2345安全卫士在线安装程序 PUP ChinAd Analysis
| Online Virus Checker | v.1.0.139.174 |
| DB Version: | 2023-09-18 18:01:19 |
PUP.Win32.ChinAd.dd!c
| File | 2345安全卫士在线安装程序 |
| Checked | 2023-09-18 17:03:19 |
| MD5 | abd15275a64f4de9d981eb04a3f9755b |
| SHA1 | 4684e9e067e8625837070ca9ece365070695c8e1 |
| SHA256 | 28043a7041e763e3d1ac492b2070406589b7e65eaaee317f451bdf4d209ad76e |
| SHA512 | 2205d283235de77c7c2538263aa9e9f65eea9a8883f1f3a9696a1f8ec3fd9b3b66173775fa9d47f54288d760781ef56127bb0642ba0231bccdd5079ed8e4a5cf |
| Imphash | 1e98f19e3d4a6500b611defdd54877e7 |
| File Size | 4132576 bytes |
PUP.Win32.ChinAd.dd!c Removal
Gridinsoft has the capability to identify and eliminate PUP.Win32.ChinAd.dd!c without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Signers
| DigiCert Assured ID Root CA | DigiCert Inc (US) |
| DigiCert EV Code Signing CA | Shanghai 2345 Mobile Technology Co., Ltd. (CN) |
| DigiCert Trusted Root G4 | DigiCert, Inc. (US) |
| DigiCert High Assurance EV Root CA | DigiCert Inc (US) |
| DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA | DigiCert, Inc. (US) |
| Verification | OK |
File Version Information
| CompanyName | 2345移动科技 |
| FileDescription | 2345安全卫士在线安装程序 |
| FileVersion | 1.4.0.13688 |
| LegalCopyright | 版权所有 (C) 2021, 2345移动科技 |
| PrivateBuild | 0 0 0 1 1 1 827804 0 0 0 1 udg= ueO45sC5vdg= 0 1 |
| ProductName | 2345安全卫士在线安装程序 |
| ProductVersion | 1.4.0.13688 |
| Translation | 0x0804 0x04b0 |
Portable Executable Info
 |
76364a8dd3b10a6fee815c1b4c6b7f67 8aa93feb5668c3bc039a78db2a0cd326 31f08c92ccdcf830 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00650b7f |
| Compilation: | 2021-10-28 02:07:09 |
| Checksum: | 0x003fc0d1 (Actual: 0x003fc0d1) |
| OS Version: | 5.1 |
| PDB Path: | E:\C++\Safe\Rhino\Safe\Install\FileDown\bin\release_static\2345SafeDownloader.pdb |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | OK |
| Sections: | 6 |
| Imports: | VERSION, gdiplus, KERNEL32, USER32, ADVAPI32, ole32, SHELL32, OLEAUT32, SHLWAPI, COMCTL32, GDI32, MSIMG32, urlmon, IMM32, USP10, WINMM, PSAPI, |
| Exports: | 0 |
| Resources: | 63 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x002bbea4 | 0x002bc000 | a0d24f7fffc5247c97fdeda613d65201 | 6.60 |
| .rdata | 0x002bd000 | 0x0008b240 | 0x0008b400 | 7eca5f62bed66881f1727442cc4f0bac | 5.05 |
| .data | 0x00349000 | 0x0000ec7c | 0x00008e00 | 549d7e8a42e2971a7bbc0702b40909ce | 4.85 |
| _RDATA | 0x00358000 | 0x000009e0 | 0x00000a00 | 688d60f1e21c5e472de56d149845d709 | 3.80 |
| .rsrc | 0x00359000 | 0x00077c34 | 0x00077e00 | 3ad9703893a3acb1cc659b72e55b2756 | 5.06 |
| .reloc | 0x003d1000 | 0x000233a4 | 0x00023400 | f7d7c4c12e79ee8c098e952a0914235e | 6.57 |
