Max The Elf_x-rEBt1.exe PUP OfferCore Analysis

PUP OfferCore

Updated on 2024-04-28 (5 months ago)

Online Virus Checker	v.1.0.173.174
DB Version:	2024-04-28 21:00:22

PUP.Win32.OfferCore.dd!c

OfferCore is a detection name used to refer to a specific family of bundlers. These bundlers are notorious for installing adware and potentially unwanted programs on a user's system, making them a source of undesirable software installations.

File	Max The Elf_x-rEBt1.exe
Checked	2024-04-28 18:32:40
MD5	73ba3a923298bec113961f4fc107d3ce
SHA1	bf29783bb2daa9d8a8f1306153072375d2f5eae7
SHA256	888bfc44c03e97875fd1e88f56c8c052c94af130803a096114a76e480313f0dc
SHA512	2f81f5503b9c10d082f3d84d9204ff74d39fe7067e78f5b24f57205a7b659121a6bf82f734c177b2e7a6f23b70101ae08522d64160f0e42a8ace0f0b9ef1321a
Imphash	5a594319a0d69dbc452e748bcf05892e
File Size	14503144 bytes

PUP.Win32.OfferCore.dd!c Removal

Gridinsoft has the capability to identify and eliminate PUP.Win32.OfferCore.dd!c without requiring further user intervention.

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

File Version Information

Comments	This installation was built with Inno Setup.
CompanyName
FileDescription	Axium Audit, OOO Download Manager
FileVersion	3.334.90
LegalCopyright	© Axium Audit
OriginalFileName
ProductName	Axium Audit, OOO
ProductVersion	3.334.90
Translation	0x0000 0x04b0

Portable Executable Info

	30adcb5c0b2e3c35eaec2c110733c9f8 c98f96d6ffe5af8d4eb0870c1dc20826 92e0b496a6cada72
Image Base:	0x00400000
Entry Point:	0x004b5eec
Compilation:	2020-11-15 09:48:30
Checksum:	0x00ddeb2c (Actual: 0x00ddeb2c)
OS Version:	6.1
PEiD:	PE32 executable (GUI) Intel 80386, for MS Windows
Sign:	OK
Sections:	10
Imports:	kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32,
Exports:	3
Resources:	21

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
.text	0x00001000	0x000b361c	0x000b3800	ad6e46e3a3acdb533eb6a077f6d065af	6.36
.itext	0x000b5000	0x00001688	0x00001800	d40fc822339d01f2abcc5493ac101c94	5.97
.data	0x000b7000	0x000037a4	0x00003800	4c195d5591f6d61265df08a3733de3a2	5.04
.bss	0x000bb000	0x00006de8	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
.idata	0x000c2000	0x00000f36	0x00001000	a73d686f1e8b9bb06ec767721135e397	4.90
.didata	0x000c3000	0x000001a4	0x00000200	41b8ce23dd243d14beebc71771885c89	2.76
.edata	0x000c4000	0x0000009a	0x00000200	37c1a5c63717831863e018c0f51dabb7	1.87
.tls	0x000c5000	0x00000018	0x00000000	d41d8cd98f00b204e9800998ecf8427e	0.00
.rdata	0x000c6000	0x0000005d	0x00000200	8f2f090acd9622c88a6a852e72f94e96	1.38
.rsrc	0x000c7000	0x0000463c	0x00004800	0d343562716a068e4aa84f1e1c0b83fc	4.59