WinIO of 3.0 version. My first encounter was ASUS GLCKIo2 driver.

Pic 3. ASUS locked GLCKIo2 driver.

Next I found ENE.sys driver signed with «Ptolemy Tech Co» certificate. It was based on WinIO but missing all these locking features. Curiously enough it contain the following pdb string: d:\winglckio_20180320\amd64\EneIo.pdb

Pic 4. ENE lock free variant.

Looking for more ASUS bugged drivers (there are LOT of them) I found an interesting coupe next. AsIO.sys (device name Asusgio) and AsIO2.sys (device name Asusgio2). First driver is an old standard copy-paste which has CVE noise assigned, second one is from our beloved ENE Tech Inc coders.

Pic 5. AsIO2 from our friend.

Specific code similarities found inside both drivers led to idea that they are both created by same author/team. It is slightly modified WinIO codebase (no bugs fixed, instead added more chaos) with another «driver lock», implemented in unusual way. The unlocking is only allowed from process that has specific PE resource inside named «ASUSCERT». That is how it generated:

When caller does request to the driver (any IRP_MJ_*) driver will query full image path of the caller, read file into buffer and parse for PE timestamp and RCDATA resource named ASUSCERT, decrypt it and extract timestamp. Next AsIO2 will check if the difference between PE timestamp and decrypred timestamp a properly generated resource.

This obviously can’t be threatened as security fix.

Pic 6. Very secure, very fixed AsIO2.sys

Using same pattern I found several other drivers. For example driver called EneTechIo.sys (E:\GitSourceCode\Ene\SmbusSDK\driver_src\EneIo\x64\Release\EneIo.pdb)

Pic 7. EneTechIo driver from TOUGHRAM software bundle.

WinIO based, locked driver as usual. However they again changed unlocking algorithm. Instead of using PE resource they now passing encrypted buffer directly in each driver call as part of input data structure. Every payload driver function now checks if the call time within a small time window (few seconds). Unlocking it looks like this:

Worth to mention some debug version of Ene driver. It is lock free, has multiple DbgPrint’s and contain the following pdb string (d:\winglckio_20180320\amd64\EneIo.pdb).

As of recent EneTechIo driver from fresh up-to-date of this post MSI Dragon Center bloatware (E:\GitSourceCode\IoAccess\SmbusSDK\driver_src\EneIo\x64\Release\EneIo.pdb).

Pic 8. EneTechIo from MSI Dragon Center (May 2020)

Driver setups image load notify callback (PsSetLoadImageNotifyRoutine) and looks for event when SB_SMBUS_SDK.dll is loaded. Note that name of dll is case sensitive. This dll is an API layer for interacting with EneTech driver. If filename contains SB_SMBUS_SDK.dll then driver will register process by it ID extracted from notify callback. No further checks implemented, so basically you can create dumb empty dll with SB_SMBUS_SDK.dll name, load it in your process and this driver will register you as trusted caller. Everything else will be the same as AES encoding mode is same and their implementations of course has no differences.

ENE Tech Inc authors doing everything possible (for them) to complicate their driver usage by third-party actors. Instead of fixing generic WinIO «bugs and features» they constantly (and with no success) reinventing the wheel.

P.S. Very company, very ENE Technology Inc.

When I found their website in Feb 2020 I was very surprised by it English section, because it was all full of 3rd party web injected links.

Источник

What is ene?

Ene.sys is a Windows driver. A driver is a small software program that allows your computer to communicate with hardware or connected devices. This means that a driver has direct access to the internals of the operating system, hardware etc. The free file information forum can help you determine if ene.sys is a Windows system file or if it belongs to an application that you can trust.

Ene.sys file information

Description: Ene.sys is not essential for the Windows OS and causes relatively few problems. The file ene.sys is located in a not identifiable folder. The file size on Windows 10/8/7/XP is 0 bytes.
The driver can be started or stopped from Services in the Control Panel or by other programs. It is a file with no information about its developer. There is no detailed description of this service. The program has no visible window. Ene.sys is not a Windows system file. It is certified by a trustworthy company. ene.sys appears to be a compressed file. Therefore the technical security rating is 36% dangerous.

Important: Some malware camouflages itself as ene.sys. Therefore, you should check the ene.sys process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer’s security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

There are no user opinions yet. Why not be the first to write a short comment?

Best practices for resolving ene issues

A clean and tidy computer is the key requirement for avoiding problems with ene. This means running a scan for malware, cleaning your hard drive using 1 cleanmgr and 2 sfc /scannow, 3 uninstalling programs that you no longer need, checking for Autostart programs (using 4 msconfig) and enabling Windows’ 5 Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Источник